Update: I went back through the logs. I'm seeing lots of X-Assp-Message-Score: 50 (multiple (2) 'From:' header tags found ( DoNoFrom )) X-Assp-IP-Score: 50 (multiple (2) 'From:' header tags found ( DoNoFrom )) tags, that's making messages be rejected. Most of from legitimate mailing companies, like SendGrid,
One that I found has a single from line (no sender line like the other one I reported last week) which looks like this: From: "serv...@thecompany.com" <serv...@thecompany.com> Is that being detected as "multiple email addresses are found in one header." Yes, the email address is there twice, but it's the same address, once instead of the name of the sender and once as the email address itself. While bad form, do we really want to treat this as illegal and add the default score of 50 for this, even though the rest of the message is good? This message got a -35 score initially because of a whitesenderbase, but the DoNoFrom added 50 (so a +15 net score), but the message was still rejected. It's almost like DoNoFrom is set to BLOCK, when it was actually set to score. Can we discuss if something changed in the most recent version? For now, I've set DoNoFrom to monitor. Thanks On Wed, Nov 14, 2018 at 12:25 PM K Post <nntp.p...@gmail.com> wrote: > I had a message go to spam because DoNoFrom reports 2 different sender > domains in from and sender. > > Analyze says: > DoNoFrom: detected (1) faults in scoring mode - last reason: found (2) > different sender domains in 'From:' and 'Sender:' header tags ( DoNoFrom ) > - penalty: 1 * 50 = 50 > > I don't see where the GUI indicates that this should be blocked. For > DoNoFrom, the gui says ([ with my notes in brackets] > > - both headers (From: and Sender:) are missing > [they're both there] > > - any of these headers contains not a valid email address > [all valid] > > - multiple of the same headers are found > [only one from and one sender line] > > - multiple email addresses are found in one header. > [see below, only one address for sender and one for from, but they > are different domains] > > Sender: =?UTF-8?B?VmluY2V4bCBIdWdaZXa=?= <bou...@bounce.theirbigorg.org> > Reply-To: theper...@gmail.com > From: "Person Name" <theper...@gmail.com> > > I didn't know that DoNoFrom would fail if there was a different sender > domain in From and Sender as is the case here. Am I mistaken? Is there a > way to allow different from and sender domains? I'd think that would be > pretty common. > > Thanks > ken > > >
_______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test