I think you are on to something.
Analyzing the first set of headers returns:
* 67.130.83.92 is in PB White
* 67.130.83.92 is in RBLCache: inserted at not ok by 2

which, if I'm understanding this correctly, means that it's in the Penalty Box 
Whitelist but also in the RBL as 'not ok'.

I was thinking ForceRBLCache would be a good setting to turn on, you think?

Thanks,
Alex 

-----Original Message-----
From: Grayhat [mailto:[email protected]] 
Sent: Thursday, March 19, 2009 3:23 PM
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: Re: [Assp-user] Not sure how to block this spam

> Anyone?

> Received: from tightprofitforus.com ([67.130.83.92] 
> helo=tightprofitforus.com)
>  by ASSP.nospam; 19 Mar 2009 07:14:17 -0600

> Received: from gibbaheinemanns.com ([209.170.71.162] 
> helo=gibbaheinemanns.com)
>  by ASSP.nospam; 19 Mar 2009 07:29:17 -0600

ASSP is receiving such emails and proxying them to the exchange server
which btw sees the ASSP IP

I'd better look at the

> X-Assp-Delay: [email protected] not delayed (auto accepted);

and to the other headers, apparently some of your settings are letting
those messages through, try pasting them into the mail analyzer and
let's see what's it will tell you

------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to