<div dir="ltr"><div>Also do NOT whitelist the domains you serve in MailScanner.conf (is definitely not spam) or spamassassin <br><br></div>Also having the list of any rules hit is always useful in the headers so you can see why it's getting through.. (or not)<br>
<br>I always add the SA info into email headers to see what the score and rule hits are ( helps with debug), in <code>MailScanner.conf</code> make sure the follow are set thus:
<p>
<code>Spam Score Number Format = %5.2f</code>
</p>
<p>
<code>Detailed Spam Report = yes</code>
</p>
<p>
<code>Include Scores In SpamAssassin Report = yes</code>
</p>
<p>
<code>Always Include SpamAssassin Report = yes</code>
</p>
<p>
<code>Spam Score Number Format = %5.2f</code>
</p><br></div><div class="gmail_extra"><br clear="all"><div>-- <br>Martin Hepworth, CISSP<br>Oxford, UK</div>
<br><br><div class="gmail_quote">On 14 October 2013 07:14, John Wilcock <span dir="ltr"><<a href="mailto:john@tradoc.fr" target="_blank">john@tradoc.fr</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Le 13/10/2013 23:33, Rodney Mitchell a écrit :<br>
<div class="im">> If the email is <<a href="mailto:testing@melecom.com.au">testing@melecom.com.au</a>> many spam emails come into the<br>
> INBOX and they are from <<a href="mailto:testing@melecom.com.au">testing@melecom.com.au</a>>, any suggestions?<br>
<br>
</div>By far the best solution is to configure your SMTP server not to accept<br>
unauthenticated mail from domains that it serves.<br>
<br>
If this isn't possible in your setup, have a look at the __TO_EQ_FROM<br>
rule in the standard ruleset. This is only used in other meta rules, but<br>
you could experiment with scoring it, making sure you exclude any<br>
genuine messages that you might send to yourself, for example:<br>
meta TO_EQ_FROM_UNTRUSTED meta __TO_EQ_FROM && !ALL_TRUSTED<br>
<br>
John.<br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
-- Over 5000 webcams from ski resorts around the world - <a href="http://www.snoweye.com" target="_blank">www.snoweye.com</a><br>
-- Translate your technical documents and web pages - <a href="http://www.tradoc.fr" target="_blank">www.tradoc.fr</a><br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
</font></span></blockquote></div><br></div>