Don't know. Until I got my spamassassin fully trained there were certain domains that automatically came up as spam. Certain mailer programs would also flag as spam. Maybe he is sending through a smart relay that somehow kicks your spam filters up? For the most part since I control our Spamassassin gateway I can "Resend" all messages to an account that is setup for training purposes to assist in correcting the problem in our Bayesian db. I'm sure that exists somehow for yours as well.
Bob -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ed Crowley [MVP] Sent: Saturday, May 22, 2004 11:56 PM To: Exchange Discussions Subject: RE: [SPAM-?] - RE: Latest Virus port 5000? - Email has different SMTP TO: and MIME TO: fields in the email addresses Could be. Why would it occur with this lone recipient? Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Reasoner, Bob (PHES) Sent: Saturday, May 22, 2004 9:28 PM To: Exchange Discussions Subject: RE: [SPAM-?] - RE: Latest Virus port 5000? - Email has different SMTP TO: and MIME TO: fields in the email addresses When I receive his messages they don't have that annoying message. Sounds like someone in your chain is using spamassassin (or something similar) on a Unix Gateway with subject rewriting? If so you should be able to pass it back as "ham" and get rid of it eventually. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ed Crowley [MVP] Sent: Saturday, May 22, 2004 11:23 PM To: Exchange Discussions Subject: RE: [SPAM-?] - RE: Latest Virus port 5000? - Email has different SMTP TO: and MIME TO: fields in the email addresses Why does everything you send have that annoying addition to the subject line? It screws up my message threading. Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Philip Walley Sent: Wednesday, May 19, 2004 10:23 AM To: Exchange Discussions Subject: RE: [SPAM-?] - RE: Latest Virus port 5000? - Email has different SMTP TO: and MIME TO: fields in the email addresses Try housecall on the trendmicro site. http://housecall.trendmicro.com/ you could also dload their sysclean program and the patternfile to get it cleaned. Philip Walley Sr. Network Engineer Consultrix Technologies Memphis, TN. Consultrix Help Desk: (601) 956-8909 Memphis Office: (901) 383-1300 Memphis Fax: (901) 383-1375 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Woodruff, Michael Posted At: Wednesday, May 19, 2004 12:09 PM Posted To: Exchange Conversation: Latest Virus port 5000? Subject: [SPAM-?] - RE: Latest Virus port 5000? - Email has different SMTP TO: and MIME TO: fields in the email addresses Does anyone have a disinfection tool available for Bobax.C? This is what it has to be. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marty Gavin Sent: Wednesday, May 19, 2004 12:54 PM To: Exchange Discussions Subject: RE: Latest Virus port 5000? http://tinyurl.com/3cjo3 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Woodruff, Michael Sent: Wednesday, May 19, 2004 12:50 PM To: Exchange Discussions Subject: Latest Virus port 5000? We are getting hammered by a virus that is hammering port 5000. I have all the latest sophos IDEs and have scanned an infected pc. It found nothing. It is using the lsass vulnerability found on Microsoft products. I see something about kibuv, but cannot find anything. Thanks. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
