https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8046

--- Comment #8 from RvdH <[email protected]> ---
Here is a typical report for 3.4.6, where ASN lookup failed using routeviews

X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-18) on mail.myserver.nl
X-Spam-Flag: YES
X-Spam-Level: ******************************
X-Spam-Status: Yes, score=30.3 required=4.0 tests=BAYES_99,BAYES_999,
 CUSTOM_MANY_BL,DKIM_NONE,HTML_MESSAGE,KAM_DMARC_STATUS,
 RCVD_IN_AMI_BLACK,RCVD_IN_AMI_DYN,RCVD_IN_GBUDB,RCVD_IN_HOSTKARMA_BL,
 RCVD_IN_SPAMRATS_NOPTR,RCVD_IN_UCEPROTECT1,RCVD_IN_UCEPROTECT2,
 RDNS_NONE,RELAYCOUNTRY_BAD,RELAYCOUNTRY_CN,SPF_HELO_NONE,SPF_SOFTFAIL
 autolearn=no autolearn_force=no version=3.4.6
X-Spam-ASN: _ASN_ _ASNCIDR_
X-Spam-Relay-Country: CN CN
X-Spam-Report: 
 *  3.0 RCVD_IN_HOSTKARMA_BL RBL: Sender listed in HOSTKARMA-BLACK
 *      [106.75.245.128 listed in hostkarma.junkemailfilter.com]
 *  3.0 RCVD_IN_AMI_BLACK RBL: Received via a relay in Abusix Mail
 *      Intelligence Black
 *      [106.75.245.128 listed in combined.mail.abusix.zone]
 *  3.0 RCVD_IN_AMI_DYN RBL: Received via a relay in Abusix Mail
 *      Intelligence Dynamic
 *  3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
 *      [score: 1.0000]
 *  0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
 *      [score: 1.0000]
 *  1.5 RELAYCOUNTRY_BAD First untrusted relay is China, Brazil, India,
 *      Vietnam or Russia
 *  3.0 RELAYCOUNTRY_CN Relayed through China at some point
 *  0.5 RCVD_IN_UCEPROTECT2 RBL: Network listed in
 *      dnsbl-2.uceprotect.net
 *      [NET 106.75.245.0/24 is UCEPROTECT-Level2 listed]
 *      [because 5 impacts are seen from CHINANET-SH-AP]
 *      [China Telecom Group, CN/AS4812 there. See:]
 *      [<http://www.uceprotect.net/rblcheck.php?ipr=106.75.245.128>]
 *  1.5 RCVD_IN_SPAMRATS_NOPTR RBL: RATS-NoPtr: sender has no reverse
 *      DNS
 *      [106.75.245.128 listed in all.spamrats.com]
 *  1.0 RCVD_IN_UCEPROTECT1 RBL: Listed in dnsbl-1.uceprotect.net
 *      [IP 106.75.245.128 is UCEPROTECT-Level 1 listed.]
 *      [See <http://www.uceprotect.net/rblcheck.php?ipr=106.75.245.128>]
 *  2.5 RCVD_IN_GBUDB RBL: Listed in truncate.gbudb.net
 *      [106.75.245.128 listed in truncate.gbudb.net]
 *  0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
 *  0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
 *  0.0 HTML_MESSAGE BODY: HTML included in message
 *  0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
 *  6.0 CUSTOM_MANY_BL Message received in more than 3 RBLs
 *  0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
 *      Alignment
 *  0.1 DKIM_NONE message not signed with DKIM
Received: from server1.rewbd.online (Unknown [106.75.245.128]) by
mail.myserver.nl
 with ESMTP ; Mon, 19 Sep 2022 12:04:11 +0200



I think this might also happen for 4.x, where GeoLite2-ASN.mmdb may not contain
all entries the paid version (GeoIP2-ISP.mmdb) might contain

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to