Spam detection software, running on the system "www.progresspartners.co.in", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details.
Content preview: Spanish air crash in 2008 was apparently caused by failure of their systems in detecting aircraft faults due to malware that got installed in the servers that ran then detection software :( I am told that they used windows servers. Food for thought, though wonder if it's true [...]
Content analysis details: (8.7 points, 8.0 required)
pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [120.63.7.29 listed in psbl.surriel.com] 1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [120.63.7.29 listed in bb.barracudacentral.org] 0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [120.63.7.29 listed in zen.spamhaus.org] 3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL -0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40% [score: 0.3513] 1.0 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS -0.1 AWL AWL: From: address is in the auto white-list
2010/8/25 Saswata Banerjee & Associates scrapo@saswatabanerjee.com:
Spam detection software, running on the system "www.progresspartners.co.in", has identified this incoming email as possible spam. The original message
Your spam filter has become overzealous!!
wtf?
On Wed, 2010-08-25 at 00:22 +0530, Saswata Banerjee & Associates wrote:
Spam detection software, running on the system "www.progresspartners.co.in", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details.
Content preview: Spanish air crash in 2008 was apparently caused by failure of their systems in detecting aircraft faults due to malware that got installed in the servers that ran then detection software :( I am told that they used windows servers. Food for thought, though wonder if it's true [...]
Content analysis details: (8.7 points, 8.0 required)
pts rule name description
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [120.63.7.29 listed in psbl.surriel.com] 1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [120.63.7.29 listed in bb.barracudacentral.org] 0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [120.63.7.29 listed in zen.spamhaus.org] 3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL -0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40% [score: 0.3513] 1.0 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS -0.1 AWL AWL: From: address is in the auto white-list
Sent from my iPad Saswata Banerjee
On 25-Aug-2010, at 8:17 AM, Kenneth Gonsalves lawgon@au-kbc.org wrote:
wtf?
Shit ! Sorry guys. There is a problem with the spam filter on my server. It's marking my outward emails as spam, not just inwards. In this case it's because mtnl static ip is marked somewhere as a spam source.
Any idea on what to change in spam assissin to stop this ?
On Wed, 2010-08-25 at 00:22 +0530, Saswata Banerjee & Associates wrote:
Spam detection software, running on the system "www.progresspartners.co.in", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details.
Content preview: Spanish air crash in 2008 was apparently caused by failure of their systems in detecting aircraft faults due to malware that got installed in the servers that ran then detection software :( I am told that they used windows servers. Food for thought, though wonder if it's true [...]
Content analysis details: (8.7 points, 8.0 required)
pts rule name description
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [120.63.7.29 listed in psbl.surriel.com] 1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [120.63.7.29 listed in bb.barracudacentral.org] 0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [120.63.7.29 listed in zen.spamhaus.org] 3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL -0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40% [score: 0.3513] 1.0 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS -0.1 AWL AWL: From: address is in the auto white-list
-- regards Kenneth Gonsalves
On Wednesday 25 Aug 2010, Saswata Banerjee & Associates wrote:
Sent from my iPad
I'm suitably impressed.
Shit ! Sorry guys. There is a problem with the spam filter on my server. It's marking my outward emails as spam, not just inwards. In this case it's because mtnl static ip is marked somewhere as a spam source.
Any idea on what to change in spam assissin to stop this ?
You can whitelist your sender e-mail address in local.cf. However, then anyone sending mail spoofing the from from your address will also pass through your spam filter.
Regards,
-- Raj
Sent from my iPad Saswata Banerjee
On 25-Aug-2010, at 8:34 AM, "Raj Mathur (राज माथुर)" raju@linux-delhi.org wrote:
On Wednesday 25 Aug 2010, Saswata Banerjee & Associates wrote:
Sent from my iPad
I'm suitably impressed.
Shit ! Sorry guys. There is a problem with the spam filter on my server. It's marking my outward emails as spam, not just inwards. In this case it's because mtnl static ip is marked somewhere as a spam source.
Any idea on what to change in spam assissin to stop this ?
You can whitelist your sender e-mail address in local.cf. However, then anyone sending mail spoofing the from from your address will also pass through your spam filter.
The problem is that spam assassin is marking my "outgoing" mails as spam. I use thunderbird and apple mail which uses the smtp on my mail server for sending mails. The mail server is on a dedicated server in an USA datacenter, running a red hat clone (forgot what. Will check and tell)
When I send mail from office (airtel) or use webmail, there is no problem. When I send mail from home (mtnl) it comes as spam. It's not that incoming mails is marked as spam, it's my outgoing mail marked spam.
