Email detected as spam but not tagged

Mark Sapiro mark at
Wed Jul 21 18:03:39 IST 2010

On 11:59 AM, Rob Sterenborg wrote:
>>> Below is the email header with relevant Postfix/MailScanner
>> logs.
>>> Using this information, can anyone tell me why these emails
>> weren't
>>> tagged? If more info is needed, please let me know.

I looked at your OP at
and it seems clear that MailScanner did scan this message.

The first few headers at the top of the message are

X-MimeOLE: Produced By Microsoft Exchange V6.5
Received: from mx1.domain2.local ([ip.addr]) by mx2.domain2.local with
 Microsoft SMTPSVC(6.0.3790.1830); Sat, 17 Jul 2010 23:35:37 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
Received: from ([ip.addr]) by mx1.domain2.local with
 Microsoft SMTPSVC(6.0.3790.1830); Sat, 17 Jul 2010 23:35:12 +0200
Received: from ( []) by (Postfix) with ESMTP id 1EB923AA63 for
 <user at>; Sat, 17 Jul 2010 23:35:09 +0200 (CEST)

It appears that mx1.domain2.local (or possibly mx2.domain2.local) has
munged the message somehow as evidenced by the MIME-Version: and
Content-Type: headers inserted between the received headers at that
point. Is it possible that this is also responsible for dropping the
MailScanner headers?

Other than that, I have no ideas. It might help to know the MailScanner
version. It appears to be older than 4.78.3 because the logs show spam
scanning before virus scanning

Mark Sapiro <mark at>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

More information about the MailScanner mailing list