Found the problem. I had to add this to my local.cf: clear_trusted_networks trusted_networks 172.16.0.0/16 trusted_networks 208.49.53.65
Content analysis details: (11.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.3 SUBJECT_DIET Subject talks about losing pounds
0.0 DIET_1 BODY: Lose Weight Spam
0.6 ALL_NATURAL BODY: Spam is 100% natural?!
1.3 RCVD_IN_RFC_IPWHOIS RBL: Sent via a relay in ipwhois.rfc-ignorant.org
[$ has inaccurate or missing WHOIS data at the]
[RIR]
1.0 KOREA_BLACKHOLES RBL: korea.blackholes.us
[211.244.194.231 listed in korea.blackholes.us]
1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?211.244.194.231>]
1.3 URIBL_SBL Contains a URL listed in the SBL blocklist
[URIs: adipren10.com]
2.0 URIBL_WS_SURBL Contains a URL listed in the WS SURBL blocklist
[URIs: adipren10.com]
3.3 URIBL_SC_SURBL Contains a URL listed in the SC SURBL blocklist
[URIs: adipren10.com]
1.6 MSGID_DOLLARS Message-Id has pattern used in spam
-1.1 AWL AWL: From: address is in the auto white-list
Bernard Robbins wrote:
I seen where it said the Korean ip is trusted. So I put clear_trusted_networks in the local.cf and still had the same results. Isn't it suppose to be listed under untrusted and then get the rbl tests?
debug: using "/etc/mail/spamassassin" for site rules dir debug: config: read file /etc/mail/spamassassin/backhair.cf debug: config: read file /etc/mail/spamassassin/chickenpox.cf debug: config: read file /etc/mail/spamassassin/dnsbl.cf debug: config: read file /etc/mail/spamassassin/local.cf debug: config: read file /etc/mail/spamassassin/weeds2.cf ... debug: Net::DNS version: 0.47 debug: looking up PTR record for '211.244.194.231' debug: PTR for '211.244.194.231': '' debug: received-header: parsed as [ ip=211.244.194.231 rdns= helo= by=mail.vlminternational.com ident= envfrom= intl=0 id= ] ... debug: received-header: relay 211.244.194.231 trusted? yes internal? no debug: metadata: X-Spam-Relays-Trusted: [ ip=211.244.194.231 rdns= helo= by=mail.vlminternational.com ident= envfrom= intl=0 id= ] debug: metadata: X-Spam-Relays-Untrusted: ... debug: RBL: success for 9 of 9 queries ...
Bernard Robbins wrote:
I'm having problems setting up blackholes.us. All the other preset rbl's are working and I believe I have set these up the same. I have a email that had came from Korea and the senders ip address is listed in korea.blackholes.us and it never triggers the korea rule.
