more logs http://pastebin.com/m4bc2c0c9
empiric wrote: > > Guys I am getting all my external domain emails tagged as SpamSpam > > logs are attached. > mail headers > > Return-Path: <[email protected]> > Delivered-To: [email protected] > Received: from localhost (localhost [127.0.0.1]) > by mail1.domain.com <http://hades.domain.com/> (Postfix) with ESMTP id > 39B3C12B71D > for <[email protected]>; Tue, 29 Sep 2009 10:19:57 +0600 (PKST) > X-Quarantine-ID: <asR-LhZoxUsQ> > X-Amavis-Alert: BAD HEADER Improper folded header field made up entirely > of > whitespace (char 20 hex): Subject: ...?Q?Spam?=\n > =?utf-8?Q?Spam=0D=0A=20helo123?=\n \n > Received: from mail1.domain.com ([127.0.0.1]) > by localhost (mail2.domain.com [127.0.0.1]) (amavisd-new, port 10024) > with LMTP id asR-LhZoxUsQ for <[email protected]>; > Tue, 29 Sep 2009 10:19:56 +0600 (PKST) > Received: from mail.domain.com (unknown [203.101.170.27]) > by mail1.domain.com (Postfix) with ESMTP id C6CF512B701 > for <[email protected]>; Tue, 29 Sep 2009 10:19:54 +0600 (PKST) > Received: from localhost (localhost [127.0.0.1]) > by muses.domain.com (Postfix) with ESMTP id 6982319B322 > for <[email protected]>; Tue, 29 Sep 2009 10:19:53 +0600 (PKST) > X-Virus-Scanned: Debian amavisd-new at domain.com > Received: from mail.domain.com <http://muses.domain.com/> ([127.0.0.1]) > by localhost (mail.domain.com <http://muses.domain.com/> [127.0.0.1]) > (amavisd-new, port 10024) > with LMTP id A1fSGV+XdA-K for <[email protected]>; > Tue, 29 Sep 2009 10:19:49 +0600 (PKST) > Received: from mail-qy0-f191.google.com (mail-qy0-f191.google.com > [209.85.221.191]) > by mail.domain.com (Postfix) with ESMTP id B3AB03BE38 > for <[email protected]>; Tue, 29 Sep 2009 10:19:44 +0600 (PKST) > Received: by qyk29 with SMTP id 29so3777375qyk.32 > for <[email protected]>; Mon, 28 Sep 2009 21:19:40 -0700 (PDT) > DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; > d=gmail.com; s=gamma; > h=domainkey-signature:mime-version:received:date:message-id:subject > :from:to:content-type; > bh=WoV7lT+YT3JKxromudz0thKd6Y5aCdlJ7QFXjsxBCvc=; > > b=suj1zJ/bZjwhfYDIy4YWp9YGpL4TFSKVOPm0R8ps0+kIV4SlldvI8A23Vtd2eXAzhd > > /pdlqvr7uGT4MR777LO27yKPEaNjqT2dPEVlFXAtc+vQq0Ib2WPPQMR70+77h7Bcfkir > IIELi+qXFfqj4/IpAcTlP3YtSFfwj42KT+MJs= > DomainKey-Signature: a=rsa-sha1; c=nofws; > d=gmail.com; s=gamma; > h=mime-version:date:message-id:subject:from:to:content-type; > > b=mHuhtzREpgetfc3a2kwtOBZZ47s0NR/Qje/GDeE5ZzNUMxOdvU9TtLZqZUM1KVDv6u > > dTs/wcIM133W1aDhZJzp4YTFIfmzCz1M/YJeo7+lDNcHERQ0Y6ilLjzoZ7NRf69H3bKn > RGQxQ9yCAjwLI3FbAgyDtZtW7CYFyKBWNP7M8= > MIME-Version: 1.0 > Received: by 10.229.1.65 with SMTP id 1mr1690588qce.20.1254197980062; Mon, > 28 > Sep 2009 21:19:40 -0700 (PDT) > Date: Tue, 29 Sep 2009 10:19:40 +0600 > Message-ID: <[email protected]> > Subject: =?utf-8?Q?Spam?= > =?utf-8?Q?Spam=0D=0A=20helo123?