Something strange...Any ideas? {Scanned}

[SW]

Yesterday, I received an e-mail (spam) which did not contain our
X-Mailscanner header in the e-mail but instead something else and I'm trying
to figure out how this e-mail got passed Mailscanner and spamassassin. All
e-mails that come through are setup to have the following header added such
as this:

X-WPPi-MailScanner-Information: Please contact WPPi for more information
X-WPPi-MailScanner: Found to be clean
X-WPPi-MailScanner-SpamCheck: not spam, SpamAssassin (score=1.087,
 required 4, CLICK_BELOW 0.00, HTML_30_40 0.81,
 HTML_FONTCOLOR_BLUE 0.10, HTML_MESSAGE 0.00,
 HTML_TAG_EXISTS_TBODY 0.10, TW_OQ 0.08)


Here is the header information for the spam which did not contain any of our
e-mail headers which tells me that it did not get scanned by Mailscanner/SA:

Return-Path: <jtkbekkm at kichimail.com>
Received: from outsourcedmail.com ([203.252.205.129])
 by wppi.net (8.10.2/8.10.2) with SMTP id i0R39xI06388
 for <sales at wppi.net>; Mon, 26 Jan 2004 22:10:00 -0500
Received: (from www at localhost)
    by outsourcedmail.com (SMTPD32-7.15) with ESMTP id J87Gz037587771
    for <sales at wppi.net>; Mon, 26 Jan 2004 22:09:23 -0500 (EST)
    (envelope-from www)
Message-ID: <046871068995.85qHtXdcfx3X0E at localhost>
From: "Nicole Richards" <jtkbekkm at kichimail.com>
To: sales at wppi.net
Subject: Design Your Logo {Scanned}
Date: Mon, 26 Jan 2004 22:09:23 -0500 (EST)
X-AntiAbuse: This header was added to track abuse, please include it with
any abuse report
X-AntiAbuse: Primary Hostname - outsourcedmail.com
X-AntiAbuse: Original Domain - outsourcedmail.com
X-AntiAbuse: Originator/Caller UID/GID - [80 80] / [80 80]
X-AntiAbuse: Sender Address Domain -
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0222_01C3C64F.FBD71A00"

Thanks,

SW



-------------------------------------------------
        WPPi.com        |        WPPi.Net
-------------------------------------------------
  http://www.wppi.com   |  http://www.wppi.net
-------------------------------------------------
WPPi.com & WPPi.Net MailScanner Signature
This message has been scanned for viruses
and dangerous content by WPPi MailScanner,
and has been found to be clean.
-------------------------------------------------