Re: Welcome to the new(ish) ASRG list

On 3/17/2013 1:54 PM, Barry Shein wrote:
> On March 17, 2013 at 02:10 [email protected] (Rob McEwen) wrote:
>  > On 3/17/2013 1:50 AM, Roger B.A. Klorese wrote:
>  > > and/or the reverse not match the From: domain
>  > 
>  > Then those systems are blocking massive amounts of legit mail because
>  > massive amounts of legit mail is sent from IPs that have a valid rDNS,
>  > yet where the domain in the rDNS doesn't match the "from" address. This
>  > is really silly... many "shared hosting" environments are set up where
>  > the sender (typically a small business hosting a web site there) is
>  > using their hoster's mail server for sending mail.
>
> Wasn't this problem solved by SpamAssassin's scoring approach, give it
> a point or two for this and use a threshold, if there are no other red
> flags let it through.

A typical default SA setup scores about 2 (or more?) points against "no
rDNS". The fact that SA scores against "no rDNS" is common knowledge
within the SA community.

But I don't think that SA scores any points against a message for the
rDNS ending in a domain name that is different from the domain in the
"from" address. If I'm wrong, then THAT score is likely something like
"0.1"... or something negligible like that. I've followed the SA list
for years and I've never heard of any mention of such a test in SA.

-- 
Rob McEwen
http://dnsbl.invaluement.com/
[email protected]
+1 (478) 475-9032