First thing I would want to make sure of is whether or not the RPBL listing is just a public query response and not an actual reputation indicator for the IP. Validity has undertaken effort over the past year or two to restrict unfettered public access to their DNS-based query mechanisms, in the same way that Spamhaus has done. (In other words, the RPBL DNS response might be a junk one if you're querying via a public DNS server and aren't registered with Validity.)
Cheers, Al Iverson On Wed, Aug 14, 2024 at 6:49 AM L. Mark Stone via mailop <[email protected]> wrote: > > Over the past few weeks we have been seeing increasing amounts of spam with > SpamAssassin scores like this recent one: > > X-Spam-Status: Yes, score=7.963 required=3.8 tests=[DKIM_UNSIGNED=2, > HTML_ENTITY_ASCII=2.077, HTML_MESSAGE=0.001, INVALUEMENT_SED=5.5, > MIME_HTML_ONLY=0.1, RCVD_IN_VALIDITY_CERTIFIED=-3, > RCVD_IN_VALIDITY_RPBL=1.284, RCVD_IN_VALIDITY_SAFE=-2, SPF_HELO_NONE=0.001, > SPF_NONE=2, T_HTML_ATTACH=0.01, T_SCC_BODY_TEXT_LINE=-0.01] > > The spam typically has Subject lines like "Re-validate Your Email Account > Will Be Terminated" > > Am I reading the *_VALIDITY_* scores above correctly that the sender is a > Validity certified safe sender, but that the sender is also on Validity's > RPBL? > > Happy to share headers off-list with someone from Validity if needed. > > Regards, and thanks, > Mark > > -- > _________________________________________________________________ > L. Mark Stone, Founder > North America's Leading Zimbra VAR/BSP/Training Partner > For Companies With Mission-Critical Email Needs > _______________________________________________ > mailop mailing list > [email protected] > https://list.mailop.org/listinfo/mailop -- Al Iverson // 312-725-0130 // Chicago http://www.spamresource.com // Deliverability http://www.aliverson.com // All about me https://xnnd.com/calendar // Book my calendar _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
