Am 07.02.2013 10:34, schrieb Lutz Petersen: > > > Seems misunderstanding. Better I give you a real example (shortend to be > readably and anonymous): > > > Return-Path: <wirtschaftswo...@derborse-fur-dummies.net> > > * -5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at http://www.dnswl.org/, high > trust > * [194.50.69.1 listed in list.dnswl.org] > * 1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist > * [URIs: thebinarysistema.com] > * 1.0 MSGID_MULTIPLE_AT Message-ID contains multiple '@' characters > * 2.0 FS_LARGE_PERCENT2 Larger than 100% in subj. > * 1.1 DCC_CHECK Als Massen-E-Mail erkannt von DCC (dcc-servers.net) > ------- > = 0.8 = No Spam > Without the -5.0 DNSWL_HI it would have been tagged (correct) as > spam with 5.8 > > Received: from unknown (HELO mail.mobile.de) (194.50.69.1) > Received: from derborse-fur-dummies.net (derborse-fur-dummies.net > [37.59.206.107]) > by mail.mobile.de (Postfix) with ESMTP for <spamvic...@mobile.de> > >
forwarding is not forbidden, however it may widly broken since spf etc if your logs are right , inform i.e postmaster/abuse mobile.de and people at http://www.dnswl.org/ http://www.chaosreigns.com/dnswl/sa_plugin/ looks like a good way to automate this by the way ,it looks like some newsletter, so your understanding of "spam" might not be shared public, so you should have evidence of definite spam content ( like viagra marketing etc ) delivered through mobile.de if you use tag score upper 5 , 5.8 score is near point where false positive may happen ever Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich
