?? SPAM : Re: Why is this marked as SPAM - any clue?
Dave Duffner - NWCWEB.com
webalizer at NWCWEB.COM
Fri Jan 28 19:03:16 GMT 2005
Ned,
We aims to please! <Grin>
Also you might want to try what we did, as we're
using a MailScanner/SpamAssassin combo as well on a
Linux/Ensim based server setup:
We actually changed the settings so that if MS
got ahold of it prior to SA scoping it out, it tags
it as [MS-SPAM]. If it makes it past MS's review and
then SA decides it's over the score limits, SA tags
it as [SPAM-SA]. That way we could get a real grip on
which program was doing what to the e-mail and if
any mods, learns, etc. were needed.
They way we've got things config'ed, essentially
[MS-SPAM] is mostly notifications passed to the user
that it's UCE and allows them to determine if they want
to read it or dump it. [SPAM-SA] is pure sludge, so
the Ensim setup allows the user to dump it without
ever seeing it at all. If they choose to have it all
dumped into their mailbox, they optionally can filter
it by those tags. We use this on the Admin side with
catch-all boxes to snag the really bad stuff and train
the combo to tag it a bit better overall.
Rudimentary, the pro's have more ways of doing
it, but for entry & mid-level Admins it's a nice basic
option easy to control.
David J. Duffner
VP Operations
NWC Corporation
www.nwcxpress.com
> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Ned Boddie
> Sent: Friday, January 28, 2005 1:54 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: ?? SPAM : Re: Why is this marked as SPAM - any clue?
>
>
> Duh, OK I'm an idiot, you're exactly right - thanks for
> pointing out my bad :(
>
> > Ned,
> >
> > Could be me the way today's going, but it looks
> more like your
> > e-mail's being tagged as Spam? In your full header on this post to
> > the List it's showing a score of 6.XXXX over 5 and
> therefore tagging
> > this post as Spam.
> >
> > Since the header you provided below is in response to an
> > e-mail from somewhere (presumably you) when they replied it just
> > picked up that tagging and therefore you see it.
> >
> > The header shows it's fine and not tagged, but then again
> > that's the reply inbound to you - not your original send to them.
> >
> > Or I could be completely nuts...
> >
> > David J. Duffner
> > VP Operations
> > NWC Corporation
> > www.nwcxpress.com
> >
> >
> >
> >> -----Original Message-----
> >> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> >> Behalf Of Ned Boddie
> >> Sent: Friday, January 28, 2005 1:25 PM
> >> To: MAILSCANNER at JISCMAIL.AC.UK
> >> Subject: ?? SPAM : Why is this marked as SPAM - any clue?
> >>
> >>
> >> Hi All,
> >>
> >> I've whitelited this email address as it indicates in the headers,
> >> but it's still tagged as spam, any clue why?
> >>
> >> The header from one of the offending messages is listed below:
> >>
> >> Return-Path: <drichardson at bond.co.uk>
> >> Received: from bisukexc01.local.bond.co.uk (mail.bond.co.uk
> >> [217.205.148.231])
> >> by ns.my-network.com (8.12.8/8.12.8) with ESMTP id
> j0SHJw4U018979
> >> for <nboddie at my-network.com>; Fri, 28 Jan 2005 11:19:59 -0600
> >> Received: from bisukexc01.local.bond.co.uk (unverified) by
> >> bisukexc01.local.bond.co.uk (Content Technologies SMTPRS
> >> 4.3.14) with
> >> ESMTP id
> <T6ec6bd18acac100b0b730 at bisukexc01.local.bond.co.uk> for
> >> <nboddie at my-network.com>; Fri, 28 Jan 2005 17:18:03 +0000
> >> X-MimeOLE: Produced By Microsoft Exchange V6.0.6487.1
> >> content-class: urn:content-classes:message
> >> MIME-Version: 1.0
> >> Content-Type: text/plain; charset="us-ascii"
> >> Disposition-Notification-To: "Daniel Richardson"
> >> <drichardson at bond.co.uk>
> >> Subject: RE: ?? SPAM : Have you seen this?
> >> Date: Fri, 28 Jan 2005 17:18:03 -0000
> >> Message-ID:
> >>
> <7A9411E3192F944DAB0515939386CF010188FC69 at bisukexc01.local.bond.co.uk
> >> >
> >> X-MS-Has-Attach:
> >> X-MS-TNEF-Correlator:
> >> Thread-Topic: ?? SPAM : Have you seen this?
> >> Thread-Index: AcUFO89wIN0+0K4+TRaDU9lVeNaQwwAIUIHg
> >> From: "Daniel Richardson" <drichardson at bond.co.uk>
> >> To: "Ned Boddie" <nboddie at my-network.com>
> >> X-my-network-MailScanner-Information: Please contact the ISP
> >> for more information
> >> X-my-network-MailScanner: Found to be clean
> >> X-my-network-MailScanner-SpamCheck: not spam (whitelisted),
> >> SpamAssassin (score=-4.9, required 5, autolearn=not spam,
> >> BAYES_00 -4.90)
> >> X-MailScanner-From: drichardson at bond.co.uk
> >> Content-Transfer-Encoding: 8bit
> >> X-MIME-Autoconverted: from quoted-printable to 8bit by
> >> ns.my-network.com id j0SHJw4U018979
> >>
> >> TIA,
> >>
> >> Ned
> >>
> >> ------------------------ MailScanner list
> >> ------------------------ To unsubscribe, email
> >> jiscmail at jiscmail.ac.uk with the words: 'leave mailscanner' in the
> >> body of the email. Before posting, read the MAQ
> >> (http://www.mailscanner.biz/maq/) and the archives
> >> (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >>
> >> Support MailScanner development - buy the book off the website!
> >>
> >> --
> >> Message scanned by MailScanner, and is believed to be clean.
> >> CONFIDENTIALITY NOTICE: This transmission intended for
> the specified
> >> destination and person. If this is not you, this
> >> e-mail must be deleted immediately. www.nwcweb.com
> >>
> >
> >
> > --
> > Message scanned by MailScanner, and is believed to be clean.
> > CONFIDENTIALITY NOTICE: This transmission intended for the
> specified
> > destination and person. If this is not you, this
> > e-mail must be deleted immediately. www.nwcweb.com
> >
> > ------------------------ MailScanner list
> ------------------------ To
> > unsubscribe, email jiscmail at jiscmail.ac.uk with the words: 'leave
> > mailscanner' in the body of the email. Before posting, read the MAQ
> > (http://www.mailscanner.biz/maq/) and the archives
> > (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >
> > Support MailScanner development - buy the book off the website!
> >
>
> ------------------------ MailScanner list
> ------------------------ To unsubscribe, email
> jiscmail at jiscmail.ac.uk with the words: 'leave mailscanner'
> in the body of the email. Before posting, read the MAQ
> (http://www.mailscanner.biz/maq/) and the archives
> (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
> --
> Message scanned by MailScanner, and is believed to be clean.
> CONFIDENTIALITY NOTICE: This transmission intended for the
> specified destination and person. If this is not you, this
> e-mail must be deleted immediately. www.nwcweb.com
>
--
Message scanned by MailScanner, and is believed to be clean.
CONFIDENTIALITY NOTICE: This transmission intended for the
specified destination and person. If this is not you, this
e-mail must be deleted immediately. www.nwcweb.com
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list