This is quite different. The IP delivering the email to your server is what's hitting RCVD_IN_PBL. Providing that part of the spamassassin -t output so I didn't need to do it myself would've been helpful.
pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [82.165.159.34 listed in zen.spamhaus.org] On 11/20, Andreas Schulze wrote: > I have a similiar issue with a web.de (german webmail) user. He uses his > iPhone > to submit mail via web.de submission service. (TLS + Authentication) > > The message triggers RCVD_IN_PBL and others. Any hint to make those message > pass sa? > > here are the headers: > --- snip > X-Spam-Status: Yes, score=7.14 tag=-999 tag2=5 kill=5 tests=[BAYES_00=-1.9, > FREEMAIL_FROM=0.001, HTML_IMAGE_ONLY_12=2.059, > HTML_MESSAGE=0.001, MTX_NONE=0.001, RCVD_IN_PBL=3.335, > RCVD_IN_PSBL=2.7, RCVD_IN_RP_RNBL=1.31, RP_MATCHES_RCVD=-0.369, > TVD_SPACE_RATIO=0.001] autolearn=no > X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on > idvamavis03.datev.de > X-Spam-ASN: AS8560 82.165.0.0/16 > Received: from mout-xforward.web.de (mout-xforward.web.de [82.165.159.34]) > by idvmailin03.datev.de (Postfix) with ESMTP id 3Y5btV2sQ8z690G; > Tue, 20 Nov 2012 20:04:02 +0100 (CET) > Received: from [192.168.178.43] ([93.205.254.85]) by smtp.web.de (mrweb102) > with ESMTPSA (Nemesis) id 0MA5v3-1TPekj36PR-00BSUp; Tue, 20 Nov 2012 19:59:01 > +0100 > Subject: test > References: <a0323c6a-fb02-42df-aa94-c97672816...@web.de> > From: "foo...@web.de" <foo...@web.de> > Mime-Version: 1.0 (1.0) > Content-Type: multipart/alternative; > boundary=Apple-Mail-87E5DAF2-18C6-4FCD-BF0D-CD6386E473CE > X-Mailer: iPhone Mail (10A523) > Message-Id: <e41b88ea-b9cf-4ab1-a033-c2c7c0a13...@web.de> > Date: Tue, 20 Nov 2012 19:58:57 +0100 > Cc: foo...@datev.de > Content-Transfer-Encoding: 7bit > To: foo...@datev.de > X-Provags-ID: V02:K0:EvqK/RN09UfFRommwYltjAXMl2r5JXh5KWYmQ/XvFE7 > v78RzfvGZ2i90sbUnAmle0j16h4tGzLgsFuwPaanb1zpyriAC1 > wbvb4NZuBy1wZDi2uIhlRUmtyTNNXdYa4InULTNS7wG4t+vqOm > ugaM5p60njVb35BTzZd8ONV2nh4sL0Mke/7RawEhWRPZkuXKs8 > LiB5mlVf7ikRcHdur53ew== > > > --Apple-Mail-87E5DAF2-18C6-4FCD-BF0D-CD6386E473CE > .... > --- snap > > -- "My definition of a free society is a society where it is safe to be unpopular." - Adlai E. Stevenson Jr. http://www.ChaosReigns.com