mail from mindspring

[Mogens Melander]

Hi

I have to admit, i was somewhat surprised to learn, that MS tries
to send notice, about unwanted attachment, to mindspring.com.

I would think that messages marked as spam, should not trigger a responce
to sender, who is 99% shure faked, even when config is to notice sender
about unwanted attachments.

Is there a config combination that would keep MS from doing this ?

I got an entry i my access.db blocking all mindspring.com:

mindspring.com   ERROR:"550 Reject : mindspring.com - Spam source"

And maillog said:

Mar 26 09:49:02 (none) MailScanner[3448]: Message m2Q8moaj003869
  from 202.141.26.5 (hueyg at mindspring.net) to parkhotel.dk is spam,
  SpamAssassin (not cached, score=14.311, required 5,
  BAYES_99 5.00,
  CHARSET_FARAWAY_HEADER 3.20,
  DCC_CHECK 2.17,
  HTML_MESSAGE 0.00,
  MIME_CHARSET_FARAWAY 2.45,
  PLING_QUERY 1.39,
  RDNS_NONE 0.10)

So it's clearly marked as spam. It's also being tagged by MCP:

Mar 26 09:49:03 (none) MailScanner[3448]: Spam Checks: Found 1 spam messages
Mar 26 09:49:03 (none) MailScanner[3448]: Spam Actions:
  message m2Q8moaj003869 actions are store-nonmcp
Mar 26 09:49:04 (none) MailScanner[3448]: MCP Checks: Starting
Mar 26 09:49:05 (none) MailScanner[3448]: Virus and Content Scanning: Starting
Mar 26 09:49:07 (none) MailScanner[3448]: Filetype Checks:
  No executables (m2Q8moaj003869 msg-3448-5.txt)
Mar 26 09:49:07 (none) MailScanner[3448]: Filetype Checks:
  Allowing m2Q8moaj003869 msg-3448-6.html
Mar 26 09:49:07 (none) MailScanner[3448]: Other Checks: Found 1 problems
Mar 26 09:49:08 (none) MailScanner[3448]:
  Saved entire message
  to /var/spool/MailScanner/quarantine/20080326/m2Q8moaj003869
Mar 26 09:49:09 (none) MailScanner[3448]:
  Saved infected "msg-3448-5.txt"
  to /var/spool/MailScanner/quarantine/20080326/m2Q8moaj003869

---------------------------------------- Original Message ----------------------------------------
Subject: Postmaster notify: see transcript for details
From:    "Mail Delivery Subsystem" <MAILER-DAEMON>
Date:    Wed, March 26, 2008 09:49
To:      postmaster
--------------------------------------------------------------------------------------------------

The original message was received at Wed, 26 Mar 2008 09:49:09 +0100
from localhost [127.0.0.1]
with id m2Q8n9nP003889

   ----- The following addresses had permanent fatal errors -----
<hueyg at mindspring.net>
    (reason: 550 Mailbox unavailable or access denied - <hueyg at mindspring.net>)

   ----- Transcript of session follows -----
... while talking to im.namehub.com.:
>>> RCPT To:<hueyg at mindspring.net>
<<< 550 Mailbox unavailable or access denied - <hueyg at mindspring.net>
550 5.1.1 <hueyg at mindspring.net>... User unknown


-- 
Later

Mogens Melander
+45 40 85 71 38
+66 870 133 224

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------- next part --------------
Skipped content of type message/delivery-status-------------- next part --------------
An embedded message was scrubbed...
From: "MailScanner" <postmaster at parkhotel.dk>
Subject: Warning: E-mail viruses detected
Date: Wed, 26 Mar 2008 09:49:09 +0100
Size: 1740
Url: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20080326/909e2970/E-mailvirusesdetected-0001.mht