-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Bruno Broedner writes:
> Hi!
> 
> an incomming e-mail was tagged by SpamAssasin because of an 
> RBL check. But I think this is not correct. SA did the RBL check
> on the IP from the client host 80.142.228.8 (which is indeed a
> dial-up host and therefore listed in the RBL) but I think SA must 
> do the check on the mailserver fmrl11.sul.t-online.com which is the
> first one appearing after "by ..." in the received-trail.
> 
> I am a little bit confused. Is this a bug ... or a feature ;-) ?

Why is this the "wrong" host?  as far as I can see, it really did
come via that host.

Basically, it's a feature ;)

- --j.

> Here is the original complete received trail
> (mail-addresses made anonym, IPs are original):
> 
>   Received: from mailout09.sul.t-online.com (mailout09.sul.t-online.com
>   [194.25.134.84]) by p12345678.pureserver.info (Postfix) with ESMTP
>   id AC504C02B8B for <[EMAIL PROTECTED]>; Tue, 25 May 2004 09:12:52 
>   +0200 (CEST)
>   Received: from fwd11.aul.t-online.de by mailout09.sul.t-online.com with smtp
>   id 1BSW7G-0003ag-03; Tue, 25 May 2004 09:12:50 +0200
>   Received: from [192.168.1.21] ([EMAIL PROTECTED]) by 
>   fmrl11.sul.t-online.com with esmtp id 1BSW76-2Cy0MC0; Tue, 25 May 2004
>   09:12:40 +0200
> 
> Here are the details given by SA:
> 
>   X_ACCEPT_LANG      (-0.1 points) Has a X-Accept-Language  header
>   RCVD_IN_DSBL       (2.6 points)  RBL: Received via a relay in 
>   list.dsbl.org [RBL check: found 8.228.142.80.list.dsbl.org.]
>   RCVD_IN_NJABL      (0.9 points)  RBL: Received via a relay in 
>   dnsbl.njabl.org [RBL check: found 8.228.142.80.dnsbl.njabl.org.,] 
>   [type: 127.0.0.3]
>   USER_AGENT         (0.0 points)  Has a User-Agent header
> 
> My SA version is 2.55 (1.174.2.19-2003-05-19-exp) running on linux
> 
> Thanks for any help
> Bruno
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Exmh CVS

iD8DBQFAs4IpQTcbUG5Y7woRAu4FAKDjg73jYv1Te/mE2bnPcg0rPCQJvACfd14y
XfyhmW5qZs6UjcLxWqUb5a8=
=jmll
-----END PGP SIGNATURE-----

Reply via email to