Hello,
today I was pointed to a message with these headers:
X-Spam-Score: 6.789
X-Spam-Status: Yes, score=6.789 tag=-999 tag2=5 kill=6
tests=[HTML_MESSAGE=0.001, MISSING_MIMEOLE=1.843,
RCVD_IN_SORBS_HTTP=2.499, RCVD_IN_SORBS_SOCKS=2.443]
Received: from smtp.cesky-hosting.cz (smtp.cesky-hosting.cz
[IPv6:2a00:1ed0:2:0:1:5bef:c8ee:1])
by mailin.example.org (amavisd-milter);
Wed, 24 Sep 2014 10:09:52 +0200 (CEST)
(envelope-from <***@wellpack.cz>)
Received: from Janinka (138.154.broadband15.iol.cz [90.182.154.138])
(Authenticated sender: ***@wellpack.cz)
by smtp.cesky-hosting.cz (Postfix) with ESMTPSA;
Wed, 24 Sep 2014 10:01:06 +0200 (CEST)
I operate mailin.example.org that may receive via IPv4 and IPv6.
I wonder why RCVD_IN_SORBS_HTTP and RCVD_IN_SORBS_SOCKS fire up.
https://wiki.apache.org/spamassassin/Rules/RCVD_IN_SORBS_SOCKS tell me
This check tests the IP address of the *last untrusted relay*
for me the last untrusted relay *should be* smtp.cesky-hosting.cz
but it looks like sa think it's 90.182.154.138
what settings I should check?
Andreas
