Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: SpamAssassin: users
Spam email many have RCVD_IN_DNSWL_MED
 

Index | Next | Previous | View Flat


alessio at skye

Oct 11, 2011, 9:18 AM


Views: 2050
Permalink
Spam email many have RCVD_IN_DNSWL_MED

Hi,

I'm an italian user of spamassassin. During the last 3 weeks many spam
email have rating cut down by the rules "RCVD_IN_DNSWL_MED". Also
BAYES_99 can to nothing against this :-(

For now I solved the problem by disable this check, but is a common
problems for many italian users.

How we can solve this problem?

Some example:

==========================
Return-Path: <malingeringe89 [at] spcollege>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
www-mydomain.myserver.net
X-Spam-Level: ****
X-Spam-Status: No, score=4.9 required=5.0 tests=BAYES_99,HTML_MESSAGE,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_DNSWL_HI,RCVD_IN_RP_RNBL,RDNS_NONE,SPF_PASS autolearn=no
version=3.3.1
X-Original-To: info [at] mydomain
Delivered-To: info-mydomain.biz [at] www-mydomain
Received: from [175.145.6.37] (unknown [175.145.6.37])
by www-mydomain.myserver.net (Postfix) with ESMTP id 33C1562AB1
for <info [at] mydomain>; Tue, 11 Oct 2011 17:52:03 +0200 (CEST)
Received: from (192.168.1.38) by spcollege.edu (175.145.6.37) with
Microsoft SMTP Server id 8.0.685.24; Tue, 11 Oct 2011 23:52:02 +0800
Message-ID: <4E9465F8.104080 [at] spcollege>
Date: Tue, 11 Oct 2011 23:52:02 +0800
From: "Emma Hinton" <malingeringe89 [at] spcollege>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.24)
Gecko/20100328 Thunderbird/2.0.0.24
MIME-Version: 1.0
To: <info [at] mydomain>
Subject: Il modo sicuro da vincere successo nel letto

==========================

Return-Path: <web0 [at] webbox794>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
www-mydomain.myserver.net
X-Spam-Level:
X-Spam-Status: No, score=-0.4 required=5.0
tests=BAYES_95,HTML_IMAGE_ONLY_32,
HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,RCVD_IN_DNSWL_HI,
RP_MATCHES_RCVD autolearn=no version=3.3.1
X-Original-To: info [at] mydomain
Delivered-To: info-mydomain.biz [at] www-mydomain
Received: from webbox794.server-home.net (webbox794.server-home.net
[195.137.213.84])
by www-mydomain.myserver.net (Postfix) with ESMTP id E555B62AB1
for <info [at] mydomain>; Tue, 11 Oct 2011 17:53:12 +0200 (CEST)
Received: by webbox794.server-home.net (Postfix, from userid 33)
id 69A773A57D; Tue, 11 Oct 2011 17:50:34 +0200 (CEST)
To: info [at] mydomain
Subject: Atendimento Online - E-Mail

