German Spam still getting through?

[Steven Evans]

(Oops, ctrl+enter sent the email too soon).

I've been noticing some getting through too, but in closer inspection
its either the AWL rules beating the spam (ie -17 making it under 5 in
the end) or that the spoofed address is a whitelist address, like
@ato.gov.au.

I've also noticed that some are getting through MailScanner unscanned.
Beit that I'm running 4.35.9, the headers only have these lines:

X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0
Return-Path: <x at x.com.au>
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----_=_NextPart_007_01C55B69.52DF8080"
X-OriginalArrivalTime: 18 May 2005 05:20:38.0304 (UTC)
FILETIME+AD0AWw-53A67A00:01C55B69+AF0-
content-class: urn:content-classes:message
Subject: Volk wird nur zum zahlen gebraucht+ACE-
Date: Wed, 18 May 2005 15:19:12 +1000
Message-ID: <ffb3.a5eae4ef386943b at x.com.au>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: Volk wird nur zum zahlen gebraucht+ACE-
Thread-Index:
=?utf-7?B?QWNWYmFWeUE4MFkyVmNFY1QrdTJjbTNoT2I2UThBUFFBOS0=?=
From: <x at x.com.au>
To: <X-Account at amkc.ca>

To me this means that the email was rejected because it was a broken
TNEF email, and MailScanner let it through unscanned?

Cheers,
Steve

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
Behalf Of Jeff Mills
Sent: Friday, 20 May 2005 2:44 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: German Spam still getting through?

As a test I just put the score higher (from 8 to 20).
I'm wondering if some of the mails are getting enough of a negative
score to push the score under the spam limit.

See how things go now...



> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of Brent Addis
> Sent: Friday, 20 May 2005 2:34 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: German Spam still getting through?
> 
> 
> This is still happening?
> 
> The last one of these any of our servers received was on 
> monday (being 
> friday afternoon now)
> 
> Regards,
> 
> Brent Addis
> Group Systems Administrator
> Times Media Group
> 
> 
> 
> 

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!