MS not scoring spam messages {Scanned}

[George Edwards]

----- Original Message -----
From: "Scott Silva" <ssilva at SGVWATER.COM>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Thursday, July 01, 2004 10:13 AM
Subject: Re: MS not scoring spam messages {Scanned}


> |
> |
> | > George Edwards wrote:
> | > > I am getting a lot of spam to go through that MS does not seem to be
> | > > scanning at all.  No time out errors either.  According to the
header
> MS
> | > > sees the mail, but only adds the sending address, no scoring.  MS is
> | > > catching most spam, but still a ton gets through like this.  Has
> anyone
> | else
> | > > experienced this?  Does anyone know why MS may be doing this?
Sample
> | header
> | > > follows.
> | > >
> | > > Thanks for any help,
> | > > George
> | > >
> | > >
> | > > From: "Madeline Frazier" <Bppjp at angelfire.com>
> | > > To: <mycustomer at mydomain.com>
> | > > Subject: MS Encarta Encyclopedia wn Standart 2004
> | > > Date: Thu, 1 Jul 2004 01:03:57 -0500
> | > > Message-ID: <4227757675.619 at mail.ru>
> | > > MIME-Version: 1.0
> | > > Content-Type: multipart/alternative;
> | > >             boundary="----=_NextPart_000_000A_01C45F3F.13CF7D40"
> | > > X-Mailer: Microsoft Outlook, Build 10.0.4510
> | > > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
> | > > X-MailScanner-From: bppjp at angelfire.com
> | > > X-RCPT-TO: <mycustomer at mydomain.com>
> | > > X-UIDL: 332806919
> | > Funny, I have at least these headers on all messages:
> | >
> | > X-camo-route-MailScanner-Information: Contactez le gestionnaire de
> | courriels
> | > X-camo-route-MailScanner: Found to be clean
> | > X-MailScanner-From: user at domain.com
> | >
> | > Maybe you should use:
> | >
> | > # Do you want to always include the Spam Report in the SpamCheck
> | > # header, even if the message wasn't spam?
> | > # This can also be the filename of a ruleset.
> | > Always Include SpamAssassin Report = yes
> |
> |
> | I do have this set to yes.  And I get the SA report on almost all
headers.
> | The header does look incomplete though.  I am having customers forward
to
> me
> | the spam that get's through. They are forwarding the spam as an
> attachment,
> | so none of the headers get stripped.  Usually I get a normal header.
> These
> | that have this type of header seem to always come from the same few
> | advertisers.
> |
> | George
> |
> Could you possibly have this whitelisted? Maybe a typo in an IP address or
> something similar?

All emails that I have whitelisted still show the score but has in
parenthesis the word whitelisted.  So it is not whitelisted either-- Just to
varify in the past I did search the whitelist to make sure they had not
somehow gotten listed there.
George

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html