a lot of mail delivery failed mail slips trough the filter

[Martin.Hepworth]

Rob

There's a setting in MailScanner.conf where you can say what happens with an empty from and no watermark. By default this will be 'spam', which in my case I tag the subject and deliver.

Yesterday I changed this to high scoring spam and it's helped a lot as I don't deliver this stuff.

Treat Invalid Watermarks With No Sender as Spam = high-scoring spam

This in the Watermarking section.


--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Meurlin Robert
> Sent: 17 April 2008 13:21
> To: MailScanner discussion
> Subject: SV: a lot of mail delivery failed mail slips trough the filter
>
> "If they are truly sent from <> (a.k.a. MAILER-DAEMON:-), the Watermark
> feature of a fairly recent MailScanner can help a bit, or perhaps milter-
> null.
> If they're not really DSNs, only pretending... other measures are what you
> need."
>
> I tried the watermark feature but it stil causes problems for a few users.
> This morning one had about 120 of these failure notice mail in here inbox.
> When I look at same person but some days before it is okay not many as
> this night.
>
> When I look in mailwatch a lot of these "failure notice spam" has passed
> through "SpamAssassin Autolearn"
>
> I have seen this problem coming more and more the last couple of weeks.
>
> Anyone got anymore tip how to stop them?
>
> Rob.
>
>
> -----Ursprungligt meddelande-----
> Från: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] För Glenn Steen
> Skickat: den 7 april 2008 10:10
> Till: MailScanner discussion
> Ämne: Re: a lot of mail delivery failed mail slips trough the filter
>
> On 07/04/2008, Meurlin Robert <Robert.Meurlin at se.fujitsu.com> wrote:
> >
> >
> > Hello,
> > i have seen recent week that a lot of spam that have these subject
> lines:
> > failure notice
> > Delivery Status Notification (Failure) Delivery failure WARNING. Mail
> > Delayed  Returned mail: see transcript for detail
> >
> >
> > slipps trough the filter, is there any other way to stop them without
> >
> > header   FRIEND_GREETINGS7      Subject =~ /Delivery Status Notification
> > (Failure)/i
> > describe FRIEND_GREETINGS7      blabla
> >
> > score    FRIEND_GREETINGS7      100.0
> >
> >
> > ?
> If they are truly sent from <> (a.k.a. MAILER-DAEMON:-), the Watermark
> feature of a fairly recent MailScanner can help a bit, or perhaps milter-
> null.
> If they're not really DSNs, only pretending... other measures are what you
> need.
>
> Cheers
> --
> -- Glenn
> email: glenn < dot > steen < at > gmail < dot > com
> work: glenn < dot > steen < at > ap1 < dot > se
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!




**********************************************************************
Confidentiality : This e-mail and any attachments are intended for the 
addressee only and may be confidential. If they come to you in error 
you must take no action based on them, nor must you copy or show them 
to anyone. Please advise the sender by replying to this e-mail 
immediately and then delete the original from your computer.
Opinion : Any opinions expressed in this e-mail are entirely those of 
the author and unless specifically stated to the contrary, are not 
necessarily those of the author's employer.
Security Warning : Internet e-mail is not necessarily a secure 
communications medium and can be subject to data corruption. We advise 
that you consider this fact when e-mailing us. 
Viruses : We have taken steps to ensure that this e-mail and any 
attachments are free from known viruses but in keeping with good 
computing practice, you should ensure that they are virus free.

Red Lion 49 Ltd T/A Solid State Logic
Registered as a limited company in England and Wales 
(Company No:5362730)
Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, 
United Kingdom
**********************************************************************