MS not scoring spam messages {Scanned}

[Scott Silva]

|
|
| > George Edwards wrote:
| > > I am getting a lot of spam to go through that MS does not seem to be
| > > scanning at all.  No time out errors either.  According to the header
MS
| > > sees the mail, but only adds the sending address, no scoring.  MS is
| > > catching most spam, but still a ton gets through like this.  Has
anyone
| else
| > > experienced this?  Does anyone know why MS may be doing this?  Sample
| header
| > > follows.
| > >
| > > Thanks for any help,
| > > George
| > >
| > >
| > > From: "Madeline Frazier" <Bppjp at angelfire.com>
| > > To: <mycustomer at mydomain.com>
| > > Subject: MS Encarta Encyclopedia wn Standart 2004
| > > Date: Thu, 1 Jul 2004 01:03:57 -0500
| > > Message-ID: <4227757675.619 at mail.ru>
| > > MIME-Version: 1.0
| > > Content-Type: multipart/alternative;
| > >             boundary="----=_NextPart_000_000A_01C45F3F.13CF7D40"
| > > X-Mailer: Microsoft Outlook, Build 10.0.4510
| > > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
| > > X-MailScanner-From: bppjp at angelfire.com
| > > X-RCPT-TO: <mycustomer at mydomain.com>
| > > X-UIDL: 332806919
| > Funny, I have at least these headers on all messages:
| >
| > X-camo-route-MailScanner-Information: Contactez le gestionnaire de
| courriels
| > X-camo-route-MailScanner: Found to be clean
| > X-MailScanner-From: user at domain.com
| >
| > Maybe you should use:
| >
| > # Do you want to always include the Spam Report in the SpamCheck
| > # header, even if the message wasn't spam?
| > # This can also be the filename of a ruleset.
| > Always Include SpamAssassin Report = yes
|
|
| I do have this set to yes.  And I get the SA report on almost all headers.
| The header does look incomplete though.  I am having customers forward to
me
| the spam that get's through. They are forwarding the spam as an
attachment,
| so none of the headers get stripped.  Usually I get a normal header.
These
| that have this type of header seem to always come from the same few
| advertisers.
|
| George
|
Could you possibly have this whitelisted? Maybe a typo in an IP address or
something similar?



--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html