On Mon, 2011-02-21 at 15:03 +0100, Matthias Leisi wrote: > On Mon, Feb 21, 2011 at 1:54 PM, Michelle Konzack wrote:
> > 2.0 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, > > medium trust > > [82.195.75.100 listed in list.dnswl.org] After setting trusted and internal networks correctly, you might want to revert that score change. DNSWL is a tflags nice rule. > 82.195.75.100 is liszt.debian.org. > > > I have gotte from this IP more then 36.000 spams... > > Do you have any debian.org forwards? If yes, I suggest you add that to > the SpamAssassin trust path. This would also ensure that blacklists > are not applied to 82.195.75.100, but to the IPs connecting there. Now that we've seen samples -- confirmed *exactly* what I said yesterday already (see her Russian dot info thread). This sounds kinda familiar anyway. Michelle, didn't we have this very discussion long ago? Explicitly Cc'ing Michelle. Given these DNSWL score adjustments, there's reason to believe she might not get every post to this list. After all, the ASF MTAs are listed in DNSWL high. -- char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
