Not tagging messages?

[Jay Chandler]

Late-breaking followup:

Apparently it's not just one server, it's both of our primary MX boxes-- 
so something changed.

Log entry for the previous spam:

bangor# cat /var/log/maillog |grep B6CC011BD7
Jan 19 09:27:54 bangor postfix/smtpd[74051]: B6CC011BD7: 
client=cpc1-lutn2-0-0-cust332.lutn.cable.ntl.com[81.107.125.77]
Jan 19 09:27:56 bangor postfix/cleanup[70981]: B6CC011BD7: hold: header 
Received: from chronoexpres.com 
(cpc1-lutn2-0-0-cust332.lutn.cable.ntl.com [81.107.125.77])??by 
bangor.chapman.edu (Postfix) with SMTP id B6CC011BD7??for 
<proxy at chapman.edu>; Fri, 19 Jan 2007 09:27:54 from 
cpc1-lutn2-0-0-cust332.lutn.cable.ntl.com[81.107.125.77]; 
from=<Carroll at chronoexpres.com> to=<proxy at chapman.edu> proto=SMTP 
helo=<chronoexpres.com>
Jan 19 09:27:56 bangor postfix/cleanup[70981]: B6CC011BD7: 
message-id=<001a01c73bef$2f37b130$001a2bdc at home>
Jan 19 09:28:03 bangor MailScanner[20377]: Message B6CC011BD7.8F1E5 from 
81.107.125.77 (carroll at chronoexpres.com) to chapman.edu is spam, 
SpamAssassin (not cached, score=30.323, required 6, HTML_IMAGE_ONLY_16 
0.63, HTML_MESSAGE 0.00, HTML_SHORT_LINK_IMG_2 0.95, MIME_HTML_MOSTLY 
0.70, MPART_ALT_DIFF 0.14, RAZOR2_CF_RANGE_51_100 0.50, 
RAZOR2_CF_RANGE_E4_51_100 1.50, RAZOR2_CF_RANGE_E8_51_100 1.50, 
RAZOR2_CHECK 0.50, RCVD_IN_SORBS_DUL 1.99, SARE_GIF_ATTACH 0.75, 
SARE_GIF_STOX 1.66, URIBL_AB_SURBL 3.31, URIBL_BLACK 4.00, 
URIBL_JP_SURBL 3.36, URIBL_OB_SURBL 2.62, URIBL_SBL 1.09, URIBL_SC_SURBL 
3.60, URIBL_WS_SURBL 1.53)
Jan 19 09:28:03 bangor MailScanner[20377]: Spam Actions: message 
B6CC011BD7.8F1E5 actions are deliver,header
Jan 19 09:28:04 bangor MailScanner[20377]: <A> tag found in message 
B6CC011BD7.8F1E5 from carroll at chronoexpres.com
Jan 19 09:28:04 bangor MailScanner[20377]: HTML Img tag found in message 
B6CC011BD7.8F1E5 from carroll at chronoexpres.com
Jan 19 09:28:04 bangor MailScanner[20377]: Requeue: B6CC011BD7.8F1E5 to 
5D81C11D91

-- 
Jay Chandler
Network Administrator, Chapman University
714.628.7249 / chandler at chapman.edu
Today's Excuse: That would be because the software doesn't work.