I see that you're not running spamdyke. FH_RELAY_NODNS scores only 1.5?
When that condition exists, spamdyke flat out rejects it (in the default
configuration - you can tailor that if you really need to).
I would install spamdyke, and watch your server breath a sigh of relief
afterwards. ;) There will be a lot less scanning being done, because
spamdyke rejects spam up front before it's even received. I'll bet that
your users will notice the difference too.
Ronnie Tartar wrote:
I have users that are now getting hundreds of spam messages through the
the filter. Seems strange...
Any help?
Below is a header
Received: (qmail 10274 invoked by uid 89); 23 Aug 2009 21:33:53 -0000
Received: by simscan 1.3.1 ppid: 10264, pid: 10266, t: 0.4152s
scanners: attach: 1.3.1 clamav: 0.94.2/m: spam: 3.2.5
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
mail.host2max.com
X-Spam-Level: **
X-Spam-Status: No, hits=2.2 required=5.0 tests=DK_SIGNED,DK_VERIFIED,
FH_RELAY_NODNS,RDNS_NONE,SARE_MONEYTERMS autolearn=noversion=3.2.5
X-Spam-REPORT:
* 1.5 FH_RELAY_NODNS We could not determine your Reverse DNS
* 0.0 DK_SIGNED Domain Keys: message has a signature
* -0.0 DK_VERIFIED Domain Keys: signature passes verification
* 0.7 SARE_MONEYTERMS BODY: Talks about money in some way.
* 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
Received: from unknown (HELO mail.ityetnodit.com) (209.124.84.94)
by mail.host2max.com with SMTP; 23 Aug 2009 21:33:52 -0000
Received-SPF: pass (mail.host2max.com: SPF record at mail.ityetnodit.com
designates 209.124.84.94 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=main; d=mail.ityetnodit.com;
b=GfuKusaE/IPPb9kGy6Loor9EVZk9Q29LgKvrGrh+ncckvXhSxBPpPY+WNyC3aXGk6hHMaj2ugTSMtOgAYn5eBA==;
h=Received:Message-ID:Date:From:To:Subject:List-Unsubscribe:MIME-Version:Content-Type:Content-Transfer-Encoding;Received:
by 209.124.84.94 with SMTP id j66ou745dzpl5x3 for <user email
replaced>; Sun, 23 Aug 2009 16:32:39 -0500Message-ID:
<[email protected]>Date: Sun, 23 Aug 2009 16:32:39
-0500From: "BankruptcyRights" <[email protected]>
--
-Eric 'shubes'
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
