Hello,
I've recently noticed that a lot of spam is getting through SpamAssassin,
and it's getting the ALL_TRUSTED test listed on it. The issue with that
is, I only have one IP trusted, and that's my own mail server.
<snip from local.cf>
# Trusted Networks
trusted_networks 69.25.118.171
</snip>
As you can see in the below set of headers the message came from
218.222.75.209. Yet, it's trusted.
Return-Path: <[EMAIL PROTECTED]>
Received: from U075209.ppp.dion.ne.jp (U075209.ppp.dion.ne.jp
[218.222.75.209])
by kangaroo.publicmx.com (8.13.4/8.13.4) with ESMTP id j6OKabJS014331
for <[EMAIL PROTECTED]>; Sun, 24 Jul 2005 13:36:40 -0700
From: "Fortifies T. Noon" <[EMAIL PROTECTED]>
To: Fawyland <[EMAIL PROTECTED]>
Subject: Petite 18yo Teen Stripping
Date: Mon, 25 Jul 2005 11:38:57 -0700
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.4024
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.10; AVE:
6.20.0.1; VDF: 6.20.0.46; host: U075209.ppp.dion.ne.jp)
X-Spam-Status: No, score=0.0 required=3.0 tests=ALL_TRUSTED,BIZ_TLD,CUM_SHOT,
HOT_NASTY autolearn=disabled version=3.0.4
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on
kangaroo.publicmx.com
I have tried sending a test message from another host to the mail server,
and everything seems fine. As headers show below.
Return-Path: <[EMAIL PROTECTED]>
Received: from mail1.fluidhosting.com (mail1.fluidhosting.com [204.14.90.61])
by kangaroo.publicmx.com (8.13.4/8.13.4) with SMTP id j6OLZSOU019710
for <[EMAIL PROTECTED]>; Sun, 24 Jul 2005 14:35:28 -0700
Received: (qmail 43718 invoked by uid 399); 24 Jul 2005 21:35:24 -0000
Received: from localhost (HELO ?192.168.102.220?)
([EMAIL PROTECTED]@127.0.0.1)
by localhost with SMTP; 24 Jul 2005 21:35:24 -0000
Message-ID: <[EMAIL PROTECTED]>
Date: Sun, 24 Jul 2005 14:35:21 -0700
From: "John T. Yocum" <REMOVEDfluidhosting.com>
User-Agent: Mozilla Thunderbird 1.0.6-1.4.1.centos4 (X11/20050721)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: [EMAIL PROTECTED]
Subject: test
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, score=-0.0 required=4.0 tests=SPF_HELO_PASS,SPF_PASS
autolearn=disabled version=3.0.4
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on
kangaroo.publicmx.com
My current setup is, SpamAssassin 3.0.4 integrated with Sendmail using
SpamAssasin-Milter 0.3.
Any ideas why other hosts getting trusted, would be greatly appreciated.
Thanks,
John