I am not a techie, but I know bits of it. If someone tells where in spam assassin I have to make a change so that it stops checking outward mails.
Regards Saswata
Regards,
-- Raj
Raj Mathur raju@kandalaya.org http://kandalaya.org/ GPG: 78D4 FC67 367F 40E2 0DD5 0FEF C968 D0EF CC68 D17F PsyTrance & Chill: http://schizoid.in/ || It is the mind that moves -- http://mm.glug-bom.org/mailman/listinfo/linuxers
Saswat,
On 08/25/2010 05:02 PM, Saswata Banerjee & Associates wrote:
The problem is that spam assassin is marking my "outgoing" mails as spam. I use thunderbird and apple mail which uses the smtp on my mail server for sending mails. The mail server is on a dedicated server in an USA datacenter, running a red hat clone (forgot what. Will check and tell)
When I send mail from office (airtel) or use webmail, there is no problem. When I send mail from home (mtnl) it comes as spam. It's not that incoming mails is marked as spam, it's my outgoing mail marked spam.
I am not a techie, but I know bits of it. If someone tells where in spam assassin I have to make a change so that it stops checking outward mails.
Enable SMTP Auth with TLS/SSL on your server, if not already enabled.
Regards Saswata
HTH
With regards,
On Wednesday 25 August 2010 05:02 PM, Saswata Banerjee & Associates wrote:
The problem is that spam assassin is marking my "outgoing" mails as spam. I use thunderbird and apple mail which uses the smtp on my mail server for sending mails. The mail server is on a dedicated server in an USA datacenter, running a red hat clone (forgot what. Will check and tell)
When I send mail from office (airtel) or use webmail, there is no problem. When I send mail from home (mtnl) it comes as spam. It's not that incoming mails is marked as spam, it's my outgoing mail marked spam.
Take a common device to your home and office and use the respective internet connections to send mails from the same device and software. Then see what results you get. MTNL does not seem to be the issue. Many of us use it.
On Wed, Aug 25, 2010 at 5:02 PM, Saswata Banerjee & Associates < scrapo@saswatabanerjee.com> wrote:
When I send mail from office (airtel) or use webmail, there is no problem. When I send mail from home (mtnl) it comes as spam. It's not that incoming mails is marked as spam, it's my outgoing mail marked spam.
MTNL doesn't force you to use its own SMTP server while blocking others?
On Thu, Aug 26, 2010 at 2:10 PM, Nishit Dave stargazer.dave@gmail.com wrote:
On Wed, Aug 25, 2010 at 5:02 PM, Saswata Banerjee & Associates < scrapo@saswatabanerjee.com> wrote:
When I send mail from office (airtel) or use webmail, there is no problem. When I send mail from home (mtnl) it comes as spam. It's not that incoming mails is marked as spam, it's my outgoing mail marked spam.
MTNL doesn't force you to use its own SMTP server while blocking others?
I have been using MTNL TriBand service since April/2005 and I have not experienced any blocking on any outbound port/service.
-- Arun Khan
On Thu, Aug 26, 2010 at 2:10 PM, Nishit Dave stargazer.dave@gmail.comwrote:
On Wed, Aug 25, 2010 at 5:02 PM, Saswata Banerjee & Associates < scrapo@saswatabanerjee.com> wrote:
When I send mail from office (airtel) or use webmail, there is no
problem.
When I send mail from home (mtnl) it comes as spam. It's not that
incoming
mails is marked as spam, it's my outgoing mail marked spam.
MTNL doesn't force you to use its own SMTP server while blocking others?
No they do not.
As I had replied in my earlier mail, if you don't use a Static I.P Address with a proper reverse DNS record or SPF record set to directly relay mails, the chances are that your mail will mostly be considered as potential spam by most popular email service providers like gmail and most probably your mail will land in their 'Spam' folder instead of the 'Inbox' because Dynamic I.P Addresses are/were often abused by Spammers and you could have been temporarily leased a dynamic I.P Addresses by your ISP which was formerly used for spamming.
Regards,
On 25-Aug-2010, at 8:28 AM, Saswata Banerjee & Associates scrapo@saswatabanerjee.com wrote:
Sent from my iPad Saswata Banerjee
On 25-Aug-2010, at 8:17 AM, Kenneth Gonsalves lawgon@au-kbc.org wrote:
wtf?
Shit ! Sorry guys. There is a problem with the spam filter on my server. It's marking my outward emails as spam, not just inwards. In this case it's because mtnl static ip is marked somewhere as a spam source.
