4.9 marked as spam.

Julian Field mailscanner at ecs.soton.ac.uk
Tue Jan 13 16:18:54 GMT 2004


At 15:25 13/01/2004, you wrote:
>As you had ask me to:
>From:   192.58.206.19                  yes
>From:   16.11.1.22                    yes

Check your maillog to see where it thinks the SMTP connection came from.
You might need to add
From:   127.0.0.1       yes
to the list as well.

>I've also tried:
>From:   root at 192.58.206.19                  yes
>From:   root at 16.11.1.22                    yes

As Antony said, these can't possibly work.


>mail H ============================
>
>Subject: **SPAM** #111 Named on
>X-HPLC-MailScanner-Information: Please contact the ISP for more information
>X-HPLC-MailScanner: Found to be clean
>X-HPLC-MailScanner-SpamCheck: spam, SORBS-DNSBL, SpamAssassin (score=-4.9,
>         required 5, BAYES_00 -4.90)
>
>
>-----Original Message-----
>From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
>Behalf Of Julian Field
>Sent: Tuesday, January 13, 2004 10:01 AM
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: Re: 4.9 marked as spam.
>
>
>You are correct. What are the entries for your server?
>
>At 14:58 13/01/2004, you wrote:
> >I was looking over the conf file looking for alternatives and I felt the
> >Spam Whitelist file should have corrected the problems by *never* marking
> >the messages as spam once I added my servers address to it,  am I correct
> >to assume this?
> >
> >Lou
> >
> >
> >-----Original Message-----
> >From: Baccari, Lou
> >Sent: Monday, January 12, 2004 11:26 AM
> >To: 'MailScanner mailing list'
> >Subject: RE: 4.9 marked as spam.
> >
> >
> >
> >Julian,
> >
> >  Thanks, that corrected the "Config Error:" problem, but mail from root
> > still gets flagged as spam.
> >
> >  I also tried removing SORBS-DNSBL from MailScanner.conf and mail from
> > root passes.  I've provide the header below.
> >
> >  As stated earlier I checked
> > http://www.dnsbl.us.sorbs.net/cgi-bin/lookup?js&IP= and tested my servers
> > there and they came up clean, i.e. 'No entry found'.  What could have
> > happen since yesterday?  Is there an other means of testing SORBS-DNSBL
> list?
> >
> >Lou.
> >
> >
> >
> >==== Mail H =======
> >
> >X-HPLC-MailScanner: Found to be clean
> >X-HPLC-MailScanner-SpamCheck: not spam, SpamAssassin (score=-4.9,
> required 5,
> >         BAYES_00 -4.90)
> >X-HPLC-MailScanner-Information: Please contact the ISP for more information
> >X-MailScanner: Found to be clean
> >X-MailScanner-SpamCheck: not spam, SpamAssassin (score=-0.904, required 5,
> >         BAYES_30 -0.90)
> >X-PMX-Version: 4.1.1.86173
> >
> >
> >
> >
> >-----Original Message-----
> >From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> >Behalf Of Julian Field
> >Sent: Monday, January 12, 2004 11:13 AM
> >To: MAILSCANNER at JISCMAIL.AC.UK
> >Subject: Re: 4.9 marked as spam.
> >
> >
> >At 16:05 12/01/2004, you wrote:
> > >Thanks,  I Tried your suggestion and I now see the following error:
> > >
> > >an 12 11:03:50 crl-ns1b MailScanner[20125]: Uninfected: Delivered 1
> messages
> > >Jan 12 11:03:50 crl-ns1b MailScanner[20125]: New Batch: Scanning 1
> > >messages, 874 bytes
> > >Jan 12 11:03:50 crl-ns1b MailScanner[20125]: Config Error: Cannot match
> > >against  destination IP address when resolving configuration
> > >  option  "spamwhitelist"
> > >Jan 12 11:03:50 crl-ns1b MailScanner[20125]: Config Error: Cannot match
> > >against  destination IP address when resolving configuration
> > >  option  "spamwhitelist"
> >
> >Sorry, my mistake. Put "From:" instead of "FromTo:" in both of those rules.
> >
> >
> > >=== spam.whitelist.rules =======
> > >#
> > >FromTo:   192.58.206.19                  yes
> > >FromTo:   16.11.1.22                    yes
> > >
> > >
> > >-----Original Message-----
> > >From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> > >Behalf Of Julian Field
> > >Sent: Monday, January 12, 2004 10:17 AM
> > >To: MAILSCANNER at JISCMAIL.AC.UK
> > >Subject: Re: 4.9 marked as spam.
> > >
> > >
> > >At 15:10 12/01/2004, you wrote:
> > > >Hello,
> > > >
> > > >It appears that today I can not send any mail to myself without it being
> > > >marked as spam. I even added myself to the white list and the problem
> > > >continues.  Any ideas?
> > > >
> > > >Lou.
> > > >
> > > >==== Mail H ============
> > > >
> > > >Subject: **SPAM** Restarted Named on
> > > >X-HPLC-MailScanner: Found to be clean
> > > >X-HPLC-MailScanner-SpamCheck: spam, SORBS-DNSBL, SpamAssassin
> (score=-4.9,
> > > >         required 5, BAYES_00 -4.90)
> > > >X-HPLC-MailScanner-Information: Please contact the ISP for more
> > information
> > > >X-MailScanner: Found to be clean
> > > >X-MailScanner-SpamCheck: not spam, SpamAssassin (score=-0.001,
> required 5,
> > > >         BAYES_40 -0.00)
> > > >Return-Path: root at crl-ns1b.crl.dec.com
> > > >X-OriginalArrivalTime: 12 Jan 2004 15:06:15.0627 (UTC)
> > > >FILETIME=[9FE379B0:01C3D91D]
> > > >
> > > >==== spam.whitelist.rules ============
> > > >
> > > >FromTo:   *@192.58.206.19                  yes
> > > >FromTo:   *@*192.58.206.19                  yes
> > > >FromTo:   *@16.11.1.22                     yes
> > > >FromTo:   *@*16.11.1.22                    yes
> > >
> > >You whitelist rules are wrong. You can whitelist IP addresses, but IP
> > >addresses and email addresses are totally different things. You should be
> > >using these lines instead:
> > >
> > >FromTo:   192.58.206.19                  yes
> > >FromTo:   16.11.1.22                     yes
> > >
> > >--
> > >Julian Field
> > >www.MailScanner.info
> > >MailScanner thanks transtec Computers for their support
> > >
> > >PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> >
> >--
> >Julian Field
> >www.MailScanner.info
> >Professional Support Services at www.MailScanner.biz
> >MailScanner thanks transtec Computers for their support
> >PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
>--
>Julian Field
>www.MailScanner.info
>MailScanner thanks transtec Computers for their support
>
>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654



More information about the MailScanner mailing list