<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:v = "urn:schemas-microsoft-com:vml" xmlns:o = "urn:schemas-microsoft-com:office:office" xmlns:w = "urn:schemas-microsoft-com:office:word" xmlns:m = "http://schemas.microsoft.com/office/2004/12/omml"><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 11.00.9600.16476">
<STYLE><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
mso-believe-normal-left:yes;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Courier New";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></STYLE>
</HEAD>
<BODY lang=EN-US style="FONT: 10pt Segoe UI; MARGIN: 4px 4px 1px" link=blue vLink=purple>
<DIV>Upon even closer observation....I seem to be insane.</DIV>
<DIV> </DIV>
<DIV>If Treat Invalid Watermarks with No Sender as Spam = spam (or high-scoring spam), Messages.pm does indeed exit without moving forward, which makes sense.</DIV>
<DIV> </DIV>
<DIV>When it is a number, processing continues. The messages that are getting through are indeed sliding past SpamAssassin undetected and with a 0 score. :/ Specifically, they are forged emails coming from Google, sent out to random recipients, with the DSNs landing squarely on the mail user whose email address was forged.</DIV>
<DIV><BR> </DIV>
<DIV> </DIV>
<DIV>
<DIV>Shawn Iverson<BR>Rush County Schools<BR>District Technology Coordinator<BR><A href="mailto:iversons@rushville.k12.in.us">iversons@rushville.k12.in.us</A></DIV>>>> "Shawn Iverson" <IversonS@rushville.k12.in.us> 3/13/2014 8:30 AM >>><BR></DIV>
<DIV class=WordSection1>
<P class=MsoNormal><SPAN style="COLOR: #1f497d"></SPAN><SPAN style='FONT-SIZE: 11pt; FONT-FAMILY: "Courier New"; COLOR: #1f497d'><o:p>I spoke too soon, now I am having the opposite effect.</o:p></SPAN></P>
<P class=MsoNormal><SPAN style='FONT-SIZE: 11pt; FONT-FAMILY: "Courier New"; COLOR: #1f497d'><o:p><FONT color=#000000 size=2 face="Segoe UI">Treat Invalid Watermarks with No Sender As Spam </FONT></o:p></SPAN></P>
<P class=MsoNormal><SPAN style='FONT-SIZE: 11pt; FONT-FAMILY: "Courier New"; COLOR: #1f497d'><o:p>is halting subsequent rule processing on my system. As soon as an email matches this rule, spam checks do not proceed.</o:p></SPAN></P>
<P class=MsoNormal><SPAN style='FONT-SIZE: 11pt; FONT-FAMILY: "Courier New"; COLOR: #1f497d'><o:p>So, if I set a low score, all matching emails are non-spam (becuase Spamassassin doesn't get a chance to scan further)</o:p></SPAN></P>
<P class=MsoNormal><SPAN style='FONT-SIZE: 11pt; FONT-FAMILY: "Courier New"; COLOR: #1f497d'><o:p>And, if I set a high score, all matching emails are spam by default.</o:p></SPAN></P>
<P class=MsoNormal><SPAN style='FONT-SIZE: 11pt; FONT-FAMILY: "Courier New"; COLOR: #1f497d'><o:p>Catch 22</o:p></SPAN></P>
<P class=MsoNormal><SPAN style='FONT-SIZE: 11pt; FONT-FAMILY: "Courier New"; COLOR: #1f497d'><o:p>I'm going to dive into the MailScanner code and see what is actually happening....</o:p></SPAN></P>
<DIV>
<DIV style="BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; BORDER-BOTTOM: medium none; PADDING-BOTTOM: 0in; PADDING-TOP: 3pt; PADDING-LEFT: 0in; BORDER-LEFT: medium none; PADDING-RIGHT: 0in">
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><B><SPAN style='FONT-SIZE: 10pt; FONT-FAMILY: "Tahoma","sans-serif"'>From:</SPAN></B><SPAN style='FONT-SIZE: 10pt; FONT-FAMILY: "Tahoma","sans-serif"'> mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] <B>On Behalf Of </B>Shawn Iverson<BR><B>Sent:</B> Thursday, February 27, 2014 6:12 AM<BR><B>To:</B> 'MailScanner discussion'<BR><B>Subject:</B> RE: Treat Invalid Watermarks with No Sender as Spam<o:p></o:p></SPAN></P></DIV></DIV>
<P class=MsoNormal><o:p> </o:p></P>
<DIV>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style='FONT-SIZE: 10pt; FONT-FAMILY: "Segoe UI","sans-serif"'>Setting to a low score has helped immensely. Messages are still getting caught by the other algorithms while allowing legit emails through.<o:p></o:p></SPAN></P></DIV>
<DIV>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style='FONT-SIZE: 10pt; FONT-FAMILY: "Segoe UI","sans-serif"'> <o:p></o:p></SPAN></P></DIV>
