Hi Quanah,
X-Spam-Status: Yes, score=10.297 tagged_above=-10 required=10
tests=[ALL_TRUSTED=-1, BAYES_00=-0.5, T_RP_MATCHES_RCVD=-0.01,
URIBL_BLACK=3.25, URIBL_DBL_SPAM=2.5, URIBL_JP_SURBL=1.25,
URIBL_RHS_DOB=1.514, URIBL_SBL_A=0.1, URIBL_WS_SURBL=1.608,
URI_HEX=1.122, URI_NOVOWEL=0.5, URI_TRY_3LD=0.963,
DSPAM.Innocent=-1.000] autolearn=no autolearn_force=no
Those are URIBL's, not RBL's. The mail contains blacklisted url's, the
uribl's used are probably http://uribl.com/about.shtml#info and/or
http://www.surbl.org/lists and http://www.support-intelligence.com/dob/
The URIBL_RHS_DOB means that a domainname is fresh (registered in the last 5
days).
I see you are using amavisd-new, maybe you can do some magic with
policybanks and specify another $sa_configpath for spamassassin with those
options turned off for internal ip's, if desired.
/MJ
