Whitelist web form e-mails {Scanned}

Stephen Swaney steve.swaney at FSL.COM
Mon Jan 12 19:02:21 GMT 2004


I take it that you're now receiving the emails from the web form, correct?

Your web form email was triggering several SpamAssassin tests. The worst two
were:

FORGED_RCVD_NET_HELO 4.10:

        header FORGED_RCVD_HELO         eval:check_for_forged_received_hel
        describe FORGED_RCVD_HELO       Received: contains a forged HELO

MSGID_FROM_MTA_SHORT 3.03:

        header MSGID_FROM_MTA_SHORT     eval:mta_added_message_id('short'
        describe MSGID_FROM_MTA_SHORT   Message-Id was added by a relay

You'd have to work through the SpamAssassin code to see exactly what header
setting in you web form created header layout triggered the problem, but I
suspect that the web form's use of the sender's email address in the From:
filed in a message (apparently) from your web server is the root of the
problem.

Steve

Stephen Swaney
President
Fortress Systems Ltd.
Steve.Swaney at FSL.com


> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of SW
> Sent: Monday, January 12, 2004 1:42 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Whitelist web form e-mails {Scanned}
>
> Stephen:
>
> > First - Are the emails getting rejected (deleted) or marked as spam?
> e-mails are being rejected as I have it setup in mailscanner to do so
>
> > And when you get another rejection, send us the details of why it was
> > rejected
> I'm not able to get the rejection for some reason. It's trying to bouce
> back
> to the sending server and something happens to it. But, I got it to work
> by
> adding the ip address of the sending e-mail server to the whitelist. Here
> is
> what comes now after adding that mailserver to the whitelist:
>
> X-WPPi-MailScanner-SpamCheck: not spam (whitelisted),
> SpamAssassin (score=7.288, required 4, BAYES_44 -0.00,
> FORGED_RCVD_NET_HELO 4.10, MSGID_FROM_MTA_SHORT 3.03,
> NO_REAL_NAME 0.16)
>
> Thanks,
>
> SW
>
> ----- Original Message -----
> From: "Stephen Swaney" <steve.swaney at FSL.COM>
> To: <MAILSCANNER at JISCMAIL.AC.UK>
> Sent: Monday, January 12, 2004 1:18 PM
> Subject: Re: Whitelist web form e-mails {Scanned}
>
>
>
> >
> > Second - Look at the full header of one of the emails, you should see
> > something like:
> >
> >
> > X-MailScanner-SpamCheck: spam, SpamAssassin (score=9.383, required 5,
> >         HTML_60_70 0.10, HTML_FONT_INVISIBLE 0.45, HTML_IMAGE_ONLY_04
> 1.53,
> >         HTML_MESSAGE 0.00, HTML_WEB_BUGS 0.59, MIME_HTML_ONLY 0.10,
> >         MIME_HTML_ONLY_MULTI 1.10, RCVD_IN_BL_SPAMCOP_NET 2.25,
> >         RCVD_IN_DYNABLOCK 2.55, RCVD_IN_NJABL 0.10,
> >         RCVD_IN_NJABL_DIALUP 0.53, RCVD_IN_SORBS 0.10)
> >
> > If you don't see this information in the header, please modify
> > MailScanner.conf to set:
> >
> >         Detailed Spam Report = yes
> >         Include Scores In SpamAssassin Report = yes
> >
> > And when you get another rejection, send us the details of why it was
> > rejected.
> >
> > Steve
> >
> > Stephen Swaney
> > President
> > Fortress Systems Ltd.
> > Steve.Swaney at FSL.com
> >
> > > -----Original Message-----
> > > From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> > > Behalf Of SW
> > > Sent: Monday, January 12, 2004 1:07 PM
> > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > Subject: Re: Whitelist web form e-mails {Scanned}
> > >
> > > > "Stephen Swaney" <steve.swaney at FSL.COM> wrote:
> > >
> > > > Why are the emails being rejected? What rules are triggering the
> > > rejection?
> > >
> > > The e-mails are being tagged by spamassassin as spam due to their
> content.
> > > I'm not sure why the content is seen as spam but that's what I'm
> getting.
> > >
> > > Thanks,
> > >
> > > SW
> > >
> > > ----- Original Message -----
> > > From: "Stephen Swaney" <steve.swaney at FSL.COM>
> > > To: <MAILSCANNER at JISCMAIL.AC.UK>
> > > Sent: Monday, January 12, 2004 12:48 PM
> > > Subject: Re: Whitelist web form e-mails {Scanned}
> > >
> > >
> > > > More information would be useful.
> > > >
> > >
> > > >
> > > > Steve
> > > >
> > > > Stephen Swaney
> > > > President
> > > > Fortress Systems Ltd.
> > > > Steve.Swaney at FSL.com
> > > >
> > > >
