mail from dialups via ISP MTA

2008-03-30 Thread Arvid Ephraim Picciani
Hi so again some undertsanding issue, i just got a mail from some gmail user. It got 5.1 points: 1.6 TVD_RCVD_IPTVD_RCVD_IP 1.7 RCVD_IN_NJABL_PROXYRBL: NJABL: sender is an open proxy [201.20.219.97 listed in combined.njabl.org] 0.0 RCVD_IN_SORBS_HTTP

Re: mail from dialups via ISP MTA

2008-03-30 Thread mouss
Arvid Ephraim Picciani wrote: Hi so again some undertsanding issue, i just got a mail from some gmail user. It got 5.1 points: 1.6 TVD_RCVD_IPTVD_RCVD_IP 1.7 RCVD_IN_NJABL_PROXYRBL: NJABL: sender is an open proxy [201.20.219.97 listed in combine

Re: mail from dialups via ISP MTA

2008-03-30 Thread Matt Kettler
Arvid Ephraim Picciani wrote: Hi so again some undertsanding issue, i just got a mail from some gmail user. It got 5.1 points: 1.6 TVD_RCVD_IPTVD_RCVD_IP 1.7 RCVD_IN_NJABL_PROXYRBL: NJABL: sender is an open proxy [201.20.219.97 listed in combined.nj

Re: mail from dialups via ISP MTA

2008-03-30 Thread Henrik K
On Sun, Mar 30, 2008 at 07:23:17PM -0400, Matt Kettler wrote: > Arvid Ephraim Picciani wrote: >> Hi so again some undertsanding issue, i just got a mail from some gmail >> user. It got 5.1 points: >> >> 1.6 TVD_RCVD_IPTVD_RCVD_IP >> 1.7 RCVD_IN_NJABL_PROXYRBL: NJABL: sender is an

Re: mail from dialups via ISP MTA

2008-03-31 Thread Matt Kettler
Henrik K wrote: On Sun, Mar 30, 2008 at 07:23:17PM -0400, Matt Kettler wrote: There is nothing wrong. The overzealous RDNS_DYNAMIC rule hits the first one like it should. Well, actually, it's matching the archlinux list server. It is not matching the gmail users home IP. This test match

Re: mail from dialups via ISP MTA

2008-03-31 Thread Arvid Ephraim Picciani
thanks got it. indeed the archlinux server looks like a dynip, so that match is perfectly fine. for the original sender i wonder why NJABL is listing dynips. somone run an open proxy on a dynamic host and now everyone getting that ip has to suffer? -- best regards/Mit freundlichen Grüßen Arvid E

Re: mail from dialups via ISP MTA

2008-03-31 Thread Matus UHLAR - fantomas
On 31.03.08 18:33, Arvid Ephraim Picciani wrote: > thanks got it. indeed the archlinux server looks like a dynip, so that match > is perfectly fine. > for the original sender i wonder why NJABL is listing dynips. somone run > an open proxy on a dynamic host and now everyone getting that ip has to

Re: mail from dialups via ISP MTA

2008-03-31 Thread Arvid Ephraim Picciani
On Monday 31 March 2008 22:53:45 Matus UHLAR - fantomas wrote: > Such IP's are thus not designed to send mail directly to recipients - users > have to send mail through mailserver with static IP that can autenticate > them. True. The problem is, thats exactly what happened but SA matched the sende

Re: mail from dialups via ISP MTA

2008-04-01 Thread Matus UHLAR - fantomas
> On Monday 31 March 2008 22:53:45 Matus UHLAR - fantomas wrote: > > Such IP's are thus not designed to send mail directly to recipients - users > > have to send mail through mailserver with static IP that can autenticate > > them. On 31.03.08 22:06, Arvid Ephraim Picciani wrote: > True. The prob

Re: mail from dialups via ISP MTA

2008-04-01 Thread Arvid Ephraim Picciani
On Tuesday 01 April 2008 16:06:25 Matus UHLAR - fantomas wrote: > > On Monday 31 March 2008 22:53:45 Matus UHLAR - fantomas wrote: > > > Such IP's are thus not designed to send mail directly to recipients - > > > users have to send mail through mailserver with static IP that can > > > autenticate t

Re: mail from dialups via ISP MTA

2008-04-01 Thread Arvid Ephraim Picciani
and another mail false positive: 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.1 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server [91.151.146.2

Re: mail from dialups via ISP MTA

2008-04-01 Thread mouss
Arvid Ephraim Picciani wrote: and another mail false positive: 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.1 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server

Re: mail from dialups via ISP MTA

2008-04-02 Thread Matus UHLAR - fantomas
> On Tuesday 01 April 2008 16:06:25 Matus UHLAR - fantomas wrote: > > > On Monday 31 March 2008 22:53:45 Matus UHLAR - fantomas wrote: > > > > Such IP's are thus not designed to send mail directly to recipients - > > > > users have to send mail through mailserver with static IP that can > > > > aut

Re: mail from dialups via ISP MTA

2008-04-02 Thread Yet Another Ninja
On 4/1/2008 5:43 PM, Arvid Ephraim Picciani wrote: and another mail false positive: 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.1 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable

Re: mail from dialups via ISP MTA

2008-04-03 Thread Arvid Ephraim Picciani
> On 01.04.08 17:20, Arvid Ephraim Picciani wrote: > > actually i mean SORBS and NJABL. they matched the sender. > > if we are still talking about mail from 66-211-213-17.velocity.net > [66.211.213.17], they were not matched by any dynamic lists. > sender! not the relay. the realy matching DRNS_DY