Sorry, sent the previous one accidently.
On Thu, 19 Dec 2019 14:36:28 +0000 RW wrote: > On Thu, 19 Dec 2019 12:49:34 +0200 > Henrik K wrote: > > > On Thu, Dec 19, 2019 at 12:43:43PM +0200, Henrik K wrote: > > > > > > hermes.apache.org[207.244.88.153] which sends these list mails is > > > also supposed to hit RCVD_IN_DNSWL_HI, not _NONE? Your setup > > > seems wonky. > > > > Answering myself, DNSWL uses firsttrusted, so you've probably have > > some Apache stuff in trusted_networks.. > > > > I'm kind of surprised that DNSWL is not using lastexternal. Because the trusted network outside of the internal network is trusted not to be under the control of a spammer, but you can't generally trust what's relayed through it. Forwarders that are listed at all usually have a low level of trust, often lower than the trust of the last external. What surprises me is that a list server is in RCVD_IN_DNSWL_HI which I'd expect to be dominated by transactional mail.
