MailScanner 4.37.7-1 and Postfix 2.1.5 on WBEL
Mailing List
ml at NETGROUPES.CA
Wed Jan 5 12:57:43 GMT 2005
Hi Julian,
How can I help you, in isolating and resolving this issue?
Thanks
Guy
-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
Behalf Of Julian Field
Sent: Wednesday, January 05, 2005 04:49
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: MailScanner 4.37.7-1 and Postfix 2.1.5 on WBEL
Can anyone else reproduce this problem for me please?
I have tried to make it do it, and I can't reproduce it. It works fine
on my test systems.
Mailing List wrote:
>Downgrading back to 4.36.4-1 seems to have corrected the HIGH SPAM
being delivered situation, will be monitoring closely for the next few
hours and will probably downgrade my other MailScanner installations.
>
>Regards
>
>-----Original Message-----
>From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
Behalf Of Mailing List
>Sent: Tuesday, January 04, 2005 08:21
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: Re: MailScanner 4.37.7-1 and Postfix 2.1.5 on WBEL
>
>Rules are set to store and delete.
>Archive Mail in MailScanner.conf is empty
>
>More information: this behavior started as soon as I upgraded, this
does not seem to happen for all domains.
>
>Regards
>
>________________________________________
>From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
Behalf Of Steen, Glenn
>Sent: Tuesday, January 04, 2005 08:12
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: Re: MailScanner 4.37.7-1 and Postfix 2.1.5 on WBEL
>
>As far as lil' ol' me can tell the unique-ID thing shouldn't have any
bearing on this.
>Do you archive mails? Perhaps to a mailbox?
>
>-- Glenn
>-----Original Message-----
>From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
Behalf Of Mailing List
>Sent: den 4 januari 2005 01:51
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: MailScanner 4.37.7-1 and Postfix 2.1.5 on WBEL
>Since the upgrade i see strange behaviors, some mails marked as High
Spam are still delivered, here is an excerpt of my maillog:
>
>[root at gw-m log]# grep 6FD731C0008 maillog
>Jan 3 13:14:35 gw-m postfix/smtpd[2051]: 6FD731C0008:
client=lns-vlq-48-mar-82-251-10-15.adsl.proxad.net[82.251.10.15]
>Jan 3 13:14:38 gw-m postfix/cleanup[32006]: 6FD731C0008: hold: header
Received: from lns-vlq-48-mar-82-251-10-15.adsl.proxad.net
(lns-vlq-48-mar-82-251-10-15.adsl.proxad.net [82.251.10.15])??by
gw-m.netgroupes.ca (Postfix) with SMTP id 6FD731C0008??for
<christian_legend from
lns-vlq-48-mar-82-251-10-15.adsl.proxad.net[82.251.10.15];
from=<JETQCHN at optonline.com> to=<user at domain.com> proto=SMTP
helo=<lns-vlq-48-mar-82-251-10-15.adsl.proxad.net>
>Jan 3 13:14:38 gw-m postfix/cleanup[32006]: 6FD731C0008: hold: header
Received: from acs-inc.com (36.84.32.127) by azn7-s607.rr.com with
Microsoft SMTPSVC(8.3.3049.5537);?? Mon, 03 Jan 2005 16:13:26 -0200 from
lns-vlq-48-mar-82-251-10-15.adsl.proxad.net[82.251.10.15];
from=<JETQCHN at optonline.com> to=<user at domain.com> proto=SMTP
helo=<lns-vlq-48-mar-82-251-10-15.adsl.proxad.net>
>Jan 3 13:14:38 gw-m postfix/cleanup[32006]: 6FD731C0008: hold: header
Received: from optonline.com (comcast.net 241.136.137.254)??by
optonline.net (8.12.10/8.12.9) with ESMTP id pir7B117??for
<user at domain.com>; Mon, 03 Jan 2005 22:14:26 +0400 (ES from
lns-vlq-48-mar-82-251-10-15.adsl.proxad.net[82.251.10.15];
from=<JETQCHN at optonline.com> to=<user at domain.com> proto=SMTP
helo=<lns-vlq-48-mar-82-251-10-15.adsl.proxad.net>
>Jan 3 13:14:38 gw-m postfix/cleanup[32006]: 6FD731C0008: hold: header
Received: from X99861626404 (modemcable6.559-26.cpe.abbeypress.com
186.145.54.36)??(authenticated bits=0)??by optonline.com
(8.12.10/8.12.9) with ESMTP id yjl92H690j386??for <user at domain.com from
lns-vlq-48-mar-82-251-10-15.adsl.proxad.net[82.251.10.15];
from=<JETQCHN at optonline.com> to=<user at domain.com> proto=SMTP
helo=<lns-vlq-48-mar-82-251-10-15.adsl.proxad.net>
>Jan 3 13:14:38 gw-m postfix/cleanup[32006]: 6FD731C0008:
message-id=<68908gpe61joj449$p584q0b802$20d60on18 at HYW57645905229>
>Jan 3 13:15:05 gw-m MailScanner[31923]: Message 6FD731C0008.642D2 from
82.251.10.15 (jetqchn at optonline.com) to domain.com is spam, SpamAssassin
(score=37.036, required 6, autolearn=spam, BAYES_99 1.89, DCC_CHECK
2.17, DIGEST_MULTIPLE 0.10, DOMAIN_RATIO 3.18, HELO_DYNAMIC_HCC 3.74,
HELO_DYNAMIC_IPADDR 4.40, HTML_90_100 0.02, HTML_IMAGE_ONLY_04 3.30,
HTML_MESSAGE 0.00, HTML_MIME_NO_HTML_TAG 0.14, INVALID_TZ_EST 3.58,
MIME_BOUND_DD_DIGITS 4.14, MIME_HTML_ONLY 0.18, MIME_HTML_ONLY_MULTI
2.44, MPART_ALT_DIFF 0.07, PYZOR_CHECK 3.45, X_MESSAGE_INFO 4.24)
>Jan 3 13:15:05 gw-m MailScanner[31923]: Spam Actions: message
6FD731C0008.642D2 actions are store,delete
>Jan 3 13:15:05 gw-m MailScanner[31923]: Requeue: 6FD731C0008.642D2 to
B91C41C0006
>Jan 3 13:15:06 gw-m MailScanner[31923]: Logging message
6FD731C0008.642D2 to SQL
>
>This seems to be a "new" behavior, maybe inline with the change to
"Archive Mail" and unique message-ids ?!?
>
>If you need more information, please let me know.
>
>Regards
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the MAQ (http://www.mailscanner.biz/maq/)
>and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>Support MailScanner development - buy the book off the website!
>
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>Support MailScanner development - buy the book off the website!
>
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>Support MailScanner development - buy the book off the website!
>
>
>
--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list