Wim Borghs wrote: > Can you please tell us what is in the maillog about these mails? Here's the Walmart... It should not be spam unless I'm missing how Helo should work.
Feb-25-07 11:24:00 161.170.244.40 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Sender Validation:blocked: Forged HELO: 'ndc-crmmta4.walmart.com' Feb-25-07 11:24:00 161.170.244.40 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] passing if safe because testmode, otherwise Helo invalid(forged):'ndc-crmmta4.walmart.com' Feb-25-07 11:24:00 161.170.244.40 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] spam determined to be safe, passing on to recipient Here's dailydealwirenews.com. Make no mistake. I would have called this one spam based on the content. Again, I don't think it failed on the correct test. Feb-25-07 08:35:49 67.106.80.124 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Sender Validation:blocked: Forged HELO: 'm7.dailydealwirenews.com' Feb-25-07 08:35:49 67.106.80.124 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] passing if safe because testmode, otherwise Helo invalid(forged):'m7.dailydealwirenews.com' Feb-25-07 08:35:56 67.106.80.124 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] spam determined to be safe, passing on to recipient This one failed from Gmail. Feb-25-07 11:53:32 64.233.162.229 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Sender Validation:blocked: Forged HELO: 'nz-out-0506.google.com' Feb-25-07 11:53:32 64.233.162.229 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] passing if safe because testmode, otherwise Helo invalid(forged):'nz-out-0506.google.com' Feb-25-07 11:53:33 64.233.162.229 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] spam determined to be safe, passing on to recipient This one failed... and notice that I changed everything to inactive. Feb-25-07 11:58:11 Admin update: DoValidFormatHelo changed from '3' to '0' Feb-25-07 11:58:11 Admin update: DoInvalidFormatHelo changed from '3' to '0' Feb-25-07 11:58:11 Admin update: DoReversed changed from '3' to '0' Feb-25-07 11:58:11 Admin update: DoInvalidPTR changed from '3' to '0' Feb-25-07 11:58:11 Admin update: DoDomainCheck changed from '3' to '0' Feb-25-07 11:59:29 66.192.146.177 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Sender Validation:blocked: Forged HELO: 'WTX5.netdta.com' Feb-25-07 11:59:29 66.192.146.177 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] passing if safe because testmode, otherwise Helo invalid(forged):'WTX5.netdta.com' Feb-25-07 11:59:29 66.192.146.177 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] spam determined to be safe, passing on to recipient Help me Obi Wan... ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
