You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by mouss <us...@free.fr> on 2005/06/02 00:34:47 UTC

Re: forged-HELO and uridnsbl_skip_domain

Ben Wylie wrote:
> In the logs i have been seeing some forged-HELO lines, and sometimes
> couldn't work out why they were triggered. I disabled my trusted paths and
> sent an email from one address with my isp "email@ntlworld.tld" to a work
> email address "email@clara.tld" which was downloaded and forwarded to a
> local email address "email@arkbb.co.spam.uk". It's a bit complicated, but
> basically these are the hops the email took:
> 1) From a local pc (192.168.0.12) to our server (arkbb.co.uk)
> 2) from our mailserver (arkb.co.uk) to our isp (ntl.com)

but it says it's from from arkbb.co.spam.uk, not arkbb.co.uk.

RE: forged-HELO and uridnsbl_skip_domain

Posted by Ben Wylie <sa...@benwylie.co.uk>.
> Ben Wylie wrote:
>> In the logs i have been seeing some forged-HELO lines, and sometimes
>> couldn't work out why they were triggered. I disabled my trusted paths 
>> and sent an email from one address with my isp "email@ntlworld.tld" to a
>> work email address "email@clara.tld" which was downloaded and forwarded
>> to a local email address "email@arkbb.co.spam.uk". It's a bit 
>> complicated, but basically these are the hops the email took:
>> 1) From a local pc (192.168.0.12) to our server (arkbb.co.uk)
>> 2) from our mailserver (arkb.co.uk) to our isp (ntl.com)
>
> but it says it's from from arkbb.co.spam.uk, not arkbb.co.uk.

Sorry for the inconsistencies - I replaced arkbb.co.uk with arkbb.co.spam.uk
to avoid spam, but didn't replace them all. Where it says spam, please
ignore the word spam.

Thanks
Ben