MailScanner 4.37.7-1 and Postfix 2.1.5 on WBEL

[Steen, Glenn]

@font-face { font-family: Verdana; } @page Section1 {size: 8.5in 11.0in;
margin: 1.0in 1.25in 1.0in 1.25in; } P.MsoNormal { FONT-SIZE: 12pt;
MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman" } LI.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman" }
DIV.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times
New Roman" } A:link { COLOR: blue; TEXT-DECORATION: underline }
SPAN.MsoHyperlink { COLOR: blue; TEXT-DECORATION: underline } A:visited {
COLOR: purple; TEXT-DECORATION: underline } SPAN.MsoHyperlinkFollowed {
COLOR: purple; TEXT-DECORATION: underline } SPAN.EmailStyle17 {
FONT-WEIGHT: normal; COLOR: windowtext; FONT-STYLE: normal; FONT-FAMILY:
Verdana; TEXT-DECORATION: none; mso-style-type: personal-compose }
DIV.Section1 { page: Section1 } As far as lil' ol' me can tell the
unique-ID thing shouldn't have any bearing on this.
Do you archive mails? Perhaps to a mailbox?
 
-- Glenn
-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]
On Behalf Of Mailing List
Sent: den 4 januari 2005 01:51
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: MailScanner 4.37.7-1 and Postfix 2.1.5 on WBEL

Since the upgrade i see strange behaviors, some mails marked as
High Spam are still delivered, here is an excerpt of my maillog:

 

[root at gw-m log]# grep 6FD731C0008 maillog

Jan  3 13:14:35 gw-m postfix/smtpd[2051]: 6FD731C0008:
client=lns-vlq-48-mar-82-251-10-15.adsl.proxad.net[82.251.10.15]

Jan  3 13:14:38 gw-m postfix/cleanup[32006]: 6FD731C0008: hold:
header Received: from lns-vlq-48-mar-82-251-10-15.adsl.proxad.net
(lns-vlq-48-mar-82-251-10-15.adsl.proxad.net [82.251.10.15])??by
gw-m.netgroupes.ca (Postfix) with SMTP id 6FD731C0008??for
<christian_legend from
lns-vlq-48-mar-82-251-10-15.adsl.proxad.net[82.251.10.15];
from=<JETQCHN at optonline.com> to=<user at domain.com> proto=SMTP
helo=<lns-vlq-48-mar-82-251-10-15.adsl.proxad.net>

Jan  3 13:14:38 gw-m postfix/cleanup[32006]: 6FD731C0008: hold:
header Received: from acs-inc.com (36.84.32.127) by
azn7-s607.rr.com  with Microsoft SMTPSVC(8.3.3049.5537);?? Mon, 03
Jan 2005 16:13:26 -0200 from
lns-vlq-48-mar-82-251-10-15.adsl.proxad.net[82.251.10.15];
from=<JETQCHN at optonline.com> to=<user at domain.com> proto=SMTP
helo=<lns-vlq-48-mar-82-251-10-15.adsl.proxad.net>

Jan  3 13:14:38 gw-m postfix/cleanup[32006]: 6FD731C0008: hold:
header Received: from optonline.com  (comcast.net 
241.136.137.254)??by optonline.net  (8.12.10/8.12.9) with ESMTP id
pir7B117??for <user at domain.com>; Mon, 03 Jan 2005 22:14:26 +0400
(ES from lns-vlq-48-mar-82-251-10-15.adsl.proxad.net[82.251.10.15];
from=<JETQCHN at optonline.com> to=<user at domain.com> proto=SMTP
helo=<lns-vlq-48-mar-82-251-10-15.adsl.proxad.net>

Jan  3 13:14:38 gw-m postfix/cleanup[32006]: 6FD731C0008: hold:
header Received: from X99861626404
(modemcable6.559-26.cpe.abbeypress.com
186.145.54.36)??(authenticated bits=0)??by optonline.com 
(8.12.10/8.12.9) with ESMTP id yjl92H690j386??for <user at domain.com
from lns-vlq-48-mar-82-251-10-15.adsl.proxad.net[82.251.10.15];
from=<JETQCHN at optonline.com> to=<user at domain.com> proto=SMTP
helo=<lns-vlq-48-mar-82-251-10-15.adsl.proxad.net>

Jan  3 13:14:38 gw-m postfix/cleanup[32006]: 6FD731C0008:
message-id=<68908gpe61joj449$p584q0b802$20d60on18 at HYW57645905229>

Jan  3 13:15:05 gw-m MailScanner[31923]: Message 6FD731C0008.642D2
from 82.251.10.15 (jetqchn at optonline.com) to domain.com is spam,
SpamAssassin (score=37.036, required 6, autolearn=spam, BAYES_99
1.89, DCC_CHECK 2.17, DIGEST_MULTIPLE 0.10, DOMAIN_RATIO 3.18,
HELO_DYNAMIC_HCC 3.74, HELO_DYNAMIC_IPADDR 4.40, HTML_90_100 0.02,
HTML_IMAGE_ONLY_04 3.30, HTML_MESSAGE 0.00, HTML_MIME_NO_HTML_TAG
0.14, INVALID_TZ_EST 3.58, MIME_BOUND_DD_DIGITS 4.14,
MIME_HTML_ONLY 0.18, MIME_HTML_ONLY_MULTI 2.44, MPART_ALT_DIFF
0.07, PYZOR_CHECK 3.45, X_MESSAGE_INFO 4.24)

Jan  3 13:15:05 gw-m MailScanner[31923]: Spam Actions: message
6FD731C0008.642D2 actions are store,delete

Jan  3 13:15:05 gw-m MailScanner[31923]: Requeue: 6FD731C0008.642D2
to B91C41C0006

Jan  3 13:15:06 gw-m MailScanner[31923]: Logging message
6FD731C0008.642D2 to SQL

 

This seems to be a &#8220;new&#8221; behavior, maybe inline with
the change to &#8220;Archive Mail&#8221; and unique message-ids ?!?

 

If you need more information, please let me know.

 

Regards

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/)
and the archives
(http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

^@ ------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/)
and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!