Michael Hutchinson wrote:
Hi all,
Another query.. another busy SA day.
I have a piece of Spam that is getting through to one of our biggest
clients. I have written rules to tag this Spam, but it is as if it isn't
even being checked by Spamassassin.
I have checked our qmail control files to ensure we are spamchecking the
domain, which we are, and also checked other Emails that go to the site,
and they all have their X-Spam-Status header. Except this one.
Does anyone have an idea on how this email is circumventing the
Spamassassin check?
Here is the header:
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 7942 invoked by uid 89); 10 Mar 2008 11:33:14 -0000
Message-ID: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 7937 invoked by uid 89); 10 Mar 2008 11:33:13 -0000
Received: by simscan 1.1.0 ppid: 7807, pid: 7827, t: 26.5915s
scanners: attach: 1.1.0 clamav: 0.92/m: spam: 3.1.7
Received: from unknown (HELO Administrators) (59.40.18.182)
by 0 with SMTP; 10 Mar 2008 11:32:47 -0000
Received: from Admin [127.0.0.1] by Administrators ( );
From: Cin Chan <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: Latest USB Promotional Products
Date: Mon, 10 Mar 2008 19:17:03 +0800
Reply-To: Cin Chan <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----_=_OtherPart_000_00039517.80350694"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
We can see from the headers that it has been looked at by Simscan, but
has not been parsed through SA, at least, I don't think it has. We
always have X-Spam-Status in our headers.
I can attach the actual Email if anyone would like to see it.
Any ideas where to start troubleshooting the issue? Could this be a
Simscan related problem?
Cheers,
Mike
How big is the email ? By default spamd won't scan anything over 255k
Regards,
Rick
