On Mon, Oct 09, 2006 at 12:29:29PM +0200, Thomas Bange wrote:
> Hello,
>
> I just found this in my maillog:
>
> Oct 7 01:46:58 www postfix/policyd-weight[7552]: weighted
> check: NOT_IN_BL_NJABL=-1.5 NOT_IN_SBL_XBL_SPAMHAUS=-1.5
> NOT_IN_SPAMCOP=-1.5 BOGUS_MX=2.1 BOGUS_MX=2.1
> ^^^^^^^^^^^^^^^^^^^^^^^^^
> CL_IP_EQ_HELO_IP=-2 (check from: .is-asp. - helo:
> .mailrelay1fra.is-teledata.) FROM_MATCHES_NOT_HELO=5.41
> <client=217.11.193.159> <helo=mailrelay1fra.is-teledata.com>
> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>, rate: 3.11
> Oct 7 01:46:58 www postfix/policyd-weight[7552]: decided action=450
> Mail appeared to be SPAM or forged. Ask your Mail/DNS-
> Administrator to correct HELO and DNS MX settings or to get
> removed from DNSBLs
>
> Why is BOGUS_MX counted twice?
Which version? What is the un-obfuscated sender domain? When I check against
xxx.is-asp.com I get only one BOGUS_MX:
info: weighted check: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_BL_NJABL=-1.5
NOT_IN_SPAMCOP=-1.5 BOGUS_MX=2.1 CL_IP_EQ_HELO_IP=-2 (check from: .is-asp. -
helo: .mailrelay1fra.is-teledata.) FROM_MATCHES_NOT_HELO=5.41
<client=217.11.193.159> <helo=mailrelay1fra.is-teledata.com> <[EMAIL
PROTECTED]> <to=> <helo_ips: 217.11.194.67 217.11.194.155 217.11.192.4
217.11.193.159>, rate: 1.01
--
Robert Felber (PGP: 896CF30B)
Munich, Germany
____________________________________________________________
Policyd-weight Mailinglist - http://www.policyd-weight.org/
