Re: [AMaViS-user] all mail sent through IMP marked as spam

On Mon, May 16, 2005 at 06:57:18PM -0500, Tim Winders wrote:
> I have a problem where all email sent from IMP 4.1 from outside my network
> is marked as spam.
>
> I just tried it with a user on SBC DSL. She logged into our Horde/IMP
> server and sent me a message and it was marked as spam.
....
> X-Spam-Status: Yes, hits=8.967 tag=-100 tag2=6 kill=6 tests=[AWL=0.095,
> BAYES_00=-2.599, HELO_DYNAMIC_DHCP=1.248, HELO_DYNAMIC_HCC=3.741,
> HELO_DYNAMIC_IPADDR=4.4, NO_REAL_NAME=0.007, RCVD_IN_NJABL_DUL=0.088,
> RCVD_IN_SORBS_DUL=1.987]

Given those hits, it looks to me like the IMP webmail server is putting
her connecting address for HTTP into Received: headers in a format that
causes them to be interpreted by SpamAssassin as if it were mail
emanating directly from her IP to the webserver. If her computer on
SBC DSL were sending mail directly to a mailserver, from a DUL-listed
address, with a HELLO as a dynamic IP address, that would be very
suspicious indeed.

This seems like mostly an SA bug to me.

-- Clifton

--
Clifton Royston -- cliftonr@tikitechnologies.com
Tiki Technologies Lead Programmer/Software Architect
"I'm gonna tell my son to grow up pretty as the grass is green
And whip-smart as the English Channel's wide..."
-- 'Whip-Smart', Liz Phair


-------------------------------------------------------
This SF.Net email is sponsored by Oracle Space Sweepstakes
Want to be the first software developer in space?
Enter now for the Oracle Space Sweepstakes!
http://ads.osdn.com/?ad_id=7412&alloc_id=16344&op=click
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/