<div dir="ltr">.... Unless the "watermark" survives in the NDR, yes, that is as expected.<div>I suppose you've actively set the watermarking stuff? If so, there's really not much to do, other than perhaps reevaluate wether you really want the watermak thingy or not.</div>
<div><br></div><div>Cheers!</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On 9 May 2014 23:45, Jerry Benton <span dir="ltr"><<a href="mailto:jerry.benton@mailborder.com" target="_blank">jerry.benton@mailborder.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
It was the watermarking. Watermarks + null sender = spam. <br><div class="">
<br>
<br>
<div>On 5/9/14, 10:08 PM, Martin Hepworth
wrote:<br>
</div>
</div><div><div class="h5"><blockquote type="cite">
<div dir="ltr">
<div>So what do the logs say about it?<br>
</div>
Are you signing the headers outbound or not?<br>
</div>
<div class="gmail_extra"><br clear="all">
<div>-- <br>
Martin Hepworth, CISSP<br>
Oxford, UK</div>
<br>
<br>
<div class="gmail_quote">On 9 May 2014 20:08, Jerry Benton <span dir="ltr"><<a href="mailto:jerry.benton@mailborder.com" target="_blank">jerry.benton@mailborder.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"> No, this happens from
internal servers relaying emails outbound. The MTA is not
performing any ip related checks, but I will review in
case I missed something. <br>
<div>
<div> <br>
<br>
<div>On 5/9/14, 8:21 PM, Jeremy McSpadden wrote:<br>
</div>
<blockquote type="cite">
<div>IP found on an RBL at MTA time ?<br>
<div><br>
<br>
<br>
--<br>
Jeremy McSpadden<br>
Flux Labs | <a href="http://www.fluxlabs.net" target="_blank">http://www.fluxlabs.net</a>
| Endless Solutions<br>
Office : <a href="tel:850-250-5590;501" target="_blank">850-250-5590x501</a>
| Cell : <a href="tel:850-890-2543" target="_blank">
850-890-2543</a> | Fax : <a href="tel:850-254-2955" target="_blank">850-254-2955</a></div>
<br>
</div>
<br>
<br>
<br>
<div class="gmail_quote">On Fri, May 9, 2014 at
10:06 AM -0700, "Jerry Benton" <span dir="ltr">
<<a href="mailto:jerry.benton@mailborder.com" target="_blank">jerry.benton@mailborder.com</a>></span>
wrote:<br>
<br>
</div>
<div>
<div dir="ltr">Has anyone seen NDRs getting marked
as spam without even being scanned by SA? I am
seeing the behavior and am assuming it is a
MailScanner thing since the message never seems
to pass through SA.
<div><br>
</div>
<div>I am assuming the null sender is triggering
it. <br>
<div>
<div><br>
</div>
-- <br>
<div dir="ltr">
<div>
<div><br>
--<br>
</div>
Jerry Benton<br>
</div>
Mailborder Systems<br>
<a href="http://www.mailborder.com" target="_blank">www.mailborder.com</a><br>
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
</blockquote>
<br>
</div>
</div>
</div>
<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the
website!<br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
</blockquote>
<br>
</div></div></div>
<br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>-- Glenn<br>email: glenn < dot > steen < at > gmail < dot > com<br>work: glenn < dot > steen < at > ap1 < dot > se
</div>