I've been getting some mails trapped by RCVD_IN_DYNABLOCK which either
shouldn't be or I misunderstand the test.
Headers:
----------------------------------------------------------------------
Received: from n068.sc1.cp.net (h14.rdg.cp.net [209.228.29.64])
by tclgs001.rg2.tiger-computing.com (Postfix) with ESMTP id D9CCFEEA24
for <[EMAIL PROTECTED]>; Fri, 7 May 2004 18:16:40 +0100 (BST)
Received: from xxxxx (62.252.68.19) by n068.sc1.cp.net (7.0.027.3-1)
id 4084F35000136552 for [EMAIL PROTECTED]; Fri, 7 May 2004
17:16:38 +0000 From: "xxxxx" <[EMAIL PROTECTED]>
To: "Keith Edmunds" <[EMAIL PROTECTED]>
Subject: [SPAM?] Moving
Date: Fri, 7 May 2004 18:13:42 +0100
Message-ID: <xxxxx>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0000_01C4345F.07B3D520"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Virus-Scanned: by amavisd-new-20030616-p7 (Debian) at
tclgs001.rg2.tiger-computing.com X-Spam-Status: Yes, hits=3.3
tagged_above=-100.0 required=3.0 tests=HTML_60_70,
HTML_FONTCOLOR_UNKNOWN,
HTML_MESSAGE, RATWR19_MESSID, RCVD_IN_DYNABLOCK, RCVD_IN_SORBS
X-Spam-Level: ***
X-Spam-Flag: YES
----------------------------------------------------------------------
The first address (62.252.68.19) is the user's dialup address, and is
seen as a dynamic address:
# dnsqr a 19.68.252.62.dnsbl.sorbs.net
1 19.68.252.62.dnsbl.sorbs.net:
62 bytes, 1+1+0+0 records, response, noerror
query: 1 19.68.252.62.dnsbl.sorbs.net
answer: 19.68.252.62.dnsbl.sorbs.net 156301 A 127.0.0.10
#
...which is expected (by me, at least) and I understand the test needs
to find at least one non-dynamic address to pass. The second one appears
to be non-dynamic (again, as I would expect):
# dnsqr a 64.29.228.209.dnsbl.sorbs.net
1 64.29.228.209.dnsbl.sorbs.net:
47 bytes, 1+0+0+0 records, response, authoritative, nxdomain
query: 1 64.29.228.209.dnsbl.sorbs.net
#
So why is the mail being marked RCVD_IN_DYNABLOCK? Have I misunderstood
how this is supposed to work?
Thanks for any help -
Keith
