{Spam?} Re: All mail treated as spam?

[Denis Beauchemin]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Remy de Ruysscher wrote:

>
>>Remy de Ruysscher wrote:
>>
>>  
>>
>>>Hi,
>>>
>>>I noticed something odd. As of today almost all of my mail treated as
>>>spam. My configuration hasn't changed
>>>in the last of weeks. The funny thing is, spam isn't caught anymore, it
>>>scores very low. I'm receiving tons of spam right now.
>>>
>>>I'm running MS 4.40.11 with SA 3.02 on FreeBSD 6-CURRENT.
>>>
>>>Apr 28 21:06:03 unix-asp MailScanner[89231]: Message CBE144B8E4.3F20A
>>>from 80.126.112.129 (owner-mailscanner at jiscmail.ac.uk) to unix-asp.com
>>>is spam, RFC-IGNORANT-WHOIS, SpamAssassin (score=4.639, required 7, AWL
>>>0.66, INFO_TLD 0.48, VIRUS_WARNING62 3.50)
>>>    
>>>
>>
>>
>>That's happening because you are using rfc-ignorant in your MailScanner
>>spam lists.
>>
>>  
>>
> Thanks for the reply.
>
> Yes, I saw the headers. I'm just wondered why this happened suddenly.
>
> Why does MailScanner tags mail as spam, when it hits only 1 spam list 
> (and the spam score is below the threshold)? See my config below.
>
>
> spam, RFC-IGNORANT-WHOIS,    SpamAssassin (score=0.805, required 7, 
> AWL 0.27,    FORGED_RCVD_HELO 0.05, INFO_TLD 0.48)
>
>
> #
> Spam List = ORDB-RBL spamhaus.org spamhaus-XBL SBL+XBL spamcop.net 
> SORBS-DNSBL SORBS-DUL CBL RSL DSBL BLITZEDALL

Remy,

When MS finds a hit with any of the RBL listed on the Spam List the 
message gets tagged as spam.  It takes just one hit.  That's why Matt 
suggested to move RBL checks in SA.

Denis

-- 
   _
  °v°   Denis Beauchemin, analyste
 /(_)\  Université de Sherbrooke, S.T.I.
  ^ ^   T: 819.821.8000x2252 F: 819.821.8045



------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

    [ Part 2, "S/MIME Cryptographic Signature"  ]
    [ Application/X-PKCS7-SIGNATURE  4.4KB. ]
    [ Unable to print this part. ]