[ctw] not-spam reporting

  • From: aklist <aklist_eims@xxxxxxxxxxxxx>
  • To: "ctw@xxxxxxxxxxxxx" <ctw@xxxxxxxxxxxxx>
  • Date: Sat, 22 Oct 2011 09:12:31 -0700

Hey All: I have ASSP rejecting spam, but have a few people receiving complaints that legitimate mail was blocked.
For each domain I'm concerned about, I set up a "monitorspam" address and have ASSP copying spam to that email address. I then monitor that address and forward to "report-notspam" to manually whitelist the non-spam emails.
This is working fine (I think), but I notice in the maillog the following for a given notspam transaction:
Oct-22-11 09:03:13 Connected: 216.218.227.132:54428 -> 216.218.227.130:25 (listenPort) -> 127.0.0.1:125; 
Oct-22-11 09:03:13 31929-13647 216.218.227.132 email: hamreport;
Oct-22-11 09:03:13 Ham-Report: process message from ;
Oct-22-11 09:03:13 Email-interface: whitelist addition: info@xxxxxxxxxxxxx;
Oct-22-11 09:03:13 Email-interface: whitelist addition: sales@xxxxxxxxxxxxx;
Oct-22-11 09:03:13 Email-interface: whitelist addition: removeme@xxxxxxxxxxxxx; 
Oct-22-11 09:03:13 Ham-Report: finished report-message from ;
Oct-22-11 09:03:13 RMabort: data Expected 250, got: 550 5.1.1 user not known; 
(from:service@xxxxxxxxxxxxx to:) - report to
Oct-22-11 09:03:13 31929-13648 216.218.227.132 finished message - received DATA size: Byte - sent DATA size: 6 Byte; 
Oct-22-11 09:03:13 Disconnected: 216.218.227.132 ;
Is that "RMabort: data Expected 250, got: 550 5.1.1 user not known;" near the bottom something to be concerned about? The "monitorspam" user exists in EIMS, and ASSP's local users file just has local domains, not individual emails listed (e.g. any email address for a local domain is valid). 
Circle The Wagons
manage: //www.freelists.org/list/ctw post: mailto:ctw@xxxxxxxxxxxxx 
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq

Other related posts:

  1. Home
  2. ctw
  3. Archive
  4. 10-2011