Good point. I'll post all of the headers and see if anyone has any tips.
Received: from smtp.phhwtechnology.com (10.0.1.7) by mail.phhwtechnology.com
(10.0.1.5) with Microsoft SMTP Server id 14.3.195.1; Thu, 24 Jul 2014
18:11:18 -0500
Received: from localhost (localhost [127.0.0.1]) by
smtp.phhwtechnology.com
(Postfix) with ESMTP id E9A1D1943211 for <gledf...@phhwtechnology.com>; Thu,
24 Jul 2014 18:00:06 -0500 (CDT)
X-Virus-Scanned: Debian amavisd-new at smtp.phhwtechnology.com
Received: from smtp.phhwtechnology.com ([127.0.0.1]) by localhost
(smtp.phhwtechnology.com [127.0.0.1]) (amavisd-new, port 10024) with
ESMTP id
l_YzbdhJopva for <gledf...@phhwtechnology.com>; Thu, 24 Jul 2014
18:00:02
-0500 (CDT)
Received: from sell.pywor.eu (sell.pywor.eu [23.249.160.158]) by
smtp.phhwtechnology.com (Postfix) with ESMTP id 29AFE194320C for
<gledf...@phhwtechnology.com>; Thu, 24 Jul 2014 17:59:50 -0500 (CDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=pywor.eu;
h=Content-Type:MIME-Version:From:To:Subject:Message-ID:References:In-Reply-To:Date;
i=smallbusinessl...@pywor.eu;
bh=WHIK8mEJdFg2fXt9Zz2ucXCGxPk=;
b=rxT2Eq1czjvL4ygXMD/Lxw4AZSYSW7ES8onIuJA3kpMwvVF3DUt7Oz3LP+r3jx6il9Y8ZjiFfIg2
B/JAjQQKIodjDTHxBvjIaoxaWP+b2vgl6AJxYf2PC9mWu1xmX+QEnNbY0ZbmVLmy24R+ODm7d0wU
P/eGjTK0IR/o4Uv6tts=
Content-Type: multipart/alternative;
boundary="===============8108863872609529479=="
MIME-Version: 1.0
From: Small Business Loan <smallbusinessl...@pywor.eu>
To: <gledf...@phhwtechnology.com>
Subject: Now trending: exciting small business loan opportunities
Message-ID: <615491d8b09c8278d9b65c2d2ffac...@pywor.eu>
Thread-Topic: Now trending: exciting small business loan opportunities
References: <615491d8b09c8278d9b65c2d2ffac...@pywor.eu>
In-Reply-To: <615491d8b09c8278d9b65c2d2ffac...@pywor.eu>
Date: Thu, 24 Jul 2014 22:59:47 +0000
Return-Path: smallbusinessloan-gledford=phhwtechnology....@pywor.eu
X-MS-Exchange-Organization-AuthSource: WEBSERVER01.mail.phhwtechnology.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Greg Ledford
PHHW Technology Services LLC
1000 Corporate Centre Dr, Suite 200
Franklin, TN 37067
Office (615) 778-1777
Cell (615) 403-6989
Fax (615) 771-0081
-----Original Message-----
From: Karsten Bräckelmann [mailto:guent...@rudersport.de]
Sent: Thursday, July 24, 2014 6:38 PM
To: users@spamassassin.apache.org
Subject: Re: Is this how this is supposed to work?
On Thu, 2014-07-24 at 22:33 +0000, Greg Ledford wrote:
> Sorry about that. I'm new to this list, too.
Don't worry. I simply pointed it out so with further discussion, everyone is on
the same page. After all, there is more helpful folks on this list -- and quite
a few of them way better at Postfix and Amavis stuff than I am.
Now if you could correct that top-posting... SCNR. ;)
> It helps if I actually add content_filter to postfix, I guess. This
> is all I'm seeing in the headers at this point so it seems like I've
> got ONE part of it working. Does this look like it's a start?
That Received header below? Yeah, looks good, Amavis seems to be in the loop.
I wonder how that could be "all you're seeing at this point", though.
Amavis added a header it received a message locally, but who passed it on?
Isn't Postfix supposed to do that? So where is the Postfix Received header?
It seems you're snipping too much stuff from the raw headers you may believe to
be irrelevant. However, unless you *know* it's irrelevant and snipping it does
*not* affect interpretation of the full mail flow, do include it in the paste.
FWIW, in this case all headers beginning with the very first Received from
external by your server is likely to be relevant in some way.
> Also my MX records are fine. I just removed them from the headers
So you ask about help with a set-up including Postfix being your MX, and you
snip all traces of Postfix acting like your MX. See where this is bad?
> [...] I posted to keep people from seeing all my info but I guess
> that was sort of pointless since they could have just done a
> nslookup and got that data anyway. :/ Thanks again for your help.
Correct. These public (sic) IPs are no secret. The mail you posted to this list
includes them...
Feel free to mask IP addresses and domain names if need be, in particular email
addresses. However, please keep it to a minimum and definitely with a
consistent pattern. Don't break headers, and don't simply remove whole headers.
BTW, your outgoing SMTP server claims to be hostnamed "smtp", though its IP
actually resolves to "mail", breaking rDNS forward confirmation.
Probably outfall from adding that first line of defense Postfix server...
> X-Virus-Scanned: Debian amavisd-new at smtp.mymailserver.com
> Received: from smtp.mymailserver.com ([127.0.0.1])
> by localhost (smtp.mymailserver.com [127.0.0.1]) (amavisd-new, port 10024)
> with ESMTP id
--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
