High Scoring Spam Actions not firing
Andy Norris
andy at TIRESWING.NET
Wed Dec 1 20:46:37 GMT 2004
Hi,
I upgraded MailScanner several days ago (to previous version), and since,
it seems my high scoring actions are not firing. I have spam scoring higher
than 10 going to another address (spamgreylist at ...) and nothing is going
there. Everyone is getting all the spam that's coming to them... Just
marked with the report...
Anything I should look at first?
The header report is included... clearly high scoring!
Thanks,
Andy
Content analysis details: (26.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.8 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary
0.1 HTML_60_70 BODY: Message is 60% to 70% HTML
0.1 HTML_MESSAGE BODY: HTML included in message
5.4 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.3 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.6 MIME_HTML_NO_CHARSET RAW: Message text in HTML without charset
1.6 NO_DNS_FOR_FROM Domain in From header has no MX or A DNS records
1.2 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server
[220.126.114.111 listed in dnsbl.sorbs.net]
2.3 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy
[220.126.114.111 listed in combined.njabl.org]
0.0 RCVD_IN_SORBS_MISC RBL: SORBS: sender is open proxy server
[220.126.114.111 listed in dnsbl.sorbs.net]
4.9 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[220.126.114.111 listed in sbl-xbl.spamhaus.org]
0.4 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server
[220.126.114.111 listed in dnsbl.sorbs.net]
0.1 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[220.126.114.111 listed in dnsbl.sorbs.net]
0.7 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
[<http://dsbl.org/listing?220.126.114.111>]
1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?220.126.114.111>]
1.7 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
[220.126.114.111 listed in combined.njabl.org]
1.2 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
1.1 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts
0.7 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list