<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Lorenzo,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I fixed your name in the blog post and did a little more homework on the X-Originating-IP false positives thing. Years ago I too removed adding this header for the same reason, but today I use it for DoSFilter, which I like very much
<a href="https://www.missioncriticalemail.com/2018/10/19/using-zimbras-dosfilter-and-failed-login-lockout-policy-together/" title="https://www.missioncriticalemail.com/2018/10/19/using-zimbras-dosfilter-and-failed-login-lockout-policy-together/">
in combination with a failed lockout policy</a>.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I egrepped all of my zimbra.log files and have found zero instances of RCVD_IN_PBL tests, even though I have many, many users who work remotely from dynamic IP addresses sure to be listed in Spamhaus's PBL.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Not sure when/how Zimbra addressed this, but the biggest false positive issue I have faced is from ZCO users, and the two MX test scores I added to sauser.cf in my blog post fixes that.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I just don't see any X-Originating-IP false positives any more on 8.8.x like we all used to years ago.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hope that helps,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Mark</div>
<div id="signature">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<p style="margin-top: 0px; margin-bottom: 0px;"><strong>_________________________________________________</strong></p>
<p style="margin-top: 0px; margin-bottom: 0px;"><strong>Another Message From... L. Mark Stone</strong></p>
<p style="margin-top: 0px; margin-bottom: 0px;"><br>
</p>
</div>
</div>
<div id="appendonsend"></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Lorenzo Milesi <maxxer@yetopen.it><br>
<b>Sent:</b> Friday, March 22, 2019 7:35 AM<br>
<b>To:</b> L Mark Stone<br>
<b>Cc:</b> users<br>
<b>Subject:</b> Re: [Users] Zimbra Anti-Spam Best Practices - 2019</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt">
<div class="PlainText">One last matter: I usually need to remove x-originating-ip in config because it caused SA/Amavis from considering this IP as "originating", thus marking mails as spam based on the client connection. Did you ever run in such problem?<br>
<br>
-- <br>
Lorenzo Milesi - lorenzo.milesi@yetopen.it<br>
<br>
YetOpen S.r.l. - <a href="https://www.yetopen.it/">https://www.yetopen.it/</a><br>
Via Salerno 18 - 23900 Lecco - ITALY -<br>
Tel +39 0341 220 205 - Fax +39 178 6070 222<br>
<br>
Think green - Non stampare questa e-mail se non necessario / Don't print this email unless necessary<br>
<br>
-------- D.Lgs. 196/2003 e GDPR 679/2016 --------<br>
Tutte le informazioni contenute in questo messaggio sono riservate ed a uso esclusivo del destinatario.<br>
Tutte le informazioni ivi contenute, compresi eventuali allegati, sono da ritenere confidenziali e riservate secondo i termini<br>
del vigente D.Lgs. 196/2003 in materia di privacy e del Regolamento europeo 679/2016 - GDPR - e quindi ne e' proibita l'utilizzazione ulteriore non autorizzata.<br>
Nel caso in cui questo messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo, stamparlo, a non inoltrarlo a terzi e ad avvertirci non appena possibile.<br>
Grazie.<br>
<br>
Confidentiality notice: this email message including any attachment is for the sole use of the intended recipient and may contain confidential and privileged information;<br>
pursuant to Legislative Decree 196/2003 and the European General Data Protection Regulation 679/2016 - GDPR - any unauthorized review, use, disclosure or distribution<br>
is prohibited. If you are not the intended recepient please delete this message without copying, printing or forwarding it to others, and alert us as soon as possible.<br>
Thank you.<br>
<br>
</div>
</span></font></div>
</body>
</html>