Hi there, I have been pulling my hair out from this "Ricky invites you to blah blah blah..." getting through my server (SA3.1 + MD 2.56 + RDJ). I added "[EMAIL PROTECTED]" into the blacklist_from, but it still gets through ????? There're SA tests matched as shown below but they didn't stop it ??? I have no problem on other spam but this is still a mystery!
-----------------------------Example---------------------------------------- -- Feb 23 16:16:38 ns1 sendmail[27294]: k1N8GDxB027294: from=<[EMAIL PROTECTED]>, size=12559, class=0, nrcpts=1, msgid=<[EMAIL PROTECTED]>, proto=ESMTP, daemon=MTA, relay=mailsvr2.zebo.com [63.251.53.232] Feb 23 16:16:39 ns1 sendmail[27294]: k1N8GDxB027294: Milter change (add): header: X-DCC-EATSERVER-Metrics: ns1.mydomain.com 1166; Body=1 Fuz1=1 Fuz2=9 Feb 23 16:16:52 ns1 mimedefang.pl[26799]: k1N8GDxB027294: SA tests that matched: HTML_80_90,HTML_FONT_BIG,HTML_LINK_OPT_OUT,HTML_MESSAGE,HTML_TITLE_UNTITLED, SPF_PASS,USER_IN_BLACKLIST Feb 23 16:16:52 ns1 mimedefang.pl[26799]: MDLOG,k1N8GDxB027294,mail_in,,,<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>,Ricky invites you to ZEBO Feb 23 16:16:52 ns1 sendmail[27294]: k1N8GDxB027294: Milter delete (noop): header: X-Spam-Score Feb 23 16:16:52 ns1 sendmail[27294]: k1N8GDxB027294: Milter add: header: X-Scanned-By: MIMEDefang 2.56 on my.ip.address Feb 23 16:16:52 ns1 sendmail[27294]: k1N8GDxB027294: Milter add: header: Received-SPF: pass (ns1.mydomain.com: domain of [EMAIL PROTECTED] designates 63.251.53.232 as permitted sender) ---------------------------End---------------------------------------------- -------- Any idea? Cheers Simon