Real novice here - Would someone please explain how a stock spam was
able to use my whitelist to get a huge negative score? I do have a
whitelist, but the user shown below is not in it. I do have one
Italian (.it) domain in the whitelist, but it is a different/address
domain. How did this msg get whitelisted?
And, why did it get autolearned as "Spam" with a huge negative score
and end up in my inbox?? Seems very strange to me on several fronts!
Thanks! - John
Viewing Full Header - View message
Return-Path: <[EMAIL PROTECTED]>
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from 59.93.203.39 (unknown [59.93.203.39])
by wa9als.com (Postfix) with ESMTP id 64D552D6B0A
for <[EMAIL PROTECTED]>; Mon, 6 Nov 2006 10:16:08 -0500 (EST)
Received: from comtel-tech.com (port=15040 helo=ejaqycujbpy)
by 59.93.203.39 with smtp
id 52d4O-6S8sS3Tt0-U0W
for [EMAIL PROTECTED]; Mon, 06 Nov 2006 20:53:40 -0800
Message-ID: <[EMAIL PROTECTED]>
From: "Jay" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: thousand footmen: that waiteth And it ceaseth: shall not said
unto
Date: Mon, 06 Nov 2006 20:53:40 -0800
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_000B_01C701E5.A125B510"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2869
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962
X-Virus-Status: No
X-Virus-Checker-Version: Luke wa9als.com running clamassassin 1.2.1
with ClamAV 0.88.5/2166/Mon Nov 6 08:44:31 2006 signatures 41.2166
X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on
Luke.wa9als.com
X-Spam-Level:
X-Spam-Status: No, score=-70.3 required=5.0 tests=BAYES_99,
DATE_IN_FUTURE_12_24,HTML_90_100,HTML_IMAGE_ONLY_08,HTML_MESSAGE,
MIME_HTML_MOSTLY,MIME_QP_LONG_LINE,MPART_ALT_DIFF,MY_CID_AND_CLOSING,
MY_CID_AND_STYLE,RCVD_BY_IP,RCVD_IN_DSBL,RCVD_IN_NJABL_PROXY,
RCVD_IN_SORBS_HTTP,RCVD_IN_XBL,RCVD_NUMERIC_HELO,SARE_GIF_ATTACH,
SARE_GIF_STOX,USER_IN_WHITELIST autolearn=spam version=3.0.3
