On 29.09.14 20:16, A. Schulze wrote:
today I was pointed to a message with these headers:X-Spam-Score: 6.789 X-Spam-Status: Yes, score=6.789 tag=-999 tag2=5 kill=6 tests=[HTML_MESSAGE=0.001, MISSING_MIMEOLE=1.843, RCVD_IN_SORBS_HTTP=2.499, RCVD_IN_SORBS_SOCKS=2.443]Received: from smtp.cesky-hosting.cz (smtp.cesky-hosting.cz [IPv6:2a00:1ed0:2:0:1:5bef:c8ee:1])by mailin.example.org (amavisd-milter); Wed, 24 Sep 2014 10:09:52 +0200 (CEST) (envelope-from <***@wellpack.cz>) Received: from Janinka (138.154.broadband15.iol.cz [90.182.154.138]) (Authenticated sender: ***@wellpack.cz) by smtp.cesky-hosting.cz (Postfix) with ESMTPSA; Wed, 24 Sep 2014 10:01:06 +0200 (CEST) I operate mailin.example.org that may receive via IPv4 and IPv6. I wonder why RCVD_IN_SORBS_HTTP and RCVD_IN_SORBS_SOCKS fire up. https://wiki.apache.org/spamassassin/Rules/RCVD_IN_SORBS_SOCKS tell me This check tests the IP address of the *last untrusted relay* for me the last untrusted relay *should be* smtp.cesky-hosting.cz but it looks like sa think it's 90.182.154.138
Do you trust smtp.cesky-hosting.cz? Even if it's open socks and http proxy server? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. "One World. One Web. One Program." - Microsoft promotional advertisement "Ein Volk, ein Reich, ein Fuhrer!" - Adolf Hitler
