Re: failed spf_helo_softfail in SA

2008-02-27 Thread Matus UHLAR - fantomas
On 26.02.08 19:30, aritza sobrinos wrote:
 Im getting false positives like this:
 
 X-Spam-Status: Yes, score=3.776 tag=x tag2=3.5 kill=3.5 tests=[BAYES_50=
 0.001,
  HTML_10_20=0.246, HTML_MESSAGE=0.001, HTML_SHORT_LENGTH=0.389,
  SPF_HELO_SOFTFAIL=3.14, SPF_PASS=-0.001]
 
 
 SPF_HELO_SOFTFAIL and SPF_PASS in the same mail, is this ok ? is happens
 only for one domain other spf works correctly only with pass

yes. SPF_HELO_* is related to HELO string, while SPF_PASS is related to from
address, both in relation to sender's IP/hostname.
-- 
Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I drive way too fast to worry about cholesterol. 


failed spf_helo_softfail in SA

2008-02-26 Thread aritza sobrinos
Hi,

Im getting false positives like this:

X-Spam-Status: Yes, score=3.776 tag=x tag2=3.5 kill=3.5 tests=[BAYES_50=
0.001,
 HTML_10_20=0.246, HTML_MESSAGE=0.001, HTML_SHORT_LENGTH=0.389,
 SPF_HELO_SOFTFAIL=3.14, SPF_PASS=-0.001]


SPF_HELO_SOFTFAIL and SPF_PASS in the same mail, is this ok ? is happens
only for one domain other spf works correctly only with pass


any ideas ?

im using:

SpamAssassin version 3.0.3
  running on Perl version 5.8.4

amavisd-new-2.4.2


thanks in adavance !


Re: failed spf_helo_softfail in SA

2008-02-26 Thread John Hardin

On Tue, 26 Feb 2008, aritza sobrinos wrote:


Im getting false positives like this:

X-Spam-Status: Yes, score=3.776 tag=x tag2=3.5 kill=3.5 tests=[BAYES_50=
0.001,
HTML_10_20=0.246, HTML_MESSAGE=0.001, HTML_SHORT_LENGTH=0.389,
SPF_HELO_SOFTFAIL=3.14, SPF_PASS=-0.001]

SPF_HELO_SOFTFAIL and SPF_PASS in the same mail, is this ok ? is happens
only for one domain other spf works correctly only with pass

any ideas ?


Increase your threshold to 5.0 as all of the base rules have their scores 
assigned with that threshold in mind. If you lower it without adjusting 
the default scores you *will* get more FPs than you should.


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 [EMAIL PROTECTED]FALaholic #11174 pgpk -a [EMAIL PROTECTED]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  Look at the people at the top of both efforts. Linus Torvalds is a
  university graduate with a CS degree. Bill Gates is a university
  dropout who bragged about dumpster-diving and using other peoples'
  garbage code as the basis for his code. Maybe that has something to
  do with the difference in quality/security between Linux and
  Windows.   -- anytwofiveelevenis on Y! SCOX
---
 16 days until Albert Einstein's 129th Birthday