--On Tuesday, October 22, 2013 9:28 PM +0200 Axb <axb.li...@gmail.com> wrote:

On 10/22/2013 09:01 PM, Quanah Gibson-Mount wrote:
We have an issue where a lot of spam is being autolearned as HAM by SA.
Do people generally turn off autolearn?

I only use autolearn  - no drawbacks.

assuming you are legitimately receiving this through vmware relays, add
vmware's IPs to your trusted networks.
That will help query BLs of IPs before the vmware hosts.

I don't get the concern about VMW. The vmw hosts are *my* MTAs and in mynetworks.

mail.zimbra.com -> load balanced name for edge01-zcs.vmware.com, edge02-zcs.vmware.com

The SPAM did not originate with my servers... It originated elsewhere. This is rather clear:

Received: from c115-smtp.pumpery.com (c115-smtp.pumpery.com [5.135.12.243])
        by edge02-zcs.vmware.com (Postfix) with ESMTP id 76999784
        for <>; Tue, 22 Oct 2013 11:27:05 -0700 (PDT)


pumpery.com is the originator of this spam. I've blacklisted the from in the meantime.

--Quanah

--

Quanah Gibson-Mount
Architect - Server
Zimbra, Inc.
--------------------
Zimbra ::  the leader in open source messaging and collaboration

Reply via email to