Messages passing through Mailscanner lose X-Mailer headers, and turn up as SPAM, but no Mailscanner no problem

Leah Cunningham leah at frauerpower.com
Mon Nov 13 21:42:53 GMT 2006


I have a strange problem.  I have a client whose internal user is able to 
successfully send messages to me from their old Q-Mail server without a 
problem. If the same user, with the same mail client, computer, etc, sends a 
message through a newer mail server that I have set up for them that runs 
MailScanner (with Postfix), the message is detected by my own mail server 
(and many others) as Spam, and has different headers.  It seems part of the 
reason is that Spamassassin thinks it is a bogus Outlook, maybe because the 
X-Mailer header is not there.  

The major difference I notice is that in the one that went through 
MailScanner, we are missing these two headers that are in the one that went 
through their old mail server, and I want to know why:

X-Mailer: Microsoft Outlook, Build 10.0.2627
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

Here are the headers when the message is sent through their old Qmail based 
server:

Return-Path: <robert at misconsult.com>
Delivered-To: leah at frauerpower.com
Received: from misconnew.misconsult.com (misconsult.com [209.226.172.34])
       by sauerkraut.heinous.org (Postfix) with SMTP id D7BB6E565
       for <leah at frauerpower.com>; Thu,  9 Nov 2006 15:17:10 -0500 (EST)
Received: (qmail 3965 invoked by uid 1010); 9 Nov 2006 20:33:11 -0000
Received: from robert at misconsult.com by misconnew by uid 1007 with 
qmail-scanner-1.20st
(clamuko: 0.70. spamassassin: 2.63.  Clear:RC:1(192.168.1.28):.
Processed in 62.666888 secs); 09 Nov 2006 20:33:11 -0000
Received: from unknown (HELO MIS05) (192.168.1.28)
 by misconnew.misconsult.com with SMTP; 9 Nov 2006 20:32:05 -0000
From: "Bob Lewis" <robert at misconsult.com>
To: <leah at frauerpower.com>
Subject: Test 3  Nov 9   to leah at frauerpower.com
Date: Thu, 9 Nov 2006 15:15:50 -0500
Message-ID: <000801c7043b$dcf7aff0$1c01a8c0 at MIS05>
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="----=_NextPart_000_0009_01C70411.F421A7F0"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2627
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-heinous-MailScanner-Information: Please contact the ISP for more information
X-heinous-MailScanner: Found to be clean
X-heinous-MailScanner-From: robert at misconsult.com
X-Spam-Status: No
X-Length: 10426
X-UID: 3026

And here are the headers using the Postfix + MailScanner combination:
Return-Path: <robert at misconsult.com>
Delivered-To: support at frauerpower.com
Received: from misconsult.com (misconsult.com [209.226.172.34])
        (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
        (No client certificate requested)
        by sauerkraut.heinous.org (Postfix) with ESMTP id B6A10DE3C
        for <support at frauerpower.com>; Thu,  9 Nov 2006 12:49:27 -0500 (EST)
From: "Bob Lewis" <robert at misconsult.com>
To: <support at frauerpower.com>
Subject: {Spam?} test nov 9
Date: Thu, 9 Nov 2006 12:49:02 -0500
Message-ID: <000301c70427$5b061770$1c01a8c0 at MIS05>
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0004_01C703FD.72328070"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Importance: Normal
X-misconsult-MailScanner-Information: Please contact the ISP for more 
information
X-misconsult-MailScanner: Found to be clean
X-misconsult-MailScanner-From: robert at misconsult.com
X-Spam-Status: No, Yes
X-heinous-MailScanner-Information: Please contact the ISP for more information
X-heinous-MailScanner: Found to be clean
X-heinous-MailScanner-SpamCheck: spam, SpamAssassin (score=8.23, required 6,
        BAYES_00 -2.60, HTML_90_100 0.11, HTML_MESSAGE 0.00,
        MISSING_MIMEOLE 1.61, MSGID_DOLLARS 1.72, PRIORITY_NO_NAME 2.70,
        RATWARE_MS_HASH 1.91, RATWARE_OUTLOOK_NONAME 2.78)
X-heinous-MailScanner-SpamScore: ssssssss
X-heinous-MailScanner-From: robert at misconsult.com

Any ideas on why these headers are missing, and what else I might do so that 
we can have the new mail server work?  Please cc leah at heinous.org on this if 
it's not too much trouble.

Thanks,
Leah

-- 
Leah Cunningham : d416-585-9971x692 : d416-703-5977 : m416-559-6511
Frauerpower! Co. : www.frauerpower.com : Toronto, ON Canada


More information about the MailScanner mailing list