Mail from Outside our Domain not Stored

[Shawn Iverson]

Hehe, missed that line, so the line is being read, this is very bizzare...

In any case, maillogs are going to be the next logical step.

On Wed, Jun 12, 2019 at 5:09 PM Antony Stone <
Antony.Stone at mailscanner.open.source.it> wrote:

> On Wednesday 12 June 2019 at 22:32:28, Shawn Iverson via MailScanner wrote:
>
> > I do see a subtle clue...
> >
> > 1)  The "X-Spam-Status: No" is actually not present.
>
> Erm, yes it is?
>
> X-Spam-Status: No, score=3.451 required=6
> tests=[ALL_TRUSTED=-1,BAYES_50=0.8,
>         DKIM_SIGNED=0.1,
> DKIM_VALID=-0.1,HEADER_FROM_DIFFERENT_DOMAINS=0.25,
>         LOCAL_COUNTRY=2.2, LOCAL_NOTFROM_TTLD=2.2, MAILING_LIST_MULTI=-1,
>         SPF_HELO_NONE=0.001] autolearn=no autolearn_force=no
>
> > "X-Spam-Flag: NO" is actually coming from amavisd-new on the next hop
> (the
> > Zimbra mail server itself, I think) and hence why it is so far up in the
> > Received chain.
>
> Indeed - that's different.
>
> > 2) Becuase X-Spam-Status is not there, the Non Spam Actions appears to
> have
> > been ignored for some reason.
>
> I'm not so sure (but then again I'm not at all sure about this one).
>
> > At this point, we are going to need a maillog of an inbound message that
> > fails to get quarantined, along with a maillog of an outbound message
> that
> > is being quarantined for further clues.
>
> Sounds good to me.
>
>
> Antony.
>
> --
> "Remember: the S in IoT stands for Security."
>
>  - Jan-Piet Mens
>
>                                                    Please reply to the
> list;
>                                                          please *don't* CC
> me.
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 option 7
iversons at rushville.k12.in.us

[image: Cybersecurity]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20190612/46c82adc/attachment-0001.html>