Since upgrading to 1.55 and also adding more ip4r tests, I am now seeing
lots of missing X-RBL-Warning headers. We use Spam Review, and have been
wondering why some messages were being held when only one or two tests were
showing up in the "Junk Mail Warning" screen. We found that if we scrolled
through the "Message Headers" section, that all test that failed show up in
the X-Spam-Test-Failed line, and the message show that it got the correct
weight in the X-Note line, so we were just wondering why some of the
X-RBL-Warning headers are missing.
Here are some examples of what we are seeing (I snipped all but the relevant
X-Header):
Example 1
X-RBL-Warning: FIVETEN: 187.156.250.129.blackholes.five-ten-sg.com.
X-Spam-Tests-Failed: DORKZTL, FIVETEN, NOMOREFUNN, WEIGHT10
X-Note: Total spam test weight: 15
Example 2
X-RBL-Warning: SPAMCOP: Blocked - see
http://spamcop.net/bl.shtml?65.167.146.59
X-RBL-Warning: DSN: Not supporting null originator (DSN)
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client
[8040000e].
X-Spam-Tests-Failed: DNSRBL-SPAM, DORKZTL, SPAMCOP, DSN, BADHEADERS,
WEIGHT10
X-Note: Total spam test weight: 30
Example 3
X-RBL-Warning: FIVETEN: 15.191.61.209.blackholes.five-ten-sg.com.
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client
[8010000e].
X-Spam-Tests-Failed: FIVETEN, NOMOREFUNN, BADHEADERS, WEIGHT10
X-Note: Total spam test weight: 16
Example 4
X-RBL-Warning: NJABL: spam source -- 1021250694
X-RBL-Warning: OSIRUSOFT: [1] hotchics, see http://spews.org/ask.cgi?S962
X-Spam-Tests-Failed: DNSRBL-SPAM, DORKZTL, NJABL, OSIRUSOFT, WEIGHT10
X-Note: Total spam test weight: 21
Example 5
X-RBL-Warning: FIVETEN: 221.220.49.64.blackholes.five-ten-sg.com.
X-RBL-Warning: INTERSIL: 221.220.49.64.blackholes.intersil.net.
X-RBL-Warning: OSIRUSOFT: [1] royaltymail, see
http://spews.org/ask.cgi?S1446
X-Spam-Tests-Failed: DNSRBL-SPAM, FIVETEN, INTERSIL, NOMOREFUNN, OSIRUSOFT,
WEIGHT10
X-Note: Total spam test weight: 21
Thoughts?
Bill
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