Oops again. It's a mtnl dynamic ip
Any idea on what to change in spam assissin to stop this ?
On Wed, 2010-08-25 at 00:22 +0530, Saswata Banerjee & Associates wrote:
Spam detection software, running on the system "www.progresspartners.co.in", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details.
Content preview: Spanish air crash in 2008 was apparently caused by failure of their systems in detecting aircraft faults due to malware that got installed in the servers that ran then detection software :( I am told that they used windows servers. Food for thought, though wonder if it's true [...]
Content analysis details: (8.7 points, 8.0 required)
pts rule name description
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [120.63.7.29 listed in psbl.surriel.com] 1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [120.63.7.29 listed in bb.barracudacentral.org] 0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [120.63.7.29 listed in zen.spamhaus.org] 3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL -0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40% [score: 0.3513] 1.0 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS -0.1 AWL AWL: From: address is in the auto white-list
-- regards Kenneth Gonsalves
On Wed, Aug 25, 2010 at 9:39 AM, Saswata Banerjee & Associates scrapo@saswatabanerjee.com wrote:
On 25-Aug-2010, at 8:28 AM, Saswata Banerjee & Associates scrapo@saswatabanerjee.com wrote:
Sent from my iPad Saswata Banerjee
On 25-Aug-2010, at 8:17 AM, Kenneth Gonsalves lawgon@au-kbc.org wrote:
wtf?
Shit ! Sorry guys. There is a problem with the spam filter on my server. It's marking my outward emails as spam, not just inwards. In this case it's because mtnl static ip is marked somewhere as a spam source.
Oops again. It's a mtnl dynamic ip
It is recommended to use Static IP for any Internet facing servers; MTNL static IP costs Rs. 1000/annum and you can request the various RBLs to not block it.
[......... major snip of repeated quotations ............]
Please spare a few moments to trim your quotations.
-- Arun Khan
Greetings,
On Wed, Aug 25, 2010 at 10:13 AM, Arun Khan knura9@gmail.com wrote:
On Wed, Aug 25, 2010 at 9:39 AM, Saswata Banerjee & Associates scrapo@saswatabanerjee.com wrote:
Oops again. It's a mtnl dynamic ip
Oops. A stupid thought. Have you tried private dyndns-like server? could never get it going although.
Regards,
Rajagopal
On Wed, Aug 25, 2010 at 10:24 AM, Rajagopal Swaminathan raju.rajsand@gmail.com wrote:
Greetings,
On Wed, Aug 25, 2010 at 10:13 AM, Arun Khan knura9@gmail.com wrote:
On Wed, Aug 25, 2010 at 9:39 AM, Saswata Banerjee & Associates scrapo@saswatabanerjee.com wrote:
Oops again. It's a mtnl dynamic ip
Oops. A stupid thought. Have you tried private dyndns-like server?
... and where will the OP host this "dyndns-like" server with a "dynamic" WAN IP for a 'Net connection?
could never get it going although.
Then the suggestion is not a solution.
Also, please trim your quotations properly; keeping my attribution and removing whatever I said is misleading.
-- Arun Khan
Greetings,
On Wed, Aug 25, 2010 at 10:47 AM, Arun Khan knura9@gmail.com wrote:
On Wed, Aug 25, 2010 at 10:24 AM, Rajagopal Swaminathan raju.rajsand@gmail.com wrote:
On Wed, Aug 25, 2010 at 10:13 AM, Arun Khan knura9@gmail.com wrote:
On Wed, Aug 25, 2010 at 9:39 AM, Saswata Banerjee & Associates scrapo@saswatabanerjee.com wrote:
... and where will the OP host this "dyndns-like" server with a "dynamic" WAN IP for a 'Net connection?
Very true. One needs at least on static IP.
Regards,
Rajagopal
On Wednesday 25 August 2010 10:24:40 am Rajagopal Swaminathan wrote:
Oops. A stupid thought. Have you tried private dyndns-like server? could never get it going although.
well i got it going .. and it works pretty well. i was lucky to have get a router that supports it (quite a few do). I just signed up and set up my router with the relevan info and it just .. worked.
On Wed, Aug 25, 2010 at 11:16 AM, Yohan Pereira yohan.pereira@gmail.com wrote:
On Wednesday 25 August 2010 10:24:40 am Rajagopal Swaminathan wrote:
Oops. A stupid thought. Have you tried private dyndns-like server? could never get it going although.
I believe what Rajagopal is referring to, is setting up a private DNS *server* that accepts dynamic updates from "known" clients (with authentication); i.e. similar to the service that dyndns.com provides.
well i got it going .. and it works pretty well. i was lucky to have get a router that supports it (quite a few do). I just signed up and set up my router with the relevan info and it just .. worked.
