On Sat, 11 Jul 2009 12:52:56 -0700 (PDT) dmy <i...@dwsa.de> wrote: >
> As far as I understand SpamAssassin is supposed to just check the ip > that directly delivered the email to my server but not the IP the > email is originally from (as that woundn't make any sense as almost > everyone is using dyn ips...). It depends on the test. Most of them run on all addresses outside the trusted network, except for DUL tests and Spamhaus PBL + XBL which run on the last external. I don't see that there's all that much difference between XBL and RCVD_IN_NJABL_PROXY - perhaps it's because XBL is dominated by botnets and NJABL_PROXY by exploited server software. > I would really appreciate some hints what is going wrong here and how > to fix that. > > Thanks! > > Danusch
