-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
El 2023-01-07 a las 14:54 +0100, Carlos E. R. escribió:
El 2023-01-07 a las 13:01 +0100, Per Jessen escribió:
Carlos E. R. wrote:
...
Anyway, grepping on /var/log/mail-202301*.xz doesn't find "spamhaus" or
"open resolver", so that is not my problem.
But it is!
I just looked in my spam folder, which contains only 8 emails after that
long processing, and one of them has:
Date: 30 Nov 2022 02:40:30 -0800
From: opensuse.org
To: opensuse-project@opensuse.org
Subject: (8) Incoming mails are pending
...
Content analysis details: (7.4 points, 5.0 required)
pts rule name description
- ---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query
to zen.spamhaus.org was blocked due to
usage of an open resolver. See
https://www.spamhaus.org/returnc/pub/
[195.135.221.145 listed in zen.spamhaus.org]
- -0.4 RCVD_IN_DNSWL_MED RBL: Sender listed at https://www.dnswl.org/,
medium trust
[195.135.221.145 listed in list.dnswl.org]
- -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
- -0.0 SPF_PASS SPF: sender matches SPF record
0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence
0.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.2 HTML_MESSAGE BODY: HTML included in message
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[84.21.172.201 listed in zen.spamhaus.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
- -1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list
manager
2.7 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised
website + no rDNS
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: w3s.link]
0.0 URIBL_ZEN_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage
of an open resolver. See
https://www.spamhaus.org/returnc/pub/
[URIs: ipfs.io, w3s.link]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: w3s.link]
Ok, so the score is zero, which in a way does not affect me, but I'm
wasting time doing such queries. spamhaus and URIBL.
This must be affecting any openSUSE user that uses SA in default
configuration.
- --
Cheers,
Carlos E. R.
(from openSUSE 15.4 x86_64 at Telcontar)
-----BEGIN PGP SIGNATURE-----
iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCY7l8HRwccm9iaW4ubGlz
dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfVtcgAoIYeW78zX5Zv89hreiG0
7Q1R5UThAJ4xVKEUrzagvvWWbczk9SPLZNMMNA==
=ypOx
-----END PGP SIGNATURE-----
