<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2655.35">
<TITLE>RE: MailScanner and SpamAssassin</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>Did you check their envelope address versus the whitelist?</FONT>
</P>
<P><FONT SIZE=2>We had a spammer faking their envelope address as someone on our whitelist.</FONT>
</P>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: Kris Zabriskie [<A HREF="mailto:zabriskw@itech.net">mailto:zabriskw@itech.net</A>]</FONT>
<BR><FONT SIZE=2>Sent: Tuesday, June 03, 2003 10:21 AM</FONT>
<BR><FONT SIZE=2>To: MAILSCANNER@jiscmail.ac.uk</FONT>
<BR><FONT SIZE=2>Subject: MailScanner and SpamAssassin</FONT>
</P>
<BR>
<P><FONT SIZE=2>I am running MailScanner and SpamAssassin, and am VERY pleased with the</FONT>
<BR><FONT SIZE=2>results! All though, I have noticed a problem, which is probably something</FONT>
<BR><FONT SIZE=2>in my configuration. Every once and awhile some spam will come through with</FONT>
<BR><FONT SIZE=2>a rating of 19 or 21, which is well above the limit I have set at 5. If you</FONT>
<BR><FONT SIZE=2>look in the header it looks like this:</FONT>
</P>
<P><FONT SIZE=2>X-Priority: 1</FONT>
<BR><FONT SIZE=2>X-MSMail-Priority: High</FONT>
<BR><FONT SIZE=2>X-MailScanner-Information: Please contact the ISP for more information</FONT>
<BR><FONT SIZE=2>X-MailScanner: Found to be clean</FONT>
<BR><FONT SIZE=2>X-MailScanner-SpamCheck: not spam (whitelisted), SpamAssassin (score=19.5,</FONT>
<BR><FONT SIZE=2> required 5, ALL_NATURAL, BANG_EXERCISE, BAYES_90, CLICK_BELOW_CAPS,</FONT>
<BR><FONT SIZE=2> DATE_IN_PAST_06_12, DRASTIC_REDUCED, FORGED_MUA_OUTLOOK,</FONT>
<BR><FONT SIZE=2> FROM_HAS_MIXED_NUMS, HTML_40_50, HTML_FONT_BIG,</FONT>
<BR><FONT SIZE=2>HTML_FONT_COLOR_BLUE,</FONT>
<BR><FONT SIZE=2> HTML_FONT_COLOR_RED, HTML_LINK_CLICK_CAPS, HTML_LINK_CLICK_HERE,</FONT>
<BR><FONT SIZE=2> MANY_EXCLAMATIONS, MIME_HTML_ONLY, MISSING_MIMEOLE, MLM,</FONT>
<BR><FONT SIZE=2> X_MSMAIL_PRIORITY_HIGH, X_PRIORITY_HIGH)</FONT>
</P>
<P><FONT SIZE=2>Obviously it is getting through because it is whitelisted. I dont have</FONT>
<BR><FONT SIZE=2>these guys whitelisted anywhere though. Can someone please point me in the</FONT>
<BR><FONT SIZE=2>right direction? Any help, as always, will be GREATLY appreciated. Thanks!</FONT>
</P>
</BODY>
</HTML>