You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Igor <ig...@sviblovo.ru> on 2005/11/16 13:30:43 UTC
spam from unresolved ip
When sendmail receive mail it does revers dns lookup, and write results
in header "Received:" in brackets ():
Received: from smtp.osdl.org (smtp.osdl.org [65.172.181.4]) by ...
I look at http://spamassassin.apache.org/tests_3_1_x.html
(Tests Performed: v3.1.x) and have not found checks on unresolved ip.
How to force spamassassin for scoring unresolved ip ?
I have noticed, that half of spam, which passes spamassassin on my
server, goes from unresolved ip, like this letter:
Return-Path: <oo...@mail.ru>
Received: from CEMAL ([85.106.173.242]) by mail.aaa.ru (8.13.4/8.13.4)
with SMTP id jAFJ0N0o023462; Tue, 15 Nov 2005 22:00:25 +0300
Message-ID: <0e...@trening>
From: =?koi8-r?B?9PLl7unu5w==?= <oo...@mail.ru>
To: "mail" <mi...@wazzup.ru>
Subject: =?koi8-r?B?0NLP1MnXz9PUz9HOycUgzcHOydDVzNHDydHN?=
Date: Tue, 15 Nov 2005 11:58:21 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0E11_01C5EA2A.64132730"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on mail.aaa.ru
X-Spam-Status: No, score=4.2 required=5.0
tests=HTML_FONT_BIG,HTML_MESSAGE,
RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK autolearn=disabled
version=3.0.4
X-Spam-Level: ****
Status:
Re: spam from unresolved ip
Posted by Igor <ig...@sviblovo.ru>.
On Wed, 2005-11-16 at 15:31, Richard Pijnenburg wrote:
> Igor,
>
> You are looking at the document for version 3.1.x
> But if i look at the verion in your example mail i see
> " X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on mail.aaa.ru "
> Perhaps that's the reason why?
I have looked at the document for version 3.1.x because it is the last
version. When I have not found this feature neither in 3.0 nor in 3.1,
I have not believed to the eyes, and then has thought, that I looking
at the not right place. If this feature not present, I shall do itself.
But it would not be desirable to invent a wheel, therefore I ask a
question here to be convinced that really this feature is not present.
I has installed version 3.1
This version does not do unresolved ip checking:
Return-Path: <i...@ibm.com>
X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on
mail.sviblovo.ru
X-Spam-Status: No, score=3.6 required=5.0 tests=MISSING_HEADERS,
MISSING_SUBJECT,MSGID_FROM_MTA_ID,NO_REAL_NAME,TO_CC_NONE
autolearn=disabled version=3.1.0
X-Spam-Level: ***
Received: from gg ([213.219.212.166]) by mail.sviblovo.ru
(8.13.4/8.13.4)
with SMTP id jAGFixeV013814 for igor@sviblovo.ru; Wed, 16 Nov
2005 18:45:25
+0300
Date: Wed, 16 Nov 2005 18:44:59 +0300
From: i@ibm.com
Message-Id: <20...@mail.sviblovo.ru>
Status:
Subject: No Subject
Mime-Version: 1.0
Re: spam from unresolved ip
Posted by Richard Pijnenburg <ri...@pxs.nl>.
Igor,
You are looking at the document for version 3.1.x
But if i look at the verion in your example mail i see
" X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on mail.aaa.ru "
Perhaps that's the reason why?
Igor wrote:
> When sendmail receive mail it does revers dns lookup, and write results
> in header "Received:" in brackets ():
> Received: from smtp.osdl.org (smtp.osdl.org [65.172.181.4]) by ...
>
> I look at http://spamassassin.apache.org/tests_3_1_x.html
> (Tests Performed: v3.1.x) and have not found checks on unresolved ip.
>
> How to force spamassassin for scoring unresolved ip ?
>
> I have noticed, that half of spam, which passes spamassassin on my
> server, goes from unresolved ip, like this letter:
>
> Return-Path: <oo...@mail.ru>
> Received: from CEMAL ([85.106.173.242]) by mail.aaa.ru (8.13.4/8.13.4)
> with SMTP id jAFJ0N0o023462; Tue, 15 Nov 2005 22:00:25 +0300
> Message-ID: <0e...@trening>
> From: =?koi8-r?B?9PLl7unu5w==?= <oo...@mail.ru>
> To: "mail" <mi...@wazzup.ru>
> Subject: =?koi8-r?B?0NLP1MnXz9PUz9HOycUgzcHOydDVzNHDydHN?=
> Date: Tue, 15 Nov 2005 11:58:21 -0700
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
> boundary="----=_NextPart_000_0E11_01C5EA2A.64132730"
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2800.1437
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
> X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on mail.aaa.ru
> X-Spam-Status: No, score=4.2 required=5.0
> tests=HTML_FONT_BIG,HTML_MESSAGE,
> RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK autolearn=disabled
> version=3.0.4
> X-Spam-Level: ****
> Status:
>
>
>
>
--
Met vriendelijke groet,
Richard Pijnenburg
PremiumXS B.V.
Bouwerij 4
1185 XX
Amstelveen
T: 020 386 84 05
F: 020 386 84 04
G: 06 47 92 85 28
E: richard@pxs.nl