So, I'm still find messages blocked as spam when the IP address of the mail server is in my dns whitelist, but is also part of a larger blacklist dns.

I maintain a blacklist and a whitelist on my own local DNS. The blacklist contains entries that cover what I feel are bad actors (ie /24 or /16 ranges), but I also whitelist specific IP addresses or ranges within those blocks. For example, I may have a /16 blacklisted, but have a few /24's within that range whitelisted.

I don't believe all messages are block, just the occasional one. For example, here are the headers (redacted) from a message that was rejected just yesterday:


X-Assp-Version(1): 2.6.3(20002) on ASSP.xmsi.net
X-Assp-ID(1): ASSP.xmsi.net m1-58780-12245
X-Assp-Session(1): 7F8A43600CA8 (mail 1)
X-Assp-Intended-For-IP(1): 165.254.4.90
X-Assp-Client-TLS(1): yes
X-Assp-Server-TLS(1): yes
X-Assp-NoProcessing(1): YES - (noProcessing - message size (3836221) is above
         100000 (npSize))
X-Assp-Received-RWL(1): whitelisted from 
(list.dnswl.org.wl.mcf.com->127.0.4.3,trust=3-[high]
         (category=Organisations);) - high trust is 3-[high] - 
client-ip=67.231.145.123
X-Original-Authentication-Results: assp.xmsi.net; dkim=fail;
         dmarc=pass
X-Assp-Message-Score(1): 50 (DNSBL: failed, 67.231.145.123 listed in
         bl.mcf.com)
X-Assp-IP-Score(1): 50 (DNSBL: failed, 67.231.145.123 listed in
         bl.mcf.com)
X-Assp-DNSBL(1): failed, 67.231.145.123 listed in (bl.mcf.com<-127.0.0.8)
X-Assp-Tag(1): DNSBL
X-Assp-Spam(1): YES
X-Spam-Status:yes
X-Assp-Spam-Reason(1): DNSBL, 67.231.145.123 listed in bl.mcf.com
X-Assp-Message-Totalscore(1): 50
X-Assp-Spam-Level(1): ***********
X-Assp-Intended-For(1): recipi...@domain.com
X-Assp-Copy-Spam(1): Yes
Received: from mx0a-00306701.pphosted.com ([67.231.145.123] 
helo=mx0a-00306701.pphosted.com)
         by ASSP.xmsi.net with SMTPS(TLSv1_2 ECDHE-RSA-AES128-GCM-SHA256) 
(2.6.3);
         25 Sep 2020 14:33:00 -0400

In bl.mcf.com I have 67.0.0.0/8 blocked, however 67.231.145.0/24 is listed in 
wl.mcf.com. Could the fact that the messages is over the NoProcessing
size be causing an issue?

Thanks for any insight into this.

--

Farokh
----------------------------------------------------------------------------
Best Tech Service, LLC - When only the Best will do...
For all your technology needs including hosting solutions.
Cell: 914-262-1594
Like us on Facebook: https://www.facebook.com/besttechsvc

_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to