Am 2019-08-25 00:12, schrieb Benny Pedersen:
header RELAYCOUNTRY_BAD X-Relay-Countries =~ /(List of
country codes)/
describe RELAYCOUNTRY_BAD Relayed through spam country at some
point
score RELAYCOUNTRY_BAD 3.5
correct rulee, but geoip is not working in your install
Hello,
geoip is working if geoiplookup has a valid country. Here an result when
the ip adresse can be found (RELAYCOUNTRY_BAD=3.5 in the test list).
---
X-Spam-Status: Yes, score=15.393 tag=2 tag2=6.31 kill=6.31
tests=[AM.WBL=7,
BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, FROMSPACE=0.001, FROM_SUSPICIOUS_NTLD=0.5,
FSL_BULK_SIG=1.596, HTML_EMBEDS=0.001, HTML_MESSAGE=0.001,
PYZOR_CHECK=1.392, RDNS_NONE=0.793, RELAYCOUNTRY_BAD=3.5,
SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01,
URIBL_RED=0.001] autolearn=no autolearn_force=no
---
The turkey spammer uses a DKIM-Signatures for earch dirty domain and
changes the ip adresses.
---
Received: from habitmarsh.pro (unknown [185.81.154.251])
by mx2.level5.de (Postfix) with ESMTP
for <c...@level5.de>; Sat, 24 Aug 2019 14:46:28 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=mail;
d=habitmarsh.pro;
h=From:Date:MIME-Version:Subject:To:Message-ID:Content-Type;
i=restl...@habitmarsh.pro;
bh=2t5Wf+4FfcbFXk3qlpUtl7hNcLY=;
b=BYPTXPtYMghNg+QpgG9WEYjd2FPjtRVS7rAfCCPt4hO6v7Fzo2ZK5YWiOBWtXPXKWFb9X6u7OQ8G
Db9pXFfiYN+p76hpn/dPWLCH8G3kuJakwjthtuBG85wzytnelGph79TzqTXZGylltHv3JQOoPJca
NHrcpHXgh+sVKHit2yw=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=mail;
d=habitmarsh.pro;
b=dYV5l2FhyapgbC8/s1SXbQacaxUiqlIWFCNDtBvzfV2E9+7wS61Ppqxufk1tZyYgVRLnj+1wrzZC
NKFQfvNL7TVSgk8u14S8ptc4q0tfE+uQ886w9ZuxOHQ+7jOasm+AW84BJm6fI3n7jEPL1xZC2bqx
wJOICRNUrJ+k9XVHhag=;
From: " Timothy Long" <restl...@habitmarsh.pro>
Date: Sat, 24 Aug 2019 07:42:21 -0500
MIME-Version: 1.0
Subject: Boost your internet with this without upgrading your plan
---
