On Tue, 2014-10-07 at 17:46 +0200, Reindl Harald wrote:
> can somebody comment in what context null-senders and
> so bounces and probably autorepsonders are blocked
> by "DKIM_ADSP_NXDOMAIN,USER_IN_BLACKLIST"
SA does not block. *sigh*
In this context, the DKIM_ADSP_NXDOMAIN hit is irrelevant, given its low
score. The USER_IN_BLACKLIST hit is what's pushing the score beyond your
STMP reject threshold.
> DKIM_ADSP_NXDOMAIN,USER_IN_BLACKLIST
> from=<> to=<u...@example.com>
> 3jC2XD1j8Cz1y: milter-reject: END-OF-MESSAGE
See whitelist_from documentation for the from / sender type mail headers
SA uses for black- and whitelisting.
The above seems to show SMTP stage MAIL FROM, which results in only one
of the possible headers and depends on your SMTP server (and milter in
your case).
> a customer sends out his yearly members-invitation nad i see some
> bounces / autrorepsonders pass through and some are blocked with the
> above tags, at least one from his own outgoing mainserver
>
> what i don't completly understand is the "DKIM_ADSP_NXDOMAIN" since in
> case of NXDOMAIN the message trigger the response could not have been
> delivered and how the "USER_IN_BLACKLIST" comes with a empty sender
>
> not that i am against block some amount of backscatters, i just want to
> understand the conditions
--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
