High Scoring Spam Actions not firing

Andy Norris andy at TIRESWING.NET
Wed Dec 1 20:46:37 GMT 2004


Hi,

I upgraded MailScanner several days ago (to previous version), and since,
it seems my high scoring actions are not firing. I have spam scoring higher
than 10 going to another address (spamgreylist at ...) and nothing is going
there. Everyone is getting all the spam that's coming to them... Just
marked with the report...

Anything I should look at first?

The header report is included... clearly high scoring!

Thanks,

Andy

Content analysis details:   (26.7 points, 5.0 required)

  pts rule name              description
---- ---------------------- --------------------------------------------------
  2.8 MIME_BOUND_DD_DIGITS   Spam tool pattern in MIME boundary
  0.1 HTML_60_70             BODY: Message is 60% to 70% HTML
  0.1 HTML_MESSAGE           BODY: HTML included in message
  5.4 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                             [score: 1.0000]
  0.3 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.6 MIME_HTML_NO_CHARSET   RAW: Message text in HTML without charset
  1.6 NO_DNS_FOR_FROM        Domain in From header has no MX or A DNS records
  1.2 RCVD_IN_SORBS_HTTP     RBL: SORBS: sender is open HTTP proxy server
                             [220.126.114.111 listed in dnsbl.sorbs.net]
  2.3 RCVD_IN_NJABL_PROXY    RBL: NJABL: sender is an open proxy
                             [220.126.114.111 listed in combined.njabl.org]
  0.0 RCVD_IN_SORBS_MISC     RBL: SORBS: sender is open proxy server
                             [220.126.114.111 listed in dnsbl.sorbs.net]
  4.9 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                             [220.126.114.111 listed in sbl-xbl.spamhaus.org]
  0.4 RCVD_IN_SORBS_WEB      RBL: SORBS: sender is a abuseable web server
                             [220.126.114.111 listed in dnsbl.sorbs.net]
  0.1 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                             [220.126.114.111 listed in dnsbl.sorbs.net]
  0.7 RCVD_IN_DSBL           RBL: Received via a relay in list.dsbl.org
                             [<http://dsbl.org/listing?220.126.114.111>]
  1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
              [Blocked - see <http://www.spamcop.net/bl.shtml?220.126.114.111>]
  1.7 RCVD_IN_NJABL_DUL      RBL: NJABL: dialup sender did non-local SMTP
                             [220.126.114.111 listed in combined.njabl.org]
  1.2 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
  1.1 MIME_HTML_ONLY_MULTI   Multipart message only has text/html MIME parts
  0.7 MSGID_FROM_MTA_HEADER  Message-Id was added by a relay

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list