MailScanner 4.37.7-1 and Postfix 2.1.5 on WBEL

Steen, Glenn Glenn.Steen at AP1.SE
Wed Jan 5 09:50:48 GMT 2005 

Not until next week, sorry.

-- Glenn

> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Julian Field
> Sent: den 5 januari 2005 10:49
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: MailScanner 4.37.7-1 and Postfix 2.1.5 on WBEL
> 
> 
> Can anyone else reproduce this problem for me please?
> I have tried to make it do it, and I can't reproduce it. It works fine
> on my test systems.
> 
> Mailing List wrote:
> 
> >Downgrading back to 4.36.4-1 seems to have corrected the 
> HIGH SPAM being delivered situation, will be monitoring 
> closely for the next few hours and will probably downgrade my 
> other MailScanner installations.
> >
> >Regards
> >
> >-----Original Message-----
> >From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Mailing List
> >Sent: Tuesday, January 04, 2005 08:21
> >To: MAILSCANNER at JISCMAIL.AC.UK
> >Subject: Re: MailScanner 4.37.7-1 and Postfix 2.1.5 on WBEL
> >
> >Rules are set to store and delete.
> >Archive Mail in MailScanner.conf is empty
> >
> >More information: this behavior started as soon as I 
> upgraded, this does not seem to happen for all domains.
> >
> >Regards
> >
> >________________________________________
> >From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Steen, Glenn
> >Sent: Tuesday, January 04, 2005 08:12
> >To: MAILSCANNER at JISCMAIL.AC.UK
> >Subject: Re: MailScanner 4.37.7-1 and Postfix 2.1.5 on WBEL
> >
> >As far as lil' ol' me can tell the unique-ID thing shouldn't 
> have any bearing on this.
> >Do you archive mails? Perhaps to a mailbox?
> >
> >-- Glenn
> >-----Original Message-----
> >From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Mailing List
> >Sent: den 4 januari 2005 01:51
> >To: MAILSCANNER at JISCMAIL.AC.UK
> >Subject: MailScanner 4.37.7-1 and Postfix 2.1.5 on WBEL
> >Since the upgrade i see strange behaviors, some mails marked 
> as High Spam are still delivered, here is an excerpt of my maillog:
> >
> >[root at gw-m log]# grep 6FD731C0008 maillog
> >Jan  3 13:14:35 gw-m postfix/smtpd[2051]: 6FD731C0008: 
> client=lns-vlq-48-mar-82-251-10-15.adsl.proxad.net[82.251.10.15]
> >Jan  3 13:14:38 gw-m postfix/cleanup[32006]: 6FD731C0008: 
> hold: header Received: from 
> lns-vlq-48-mar-82-251-10-15.adsl.proxad.net 
> (lns-vlq-48-mar-82-251-10-15.adsl.proxad.net 
> [82.251.10.15])??by gw-m.netgroupes.ca (Postfix) with SMTP id 
> 6FD731C0008??for <christian_legend from 
> lns-vlq-48-mar-82-251-10-15.adsl.proxad.net[82.251.10.15]; 
> from=<JETQCHN at optonline.com> to=<user at domain.com> proto=SMTP 
> helo=<lns-vlq-48-mar-82-251-10-15.adsl.proxad.net>
> >Jan  3 13:14:38 gw-m postfix/cleanup[32006]: 6FD731C0008: 
> hold: header Received: from acs-inc.com (36.84.32.127) by 
> azn7-s607.rr.com  with Microsoft SMTPSVC(8.3.3049.5537);?? 
> Mon, 03 Jan 2005 16:13:26 -0200 from 
> lns-vlq-48-mar-82-251-10-15.adsl.proxad.net[82.251.10.15]; 
> from=<JETQCHN at optonline.com> to=<user at domain.com> proto=SMTP 
> helo=<lns-vlq-48-mar-82-251-10-15.adsl.proxad.net>
> >Jan  3 13:14:38 gw-m postfix/cleanup[32006]: 6FD731C0008: 
> hold: header Received: from optonline.com  (comcast.net  
> 241.136.137.254)??by optonline.net  (8.12.10/8.12.9) with 
