Consistent SPAM messages getting through

Nasser Al-Zawawi nassera at
Mon Dec 15 15:12:06 GMT 2008

I have RedHat ES 4 server running sendmail (8.13.1) and I am using the
latest MailScanner version (4.73.4-2), ClamAV 0.94.2 and SpamAssassin
3.2.5.  Lately this kind of message has been getting through:
It says it is coming from my email or an alias on my system and it is
marked urgent the subject is something like: "Your order", "Re: Your
order", "Delivery Status Notification", "Delivery Status Notification
(Failure)".  The content is a jpg picture of Viagra, CIALIS, LEVITRA and
VPXL drugs.
Here is the message html source:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
<BODY><a href="" target="_blank">
<img src="" border=0 alt="Having
trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>
and here is the Internet headers:
Return-Path: <sales at>
Received: from
( [])
            by (8.13.1/8.13.1) with SMTP id
            for <sales at>; Mon, 15 Dec 2008 09:50:47 -0500
Date: Mon, 15 Dec 2008 09:50:46 -0500
From: Nasser Al-Zawawi <sales at>
Message-Id: <200812151450.mBFEokoH025796 at>
To: <sales at>
Subject: Re: Order status
MIME-Version: 1.0
Importance: High
Content-Type: text/html
X-alz-inc-MailScanner-Information: Please contact the ISP for more
X-alz-inc-MailScanner-ID: mBFEokoH025796
X-alz-inc-MailScanner: Found to be clean
X-alz-inc-MailScanner-From: sales at
X-Spam-Status: No
Status: O
X-UID: 455634
Content-Length: 364
They seem to come in patches of 4 (4 emails at a time).  I had it before
I upgraded to the latest version and after upgrading.  I probably get
about 80 message of this type per day.  Other types of SPAMs seem to be
under control but this type is getting though.  I appreciate any help
with this problem.
Best regards,

-------------- next part --------------
An HTML attachment was scrubbed...

More information about the MailScanner mailing list