<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc="http://microsoft.com/officenet/conferencing" xmlns:D="DAV:" xmlns:Repl="http://schemas.microsoft.com/repl/" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda="http://www.passport.com/NameSpace.xsd" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:Z="urn:schemas-microsoft-com:" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=WordSection1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Hmm…. now that you mention it… It should be after MailScanner
checked it, but it looks like they were skipped.<br>
I'll check the configuration for any rules that might explain why they were not
checked<br>
Thanks!<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> maxsec@gmail.com
[mailto:mailscanner-bounces@lists.mailscanner.info] <b>On Behalf Of </b>Martin
Hepworth<br>
<b>Sent:</b> donderdag 8 juli 2010 10:50<br>
<b>To:</b> MailScanner discussion<br>
<b>Subject:</b> Re: Watermarking, checking bounced mail with sender address<o:p></o:p></span></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal style='margin-bottom:12.0pt'>Hi<br>
<br>
are these headers before or after mailscanner should have checked the message?
If it's after then I see indication that mailscanner has scanned the message as
there are no X-Mailscanner headers.<br>
<br>
<o:p></o:p></p>
<div>
<p class=MsoNormal>On 8 July 2010 09:40, ACHA | Cor van den Berghe <<a
href="mailto:cbe@acha.nl">cbe@acha.nl</a>> wrote:<o:p></o:p></p>
<p class=MsoNormal>Sorry that I didn't make it clear enough.<br>
<br>
I was under the impression that MailScanner does 2 checks before it checks the
watermark:<br>
1. check if the mail has no sender<br>
2. check if the mail is bounced<br>
<br>
If these 2 conditions are true than MailScanner checks the watermark.<br>
<br>
When I check the mail that has been proccessed by MailScanner I find that some
messages which have no sender are marked as spam because MailScanner checked
the watermark. On other bounced message, which do have a sender address the
watermark is not checked<br>
<br>
Below is a header of a bounced message which was not marked as spam and was not
send to the person who got the error message<br>
<br>
----------------------------<br>
Return-Path: <?g><br>
Received: from <a href="http://75-44-14-134.hadlaw.com" target="_blank">75-44-14-134.hadlaw.com</a>
(<a href="http://75-44-14-134.hadlaw.com" target="_blank">75-44-14-134.hadlaw.com</a>
[75.44.14.134] (may be forged))<br>
by standic-ls.standic.lan (8.13.8/8.13.8) with ESMTP id
o67FlPaf022789<br>
for <<a href="mailto:kruining@fakecompany.com">kruining@fakecompany.com</a>>;
Wed, 7 Jul 2010 17:47:26 +0200<br>
Received: from 75.44.14.134 (<a href="http://75.44.14.134:87288" target="_blank">75.44.14.134:87288</a>)<br>
by <a href="http://rmwlaw.com.inbound15.mxlogic.net"
target="_blank">rmwlaw.com.inbound15.mxlogic.net</a> (envelope-from <<a
href="mailto:drollnessnpr76@rmwlaw.com">drollnessnpr76@rmwlaw.com</a>>)<br>
(ecelerity 2.2.2.45 r(34067)) with ECSTREAM<br>
id 41/73-73224-F30ZP2Q6; Wed, 7 Jul 2010 11:47:06 -0500<br>
X-Facebook: from HADXP6 ([LBX2RvMgJV5q])<br>
by <a href="http://www.facebook.com" target="_blank">www.facebook.com</a>
with HTTP (ZuckMail);<br>
Date: Wed, 7 Jul 2010 11:47:06 -0500<br>
To: <a href="mailto:kruining@fakecompany.com">kruining@fakecompany.com</a><br>
From: <<a href="mailto:postmaster@fakecompany.com">postmaster@fakecompany.com</a>><br>
Reply-to: <a href="mailto:drollnessnpr76@rmwlaw.com">drollnessnpr76@rmwlaw.com</a><br>
Subject: Delivery Status Notification (Failure)<br>
Message-ID: 47B7B9EDAC6340DE905D63D452E09AC6@HADXP6<br>
X-Priority: 3<br>
X-Mailer: ZuckMail [version 1.00]<br>
X-Facebook-Notify: password_reset; mailid=<br>
Errors-To: <a href="mailto:drollnessnpr76@rmwlaw.com">drollnessnpr76@rmwlaw.com</a><br>
X-FACEBOOK-PRIORITY: 1<br>
MIME-Version: 1.0<br>
Content-Type: multipart/mixed;<br>
boundary="----------4B7BE4D399338AA1"<br>
--------------------------------------------------<br>
<br>
Again please forgive me if I can't make it more clear but English is not my
native language<br>
<br>
Regards,<br>
<span style='color:#888888'>Cor.</span><o:p></o:p></p>
<div>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><br>
<br>
<br>
-----Original Message-----<br>
From: <a href="mailto:MailScanner@ecs.soton.ac.uk">MailScanner@ecs.soton.ac.uk</a>
[mailto:<a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a>]
On Behalf Of Julian Field<br>
Sent: donderdag 8 juli 2010 10:18<br>
To: MailScanner discussion<br>
Subject: Re: Watermarking, checking bounced mail with sender address<br>
<br>
Do you mean the From: address or the envelope sender address?<br>
MailScanner does nothing with the From: address.<br>
<br>
On 08/07/2010 07:27, ACHA | Cor van den Berghe wrote:<br>
> Hi all,<br>
><br>
> As I understand it MailScanner only checks the watermark on bounced email
with no sender address. Is it somehow possible to have MaiScanner check the
watermark on all bounced email?<br>
> Lately I get a lot of backscatter mail that have a From: address and I
have no idea how to stop it<br>
> Thanks for any help you can give me<br>
><br>
> Regards,<br>
> Cor van den Berghe<br>
><br>
><br>
<br>
Jules<br>
<br>
--<br>
Julian Field MEng CITP CEng<o:p></o:p></p>
</div>
</div>
</div>
<p class=MsoNormal><br clear=all>
<br>
-- <br>
Martin Hepworth<br>
Oxford, UK<o:p></o:p></p>
</div>
</body>
</html>