Atul Paralikar wrote:
Hello,
I have updated the Qmail / Spamassassin “local.cf” with the rule earlier
given in the forums. But still most of the genuine emails received are
being marked as “SPAM”. Similar is the case with the Blackberry users.
Earlier to Jan all mail from the Blackberry users were coming in
normally. Since this new rule update, some of them are received normally
and some as SPAM. Below is the sample header from a genuine sender. I am
not sure what am I missing?
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on mail.providio.com
X-Spam-Level:
X-Spam-Status: No, score=-1.0 required=4.0 tests=AWL,BAYES_00,
HTML_IMAGE_ONLY_24,HTML_MESSAGE autolearn=no version=3.2.4
Received: (qmail 1166 invoked by uid 110); 12 Feb 2010 23:11:19 -0600
Delivered-To: [email protected]
Received: (qmail 1156 invoked from network); 12 Feb 2010 23:11:18 -0600
Received: from mail.etisbew.com (74.55.177.18)
by mail.etisbew.com with (DHE-RSA-AES256-SHA encrypted) SMTP; 12 Feb
2010 23:11:18 -0600
Received: (qmail 18251 invoked by uid 89); 13 Feb 2010 05:11:21 -0000
Received: by simscan 1.4.0 ppid: 18242, pid: 18244, t: 0.6650s
scanners: attach: 1.4.0 clamav: 0.95.2/m:51/d:9865 spam: 3.2.5
Received: from unknown (HELO mail.tuklu.com) (212.31.249.137)
by mail.etisbew.com with (DHE-RSA-AES256-SHA encrypted) SMTP; 13 Feb
2010 05:11:21 -0000
Received-SPF: pass (mail.etisbew.com: SPF record at tuklu.com designates
212.31.249.137 as permitted sender)
Received: (qmail 18549 invoked by uid 89); 13 Feb 2010 05:11:19 -0000
Delivered-To: [email protected]
Received: (qmail 18537 invoked by uid 89); 13 Feb 2010 05:11:18 -0000
Received: by simscan 1.4.0 ppid: 18500, pid: 18533, t: 0.0191s
scanners: attach: 1.4.0 clamav: 0.95.1/m:51/d:9396
Received: from unknown (HELO mail.tuklu.com) ([email protected]@10.10.0.12)
by mail.tuklu.com with ESMTPA; 13 Feb 2010 05:11:18 -0000
Date: Sat, 13 Feb 2010 05:11:18 +0000 (GMT)
From: [email protected]
To: [email protected]
Message-ID: <[email protected]>
Subject: *****SPAM***** Abuse Mgmt Schedule admin alert
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_6192_293786557.1266037878796"
X-Mailer: ColdFusion 8 Application Server
X-Spam-Prev-Subject: Abuse Mgmt Schedule admin alert
====== BLACKBERRY mail header ======
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on mail.providio.com
X-Spam-Level:
X-Spam-Status: No, score=-1.8 required=4.0 tests=BAYES_00,HTML_MESSAGE,
SHORT_HELO_AND_INLINE_IMAGE autolearn=no version=3.2.4
Received: (qmail 4509 invoked from network); 12 Feb 2010 04:24:54 -0600
Received: from static-202-65-147-146.pol.net.in (HELO ETGLPT07)
(202.65.147.146)
by mail.etisbew.com with SMTP; 12 Feb 2010 04:24:51 -0600
From: "Sudheer" <[email protected]>
To: <[email protected]>
Subject: FW: *****SPAM***** Re: ColdFusion RFP - Follow up - Detailed
Resumes
Date: Fri, 12 Feb 2010 15:54:39 +0530
Message-ID: <59ed0f990cde480ebcc779ea9dc62...@etglpt07>
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_007C_01CAABFB.AFD6EE80"
X-Mailer: Microsoft Office Outlook 11
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6002.18005
Thread-Index: AcqrPo53qiyF7ofrQBOXhvPmirfQagAjv0PQ
Please let me know, what am I missing?
Regards,
Atul Paralikar
This looks very peculiar, Atul. The messages definitely did not score
high enough to be tagged, yet it appears that they were tagged regardless.
I would certainly suspect the local.cf change you made, if that's all
that has changed since it was working properly. Did you perhaps edit it
with a MS/DOS machine and get some <cr> characters in there? If so,
running dos2linux on the file would clean it up, and certainly wouldn't
hurt.
Otherwise, please post the contents of your local.cf file so we can have
a look at it.
--
-Eric 'shubes'
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
