Bronto.com is a remailer service for various companies (like Fractureme.com and 
others) and I’ve been noting that it hits some odd triggers in spamass-milter:

Apr 19 15:00:40 mail spamd[87225]: spamd: result: Y 5 - 
BAYES_50,DKIM_SIGNED,DKIM_VALID,FSL_HELO_NON_FQDN_1,HEADER_FROM_DIFFERENT_DOMAINS,HELO_LOCALHOST,HTML_IMAGE_RATIO_02,HTML_MESSAGE,RDNS_LOCALHOST,SPF_SOFTFAIL,UNPARSEABLE_RELAY,URIBL_GREY
 
scantime=2.4,size=14225,user=kreme,uid=58,required_score=5.0,rhost=localhost,raddr=::1,rport=36110,mid=<cl3q5hr7hjponyd66fmt70m4u3kvtoi7.oi7.1429477...@bronto.com>,bayes=0.500186,autolearn=no
 autolearn_force=no 

Here are some headers from a btonto.com message. As you can see, there is 
little info in the received header my server adds (no IP).

X-Envelope-From: <cl3q5hr7hjponyd66fmt70m4u3kvtoi...@bounce.bronto.com>
X-Envelope-To: <kr...@kreme.com>
Received: from ms045.bronto.com (unknown)
        by mail.covisp.net(Postfix 2.11.4/8.13.0) with SMTP id unknown;
        Sun, 19 Apr 2015 15:00:38 -0600
        (envelope-from <cl3q5hr7hjponyd66fmt70m4u3kvtoi...@bounce.bronto.com>)
Received: from localhost (10.0.1.163) by ms045.bronto.com id h6gbnc1usqsi for 
<kr...@kreme.com>; Sun, 19 Apr 2015 17:00:33 -0400 (envelope-from 
<cl3q5hr7hjponyd66fmt70m4u3kvtoi...@bounce.bronto.com>)

Here is  normal received header:

Received: from gatewayout2.uhd.edu (gatewayout2.uhd.edu [216.145.160.112])
        by mail.covisp.net (Postfix) with ESMTPS id 3lVqRX6QKqzJMhn
        for <kr...@kreme.com>; Mon, 20 Apr 2015 08:00:24 -0600 (MDT)

Full postfix logs for the message follow:

Apr 19 15:00:38 mail postfix/smtpd[93480]: 3lVNpt0CzVzJQpS: 
client=ms045.bronto.com[216.27.63.45]
Apr 19 15:00:38 mail postfix/cleanup[93662]: 3lVNpt0CzVzJQpS: 
message-id=<cl3q5hr7hjponyd66fmt70m4u3kvtoi7.oi7.1429477...@bronto.com>
Apr 19 15:00:39 mail spamd[87225]: spamd: processing message 
<cl3q5hr7hjponyd66fmt70m4u3kvtoi7.oi7.1429477...@bronto.com> for kreme:58 
Apr 19 15:00:40 mail spamd[87225]: spamd: result: Y 5 - 
BAYES_50,DKIM_SIGNED,DKIM_VALID,FSL_HELO_NON_FQDN_1,HEADER_FROM_DIFFERENT_DOMAINS,HELO_LOCALHOST,HTML_IMAGE_RATIO_02,HTML_MESSAGE,RDNS_LOCALHOST,SPF_SOFTFAIL,UNPARSEABLE_RELAY,URIBL_GREY
 
scantime=2.4,size=14225,user=kreme,uid=58,required_score=5.0,rhost=localhost,raddr=::1,rport=36110,mid=<cl3q5hr7hjponyd66fmt70m4u3kvtoi7.oi7.1429477...@bronto.com>,bayes=0.500186,autolearn=no
 autolearn_force=no 
Apr 19 15:00:40 mail postfix/qmgr[92561]: 3lVNpt0CzVzJQpS: 
from=<cl3q5hr7hjponyd66fmt70m4u3kvtoi...@bounce.bronto.com>, size=19278, 
nrcpt=2 (queue active)
Apr 19 15:00:43 mail postfix/local[93694]: 3lVNpt0CzVzJQpS: 
to=<kr...@covisp.net>, orig_to=<kr...@kreme.com>, relay=local, delay=5.1, 
delays=2.7/0.02/0/2.3, dsn=2.0.0, status=sent (delivered to command: 
/usr/local/bin/procmail -t -a $EXTENSION)
Apr 19 15:00:43 mail postfix/qmgr[92561]: 3lVNpt0CzVzJQpS: removed


-- 
I don't believe there's a power in the 'verse can stop Kaylee from bein'
cheerful. Sometimes you just wanna duct-tape her mouth and dump her in
the hold for a month.

Reply via email to