Not sure if Mailscanner is scanning all emails

[Drew Marshall]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

On Wed, September 28, 2005 17:10, Johnny Stork wrote:
> I am also having some trouble and that I am not sure MS or SA is all
> working properly. Below is an example header output. What I am concerned
> with is the line which shows
>
> tests=AWL,HTML_MESSAGE

That's MailScanner working.
>
>
> but my mailscanner.conf indicates
>
> Spam List = ORDB-RBL SBL+XBL SPAMHAUS NJABL BLITZED CBL DSBL UCEL1

I would take those out as your local host (Fetchmail) will never be
listed. Those tests are only applied on the (SMTP) connecting machine and
as that's your fetchmail, save your bandwidth.
>
> Now since the message header example below also goes through my ISP
> (ez-web-hosting.com) who uses SA, I suspect that the X-Spam-Status line is
> from them, and the ones below are from my MailScanner/SA setup. But why
> does the header not show the full X-PBCO-Spam-Status  or any other
> information?
>
> The route this message took was
>
> -Sent from pbco.ca through internal SA and MS setup.
> -Received at openenterprise.ca (hosted by ez-web-hosting.com) who also run
> SA
> -Polled with fetchmail from my home server and dumped into internal
> sendmail with SA running.
>
>
>
> Header: (some stuff at the top has been removed which I dont think is
> needed to diagnose)
>
>
> Date: Wed, 28 Sep 2005 08:46:03 -0700
> From: "Johnny Stork" <jstork at pbco.ca>
> Sender: "Johnny Stork" <jstork at pbco.ca>
> To: "Johnny Stork" <stork at openenterprise.ca>
> Message-ID: <"H0000067000b414c.1127922362.pbco-server2.pbco.ca*"@MHS>
> Subject: Another Test
> Delivery-date: Wed, 28 Sep 2005 11:47:42 -0400
> x-scalix-Hops: 1
> Envelope-to: stork at openenterprise.ca
> X-Spam-Status: No, score=0.1 required=4.0 tests=AWL,HTML_MESSAGE
>
> 	autolearn=ham version=3.1.0
> X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on
>
> 	ez6.ez-web-hosting.com
> X-Spam-Level:
^^^^^^^^^^^^ This is all done by your ISP
> X-PBCO-MailScanner-Information: Please contact the ISP for more
> information
> X-PBCO-MailScanner: Found to be clean
> X-PBCO-MailScanner-SpamCheck: not spam, SpamAssassin (score=-1.439,
>
> 	required 5, autolearn=not spam, ALL_TRUSTED -1.44,
>
> 	HTML_MESSAGE 0.00)
> X-PBCO-MailScanner-From: jstork at pbco.ca
^^^^^^^^^^^^^^ This is your MailScanner

The interesting part is the All_Trusted rule firing, which normally
indicates that you either have your network strangly set up or that
SpamAssassin is confused as to what is your local (And therefore trusted)
network. I am not the expert on this but there was a thread in the list
about All_Trusted so I would suggest a search (And maybe even a look in
the wiki as it could be in there.

Hope this helps (A bit!)

Drew


-- 
In line with our policy, this message has 
been scanned for viruses and dangerous 
content by MailScanner, and is believed to be clean.
www.themarshalls.co.uk/policy

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!