Am 12.03.2015 um 05:52 schrieb @lbutlr:

On 11 Mar 2015, at 22:45 , @lbutlr <krem...@kreme.com> wrote:

$ grep 3l2cbk5MbNzJMhn /var/log/maillog
Mar 11 22:28:34 mail postfix/smtpd[79324]: 3l2cbk5MbNzJMhn: 
client=nm20-vm5.bullet.mail.ne1.yahoo.com[98.138.91.242]
Mar 11 22:28:34 mail postfix/cleanup[79271]: 3l2cbk5MbNzJMhn: 
message-id=<2c89470b-6522-413d-813b-a7e6f242c...@yahoo.com>
Mar 11 22:28:38 mail postfix/cleanup[79271]: 3l2cbk5MbNzJMhn: milter-reject: END-OF-MESSAGE from 
nm20-vm5.bullet.mail.ne1.yahoo.com[98.138.91.242]: 5.7.1 Blocked by SpamAssassin; 
from=<*munged*@yahoo.com> to=<kr...@kreme.com> proto=ESMTP 
helo=<nm20-vm5.bullet.mail.ne1.yahoo.com>

Oh, found the log line seconds later:

spamd: result: Y 10 - 
DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FORGED_YAHOO_RCVD,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,RDNS_NONE,SPF_PASS,UNPARSEABLE_RELAY,URIBL_BLACK,URIBL_DBL_SPAM,URIBL_JP_SURBL,URIBL_RHS_DOB,URIBL_SBL_A,URIBL_SC_SURBL,URIBL_WS_SURBL
 scantime=3.5,size=8168,

A 10 seems high for an email that actually came from yahoo?

how does it matter from where it came?
it's *content* is spam and 10 is *not* high

frankly we score URIBL_BLACK with 7.0 for good
reasons by reject above 8.0

URIBL_BLACK
URIBL_DBL_SPAM
URIBL_JP_SURBL
URIBL_SC_SURBL
URIBL_WS_SURBL
____________________________________________________

our scores:

score URIBL_AB_SURBL 4.5
score URIBL_JP_SURBL 4.5
score URIBL_MW_SURBL 5.0
score URIBL_PH_SURBL 5.0
score URIBL_WS_SURBL 3.5
score URIBL_SC_SURBL 0.5
score URIBL_SBL 1.5
score URIBL_SBL_A 1.5
score URIBL_DBL_SPAM 3.5
score URIBL_DBL_BOTNETCC 3.5
score URIBL_DBL_PHISH 5.0
score URIBL_DBL_MALWARE 5.0
score URIBL_DBL_ABUSE_SPAM 3.5
score URIBL_DBL_ABUSE_BOTCC 4.0
score URIBL_DBL_ABUSE_PHISH 5.0
score URIBL_DBL_ABUSE_MALW 5.0
score URIBL_BLACK 7.0
score URIBL_GREY 0.5
score URIBL_RED 0.5
score URIBL_DBL_REDIR 0.1
score URIBL_DBL_ABUSE_REDIR 0.3
score URIBL_RHS_DOB 0.2
score URIBL_BLOCKED 0
score URIBL_DBL_ERROR 0

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to