[Mimedefang] Re: filter_relay not working

[Joseph Brennan]

> As always, logging without blocking works well to build up statistics.

Yes, done.

In an hour I am seeing legit places that send with HELO followed
by an IP number such as

lists.sfcg.org 			#nonprofit group
lyris.smallcapnetwork.net       #financial newsletter
mail.saul.com			#law firm

It does have a fairly high correlation to spam.  More common than
the above are things like list-opt-out.com, 1000freenotes.com,
funny-looking yahoo.com sender addresses, and so on.

This looks more like a Spamassassin thing.  That is, not a clear
yes-no but something contributing to a spam rating.

Joseph Brennan          Columbia University in the City of New York
postmaster at columbia.edu                 Academic Technologies Group