<DIV>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style='FONT-SIZE: 10pt; FONT-FAMILY: "Segoe UI","sans-serif"'>I will make a feature request, though.<o:p></o:p></SPAN></P></DIV>
<DIV>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style='FONT-SIZE: 10pt; FONT-FAMILY: "Segoe UI","sans-serif"'> <o:p></o:p></SPAN></P></DIV>
<DIV>
<P class=MsoNormal style="MARGIN-BOTTOM: 12pt; MARGIN-LEFT: 0in; MARGIN-RIGHT: 0in; mso-margin-top-alt: 0in"><SPAN style='FONT-SIZE: 10pt; FONT-FAMILY: "Segoe UI","sans-serif"'>It appears in the MailScanner code that when Treat Invalid Watermarks with No Sender As Spam equals anything spam or higher, further rule processing is halted. This is taking precedence over whitelisting/blacklisting and probably should not.<o:p></o:p></SPAN></P></DIV>
<DIV>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style='FONT-SIZE: 10pt; FONT-FAMILY: "Segoe UI","sans-serif"'> <o:p></o:p></SPAN></P></DIV>
<DIV>
<DIV>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style='FONT-SIZE: 10pt; FONT-FAMILY: "Segoe UI","sans-serif"'>Shawn Iverson<BR>Rush County Schools<BR>District Technology Coordinator<BR><A href="mailto:iversons@rushville.k12.in.us">iversons@rushville.k12.in.us</A></SPAN></P><SPAN style='FONT-SIZE: 10pt; FONT-FAMILY: "Segoe UI","sans-serif"'><o:p>
<DIV>Shawn Iverson<BR>Rush County Schools<BR>District Technology Coordinator<BR><A href="mailto:iversons@rushville.k12.in.us">iversons@rushville.k12.in.us</A></DIV></o:p></SPAN></DIV>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style='FONT-SIZE: 10pt; FONT-FAMILY: "Segoe UI","sans-serif"'>>>> "Shawn Iverson" <<A href="mailto:IversonS@rushville.k12.in.us">IversonS@rushville.k12.in.us</A>> 2/26/2014 7:02 PM >>><o:p></o:p></SPAN></P></DIV>
<DIV>
<P class=MsoNormal style="MARGIN-BOTTOM: 12pt; MARGIN-LEFT: 0in; MARGIN-RIGHT: 0in; mso-margin-top-alt: 0in"><SPAN style='FONT-SIZE: 10pt; FONT-FAMILY: "Segoe UI","sans-serif"'>Just set a numeric...will observe and see what happens.<o:p></o:p></SPAN></P></DIV>
<DIV>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style='FONT-SIZE: 10pt; FONT-FAMILY: "Segoe UI","sans-serif"'> <o:p></o:p></SPAN></P></DIV>
<DIV>
<DIV>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style='FONT-SIZE: 10pt; FONT-FAMILY: "Segoe UI","sans-serif"'>Shawn Iverson<BR>Rush County Schools<BR>District Technology Coordinator<BR><A href="mailto:iversons@rushville.k12.in.us">iversons@rushville.k12.in.us</A><o:p></o:p></SPAN></P></DIV>
<P class=MsoNormal style="MARGIN-BOTTOM: 12pt; MARGIN-LEFT: 0in; MARGIN-RIGHT: 0in; mso-margin-top-alt: 0in"><SPAN style='FONT-SIZE: 10pt; FONT-FAMILY: "Segoe UI","sans-serif"'>>>> Kevin Miller <<A href="mailto:Kevin_Miller@ci.juneau.ak.us">Kevin_Miller@ci.juneau.ak.us</A>> 2/26/2014 6:48 PM >>><BR>> When I disable the Treat Invalid Watermarks With No Sender as Spam, the messages do pass through just fine.<BR><BR>What happens when you assign it a numeric value?<BR><BR>...Kevin<BR>--<BR>Kevin Miller<BR>Network/email Administrator, CBJ MIS Dept.<BR>155 South Seward Street<BR>Juneau, Alaska 99801<BR>Phone: (907) 586-0242, Fax: (907) 586-4500<BR>Registered Linux User No: 307357 <o:p></o:p></SPAN></P></DIV>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style='FONT-SIZE: 10pt; FONT-FAMILY: "Segoe UI","sans-serif"'><BR>-- <BR>This message has been scanned for viruses and dangerous content by <BR><A href="http://www.efa-project.org"><B>E.F.A. Project</B></A>, and is believed to be clean. <BR>-- <BR>This message has been scanned for viruses and dangerous content by <BR><A href="http://www.efa-project.org"><B>E.F.A. Project</B></A>, and is believed to be clean. <o:p></o:p></SPAN></P></DIV><BR>-- <BR>This message has been scanned for viruses and dangerous content by <BR><A href="http://www.efa-project.org"><B>E.F.A. Project</B></A>, and is believed to be clean. <BR><A href="https://efa.rushville.k12.in.us/cgi-bin/learn-msg.cgi?id=218A3808FF.A2412&token=ac54c1dd7c3f3c9747f5e9ed461934e7">Click here to report this message as spam.</A> </BODY></HTML>