On 17 Jun 2019, at 02:07, Matus UHLAR - fantomas <uh...@fantomas.sk> wrote:
But how do I tell spamass-milter not to check for PBL and other similar
tests on mails from local users to local users?
don't. This is exactly what spammers try for years to avoid being detected.
On 17.06.19 08:30, @lbutlr wrote:
Spammers are not local users on my system.
local users don't send via SMTP so they can't appear in PBL.
Users who send via SMTP from host that is in PBL are not local.
Spammers often send mail from remote hosts (often listed in PBL), directly
to your local MTA, using your From: address.
It appears that switching from dovecot LDA to dovecot LMTP has changed the
appearance of the headers from local users. I’ll go check on the dovecot
list.
Here’s what the received header used to look like:
Received: from [10.0.5.3] (c-71-229-144-93.hsd1.co.comcast.net [71.229.144.93])
by mail.covisp.net (Postfix) with ESMTPS id B67B8118AD59
for <kr...@kreme.com>; Sun, 16 Aug 2009 22:19:02 -0600 (MDT)
As opposed to now:
Received: from darth.lan (c-73-14.161.160.hsd1.co.comcast.net [73.14.161.160])
by mail.covisp.net(Postfix 3.4.5/8.13.0) with SMTP id unknown;
Sun, 16 Jun 2019 15:26:32 -0600
(envelope-from <kr...@kreme.com>)
The first has an ESMTPS id and the other has SMTP id unknown.
as already explained on the postfix-user list, this has nothing to do with
the LDA, as it contains information how postfix received the message - not
how it processes the mail further (who is passed to).
Apparently the latter example is received via spamass-milter, missing queue
ID and containing strange version. The Received: header may be faked by
spamass-milter. do you use -x option for SA?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
How does cat play with mouse? cat /dev/mouse
