On 19 Sep 2009 at 12:22, Scott Haneda wrote: > On Sep 19, 2009, at 9:24 AM, Fritz Borgstedt wrote: > > > ASSP development mailing list <[email protected]> > > schreibt: > >> I am running the dnsstuff anti spam test > > > > > > I did run it myself. > > > > First let me state, that it is ok with us, that such a test is not > > blocked as Spam firsttime. > > ASSP does not claim to catch all spams 100 % without any help. > > Actually this is NOT Spam - so we are quite proud, that ASSP sees it > > as HAM. > > After I reported the mail to the spam-report address, it was caught. > > > > The "invalid" Received header illustrates quite fine, why we do not > do > > this checking. > > > > Received: from gold.dnsstuff.com (localhost [127.0.0.1]) > > by gold.dnsstuff.com (Postfix) with SMTP id A9AC65C033 > > for <[email protected]>; Sat, 19 Sep 2009 16:12:57 +0000 (UTC) > > I do not understand DNSstuff's statement that this is a forged header, > let alone how any mail server would be able to determine that it is. > It is not even a very good test, as it only tries once, which means, > it will get stuck in a greylist as well. If I send back a "try again > later" message, is should try again later, which it is not. > > What about that header in any way, human or automated, could be > detected as forged? They have a hostname, and that even resolves to > an IP that has a PTR that is the same hostname. Seems a quite > legitimate sender to me.
This came up previously on this list (26 Aug). I think the 'forged' header is this one that Fritz quoted: >Received: from forgedsnd.example.com ([127.0.0.2]) by >forgedrcv.example.com > with fakesvc; Sun, 6 Sep 2009 17:56:44 which is probably meant to give a positive result from some DNSBL lists if you check IP addresses in the received headers (127.0.0.2 is used by some as a test IP that always returns a 'hit'). The dnsstuff test is not very good. paul ------------------------------------------------------------------------------ Come build with us! The BlackBerry® Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9-12, 2009. Register now! http://p.sf.net/sfu/devconf _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
