spam mail not being tagged as spam

Baccari, Lou Lou.Baccari at HP.COM
Fri Mar 28 14:32:03 GMT 2003


Here goes:

output from maillog:
==================================================================
 
Mar 27 08:25:55 crl-mail sendmail[1957]: h2RDPo5O001957: from=<yqs3285ev at msn.com>, size=3860, class=0, nrcpts=4, msgid=<lw7486---0$$
72-t$b$q at y7uy.h.xo>, proto=SMTP, daemon=MTA, relay=[210.22.108.5]
Mar 27 08:25:55 crl-mail MailScanner[32619]: New Batch: Scanning 1 messages, 4416 bytes
Mar 27 08:25:55 crl-mail MailScanner[32619]: Spam Checks: Starting
Mar 27 08:25:55 crl-mail MailScanner[32619]: Virus and Content Scanning: Starting
Mar 27 08:25:55 crl-mail MailScanner[32619]: Uninfected: Delivered 1 messages
Mar 27 08:25:56 crl-mail sendmail[1964]: h2RDPo5O001957: to=CRLProblems at compaq.com,Andrew.Christian at compaq.com,Jim.Rehg at compaq.com,j
amey.hicks at compaq.com , delay=00:00:04, xdelay=00:00:01, mailer=esmtp, pri=210584, relay=cceexg11.americas.cpqcorp.net. [16.110.250.
125], dsn=2.0.0, stat=Sent ( <lw7486---0$$72-t$b$q at y7uy.h.xo> Queued mail for delivery)
Mar 27 08:25:58 crl-mail sendmail[1945]: h2RDOL5O001930: to=<jbargmann at bhplus.com>, delay=00:01:37, xdelay=00:00:05, mailer=esmtp, p
ri=3511168, relay=pop.bhplus.com. [66.106.30.251], dsn=2.0.0, stat=Sent (OK)
Mar 27 08:26:01 crl-mail sendmail[1964]: h2RDPo5O001957: to=alden at quabbin.crl.dec.com, delay=00:00:09, xdelay=00:00:05, mailer=esmtp
, pri=210584, relay=quabbin.crl.dec.com. [16.11.0.45], dsn=5.1.1, stat=User unknown
Mar 27 08:26:01 crl-mail sendmail[1964]: h2RDPo5O001957: h2RDPt5X001964: DSN: User unknown
 
header info from mail messages:  
==================================================================
 
Received: from 192.58.206.9 ([210.22.108.5])
 by crl-mail.crl.dec.com (8.12.8/8.12.5) with SMTP id h2RDPo5O001957;
 Thu, 27 Mar 2003 08:25:52 -0500
Received: from vll.aa88.com [180.112.242.203] by 192.58.206.9 with ESMTP id <095654-97600>; Thu, 27 Mar 2003 16:17:37 +0300
Message-ID: <lw7486---0$$72-t$b$q at y7uy.h.xo>
From: "Jacques Burgos" <yqs3285ev at msn.com>
To: <jamey at crl.dec.com>, <alden at crl.dec.com>, <rehg at crl.dec.com>,
   <webmaster at crl.dec.com>, <jamey at crl.dec.com>
Subject: Re:Want a king-size P-E-N-I-S in one week? ihtklrhyomc
Date: Thu, 27 Mar 03 16:17:37 GMT
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: eGroups Message Poster
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="_.A._ECE.433CADD750_D"
X-MailScanner: Found to be clean
Return-Path: yqs3285ev at msn.com
X-OriginalArrivalTime: 27 Mar 2003 13:25:56.0453 (UTC) FILETIME=[65F92950:01C2F464]
 
--_.A._ECE.433CADD750_D
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
 

--_.A._ECE.433CADD750_D--


-----Original Message-----
From: Spicer, Kevin [mailto:Kevin.Spicer at BMRB.CO.UK]
Sent: Friday, March 28, 2003 9:04 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: spam mail not being tagged as spam


>Hi,
>
> Yesterday I tried to send out a question to the group regarding spam mail not being
>tagged. I attached the spam message and extracted some of maillog. I never received a copy 
>of this message, which I have to assume the mail server supporting this list is using 
>MailScanner and removed it.  
>
> How do I send an example of a spam mail and the maillog / header log to the group for you review?

I  can't resist pointing out that Outlook (when displaying messages grouped by conversion topic) displays the Thread-Topic header as the conversation topic - which can be entertaining when others forward a mail, deleting the body and changing the subject.  I presume that was the title of the original spam and not part of your regular correspondence ;)

Seriously though, why don't you just post the headers & maillog I wouldn't have thought the actual content of the spam makes much difference.




BMRB International 
http://www.bmrb.co.uk
+44 (0)20 8566 5000
_________________________________________________________________
This message (and any attachment) is intended only for the 
recipient and may contain confidential and/or privileged 
material.  If you have received this in error, please contact the 
sender and delete this message immediately.  Disclosure, copying 
or other action taken in respect of this email or in 
reliance on it is prohibited.  BMRB International Limited 
accepts no liability in relation to any personal emails, or 
content of any email which does not directly relate to our 
business.




More information about the MailScanner mailing list