IS DEFINITELY SPAM being delivered

Julian Field mailscanner at ecs.soton.ac.uk
Sat Oct 9 16:53:34 IST 2004


<x-flowed>
At 16:39 09/10/2004, you wrote:
>Alden Levy wrote:
> >>>> Alden Levy wrote:
> >>>>>> I am having a little problem:
> >>>>>> I would like to block mail from and to two particular email address,
> >>>>>> so
> >> in
> >>>>>> my MailScanner.conf, I set:
> >>>>>> Is Definitely Spam = %rules-dir%/spam.blacklist.rules
> >>>>>> High Scoring Spam Actions = store
> >>>
> >>>>>> and in %rules-dir%/spam.blacklist.rules, I placed the lines:
> >>>>>> FromOrTo: name at isp.com yes FromOrTo: name2 at isp2.com yes
> >>>>>> FromOrTo: default no
> >>>
> >>>>>> However, when I send mail from a blocked address, I receive the
> >>>>>> mail, but the subject has {SPAM!} (which is how high scoring spam is
> >>>>>> indicate)
> >> added
> >>>>>> and the header has:
> >>>>>> X-engineno9inc-MailScanner-SpamCheck: spam (blacklisted)
> >
> >> Peter Bonivart wrote:
> >>
> >>>> Do you have "Definite Spam Is High Scoring" set to "yes"?
> >>
> >>>> --
> >>>> /Peter Bonivart
> >>
> >
> >> Sorry, forgot to include that in my original email.
> >> Yes, I do have:
> >> Definite Spam Is High Scoring = yes
> >
> >> --Alden
> >
>
>Mike Kercher wrote:
> >What is your High Scoring Spam Action = set to?
> >
> >Mike
>
>I've set it to:
>High Scoring Spam Actions = store
>
>and I've also done:
>High Scoring Spam Actions = %rules-dir%/high.spam.rules
>and in high.spam.rules, I put:
>FromOrTo:       name at isp.com    delete
>FromOrTo:       name2 at isp2.com  delete
>FromOrTo:       default store
>
>It works in the second instance, but in the first, I still get the message
>delivered (as opposed to just storing it, which is what happens with all of
>my other high scoring spam).

Have you got anything else added, such as an email address in the "Archive
Mail" setting?
--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
Buy the MailScanner book at www.MailScanner.info/store

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>



More information about the MailScanner mailing list