Some e-mails not being scanned? {Scanned}

[Julian Field]

I suspect from the headers that you have an email-generating app (a webmail
system perhaps?) that is sending mail by directly invoking the sendmail
binary. You need to get this app to send mail by talking SMTP to localhost
instead.
Either that or you have bypassed the MS host in some way for this mail. As
you don't say which of the systems involved is the MS host, it is
impossible to say for definite.

At 15:42 15/02/2004, you wrote:
>Can someone tell me why some e-mails don't get scanned by MS/SA? I know they
>are not being scanned because they are missing the mailscanner header info.
>The only thing I can think of is that there is something in mailscanner
>which ignores e-mails that contain in the header 'X-AntiAbuse' and flags
>them as non-spam. Not sure if I'm right but hopefully someone here can help.
>
>Here is a sample e-mail header which does not get scanned by mailscanner:
>
>Return-Path: <txcqkkkg at boardermail.com>
>Received: from free-web-hosting-and-free-email.com
>(pcp07722622pcs.nrockv01.md.comcast.net [69.138.239.114])
>  by wppi.net (8.10.2/8.10.2) with SMTP id i1BMkQA01925
>  for <sales at wppi.net>; Wed, 11 Feb 2004 17:46:30 -0500
>Received: (from www at localhost)
>     by free-web-hosting-and-free-email.com (SMTPD32-7.00) with ESMTP id
>J87Gz037587771
>     for <sales at wppi.net>; Wed, 11 Feb 2004 17:44:37 -0500 (EST)
>     (envelope-from www)
>Message-ID: <823244444119.yyr36h3MgwRq8N at localhost>
>From: "Ruthie Nixon" <txcqkkkg at boardermail.com>
>To: sales at wppi.net
>Subject: Website Intros and Animated Logos {Scanned}
>Date: Wed, 11 Feb 2004 17:44:37 -0500 (EST)
>X-AntiAbuse: This header was added to track abuse, please include it with
>any abuse report
>X-AntiAbuse: Primary Hostname - free-web-hosting-and-free-email.com
>X-AntiAbuse: Original Domain - free-web-hosting-and-free-email.com
>X-AntiAbuse: Originator/Caller UID/GID - [80 80] / [80 80]
>X-AntiAbuse: Sender Address Domain -
>MIME-Version: 1.0
>Content-Type: multipart/alternative;
>         boundary="----=_NextPart_000_0222_01C3C64F.FBD71A00"
>
>
>Thanks,
>
>SW
>
>
>
>-------------------------------------------------
>         WPPi.com        |        WPPi.Net
>-------------------------------------------------
>   http://www.wppi.com   |  http://www.wppi.net
>-------------------------------------------------
>WPPi.com & WPPi.Net MailScanner Signature
>This message has been scanned for viruses
>and dangerous content by WPPi MailScanner,
>and has been found to be clean.
>-------------------------------------------------

--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654