Re: Help with config rules

Matus UHLAR - fantomas <[email protected]>
Newsgroups gmane.mail.spam.spamassassin.general
Message-ID <[email protected]>
On 04.06.25 09:04, Robert Moskowitz wrote:
>I have a few internal servers sending logwatch reports.  These are 
>getting flagged as spam; MiaB is much better at recognizing spam than 
>my outdated efforts.
>

>X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
>klovia.htt-consult.com
>X-Spam-Flag: YES
>X-Spam-Level: *******
>X-Spam-Status: Yes, score=7.1 required=5.0 tests=ALL_TRUSTED,BAYES_00,
>DMARC_FAIL_QUARANTINE,SPF_FAIL autolearn=no autolearn_force=no
>version=3.4.6

>Authentication-Results: klovia.htt-consult.com; dmarc=fail 
>(p=quarantine dis=none) header.from=htt-consult.com
>Authentication-Results: klovia.htt-consult.com; spf=fail 
>smtp.mailfrom=medon.htt-consult.com
>Authentication-Results: klovia.htt-consult.com; dkim=none;
>dkim-atps=neutral
>Received: from medon.htt-consult.com (medon.htt-consult.com 
>[23.123.122.148])

your machine is klovia.htt-consult.com and received mail from 
medon.htt-consult.com - looks like medon.htt-consult.com alias 
23.123.122.148 should not only be in your trusted_networks, but in 
internal_networks too.

That could fix the SPF_FAIL and DMARC_FAIL_QUARANTINE as well.


https://cwiki.apache.org/confluence/display/SPAMASSASSIN/TrustPath

-- 
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
The 3 biggets disasters: Hiroshima 45, Tschernobyl 86, Windows 95
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.