MS not scoring spam messages

[George Edwards]

----- Original Message -----
From: "Ugo Bellavance" <ugob at CAMO-ROUTE.COM>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Thursday, July 01, 2004 9:20 AM
Subject: Re: MS not scoring spam messages


> George Edwards wrote:
> > I am getting a lot of spam to go through that MS does not seem to be
> > scanning at all.  No time out errors either.  According to the header MS
> > sees the mail, but only adds the sending address, no scoring.  MS is
> > catching most spam, but still a ton gets through like this.  Has anyone
else
> > experienced this?  Does anyone know why MS may be doing this?  Sample
header
> > follows.
> >
> > Thanks for any help,
> > George
> >
> >
> > From: "Madeline Frazier" <Bppjp at angelfire.com>
> > To: <mycustomer at mydomain.com>
> > Subject: MS Encarta Encyclopedia wn Standart 2004
> > Date: Thu, 1 Jul 2004 01:03:57 -0500
> > Message-ID: <4227757675.619 at mail.ru>
> > MIME-Version: 1.0
> > Content-Type: multipart/alternative;
> >             boundary="----=_NextPart_000_000A_01C45F3F.13CF7D40"
> > X-Mailer: Microsoft Outlook, Build 10.0.4510
> > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
> > X-MailScanner-From: bppjp at angelfire.com
> > X-RCPT-TO: <mycustomer at mydomain.com>
> > X-UIDL: 332806919
> Funny, I have at least these headers on all messages:
>
> X-camo-route-MailScanner-Information: Contactez le gestionnaire de
courriels
> X-camo-route-MailScanner: Found to be clean
> X-MailScanner-From: user at domain.com
>
> Maybe you should use:
>
> # Do you want to always include the Spam Report in the SpamCheck
> # header, even if the message wasn't spam?
> # This can also be the filename of a ruleset.
> Always Include SpamAssassin Report = yes


I do have this set to yes.  And I get the SA report on almost all headers.
The header does look incomplete though.  I am having customers forward to me
the spam that get's through. They are forwarding the spam as an attachment,
so none of the headers get stripped.  Usually I get a normal header.  These
that have this type of header seem to always come from the same few
advertisers.

George

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html