==========================

Return-Path: <promotions [at] havanabookfairs>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
www-mydomain.myserver.net
X-Spam-Level:
X-Spam-Status: No, score=-0.5 required=5.0 tests=BAYES_99,DKIM_SIGNED,
DKIM_VALID,HTML_MESSAGE,RCVD_IN_DNSWL_HI,SPF_PASS autolearn=no
version=3.3.1
X-Original-To: info [at] mydomain
Delivered-To: info-mydomain.biz [at] www-mydomain
Received: from node-sl626.smtp.com (node-sl626.smtp.com [74.86.21.70])
by www-mydomain.myserver.net (Postfix) with ESMTP id 0988362AB1
for <info [at] mydomain>; Tue, 11 Oct 2011 17:48:49 +0200 (CEST)
Received: from AuthenticCubagateway2wirenet (unknown [69.158.30.30])
by node-sl626.smtp.com (Postfix) with ESMTPA id 6FC709AFC90
for <info [at] mydomain>; Tue, 11 Oct 2011 11:48:48 -0400 (EDT)
X-SMTPCOM-Spam-Policy: Authenticubatravel is a paid relay service.
We do not tolerate UCE of any kind.
Please report it ASAP to abuse [at] smtp
X-SMTPCOM-Sender-ID: 81808
X-SMTPCOM-Tracking-Number: 2158212
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smtp.com;
s=smtpcomcustomers; t=1318348128;
bh=A6QopSgOzNZLEc2D3APRotTD3nx/BHG8LIMLc9iwHCo=;
h=MIME-Version:From:Reply-To:To:Subject:Content-Type:X-Mailer:Date:
Message-ID;
b=n5GACTgg7Wbqzkwp1yN3t9Qot+N8RLHuLKn7VdbB6TkIlin2QwCCHzp3/WxbcGeOR
Pq0h7YS7IhTQ/+4f0b2WZ6e/hi6oCf13nZdKYTU4aLQi6RJgYN2fLbVZnmMP4XVErj
GmSvz6GdKVND+H55K1w18o3Q5wQYMOqs9tTeZkoI=
MIME-Version: 1.0
From: "Luis - Authentic Cuba Travel" <promotions [at] havanabookfairs>
Reply-To: promotions [at] havanabookfairs
To: info [at] mydomain
Subject: Havana Book Fair- 5 seats left only.

==============================

Return-Path: <josephdarlington [at] rocketmail>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
www-mydomain.myserver.net
X-Spam-Level: *
X-Spam-Status: No, score=1.8 required=5.0 tests=ADVANCE_FEE_3_NEW,BAYES_99,
DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,HTML_MESSAGE,
RCVD_IN_DNSWL_HI,SUBJ_ALL_CAPS,T_TO_NO_BRKTS_FREEMAIL autolearn=no
version=3.3.1
X-Original-To: info [at] mydomain
Delivered-To: info-mydomain.biz [at] www-mydomain
Received: from nm14.bullet.mail.sp2.yahoo.com
(nm14.bullet.mail.sp2.yahoo.com [98.139.91.84])
by www-mydomain.myserver.net (Postfix) with SMTP id 8889762AB1
for <info [at] mydomain>; Tue, 11 Oct 2011 15:44:22 +0200 (CEST)
Received: from [98.139.91.68] by nm14.bullet.mail.sp2.yahoo.com with
NNFMP; 11 Oct 2011 13:44:21 -0000
Received: from [98.139.91.14] by tm8.bullet.mail.sp2.yahoo.com with
NNFMP; 11 Oct 2011 13:44:21 -0000
Received: from [127.0.0.1] by omp1014.mail.sp2.yahoo.com with NNFMP; 11
Oct 2011 13:44:21 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 137695.95300.bm [at] omp1014
Received: (qmail 97348 invoked by uid 60001); 11 Oct 2011 13:44:19 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rocketmail.com;
s=s1024; t=1318340659; bh=1HMUhBugUW+lMVvnEdYhcU8rWTE83gS5zBnSTCkFQ4M=;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=1Sl8gtfyPOlDZPCQYrlpa+fn/JVmI6k3KSJrjX0aPCQb/5+H3iLfKUHW2KRnda6EP1yNJIyGR9bSeUWncwizO8SSmvmpaweDs33YJFCObHry2+rasQTeYobsIW8s5tIQ4O+BzqEm2ONPn2iUGagbOr/pJfb9w9dFjXP2A4+g+MM=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=rocketmail.com;

h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;

b=4Rjs6ubybisIURD/dfSyiB5qE5Bhjya5G/0Xjwj2XonxEh8ivy9uNcms5GLUShwm/Rlbpp6AaGkAdFEUV45uQHWu5m0MpkCIByZ/onYqLdmWMJx0+cBxP8UJKaJe8L2T+s6JOMXdGSKQSMrhY/slSVblUwU7HYAueugQl4HHgoM=;
X-YMail-OSG: RGffxVIVM1n8CvFSmRRgQrupMMb9Oa9oAy.0JQ5H6DaqQYi
Q2LfOtZ9.
Received: from [41.218.245.138] by web190214.mail.sg3.yahoo.com via
HTTP; Tue, 11 Oct 2011 21:44:16 SGT
X-Mailer: YahooMailWebService/0.8.114.317681
Message-ID: <1318340656.62151.YahooMailNeo [at] web190214>
Date: Tue, 11 Oct 2011 21:44:16 +0800 (SGT)
From: Joseph Darlington <josephdarlington [at] rocketmail>
Reply-To: Joseph Darlington <josephdarlington [at] rocketmail>
Subject: REPLY URGENTLY
To: undisclosed recipients: ;
====================

