spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Markus Clardy <mar...@clardy.eu>
Subject Re: TO_NO_BRKTS_DYNIP
Date Tue, 05 Dec 2017 09:22:45 GMT
Amazon AWS machines sending out to the Internet should have a PTR record,
or else they will be on a lot of blacklists as well. Amazon works with a
number of blacklist providers and automatically has IPs without a static
PTR record blacklisted. When you request a PTR record from Amazon, they
then report the IP as clean to a number of blacklist providers to delist
you. In addition, you have a maximum number of outbound SMTP sessions per
day you can make until you request a PTR record. These were all put into
place to prevent spammers from spinning up free tier machines, sending from
clean IPs, and then deleting the machines.

On Mon, Dec 4, 2017 at 11:57 PM, RW <rwmaillists@googlemail.com> wrote:

> On Mon, 4 Dec 2017 12:52:29 -0800 (PST)
> John Hardin wrote:
>
> > On Mon, 4 Dec 2017, Joseph Brennan wrote:
> >
> > > New rule: TO_NO_BRKTS_DYNIP
> >
> > Old rule, perhaps newly promoted and published.
> >
> > > Since TO_NO_BRKTS_DYNIP is 2.361 and its component RDNS_DYNAMIC is
> > > 2.639, one gets an even 5.0 score just for sending from
> > > ec2-54-225-189-51.compute-1.amazonaws.com without < > around the To
> > > address.
> >
> > I'd be open to putting a limit on the score, say 1.5, so that the
> > combination isn't by itself a poison pill.
> >
>
> Those high scores are from the score set without Bayes or net rules
> where there's often not a lot to go on.
>
> The score for TO_NO_BRKTS_DYNIP is autogenerated, the two scores
> probably add up to exactly 5.000 for good reason.
>
> Maybe some special handling for amazonaws.com would be better.
>



-- 
 - Markus

Mime
View raw message