I believe your scenario is the "client" side of the above service.
-- Arun Khan
Sent from my iPad Saswata Banerjee
On 25-Aug-2010, at 12:52 PM, Arun Khan knura9@gmail.com wrote:
On Wed, Aug 25, 2010 at 11:16 AM, Yohan Pereira yohan.pereira@gmail.com wrote:
On Wednesday 25 August 2010 10:24:40 am Rajagopal Swaminathan wrote:
Oops. A stupid thought. Have you tried private dyndns-like server? could never get it going although.
I believe what Rajagopal is referring to, is setting up a private DNS *server* that accepts dynamic updates from "known" clients (with authentication); i.e. similar to the service that dyndns.com provides.
well i got it going .. and it works pretty well. i was lucky to have get a router that supports it (quite a few do). I just signed up and set up my router with the relevan info and it just .. worked.
I believe your scenario is the "client" side of the above service.
I do not think (if I understand it correctly) it makes sense to have all laptops and pcs to install software that will update dynamic ips every time it connects. Also it may create a problem when it sits behind a corporate firewall. Will it give local ip or the proxy's ip ?
-- Arun Khan
On Wed, Aug 25, 2010 at 5:09 PM, Saswata Banerjee & Associates scrapo@saswatabanerjee.com wrote:
On 25-Aug-2010, at 12:52 PM, Arun Khan knura9@gmail.com wrote:
On Wed, Aug 25, 2010 at 11:16 AM, Yohan Pereira yohan.pereira@gmail.com wrote:
On Wednesday 25 August 2010 10:24:40 am Rajagopal Swaminathan wrote:
Oops. A stupid thought. Have you tried private dyndns-like server? could never get it going although.
I believe what Rajagopal is referring to, is setting up a private DNS *server* that accepts dynamic updates from "known" clients (with authentication); i.e. similar to the service that dyndns.com provides.
well i got it going .. and it works pretty well. i was lucky to have get a router that supports it (quite a few do). I just signed up and set up my router with the relevan info and it just .. worked.
I believe your scenario is the "client" side of the above service.
I do not think (if I understand it correctly) it makes sense to have all laptops and pcs to install software that will update dynamic ips every time it connects.
From information in your other post, yes it is not necessary to do the above.
Looks like the problem is with your SMTP server (smart host) on the 'Net. As Dinesh Shah has pointed out, I hope you have SMTP AUTH setup at your server (userid/password required for out going email).
Depending upon the kind of hosting service you have you can:
a) Shared Hosting - go to your CPanel and set a lower number for your spamassasin,
b) Dedicated server - contact your server Sys Admin.
Also it may create a problem when it sits behind a corporate firewall. Will it give local ip or the proxy's ip ?
Moot point for your scenario but FYI most dyn dns clients update to the WAN IP of the Proxy/Gateway.
-- Arun Khan
On Wednesday 25 August 2010 5:09:52 pm Saswata Banerjee & Associates wrote:
I do not think (if I understand it correctly) it makes sense to have all laptops and pcs to install software that will update dynamic ips every time it connects. Also it may create a problem when it sits behind a corporate firewall. Will it give local ip or the proxy's ip ?
Well no this may make sense only if your at home and the router they(mtnl) gave you supports dydns. in this case the router automaticlly updates the dynamic ip everytime it (re)connects.
Sent from my iPad Saswata Banerjee
On 25-Aug-2010, at 10:13 AM, Arun Khan knura9@gmail.com wrote:
On Wed, Aug 25, 2010 at 9:39 AM, Saswata Banerjee & Associates scrapo@saswatabanerjee.com wrote:
On 25-Aug-2010, at 8:28 AM, Saswata Banerjee & Associates scrapo@saswatabanerjee.com wrote:
Sent from my iPad Saswata Banerjee
On 25-Aug-2010, at 8:17 AM, Kenneth Gonsalves lawgon@au-kbc.org wrote:
wtf?
Shit ! Sorry guys. There is a problem with the spam filter on my server. It's marking my outward emails as spam, not just inwards. In this case it's because mtnl static ip is marked somewhere as a spam source.
Oops again. It's a mtnl dynamic ip
It is recommended to use Static IP for any Internet facing servers; MTNL static IP costs Rs. 1000/annum and you can request the various RBLs to not block it.
