Hi!
I have a problem with my Spamassassin 3.1.1 installation here.
I have Postfix as MTA and Amavids-new 2.3.3
The Rule RCVD_IN_SORBS_DUL matches also the first hop of the
received Headers. If i understand correctly the first hop should
not be matched as a user could use a dynamic/dialup IP-Address to
deliver mail to hist ISP's SMTP-Server.
Here are the headers of the Mail which was matched:
Received: from mail.mydomain.com ([10.0.1.254]) by mydomain.com with
Microsoft SMTPSVC(6.0.3790.1830);
Fri, 28 Apr 2006 08:10:18 +0200
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from 10.0.1.254 [10.0.1.254]
by mail.mydomain.com with POP3 (fetchmail-6.3.2)
for [EMAIL PROTECTED] (single-drop); Fri, 28 Apr 2006
08:08:01 +0200 (CEST)
Received: from localhost (mail.mydomain.com [127.0.0.1])
by mail.mydomain.com (Postfix) with ESMTP id 93CF34400E7
for <[EMAIL PROTECTED]>; Fri, 28 Apr 2006 08:07:18 +0200
(CEST)
Received: from mail.mydomain.com ([127.0.0.1])
by localhost (mail.mydomain.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 23786-10 for <[EMAIL PROTECTED]>;
Fri, 28 Apr 2006 08:07:18 +0200 (CEST)
Received: from mail.gmx.net ([EMAIL PROTECTED] [127.0.0.1])
by mail.mydomain.com (Postfix) with SMTP id 167E04400BB
for <[EMAIL PROTECTED]>; Fri, 28 Apr 2006 08:07:18 +0200
(CEST)
Received: (qmail invoked by alias); 28 Apr 2006 06:05:17 -0000
Received: from 85-124-55-250.dynamic.xdsl-line.inode.at (EHLO
[85.124.55.250]) [85.124.55.250]
by mail.external-domain.com (mp021) with SMTP; 28 Apr 2006 08:05:17
+0200
X-Authenticated: #300906
Message-ID: <[EMAIL PROTECTED]>
Disposition-Notification-To: [EMAIL PROTECTED]
Date: Fri, 28 Apr 2006 08:05:12 +0200
From: [EMAIL PROTECTED]
User-Agent: Thunderbird 1.5.0.2 (Windows/20060308)
MIME-Version: 1.0
To: [EMAIL PROTECTED]
Subject: ***SPAM*** This was the subject
X-Priority: 1 (Highest)
Content-Type: text/plain; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding: 8bit
X-Y-GMX-Trusted: 0
X-Virus-Scanned: amavisd-new at stadtwerkeschwaz.at
X-Spam-Status: Yes, score=5.323 tagged_above=-999.9 required=3.35
tests=[HELO_DYNAMIC_IPADDR2=3.213, RCVD_IN_SORBS_DUL=1.988,
X_PRIORITY_HIGH=0.122]
X-Spam-Score: 5.323
X-Spam-Level: *****
X-Spam-Flag: YES
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 28 Apr 2006 06:10:18.0791 (UTC)
FILETIME=[6CAC7370:01C66A8A]
Kind Regards
Christian Reiter
--
Christian Reiter
[EMAIL PROTECTED] || http://www.percom.at
fon: +43 5242 61177 || mob: +43 664 924 55 27 || fax: +43 5242 61177 31
