Am 26.08.2014 um 17:18 schrieb Axb: > On 08/26/2014 04:28 PM, Reindl Harald wrote: >> header RCVD_IN_RP_TLDNS1 eval:check_rbl('tldns1-lastexternal', >> 'dnswl.thelounge.net.') >> describe RCVD_IN_RP_TLDNS1 Custom DNSBL/DNSWL >> tflags RCVD_IN_RP_TLDNS1 net >> score RCVD_IN_RP_TLDNS1 -5 >> >> spamd: result: Y 9 - >> ADVANCE_FEE_4_NEW,ADVANCE_FEE_4_NEW_MONEY,ADVANCE_FEE_5_NEW,ADVANCE_FEE_5_NEW_MONEY,BAYES_99,BAYES_999,DEAR_SOMETHING,DKIM_ADSP_CUSTOM_MED,FREEMAIL_FROM,LOTS_OF_MONEY,SPF_SOFTFAIL,T_MONEY_PERCENT,URG_BIZ >> >> scantime=0.4,size=8639,user=sa-milt,uid=189,required_score=1.0,rhost=localhost,raddr=127.0.0.1,rport=29655,mid=<762711c0cdde92c967fe5f98b4054c4ceadd18a41409062805@******>,bayes=1.000000,autolearn=disabled > > assuming your using rbldnsd, do you have the resolver forwarding to the > dnswl.thelounge.net zone? > does dnswl.thelounge.net have an A record > have you configured a testpoint in dnswl.thelounge.net? if yes, can you > resolve it with dig?
Arrrrgh - that rules are skipped in case of hosts from the same network as the server - is there some way to disable that behavior? in case of blacklists that may make sense in case of DNSWL containing the own subnet a substract a large score not so i just added my public home-ip to the dnswl and made a copy of the test-formmailer there pointing to the mail-gateway running SA and now it works Aug 26 17:20:42 mail-gw spamd[23363]: spamd: result: Y 4 - ADVANCE_FEE_4_NEW,ADVANCE_FEE_4_NEW_MONEY,ADVANCE_FEE_5_NEW,ADVANCE_FEE_5_NEW_MONEY,BAYES_99,BAYES_999,DEAR_SOMETHING,DKIM_ADSP_CUSTOM_MED,FREEMAIL_FROM,LOTS_OF_MONEY,RCVD_IN_RP_TLDNS1,SPF_SOFTFAIL,T_MONEY_PERCENT,URG_BIZ scantime=0.2,size=4753,user=sa-milt,uid=189,required_score=1.0,rhost=localhost,raddr=127.0.0.1,rport=29708,mid=<22e76ecfb06bf34da4f059a5606a8ffe7a93c3471409066...@srv-rhsoft.rhsoft.net>,bayes=1.000000,autolearn=disabled
signature.asc
Description: OpenPGP digital signature