Thanks
--
Alessio Cecchi is:
@ ILS -> http://www.linux.it/~alessice/
on LinkedIn -> http://www.linkedin.com/in/alessice
Assistenza Sistemi GNU/Linux -> http://www.cecchi.biz/
@ PLUG -> ex-Presidente, adesso senatore a vita, http://www.prato.linux.it
@ LOLUG -> Socio http://www.lolug.net

Subject User Time
Spam email many have RCVD_IN_DNSWL_MED alessio at skye Oct 11, 2011, 9:18 AM
    Re: Spam email many have RCVD_IN_DNSWL_MED michael.scheidell at secnap Oct 11, 2011, 9:28 AM
        Re: Spam email many have RCVD_IN_DNSWL_HI (was MED) alessio at skye Oct 11, 2011, 9:44 AM
        Re: Spam email many have RCVD_IN_DNSWL_MED rwmaillists at googlemail Oct 11, 2011, 10:37 AM
    Re: Spam email many have RCVD_IN_DNSWL_MED darxus at chaosreigns Oct 11, 2011, 10:27 AM
        Re: Spam email many have RCVD_IN_DNSWL_MED michael.scheidell at secnap Oct 11, 2011, 10:47 AM
        Re: Spam email many have RCVD IN DNSWL MED me at junc Oct 11, 2011, 12:30 PM
            Re: Spam email many have RCVD_IN_DNSWL_MED jdow at earthlink Oct 11, 2011, 6:53 PM
                Re: Spam email many have RCVD IN DNSWL MED me at junc Oct 12, 2011, 6:00 AM
        Re: Spam email many have RCVD_IN_DNSWL_MED gdt at ir Oct 12, 2011, 3:27 PM
            Re: Spam email many have RCVD_IN_DNSWL_MED darxus at chaosreigns Oct 12, 2011, 3:42 PM
    Re: Spam email many have RCVD_IN_DNSWL_MED jhardin at impsec Oct 11, 2011, 10:47 AM
    Re: Spam email many have RCVD_IN_DNSWL_MED michael.scheidell at secnap Oct 11, 2011, 10:49 AM
    Re: Spam email many have RCVD_IN_DNSWL_MED andrzej.filip at gmail Oct 11, 2011, 11:03 AM
    Re: Spam email many have RCVD_IN_DNSWL_MED darxus at chaosreigns Oct 11, 2011, 11:47 AM
    Re: Spam email many have RCVD_IN_DNSWL_MED darxus at chaosreigns Oct 11, 2011, 11:58 AM
        Re: Spam email many have RCVD_IN_DNSWL_MED alessio at skye Oct 11, 2011, 11:15 PM
            Re: Spam email many have RCVD_IN_DNSWL_MED jimpop at gmail Oct 11, 2011, 11:45 PM
            Re: Spam email many have RCVD IN DNSWL MED me at junc Oct 12, 2011, 6:25 AM
    Re: Spam email many have RCVD IN DNSWL MED me at junc Oct 11, 2011, 12:18 PM
        Re: Spam email many have RCVD_IN_DNSWL_MED darxus at chaosreigns Oct 11, 2011, 12:24 PM
            Re: Spam email many have RCVD IN DNSWL MED me at junc Oct 11, 2011, 1:10 PM
                Re: Spam email many have RCVD_IN_DNSWL_MED darxus at chaosreigns Oct 11, 2011, 1:53 PM

  Index | Next | Previous | View Flat
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.