High score mails get delivered

[Jerry Benton]

Are your spam actions set to:

store deliver

???

You can have it do more than one thing. 

-
Jerry Benton
www.mailborder.com



> On Mar 4, 2015, at 5:22 AM, Ryan Braganza <ryan.virgo at gmail.com> wrote:
> 
> Anyone has faced this issue before?
> 
> The spam actions in the logs say "actions are store" based on the rules but the mail still gets delivered. I have noticed this happens with mails haveing a blank message id
> 
> Mar  4 14:14:57 server1 postfix_spam2/smtpd[45570]: 087F2E8798D: client=unknown[192.200.112.35]
> Mar  4 14:14:58 server1 postfix_spam2/cleanup[45635]: 087F2E8798D: message-id=<>
> 
> Mar  4 14:15:10 server1 MailScanner[46543]: Message 087F2E8798D.A5923 from 192.200.112.35 (mary at rolipvc.net <mailto:mary at rolipvc.net>) to abcd.com <http://abcd.com/> is spam, CTSCORE : 0 str=0001.0A160201.54F6C615.0076,ss=1,re=0.001,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0, SpamAssassin (not cached, score=10.146, required 5, BOTNET 2.00, DEAR_SOMETHING 0.10, DKIM_ADSP_NXDOMAIN 0.80, FSL_HELO_NON_FQDN_1 0.00, HTML_MESSAGE 0.00, HTTP_ESCAPED_HOST 1.62, MIME_HEADER_CTYPE_ONLY 2.00, MIME_HTML_ONLY 0.10, MISSING_MID 0.14, NO_DNS_FOR_FROM 0.80, RDNS_NONE 1.27, URI_HEX 1.31)
> Mar  4 14:15:10 server1 MailScanner[46543]: Spam Actions: message 087F2E8798D.A5923 actions3 are store
> 
> Mar  4 14:18:15 server1 postfix_spam2/qmgr[2533]: 087F2E8798D: from=<Mary at rolipvc.net> <mailto:Mary at rolipvc.net>, size=13333, nrcpt=1 (queue active)
> Mar  4 14:18:16 server1 postfix_spam2/smtp[2543]: 087F2E8798D: to=<bangalore at abcd> <mailto:bangalore at kolsitegroup.com>, relay=relay.myserver.com <http://relay.myserver.com/>[x.x.x.x]:25, delay=200, delays=199/0.05/0.58/0.68, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 3D40B344FF4)
> 
> 
> Any idea?
> 
> Mailscanner 0.77    version
> mailscanner-4.84.6-1.noarch
> 
> 
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20150305/07f81efe/attachment.html