Problem with SORBS-SPAM ?

[Matt Kettler]

Pascal Maes wrote:
> Hello,
> 
> 
> Today, from 14h11 until I suppress SORPBS-SPAM from the RBL list, we
> have seen the following lines in our maillog file:
> 
> Nov  6 14:11:27 smtp-3 MailScanner[23222]: RBL checks: AFAA613E46.CAEC5
> found in SORBS-SPAM
> Nov  6 14:11:31 smtp-3 MailScanner[22778]: RBL checks: 53CF913F42.84D1B
> found in SORBS-SPAM
> Nov  6 14:11:34 smtp-3 MailScanner[25704]: RBL checks: 78BE513F42.B7EB5
> found in SORBS-SPAM
> Nov  6 14:11:37 smtp-3 MailScanner[25704]: RBL checks: 0313713E60.D1B8E
> found in SORBS-SPAM
> 
> And some details for the last one :
> 
> Nov  6 14:11:37 smtp-3 postfix/smtpd[28567]: 0313713E60:
> client=linux1.sia.ucl.ac.be[130.104.1.142]
> Nov  6 14:11:37 smtp-3 MailScanner[25704]: RBL checks: 0313713E60.D1B8E
> found in SORBS-SPAM
> Nov  6 14:11:39 smtp-3 MailScanner[25704]: Message 0313713E60.D1B8E from
> 127.0.0.1 (from_address) to to_domain_address is
> 
>     - we are using Postfix 2.3.3
>     - 130.104.1.142 is not on the Black list
>     - the RBL checks come after an HOLD with postfix.
>       So, it seems to come from 127.0.0.1
>     - the message from MailScannet is truncated. Why ?
> 
> 
> Any idea of the problem ?

Looks like 127.0.0.1 was listed in sorbs-spam recently, but has been pulled.