= > > > > spamassassin debug logs > #spamassassin -t -D > X-Spam-Checker-Version: SpamAssassin 3.1.7-deb (2006-10-05) on > mail.domaon.com > X-Spam-Level: **** > X-Spam-Status: No, score=4.8 required=5.0 > tests=DCC_CHECK,DNS_FROM_RFC_ABUSE, > DNS_FROM_RFC_POST,HTML_MESSAGE,SUBJECT_ENCODED_TWICE, > SUBJECT_EXCESS_QP autolearn=no version=3.1.7-deb > Delivered-To: [email protected] > Received: from localhost (localhost [127.0.0.1]) > by mail1.domaon.com (Postfix) with ESMTP id C13911B32DB > for <[email protected]>; Wed, 30 Sep 2009 17:03:54 +0600 (PKST) > Received: from mail1.domaon.com ([127.0.0.1]) > by localhost (mail1.domaon.com [127.0.0.1]) (amavisd-new, port 10024) > with LMTP id p23bnIio88SC for <[email protected]>; > Wed, 30 Sep 2009 17:03:54 +0600 (PKST) > Received: from mail.domaon.com (unknown [203.101.170.27]) > by mail1.domaon.com (Postfix) with ESMTP id 22F7D1B32D7 > for <[email protected]>; Wed, 30 Sep 2009 17:03:53 +0600 (PKST) > Received: from localhost (localhost [127.0.0.1]) > by mail.domaon.com (Postfix) with ESMTP id 976D319B330 > for <[email protected]>; Wed, 30 Sep 2009 17:03:53 +0600 (PKST) > X-Virus-Scanned: Debian amavisd-new at domaon.com > Received: from mail.domaon.com ([127.0.0.1]) > by localhost (mail.domaon.com [127.0.0.1]) (amavisd-new, port 10024) > with LMTP id el+R1y6R6iaa for <[email protected]>; > Wed, 30 Sep 2009 17:03:53 +0600 (PKST) > Received: from snt0-omc1-s35.snt0.hotmail.com > (snt0-omc1-s35.snt0.hotmail.com [65.55.90.46]) > by mail.domaon.com (Postfix) with ESMTP id D14C419B32D > for <[email protected]>; Wed, 30 Sep 2009 17:03:52 +0600 (PKST) > Received: from SNT106-W54 ([65.55.90.7]) by > snt0-omc1-s35.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); > Wed, 30 Sep 2009 04:03:47 -0700 > Message-ID: <[email protected]> > Content-Type: multipart/alternative; > boundary="_4abea601-ec42-4378-af03-83675013aef6_" > X-Originating-IP: [125.209.118.102] > From: mohsin alizai <[email protected]> > To: <[email protected]> > Subject: =?utf-8?Q?Spam?= > =?utf-8?Q?Spam=0D=0A=20test?= > Date: Wed, 30 Sep 2009 11:03:47 +0000 > Importance: Normal > MIME-Version: 1.0 > X-OriginalArrivalTime: 30 Sep 2009 11:03:47.0973 (UTC) > FILETIME=[AF55A350:01CA41BD] > X-SpamInfo: return-email, failed to obtain DNS record for domain > hotmail.com > X-SpamInfo: return-email, failed to obtain DNS record for domain > hotmail.com > > --_4abea601-ec42-4378-af03-83675013aef6_ > Content-Type: text/plain; charset="Windows-1252" > Content-Transfer-Encoding: quoted-printable > > > test =0A= > _________________________________________________________________=0A= > > > > -- > Regards > ------------------------------------------------------------------------------ > Come build with us! The BlackBerry® Developer Conference in SF, CA > is the only developer event you need to attend this year. Jumpstart your > developing skills, take BlackBerry mobile applications to market and stay > ahead of the curve. Join us from November 9-12, 2009. Register > now! > http://p.sf.net/sfu/devconf > _______________________________________________ > AMaViS-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/amavis-user > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 > AMaViS-HowTos:http://www.amavis.org/howto/ > > -- View this message in context: http://www.nabble.com/Guys-I-am-geting-all-external-domain-emails-taged-as-tp25691971p25696842.html Sent from the Amavis mailing list archive at Nabble.com. ------------------------------------------------------------------------------ Come build with us! The BlackBerry® Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9-12, 2009. Register now! http://p.sf.net/sfu/devconf _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
