All mail is Spam

Wed Sep 8 15:04:19 IST 2004

<x-flowed>
Steve

what's the  MailScanner.conf file look like ??

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

Steve Cole wrote:
> Alright I'm new at MS, and have tried SA in the past and that worked fine
> with my setup. I decided to try MS and can't seem to get it going correctly.
> My setup is that I'm fetchmailing a few ISP POP accounts. Works no problems.
> The problem now is that MS marks ALL emails as {spam?}.
>
> I'm running Fetchmail/Sendmail/
>
> In advanced thanks for the replies.
>
> Below you will find abit of info, hopefully give you guys an idea as to the
> problem. also the blacklist file is blank, expect one line:
>
> /etc/MailScanner/rules/spam.blacklist.rules
>                      FromOrTo:       default         no
>
> -----------------------------------------------------------------
> Example email header:
> From - Wed Sep 08 01:24:11 2004
> X-UIDL: 413e96e900000002
> X-Mozilla-Status: 0001
> X-Mozilla-Status2: 00000000
> Return-Path: <digii at gmail.com>
> Received: from localhost (localhost.localdomain [127.0.0.1])
>  by gateway.clarkconnect.lan (8.12.8/8.12.8) with ESMTP id i8851vvb009094
>  for <spammenow at localhost>; Wed, 8 Sep 2004 01:02:11 -0400
> X-Apparently-To: spammenow at rogers.com via 206.190.37.189; Tue, 07 Sep 2004
> 21:39:35 -0700
> X-Originating-IP: [64.233.170.205]
> Received: from pop1.rog.mail.vip.re2.yahoo.com [206.190.36.250]
>  by localhost with POP3 (fetchmail-6.2.0)
>  for spammenow at localhost (single-drop); Wed, 08 Sep 2004 01:02:11 -0400 (EDT)
> Received: from 64.233.170.205  (EHLO mproxy.gmail.com) (64.233.170.205)
>   by mta102.rog.mail.re2.yahoo.com with SMTP; Tue, 07 Sep 2004 21:39:35 -0700
> Received: by mproxy.gmail.com with SMTP id 73so377381rnl
>         for <spammenow at rogers.com>; Tue, 07 Sep 2004 21:39:32 -0700 (PDT)
> Received: by 10.38.59.62 with SMTP id h62mr150355rna;
>         Tue, 07 Sep 2004 21:39:32 -0700 (PDT)
> Received: by 10.38.181.34 with HTTP; Tue, 7 Sep 2004 21:39:32 -0700 (PDT)
> Message-ID: <a6afa0ee04090721395e92684c at mail.gmail.com>
> Date: Wed, 8 Sep 2004 00:39:32 -0400
> From: Digii <digii at gmail.com>
> Reply-To: Digii <digii at gmail.com>
> To: spammenow at rogers.com
> Subject: {Spam?} hey buz
> Mime-Version: 1.0
> Content-Type: text/plain; charset=US-ASCII
> Content-Transfer-Encoding: 7bit
> X-yoursite-MailScanner-Information: Please contact the ISP for more information
> X-yoursite-MailScanner: Found to be clean
> X-yoursite-MailScanner-SpamCheck: spam (blacklisted)
> X-MailScanner-From: digii at gmail.com
> Status:
>
> me tonight
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> MailScanner thanks transtec Computers for their support.
>
> -----------------------------------------------------------
>
> From my maillog file:
>
> ************
>
> Sep  8 01:01:52 gateway fetchmail[3977]: 2 messages for spammenow at rogers.com
> at pop1.rog.mail.vip.re2.yahoo.com (1929 octets).
> Sep  8 01:01:52 gateway fetchmail[3977]: reading message
> spammenow at rogers.com@pop1.rog.mail.vip.re2.yahoo.com:1 of 2 (965 octets)
> Sep  8 01:02:11 gateway sendmail[9094]: i8851vvb009094:
> from=<digii at gmail.com>, size=1094, class=0, nrcpts=1,
> msgid=<a6afa0ee04090721395e92
> 684c at mail.gmail.com>, bodytype=7BIT, proto=ESMTP, daemon=MTA,
> relay=localhost.localdomain [127.0.0.1]
> Sep  8 01:02:12 gateway fetchmail[3977]:  flushed
> Sep  8 01:02:13 gateway fetchmail[3977]: reading message
> spammenow at rogers.com@pop1.rog.mail.vip.re2.yahoo.com:2 of 2 (964 octets)
> Sep  8 01:02:13 gateway sendmail[9094]: i8851vvc009094:
> from=<digii at gmail.com>, size=1093, class=0, nrcpts=1,
> msgid=<a6afa0ee04090721594078
> 017c at mail.gmail.com>, bodytype=7BIT, proto=ESMTP, daemon=MTA,
> relay=localhost.localdomain [127.0.0.1]
> Sep  8 01:02:14 gateway fetchmail[3977]:  flushed
>
>
> Sep  8 01:11:14 gateway MailScanner[9807]: Spam Checks: Starting
> Sep  8 01:11:37 gateway MailScanner[9807]: Message i8851vvc009094 from
> 127.0.0.1 (digii at gmail.com) to localhost is spam (blacklisted)
> Sep  8 01:11:40 gateway MailScanner[9807]: Message i8851vvb009094 from
> 127.0.0.1 (digii at gmail.com) to localhost is spam (blacklisted)
> Sep  8 01:11:41 gateway MailScanner[9807]: Spam Checks: Found 2 spam messages
> Sep  8 01:11:43 gateway MailScanner[9807]: Spam Actions: message
> i8851vvc009094 actions are deliver
> Sep  8 01:11:45 gateway MailScanner[9807]: Spam Actions: message
> i8851vvb009094 actions are deliver
> Sep  8 01:11:51 gateway MailScanner[9807]: Spam Checks completed at 87 bytes
> per second
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>