[squid-users] Squid checking for both dstdomain and IP

[Bruno de Paula Larini]

Spam detection software, running on the system "master.squid-cache.org",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  Thanks for replying. I was already following the provided
  link for reference. It seems that splicing on step2 was correct, but in fact
   there were other things that I missed. acl allowed_sites dstdomain "/etc/squid/allowed-sites.txt"
   # Creates acl containing domain names for splice. acl spliced_sites ssl::server_name
   "/etc/squid/allowed-sites.txt" http_access allow allowed [...] 

Content analysis details:   (5.6 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                            [171.171.0.181 listed in zen.spamhaus.org]
 1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 0.0 NORMAL_HTTP_TO_IP      URI: URI host has a public dotted-decimal IPv4
                             address
 0.0 NUMERIC_HTTP_ADDR      URI: Uses a numeric IP address in URL
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                            valid
-0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                            author's domain
-0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                            envelope-from domain
-0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 1.3 RDNS_NONE              Delivered to internal network by a host with no rDNS
 0.0 UNPARSEABLE_RELAY      Informational: message has unparseable relay
                            lines
-0.0 T_SCC_BODY_TEXT_LINE   No description available.
-0.0 NICE_REPLY_A           Looks like a legit reply (A)
 0.0 NO_FM_NAME_IP_HOSTN    No From name + hostname using IP address


-------------- next part --------------
An embedded message was scrubbed...
From: Bruno de Paula Larini <bruno.larini at riosoft.com.br>
Subject: Re: [squid-users] Squid checking for both dstdomain and IP
Date: Tue, 28 Jun 2022 15:32:29 -0300
Size: 5921
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20220628/febd89fa/attachment.eml>