-> -----Original Message-----
-> From: Peter Bowyer [mailto:[EMAIL PROTECTED]
-> Sent: Friday, August 06, 2004 1:14 PM
-> To: [EMAIL PROTECTED]
-> Subject: Re: Why is ATT.net comimg up as spam due to numeric
-> helo? And whyis there no report attachment?
->
->
-> lists <[EMAIL PROTECTED]> wrote:
-> >
-> > OK Not wanting to start a RFC war!!!!
-> >
-> >
-> > Why is SA nailing the email on the numeric IP is this a ATT.net
-> > problem or is this a problem is with in my domain of control?
->
-> Your call. The appearance of a bare IP address in a HELO
-> back up the chain is very spammy; it's my experience that a
-> properly-formed IP literal (such as you're seeing) is not.
-> You're seeing multiple IP literals in successive hops, which
-> is unusual. I don't use SA 3.0 so I don't know the source
-> and nature of the RCVD_BY_IP, RCVD_DOUBLE_IP_LOOSE, and
-> RCVD_NUMERIC_HELO you're using, but you could probably
-> reduce their scores without much bad impact.
->
-> Peter
->
Ok this is a SA-3.0.0pre2 canned rules so I guess it pre4 here we come
unless there is a problem in pre4 that has not made the list yet.
