You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Tony Finch <do...@dotat.at> on 2004/07/08 15:33:58 UTC
RCVD_IN_DYNABLOCK
I'm using SA 2.63 invoked via MailScanner. I have the following in my
local.cf (we have quite a few networks):
clear_trusted_networks
trusted_networks 131.111.
trusted_networks 129.169.
trusted_networks 128.232.
trusted_networks 192.18.195.
trusted_networks 192.84.5.
trusted_networks 192.153.213.
trusted_networks 193.60.80/20
trusted_networks 127.0.0.0/8
trusted_networks 172.16.0.0/12
trusted_networks 192.168.0.0/16
But I get messages like the following:
Received: from mta09-svc.ntlworld.com ([62.253.162.49]:23877)
by ppsw-5.csi.cam.ac.uk (mx.cam.ac.uk [131.111.8.145]:25)
with esmtp (Exim 4.34)
id 1BiFNc-0004ug-V2; Wed, 07 Jul 2004 17:34:45 +0100
Received: from martinprince ([81.96.65.160]) by mta09-svc.ntlworld.com
(InterMail vM.4.01.03.37 201-229-121-137-20020806) with ESMTP
id <20...@martinprince>;
Wed, 7 Jul 2004 16:36:59 +0100
X-Cam-SpamDetails: scanned, SpamAssassin (score=4.121, MAILTO_CRSID -0.38,
MAILTO_TO_SPAM_ADDR 1.05, MIME_MISSING_BOUNDARY 0.80,
RCVD_IN_DYNABLOCK 2.55, RCVD_IN_SORBS 0.10)
None of the problems described in the wiki apply.
http://wiki.apache.org/spamassassin/DynablockIssues
Have I configured it wrong?
Tony.
--
f.a.n.finch <do...@dotat.at> http://dotat.at/
LOUGH FOYLE TO CARLINGFORD LOUGH: NORTHEAST 3 OR 4 OCCASIONALLY 5, BACKING
NORTHWEST AND GRADUALLY DECREASING 3 OR 4. RISK OF SHOWERS. MAINLY GOOD.
SLIGHT TO MODERATE DECAYING SLIGHT.
Re: RCVD_IN_DYNABLOCK
Posted by Robert Brooks <ro...@hyperlink-interactive.co.uk>.
Tony Finch wrote:
> On Thu, 8 Jul 2004, Matt Kettler wrote:
>
>>Otherwise, try running the message through spamassassin -D and see which hosts
>>it declares trusted.
>
>
> Oh dear. It doesn't like my custom received headers :-(
>
> Tony.
same here ;-(
Jul 15 11:37:41 ops amavis[19771]: (19771-05) spam_scan: hits=-0.378
tests=AWL,BAYES_00,FROM_ENDS_IN_NUMS,HTML_50_60,HTML_MESSAGE,HTML_TITLE_EMPTY,LOCAL_AUTH_RCVD,RCVD_IN_DYNABLOCK,RCVD_IN_SORBS
so the message hits LOCAL_AUTH_RCVD and RCVD_IN_DYNABLOCK wtf
--
Robert Brooks, Network Manager, Cable & Wireless UK
<ro...@hyperlink-interactive.co.uk> http://hyperlink-interactive.co.uk/
Tel: +44 (0)20 7339 8600 Fax: +44 (0)20 7339 8601
- Help Microsoft stamp out piracy. Give Linux to a friend today! -
Re: RCVD_IN_DYNABLOCK
Posted by Tony Finch <do...@dotat.at>.
On Thu, 8 Jul 2004, Matt Kettler wrote:
>
> Otherwise, try running the message through spamassassin -D and see which hosts
> it declares trusted.
Oh dear. It doesn't like my custom received headers :-(
Tony.
--
f.a.n.finch <do...@dotat.at> http://dotat.at/
THE WASH TO NORTH FORELAND: NORTHWEST 4 OR 5, BUT 6 OFF NORFOLK WATERS AT
FIRST, BACKING WEST OR SOUTHWEST, LOCALLY 3 IN NORTH LATER. OCCASIONAL RAIN OR
SHOWERS. MODERATE OR GOOD. SLIGHT, BUT MODERATE OUTER WATERS, PERHAPS ROUGH AT
FIRST.
Re: RCVD_IN_DYNABLOCK
Posted by Matt Kettler <mk...@evi-inc.com>.
Despite the documentation, I recommend NOT using the trailing dot notation.
In my experience it doesn't seem to work correctly and causes problems.
Try revising all the entries like this one:
trusted_networks 131.111.
to CIDR notation
trusted_networks 131.111.0.0/16
Otherwise, try running the message through spamassassin -D and see which
hosts it declares trusted.
At 09:33 AM 7/8/2004, Tony Finch wrote:
>I'm using SA 2.63 invoked via MailScanner. I have the following in my
>local.cf (we have quite a few networks):
>
>clear_trusted_networks
>trusted_networks 131.111.
>trusted_networks 129.169.
>trusted_networks 128.232.
>trusted_networks 192.18.195.
>trusted_networks 192.84.5.
>trusted_networks 192.153.213.
>trusted_networks 193.60.80/20
>trusted_networks 127.0.0.0/8
>trusted_networks 172.16.0.0/12
>trusted_networks 192.168.0.0/16
>
>But I get messages like the following:
>
>Received: from mta09-svc.ntlworld.com ([62.253.162.49]:23877)
> by ppsw-5.csi.cam.ac.uk (mx.cam.ac.uk [131.111.8.145]:25)
> with esmtp (Exim 4.34)
> id 1BiFNc-0004ug-V2; Wed, 07 Jul 2004 17:34:45 +0100
>Received: from martinprince ([81.96.65.160]) by mta09-svc.ntlworld.com
> (InterMail vM.4.01.03.37 201-229-121-137-20020806) with ESMTP
> id <20...@martinprince>;
> Wed, 7 Jul 2004 16:36:59 +0100
>X-Cam-SpamDetails: scanned, SpamAssassin (score=4.121, MAILTO_CRSID -0.38,
> MAILTO_TO_SPAM_ADDR 1.05, MIME_MISSING_BOUNDARY 0.80,
> RCVD_IN_DYNABLOCK 2.55, RCVD_IN_SORBS 0.10)
>
>None of the problems described in the wiki apply.
>http://wiki.apache.org/spamassassin/DynablockIssues
>
>Have I configured it wrong?
>
>Tony.
>--
>f.a.n.finch <do...@dotat.at> http://dotat.at/
>LOUGH FOYLE TO CARLINGFORD LOUGH: NORTHEAST 3 OR 4 OCCASIONALLY 5, BACKING
>NORTHWEST AND GRADUALLY DECREASING 3 OR 4. RISK OF SHOWERS. MAINLY GOOD.
>SLIGHT TO MODERATE DECAYING SLIGHT.