On Mon, Oct 09, 2006 at 12:29:29PM +0200, Thomas Bange wrote:
Hello,
I just found this in my maillog:
Oct 7 01:46:58 www postfix/policyd-weight[7552]: weighted
check: NOT_IN_BL_NJABL=-1.5 NOT_IN_SBL_XBL_SPAMHAUS=-1.5
NOT_IN_SPAMCOP=-1.5 BOGUS_MX=2.1 BOGUS_MX=2.1
^
CL_IP_EQ_HELO_IP=-2 (check from: .is-asp. - helo:
.mailrelay1fra.is-teledata.) FROM_MATCHES_NOT_HELO=5.41
client=217.11.193.159 helo=mailrelay1fra.is-teledata.com
[EMAIL PROTECTED] [EMAIL PROTECTED], rate: 3.11
Oct 7 01:46:58 www postfix/policyd-weight[7552]: decided action=450
Mail appeared to be SPAM or forged. Ask your Mail/DNS-
Administrator to correct HELO and DNS MX settings or to get
removed from DNSBLs
Why is BOGUS_MX counted twice?
Which version? What is the un-obfuscated sender domain? When I check against
xxx.is-asp.com I get only one BOGUS_MX:
info: weighted check: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_BL_NJABL=-1.5
NOT_IN_SPAMCOP=-1.5 BOGUS_MX=2.1 CL_IP_EQ_HELO_IP=-2 (check from: .is-asp. -
helo: .mailrelay1fra.is-teledata.) FROM_MATCHES_NOT_HELO=5.41
client=217.11.193.159 helo=mailrelay1fra.is-teledata.com [EMAIL
PROTECTED] to= helo_ips: 217.11.194.67 217.11.194.155 217.11.192.4
217.11.193.159, rate: 1.01
--
Robert Felber (PGP: 896CF30B)
Munich, Germany
Policyd-weight Mailinglist - http://www.policyd-weight.org/