[ctw] Re: not-spam reporting
- From: aklist <aklist_eims@xxxxxxxxxxxxx>
- To: ctw@xxxxxxxxxxxxx
- Date: Sat, 22 Oct 2011 10:22:38 -0700
On 10/22/2011 9:39 AM, TR Shaw wrote:
On Oct 22, 2011, at 12:12 PM, aklist wrote:
Hey All: I have ASSP rejecting spam, but have a few people receiving complaints
that legitimate mail was blocked.
For each domain I'm concerned about, I set up a "monitorspam" address and have ASSP
copying spam to that email address. I then monitor that address and forward to
"report-notspam" to manually whitelist the non-spam emails.
This is working fine (I think), but I notice in the maillog the following for a
given notspam transaction:
Oct-22-11 09:03:13 Connected: 216.218.227.132:54428 -> 216.218.227.130:25
(listenPort) -> 127.0.0.1:125;
Oct-22-11 09:03:13 31929-13647 216.218.227.132 email: hamreport;
Oct-22-11 09:03:13 Ham-Report: process message from ;
Oct-22-11 09:03:13 Email-interface: whitelist addition: info@xxxxxxxxxxxxx;
Oct-22-11 09:03:13 Email-interface: whitelist addition: sales@xxxxxxxxxxxxx;
Oct-22-11 09:03:13 Email-interface: whitelist addition: removeme@xxxxxxxxxxxxx;
Oct-22-11 09:03:13 Ham-Report: finished report-message from ;
Oct-22-11 09:03:13 RMabort: data Expected 250, got: 550 5.1.1 user not known;
(from:service@xxxxxxxxxxxxx to:) - report to
Oct-22-11 09:03:13 31929-13648 216.218.227.132 finished message - received DATA
size: Byte - sent DATA size: 6 Byte;
Oct-22-11 09:03:13 Disconnected: 216.218.227.132 ;
Are all the ---------.com the same
Yes, those were all email addresses in the same domain of the sender.
and whi is service@xxxxxxxxxxxxx?
That's the "admin mail address" and "from address for reports" in ASSP's
"email interface"...and it's a valid address in EIMS.
Circle The Wagons
manage: //www.freelists.org/list/ctw
post: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq
Other related posts:
