try this in your local.cf and then search message fired
it hit a lot of messages and all are spam or newsletter
## BLACKLIST dnsbl.abyan.es
header C_RBL_ABYAN_ES eval:check_rbl('dnsbl.abyan.es-lastexternal', 'dnsbl.abyan.es.')
describe C_RBL_ABYAN_ES Listed in dnsbl.abyan.es
tflags C_RBL_ABYAN_ES net
score C_RBL_ABYAN_ES 2.00
very very efficient rbl
Re: very very efficient rbl
Where is local.cf located?
Re: very very efficient rbl
/etc/mail/spamassassin/
PS: Nicola? No hits on this one yet. So it might be more useful for European spam.
PS: Nicola? No hits on this one yet. So it might be more useful for European spam.