Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id D34B5200D41 for ; Wed, 22 Nov 2017 13:36:30 +0100 (CET) Received: by cust-asf.ponee.io (Postfix) id D1F40160BFD; Wed, 22 Nov 2017 12:36:30 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 24836160BDA for ; Wed, 22 Nov 2017 13:36:29 +0100 (CET) Received: (qmail 86061 invoked by uid 500); 22 Nov 2017 12:36:28 -0000 Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@spamassassin.apache.org Received: (qmail 86051 invoked by uid 99); 22 Nov 2017 12:36:28 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 22 Nov 2017 12:36:28 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id C0323C40A2 for ; Wed, 22 Nov 2017 12:36:27 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -0.391 X-Spam-Level: X-Spam-Status: No, score=-0.391 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, KB_WAM_FROM_NAME_SINGLEWORD=0.2, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=disabled Authentication-Results: spamd1-us-west.apache.org (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=gregorie.org Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id Z7jrq_XZrWLB for ; Wed, 22 Nov 2017 12:36:26 +0000 (UTC) Received: from shcp17.hosting.zen.net.uk (shcp17.hosting.zen.net.uk [82.71.205.14]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTPS id 0ADAA5FD79 for ; Wed, 22 Nov 2017 12:36:26 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gregorie.org; s=default; h=Content-Transfer-Encoding:Mime-Version: Content-Type:References:In-Reply-To:Date:To:Reply-To:From:Subject:Message-ID: Sender:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=3NrYHC4yZQbqXvHMhtlB1OROGpArDINHY6UITt/f8sI=; b=MtME7PPzBNkVZFWDgV6oI03qE0 r6NXSU7JdYDHXptwC8DGU3JN/SA+CtSTL0x/joFE3te/YYueQImHVm0z48knYLrXLcAYFkWGNDr8p F8wE1mAqmD2lCvBx/e1ivyWedDSWRFn5K+9z8uh071HYtCFMuvGqPqkxjUVNfsGW5ECmzSrP34YNG jHwKpb6YK62nPkvzNNtIbP+x745/2PxRBLAXUIiWrEz70A999iXarn5lSB1ct2HQx7jQspvMKBZG+ 8A6Tc3HjjLtltCsZDaewZwCPUEnF50uI9MoA7XnaPXPmbkGfFXrWbQEntoYZR55bMfSZkwk96Fvs9 2uM+Zr0A==; Received: from 84-45-235-129.static.enta.net ([84.45.235.129]:15298 helo=zoogz.gregorie.org) by shcp17.hosting.zen.net.uk with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89) (envelope-from ) id 1eHUGH-001l5t-VI for users@spamassassin.apache.org; Wed, 22 Nov 2017 12:36:18 +0000 Received: from zappa.gregorie.lan (zappa.gregorie.lan [192.168.7.5]) by zoogz.gregorie.org (Postfix) with ESMTP id 070D31E00A6 for ; Wed, 22 Nov 2017 12:36:18 +0000 (GMT) Message-ID: <1511354177.19668.6.camel@gregorie.org> Subject: Re: Scoring Philosophy? From: Martin Gregorie Reply-To: martin@gregorie.org To: users@spamassassin.apache.org Date: Wed, 22 Nov 2017 12:36:17 +0000 In-Reply-To: <230729A5-B49A-4CB2-B866-8FFDCE127294@billmail.scconsult.com> References: <63d7b3de-99e1-eed1-b212-7aa762f626fc@malcolms.com> <230729A5-B49A-4CB2-B866-8FFDCE127294@billmail.scconsult.com> Organization: Martin Gregorie Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.22.6 (3.22.6-2.fc25) Mime-Version: 1.0 Content-Transfer-Encoding: 8bit X-OutGoing-Spam-Status: No, score=2.0 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - shcp17.hosting.zen.net.uk X-AntiAbuse: Original Domain - spamassassin.apache.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - gregorie.org X-Get-Message-Sender-Via: shcp17.hosting.zen.net.uk: authenticated_id: martin@c3487738.myzen.co.uk X-Authenticated-Sender: shcp17.hosting.zen.net.uk: martin@c3487738.myzen.co.uk archived-at: Wed, 22 Nov 2017 12:36:31 -0000 On Wed, 2017-11-22 at 00:39 -0500, Bill Cole wrote: > A related and increasingly common (dunno why) source of never > hitting DNSBL rules is a form of firewall/router NAT sometimes called > "Secure NAT" where inbound connections have their source IP's > replaced with the IP of the device handling the NAT. > Thanks for the heads-up on this 'Secure NAT' facility: this the first I've heard of it, but I don't buy ADSL routers very often. I have a slightly OTT question about it: in your experience has this 'Secure NAT' facility been selectable as part of the device's configuration or is it always on? Martin