You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Larry Rosenman <le...@lerctr.org> on 2006/12/08 17:29:52 UTC
FP: RCVD_HELO_IP_MISMATCH?
Greetings,
I had the following headers:
----
Return-path: <ma...@python.org>
Envelope-to: ler@lerctr.org
Delivery-date: Thu, 07 Dec 2006 23:26:40 -0600
Received: from smtp-vbr15.xs4all.nl ([194.109.24.35]:2793)
by thebighonker.lerctr.org with esmtp (Exim 4.63 (FreeBSD))
(envelope-from <ma...@python.org>)
id 1GsYFo-000OEi-SQ
for ler@lerctr.org; Thu, 07 Dec 2006 23:26:40 -0600
Received: from bag.python.org (bag.python.org [194.109.207.14])
by smtp-vbr15.xs4all.nl (8.13.8/8.13.8) with ESMTP id kB85QZZo098068
for <le...@lerctr.org>; Fri, 8 Dec 2006 06:26:35 +0100 (CET)
(envelope-from mailman-users-bounces+ler=lerctr.org@python.org)
Received: from bag.python.org (bag [127.0.0.1])
by bag.python.org (Postfix) with ESMTP id 4397A1E4019
for <le...@lerctr.org>; Fri, 8 Dec 2006 06:26:35 +0100 (CET)
X-Original-To: mailman-users@python.org
Delivered-To: mailman-users@bag.python.org
Received: from bag.python.org (bag [127.0.0.1])
by bag.python.org (Postfix) with ESMTP id 646CA1E401A
for <ma...@python.org>; Fri, 8 Dec 2006 06:26:07 +0100
(CET)
X-Spam-Status: OK 0.010
Received: from bag (HELO bag.python.org) (127.0.0.1)
by bag.python.org with SMTP; 08 Dec 2006 06:26:06 +0100
X-Greylist: delayed 665 seconds by postgrey-1.21 at bag.python.org;
Fri, 08 Dec 2006 06:26:06 CET
Received: from zoot.lafn.org (zoot.lafn.ORG [206.117.18.6])
by bag.python.org (Postfix) with ESMTP
for <ma...@python.org>; Fri, 8 Dec 2006 06:26:06 +0100
(CET)
Received: from 207.233.32.18 (zoot.lafn.org [206.117.18.6])
by zoot.lafn.org (8.13.6/8.13.4) with SMTP id kB85EuSN093511
for <ma...@python.org>; Thu, 7 Dec 2006 21:14:58 -0800 (PST)
(envelope-from parallax@lafn.org)
Message-Id: <20...@zoot.lafn.org>
To: mailman-users@python.org
From: parallax@lafn.org
Date: Thu, 7 Dec 2006 21:14:58 GMT
X-Mailer: Endymion MailMan Standard Edition v3.0.26
X-Virus-Scanned: by XS4ALL Virus Scanner
X-Virus-Status: Clean
Subject: [Mailman-Users] Mailman stop delivering ... problem with
Approval.py?
X-BeenThere: mailman-users@python.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Mailman mailing list management users <mailman-users.python.org>
List-Unsubscribe: <http://mail.python.org/mailman/listinfo/mailman-users>,
<mailto:mailman-users-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/mailman-users>
List-Post: <ma...@python.org>
List-Help: <mailto:mailman-users-request@python.org?subject=help>
List-Subscribe: <http://mail.python.org/mailman/listinfo/mailman-users>,
<mailto:mailman-users-request@python.org?subject=subscribe>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: mailman-users-bounces+ler=lerctr.org@python.org
Errors-To: mailman-users-bounces+ler=lerctr.org@python.org
X-Spam-Score: 6.4 (++++++)
X-LERCTR-Spam-Score: 6.4 (++++++)
X-Spam-Report: (6.4 points, 5.0 required)
BAYES_00=-2.599 DATE_IN_PAST_06_12=0.827 DK_POLICY_SIGNSOME=0.001
FORGED_RCVD_HELO=0.135 HOST_EQ_NL=1.545 NO_REAL_NAME=0.961
RCVD_HELO_IP_MISMATCH=4 RCVD_NUMERIC_HELO=1.5 TW_CF=0.077
X-LERCTR-Spam-Report: (6.4 points, 5.0 required)
BAYES_00=-2.599 DATE_IN_PAST_06_12=0.827 DK_POLICY_SIGNSOME=0.001
FORGED_RCVD_HELO=0.135 HOST_EQ_NL=1.545 NO_REAL_NAME=0.961
RCVD_HELO_IP_MISMATCH=4 RCVD_NUMERIC_HELO=1.5 TW_CF=0.077
X-Spam-Flag: YES
X-LERCTR-Spam-Flag: YES
DomainKey-Status: no signature
----
And the rule that marked this as SPAM is the RCVD_HELO_IP_MISMATCH.
Why is this rule so high?
What exactly is it checking?
This is from a legit mailing list.
Thanks,
Larry Rosenman
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683 E-Mail: ler@lerctr.org
US Mail: 430 Valona Loop, Round Rock, TX 78681-3893