[BlueOnyx:04044] Re: AVSPAM PBL List

[Steffan]

Hello Michael,

Here the score of one email 
3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL

                            [86.87.82.xxx listed in zen.spamhaus.org]

0.0 HTML_MESSAGE           BODY: HTML included in message

1.3 RDNS_NONE              Delivered to internal network by a host with no
rDNS

0.0 HELO_NO_DOMAIN         Relay reports its domain incorrectly

1.4 DOS_OUTLOOK_TO_MX      Delivered direct to MX with Outlook headers

1.0 SAGREY                 Adds 1.0 to spam from first-time senders

As i can see all score has top do with spamhaus
The person has a big dsl provider here in holland
http://www.spamhaus.org/pbl/query/PBL178674

so i dont understand the other scores
i see this in all the mails that have a PBL score

-----Oorspronkelijk bericht-----
Van: blueonyx-bounces at blueonyx.it [mailto:blueonyx-bounces at blueonyx.it]
Namens Michael Stauber
Verzonden: woensdag 17 maart 2010 19:55
Aan: BlueOnyx General Mailing List
Onderwerp: [BlueOnyx:04040] Re: AVSPAM PBL List

Hi Steffan,

> After the big avspam update im getting complaint from clients that emails
> that normal are not spam marked now suddenly being marked as spam Almost
> everythime the most score comes from spamhaus PBL

Spamhaus is currently tightening the thumb screws on a lot of ISPs to force 
them to get their acts together. About a month ago they added the entire 
network address range of O2 Germany to their blacklist and about ten days
ago 
the entire network of Deutsche Telekom was added as well. Just to name a
few, 
big ones, but others are hit as well. Typically if a message gets a 
SpamAssassin score from a single blacklist, then that's not enough to mark
it 
as SPAM, but if there are some other indicators in it, then it may increase 
the score further to a point where it gets marked as SPAM.

If you want to disable RBL checks for now, do this:

Edit /etc/mail/spamassassin/local.cf and find the line ...

skip_rbl_checks 0

... and change it to this:

skip_rbl_checks 1

Then save the changes and restart SPAMd:

/etc/init.d/spamassassin restart

-- 
With best regards

Michael Stauber

_______________________________________________
Blueonyx mailing list
Blueonyx at blueonyx.it
http://www.blueonyx.it/mailman/listinfo/blueonyx