Il 2017-11-07 10:10 Matus UHLAR - fantomas ha scritto:
[..]
Thus, messages received from the world will be scored locally, messages
received from backup MX will be scored on backup MX.
Then, your sieve filter will work as expected.
[..]
Well, but could I make a Sieve filter that put to (primary server) spam
folder all emails marked as spam coming from Backup MX?
This is an example source of email-spam coming from backup MX, what
element could I use as a unique identifier?:
From - Sat Nov 4 10:04:47 2017
X-Account-Key: account3
X-UIDL: 0000042f5829c5fa
X-Mozilla-Status: 0000
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <be...@legalmail.it>
Delivered-To: <i...@pergraziaricevuta.it>
Received: from server.sio4.org
by server.sio4.org (Dovecot) with LMTP id eJqLBsHz9ll2fQAAS3B7vQ
for <i...@pergraziaricevuta.it>; Mon, 30 Oct 2017 10:41:58 +0100
Received: from server2.sio4.org (server2.sio4.org [5.189.166.16])
by server.sio4.org (Postfix) with ESMTP id AB8B640776
for <pergraziaricev...@pergraziaricevuta.it>; Mon, 30 Oct 2017 10:41:57
+0100 (CET)
Received: from 89-97-237-86.ip19.fastwebnet.it
(89-97-237-86.ip19.fastwebnet.it [89.97.237.86])
by server2.sio4.org (Postfix) with ESMTP id 109C1140F04
for <pergraziaricev...@pergraziaricevuta.it>; Mon, 30 Oct 2017 10:41:07
+0100 (CET)
Received: from WASYLIW.legalmail.it (WASYLIW.legalmail.it
[96.108.104.49]) by 89-97-237-86.ip19.fastwebnet.it with SMTP id
8EF43D55CA9C; Mon, 30 Oct 2017 10:41:19 +0100
Subject: avviso di pagamento
From: omarinotor...@fastwebnet.it
To: "pergraziaricev...@pergraziaricevuta.it"
<pergraziaricev...@pergraziaricevuta.it>
MIME-Version: 1.0
Message-ID: <1da3086bb339d52df.c9e57...@wasyliw.legalmail.it>
X-Priority: 3
Date: Mon, 30 Oct 2017 10:41:19 +0100
Content-Type: multipart/mixed; boundary="----------=_59F6F3B9.8FE9C756"
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,
HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,SPF_FAIL,URIBL_BLOCKED
autolearn=no autolearn_force=no version=3.4.0
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
server.sio4.org
This is a multi-part message in MIME format.
------------=_59F6F3B9.8FE9C756
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "server2.sio4.org",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ti inoltro l'avviso arrivato alla nostra pec controlla
se
il pagamento èstato effettuato entro il 27/10/2017grazie. ti
inoltro
l'avviso arrivato alla nostra pec controlla se il pagamento รจ stato
effettuato
entro il 27/10/2017 grazie. [...]
Content analysis details: (9.8 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.0 TVD_RCVD_IP Message was received from an IP address
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
DNSWL
was blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[89.97.237.86 listed in list.dnswl.org]
0.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[89.97.237.86 listed in zen.spamhaus.org]
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see
http://www.openspf.org/Why?s=mfrom;id=bel12%40legalmail.it;ip=89.97.237.86;r=server2.sio4.org]
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[89.97.237.86 listed in
bb.barracudacentral.org]
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
3.9 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP
addr
2)
2.2 XPRIO Has X-Priority header
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_59F6F3B9.8FE9C756
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
X-Envelope-From: <be...@legalmail.it>
X-Envelope-To: <pergraziaricev...@pergraziaricevuta.it>
Received: from 89-97-237-86.ip19.fastwebnet.it
(89-97-237-86.ip19.fastwebnet.it [89.97.237.86])
by server2.sio4.org(Postfix 2.11.3/8.13.0) with SMTP id unknown
Mon, 30 Oct 2017 10:41:07 +0100
(envelope-from <be...@legalmail.it>
Received: from WASYLIW.legalmail.it (WASYLIW.legalmail.it
[96.108.104.49]) by 89-97-237-86.ip19.fastwebnet.it with SMTP id
8EF43D55CA9C; Mon, 30 Oct 2017 10:41:19 +0100
Subject: avviso di pagamento
From: omarinotor...@fastwebnet.it
To: "pergraziaricev...@pergraziaricevuta.it"
<pergraziaricev...@pergraziaricevuta.it>
MIME-Version: 1.0
Message-ID: <1da3086bb339d52df.c9e57...@wasyliw.legalmail.it>
X-Priority: 3
Date: Mon, 30 Oct 2017 10:41:19 +0100
Content-type: multipart/mixed; charset=windows-1252;
boundary="----_vb-ImLcNWBPhyiBLDPoWUMtR1"
------_vb-ImLcNWBPhyiBLDPoWUMtR1
Content-type: Multipart/alternative; charset=windows-1252;
boundary="----_vb-ImLcNWBPhyiBLDPoWUMtR1B"
------_vb-ImLcNWBPhyiBLDPoWUMtR1B
Content-type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Thanks!
Davide
