<div dir="ltr"><div>Hehe, missed that line, so the line is being read, this is very bizzare...</div><div><br></div><div>In any case, maillogs are going to be the next logical step.<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Jun 12, 2019 at 5:09 PM Antony Stone <<a href="mailto:Antony.Stone@mailscanner.open.source.it">Antony.Stone@mailscanner.open.source.it</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Wednesday 12 June 2019 at 22:32:28, Shawn Iverson via MailScanner wrote:<br>
<br>
> I do see a subtle clue...<br>
> <br>
> 1) The "X-Spam-Status: No" is actually not present.<br>
<br>
Erm, yes it is?<br>
<br>
X-Spam-Status: No, score=3.451 required=6 tests=[ALL_TRUSTED=-1,BAYES_50=0.8,<br>
DKIM_SIGNED=0.1, DKIM_VALID=-0.1,HEADER_FROM_DIFFERENT_DOMAINS=0.25,<br>
LOCAL_COUNTRY=2.2, LOCAL_NOTFROM_TTLD=2.2, MAILING_LIST_MULTI=-1,<br>
SPF_HELO_NONE=0.001] autolearn=no autolearn_force=no<br>
<br>
> "X-Spam-Flag: NO" is actually coming from amavisd-new on the next hop (the<br>
> Zimbra mail server itself, I think) and hence why it is so far up in the<br>
> Received chain.<br>
<br>
Indeed - that's different.<br>
<br>
> 2) Becuase X-Spam-Status is not there, the Non Spam Actions appears to have<br>
> been ignored for some reason.<br>
<br>
I'm not so sure (but then again I'm not at all sure about this one).<br>
<br>
> At this point, we are going to need a maillog of an inbound message that<br>
> fails to get quarantined, along with a maillog of an outbound message that<br>
> is being quarantined for further clues.<br>
<br>
Sounds good to me.<br>
<br>
<br>
Antony.<br>
<br>
-- <br>
"Remember: the S in IoT stands for Security."<br>
<br>
- Jan-Piet Mens<br>
<br>
Please reply to the list;<br>
please *don't* CC me.<br>
<br>
<br>
-- <br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr">Shawn Iverson, CETL<div>Director of Technology</div><div>Rush County Schools</div><div>765-932-3901 option 7</div><div><a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12.in.us</a></div><div><br></div><div><img src="https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ" width="89" height="96"><img src="https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ" style="font-size: 12.8px;"><img src="https://www.doe.in.gov/sites/default/files/cybersecurity/cybersecurity.png" alt="Cybersecurity" width="96" height="96"></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>