> > > > > -----Original Message-----
> > > > > From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]
> On
> > > > > Behalf Of SW
> > > > > Sent: Monday, January 12, 2004 12:47 PM
> > > > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > > > Subject: Whitelist web form e-mails {Scanned}
> > > > >
> > > > > I just found out that Mailscanner/Spamassassin rejectes e-mails
> coming
> > > > > from
> > > > > our web form which customer fill out. How do I get
> > > > > Mailscanner/Spamassassin
> > > > > to see them as not spam? The problem I'm having is that the way
> the
> > > web
> > > > > form
> > > > > is setup is
> > > mail that each e-mail that gets received has the person's
> e-
> > > > > address as the "From" field so it's impossible to add a
> 'whitelist'
> > > based
> > > > > on
> > > > > e-mail addresses because that will be different each time someone
> > > fills
> > > > > out
> > > > > the web form.
> > > > >
> > > > > Thanks,
> > > > >
> > > > > SW
> > > > >
> > > > >
> > > > >
> > > > > -------------------------------------------------
> > > > >         WPPi.com        |        WPPi.Net
> > > > > -------------------------------------------------
> > > > >   http://www.wppi.com   |  http://www.wppi.net
> > > > > -------------------------------------------------
> > > > > WPPi.com & WPPi.Net MailScanner Signature
> > > > > This message has been scanned for viruses
> > > > > and dangerous content by WPPi MailScanner,
> > > > > and has been found to be clean.
> > > > > -------------------------------------------------
> > > > >
> > > > > --
> > > > > This message has been scanned for viruses and
> > > > > dangerous content by MailScanner, and is
> > > > > believed to be clean.
> > > > >
> > > > > Fortress Systems Ltd.
> > > > > www.fsl.com
> > > > >
> > > >
> > > > -------------------------------------------------
> > > >         WPPi.com        |        WPPi.Net
> > > > -------------------------------------------------
> > > >   http://www.wppi.com   |  http://www.wppi.net
> > > > -------------------------------------------------
> > > > WPPi.com & WPPi.Net MailScanner Signature
> > > > This message has been scanned for viruses
> > > > and dangerous content by WPPi MailScanner,
> > > > and has been found to be clean.
> > > > -------------------------------------------------
> > > >
> > > >
> > >
> > >
> > >
> > > -------------------------------------------------
> > >         WPPi.com        |        WPPi.Net
> > > -------------------------------------------------
> > >   http://www.wppi.com   |  http://www.wppi.net
> > > -------------------------------------------------
> > > WPPi.com & WPPi.Net MailScanner Signature
> > > This message has been scanned for viruses
> > > and dangerous content by WPPi MailScanner,
> > > and has been found to be clean.
> > > -------------------------------------------------
> > >
> > > --
> > > This message has been scanned for viruses and
> > > dangerous content by MailScanner, and is
> > > believed to be clean.
> > >
> > > Fortress Systems Ltd.
> > > www.fsl.com
> > >
> >
> > -------------------------------------------------
> >         WPPi.com        |        WPPi.Net
> > -------------------------------------------------
> >   http://www.wppi.com   |  http://www.wppi.net
> > -------------------------------------------------
> > WPPi.com & WPPi.Net MailScanner Signature
> > This message has been scanned for viruses
> > and dangerous content by WPPi MailScanner,
> > and has been found to be clean.
> > -------------------------------------------------
> >
> >
>
>
>
> -------------------------------------------------
>         WPPi.com        |        WPPi.Net
> -------------------------------------------------
>   http://www.wppi.com   |  http://www.wppi.net
> -------------------------------------------------
> WPPi.com & WPPi.Net MailScanner Signature
> This message has been scanned for viruses
> and dangerous content by WPPi MailScanner,
> and has been found to be clean.
> -------------------------------------------------
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
> Fortress Systems Ltd.
> www.fsl.com
>



More information about the MailScanner mailing list