> ESMTP id pir7B117??for <user at domain.com>; Mon, 03 Jan 2005 
> 22:14:26 +0400 (ES from 
> lns-vlq-48-mar-82-251-10-15.adsl.proxad.net[82.251.10.15]; 
> from=<JETQCHN at optonline.com> to=<user at domain.com> proto=SMTP 
> helo=<lns-vlq-48-mar-82-251-10-15.adsl.proxad.net>
> >Jan  3 13:14:38 gw-m postfix/cleanup[32006]: 6FD731C0008: 
> hold: header Received: from X99861626404 
> (modemcable6.559-26.cpe.abbeypress.com 
> 186.145.54.36)??(authenticated bits=0)??by optonline.com  
> (8.12.10/8.12.9) with ESMTP id yjl92H690j386??for 
> <user at domain.com from 
> lns-vlq-48-mar-82-251-10-15.adsl.proxad.net[82.251.10.15]; 
> from=<JETQCHN at optonline.com> to=<user at domain.com> proto=SMTP 
> helo=<lns-vlq-48-mar-82-251-10-15.adsl.proxad.net>
> >Jan  3 13:14:38 gw-m postfix/cleanup[32006]: 6FD731C0008: 
> message-id=<68908gpe61joj449$p584q0b802$20d60on18 at HYW57645905229>
> >Jan  3 13:15:05 gw-m MailScanner[31923]: Message 
> 6FD731C0008.642D2 from 82.251.10.15 (jetqchn at optonline.com) 
> to domain.com is spam, SpamAssassin (score=37.036, required 
> 6, autolearn=spam, BAYES_99 1.89, DCC_CHECK 2.17, 
> DIGEST_MULTIPLE 0.10, DOMAIN_RATIO 3.18, HELO_DYNAMIC_HCC 
> 3.74, HELO_DYNAMIC_IPADDR 4.40, HTML_90_100 0.02, 
> HTML_IMAGE_ONLY_04 3.30, HTML_MESSAGE 0.00, 
> HTML_MIME_NO_HTML_TAG 0.14, INVALID_TZ_EST 3.58, 
> MIME_BOUND_DD_DIGITS 4.14, MIME_HTML_ONLY 0.18, 
> MIME_HTML_ONLY_MULTI 2.44, MPART_ALT_DIFF 0.07, PYZOR_CHECK 
> 3.45, X_MESSAGE_INFO 4.24)
> >Jan  3 13:15:05 gw-m MailScanner[31923]: Spam Actions: 
> message 6FD731C0008.642D2 actions are store,delete
> >Jan  3 13:15:05 gw-m MailScanner[31923]: Requeue: 
> 6FD731C0008.642D2 to B91C41C0006
> >Jan  3 13:15:06 gw-m MailScanner[31923]: Logging message 
> 6FD731C0008.642D2 to SQL
> >
> >This seems to be a "new" behavior, maybe inline with the 
> change to "Archive Mail" and unique message-ids ?!?
> >
> >If you need more information, please let me know.
> >
> >Regards
> >------------------------ MailScanner list ------------------------
> >To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >'leave mailscanner' in the body of the email.
> >Before posting, read the MAQ (http://www.mailscanner.biz/maq/)
> >and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >
> >Support MailScanner development - buy the book off the website!
> >
> >------------------------ MailScanner list ------------------------
> >To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >'leave mailscanner' in the body of the email.
> >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >
> >Support MailScanner development - buy the book off the website!
> >
> >------------------------ MailScanner list ------------------------
> >To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> >'leave mailscanner' in the body of the email.
> >Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> >the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >
> >Support MailScanner development - buy the book off the website!
> >
> >
> >
> 
> --
> Julian Field
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> 
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
> 

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

More information about the MailScanner mailing list