My server has static ip. It's in a data center. It's marking as spam based in my laptop ip which is dynamic
Greetings,
On Wed, Aug 25, 2010 at 5:04 PM, Saswata Banerjee & Associates scrapo@saswatabanerjee.com wrote:
It is recommended to use Static IP for any Internet facing servers; MTNL static IP costs Rs. 1000/annum and you can request the various RBLs to not block it.
My server has static ip. It's in a data center. It's marking as spam based in my laptop ip which is dynamic
Then, it is elementary, just make that the smtp/pop/imap in the e-mail client.
Hopefully your Laptop linux does not have sendmail/postfix or other mta running.
Pardon me if I have not understood the scenario correctly.
Regards,
Rajagopal
Shit ! Sorry guys. There is a problem with the spam filter on my server. It's marking my outward emails as spam, not just inwards. In this case
it's because mtnl static ip is marked somewhere as a spam source.
Oops again. It's a mtnl dynamic ip
Any Internet facing mail server directly relays mails should have a Static I.P Address with a reverse PTR record set.
Many mail servers are configured to lookup RBLs that reject mails that originate from servers that do not have a reverse DNS record set. The reverse DNS lookup is essential for the recipient mail servers to correctly understand where the Mail originated from and the setting of reverse DNS records (PTR) record is now a standard practice followed by any server on the Internet directly relaying mails (this is mostly to prevent spam).
If you want to have your own Corporate Mail Server directly relay mails to the Internet, I highly recommend getting a static I.P Address from MTNL. The Static I.P Address from MTNL costs Rs 1000/- a year (for home use) and the Static I.P Address thus provided by MTNL also has a proper PTR record in place. You can also request MTNL to change this PTR record to something professional like mail.your-company name.com or something similar if you want to.
Another option you have is to use a smarthost to relay mails to the internet for you. A smart host is a dedicated Email server (mostly provided by your ISP or a third party) that has all the necessary settings in place for you to send your outgoing mails to it, and the relay host in turn will relay it to the Internet.
Please also refer to these URLs:-
http://en.wikipedia.org/wiki/Reverse_DNS_lookup http://en.wikipedia.org/wiki/Sender_Policy_Framework http://en.wikipedia.org/wiki/DNSBL
Regards,
You can also request MTNL to change this PTR record to something professional like mail.your-company name.com or something similar if you want to.
s/mail.your-company name.com/mail.your-company-name.com
Sent from my iPad Saswata Banerjee
On 25-Aug-2010, at 1:51 PM, Vivek Varghese Cherian vivekcherian@gmail.com wrote:
Shit ! Sorry guys. There is a problem with the spam filter on my server. It's marking my outward emails as spam, not just inwards. In this case
it's because mtnl static ip is marked somewhere as a spam source.
Oops again. It's a mtnl dynamic ip
Any Internet facing mail server directly relays mails should have a Static I.P Address with a reverse PTR record set.
Many mail servers are configured to lookup RBLs that reject mails that originate from servers that do not have a reverse DNS record set. The reverse DNS lookup is essential for the recipient mail servers to correctly understand where the Mail originated from and the setting of reverse DNS records (PTR) record is now a standard practice followed by any server on the Internet directly relaying mails (this is mostly to prevent spam).
If you want to have your own Corporate Mail Server directly relay mails to the Internet, I highly recommend getting a static I.P Address from MTNL. The Static I.P Address from MTNL costs Rs 1000/- a year (for home use) and the Static I.P Address thus provided by MTNL also has a proper PTR record in place. You can also request MTNL to change this PTR record to something professional like mail.your-company name.com or something similar if you want to.
Another option you have is to use a smarthost to relay mails to the internet for you. A smart host is a dedicated Email server (mostly provided by your ISP or a third party) that has all the necessary settings in place for you to send your outgoing mails to it, and the relay host in turn will relay it to the Internet.
Please see my earlier reply. I think the scenario is different from what my op made it look like. Please tell me what I need to do in that scenario.
Please also refer to these URLs:-
http://en.wikipedia.org/wiki/Reverse_DNS_lookup http://en.wikipedia.org/wiki/Sender_Policy_Framework http://en.wikipedia.org/wiki/DNSBL
Regards,
Vivek Varghese Cherian Senior Systems Administrator RHCT ( # 605010995430406)
Website : http://www.vivekcherian.com Blog: http://www.vivekcherian.net Linkedin: http://www.linkedin.com/in/vivekvc IRC: Vivek and ViveKVC on both Freenode and OFTC GPG Key fingerprint = 1EB1 0647 9574 18A3 40B5 8D74 F842 576B 3C2B 8538 -- http://mm.glug-bom.org/mailman/listinfo/linuxers