Michael Scheidell wrote:
On 6/17/10 10:38 AM, Randy Ramsdell wrote:
We are getting a ton of this type and it scores low because there are
no received headers. What is this type of mail? I do not recall
seeing these in the past.
its coming from you then :-(
or, your mail server is stripping out or not adding headers. RFC's
require your mail server to add the header for the SMTP server that
connected to you and add a header.
check your 'contact us' forms on your web site for holes.
then, check the blacklists to see how to get removed.
Thanks,
RCR
Blacklists? What makes you think we are on a blacklist? As far as I can
tell we are not on any lists.
Well looks like you are correct regarding the mail server stripping
these. It makes no sense because we do not have rules that do this. The
modifications done are done by spamassassin when it rewrites the header
with a report and score.
The original email did not hit the NO_RELAYS rule but subsequent runs
through do hit this rule and it isn't on all email.
Example:
Original rules hit.
X-Spam-Status: No, score=-0.394 tagged_above=-9999
required=5tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001,
RCVD_IN_SORBS_WEB=0.619,URG_BIZ=1.585]
After running spamassassin -D
X-Spam-Status: No, score=4.2 required=5.0
tests=AWL,BAYES_80,HTML_MESSAGE,NO_RECEIVED,NO_RELAYS,TO_MALFORMED,URG_BIZ
autolearn=no version=3.2.5
Any ideas how this could happen?
