spamhaus-XBL

[Jason]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Hi,

    But 219.132.219.6 is the client (outlook express), not the email server.
The client is sending email through the server by smtp auth.

Jason

----- Original Message -----
From: "Martin Hepworth" <martinh at SOLID-STATE-LOGIC.COM>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Tuesday, March 15, 2005 5:03 PM
Subject: Re: spamhaus-XBL


> Jason
>
>
> doing a looking at spamhaus
> (http://www.spamhaus.org/query/bl?ip=219.132.219.6) the ip-address IS in
> spamhaus's DB.
>
> I find doing the RBL checks in MailScanner can produce problems with
> false positives and I only do the checks in SA, as  you've also got set.
>
> if you remove the RBL check from MailScanner.conf and let SA only do
> this you won't get the email marked as spam.
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>
> Jason wrote:
>> Hi,
>>
>>    I'm using mailscanner-4.38.10-1, with sendmail and spamassassin. When
>> a
>> client send an email (not spam) with outlook express through our server,
>> the
>> receipient received the message regarded as spam. And the reason is
>> "spamhaus-XBL".
>>
>>    The IP of mail server is certainly not in the "spamhaus-XBL" list, but
>> the client may be, since it's a dynamic IP. And we certainly have no
>> control
>> of what ip was assigned to us by ISP. So, from my point of view, the ip
>> of
>> the client should not be considered as spam host of not, right? But this
>> does not seem to be case.
>>
>>
>> The following is the header of the received emal :
>>
>> Return-Path: <sender at newhonest.com>
>> Received: from edp008 ([219.132.219.6])
>> (authenticated bits=0)
>> by mail.newhonest.com (8.12.11/8.12.11) with ESMTP id j2F3flTp027281
>> for <receipient at newhonest.com>; Tue, 15 Mar 2005 11:41:50 +0800
>> Message-ID: <008601c52910$ee521720$4001a8c0 at edp008>
>> From: "sender" sender at newhonest.com
>> To: "receipient" receipient at newhonest.com
>> Subject: {Spam?} test2 ,this is a external email
>> Date: Tue, 15 Mar 2005 11:41:49 +0800
>> MIME-Version: 1.0
>> Content-type: multipart/report; boundary="======19077==36171======"
>> X-Priority: 3
>> X-MSMail-Priority: Normal
>> X-Mailer: Microsoft Outlook Express 6.00.2900.2180
>> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>> X-MailScanner-Information: Please contact the ISP for more information
>> X-MailScanner: Found to be clean
>> X-MailScanner-SpamCheck: spam, spamhaus-XBL, SpamAssassin (score=1.529,
>> required 5, AWL -2.93, BAYES_20 -1.95, HTML_90_100 0.02,
>> HTML_MESSAGE 0.00, MIME_BASE64_TEXT 0.30, MIME_HTML_MOSTLY 1.02,
>> RCVD_IN_SORBS_DUL 1.99, RCVD_IN_XBL 3.08)
>> X-MailScanner-SpamScore: 1
>> X-MailScanner-From: sender at newhonest.com
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>
> **********************************************************************
>
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager.
>
> This footnote confirms that this email message has been swept
> for the presence of computer viruses and is believed to be clean.
>
> **********************************************************************
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!