Ok, I went down to the client and did some tests. For easy to understand, I
am going to call this problem email account
"problemacco...@clientdomain.com" (of cos actual domain is replaced with
"clientdomain.com" for obstructing purpose. My email account I would call it
jodi...@mydomain.com (of cos actual domain is replace with "mydomain.com"
for obstructing purpose) I also drop my requirement of deleteing spam so
that all spam will go through to my mailbox.
-----------------------------------------------------------------------------------------------
Test 1: I send an email from my user's pc at their LAN (Connecting to their
own ISP) and used "problemacco...@clientdomain.com" to send an email to
myself jodi...@mydomain.com.
Result: Email was labelled as very very high spam. Mail headers as below
Return-Path: <problemacco...@clientdomain.com>
Delivered-To: jodi...@mydomain.com
Received: (qmail 4526 invoked by uid 510); 7 May 2009 15:58:56 +0800
Received: from 203.92.110.232 by mail2.mydomain.com (envelope-from
<problemacco...@clientdomain.com>, uid 509) with qmail-scanner-1.25-st-qms
(clamdscan: 0.87/7046. spamassassin: 3.0.2. perlscan: 1.25-st-qms.
Clear:RC:0(203.92.110.232):SA:1(667.8/5.5):.
Processed in 0.560188 secs); 07 May 2009 07:58:56 -0000
X-Spam-Status: Yes, hits=667.8 required=5.5
X-Spam-Level:
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
X-Antivirus-MYDOMAIN-Mail-From: problemacco...@clientdomain.com via
mail2.mydomain.com
X-Antivirus-MYDOMAIN: 1.25-st-qms
(Clear:RC:0(203.92.110.232):SA:1(667.8/5.5):. Processed in 0.560188 secs
Process 4518)
Received: from hlasia.yizi.com (HELO PC04)
(problemacco...@clientdomain.com@203.92.110.232)
by mail.mydomain.com with SMTP; 7 May 2009 15:58:56 +0800
Message-ID: <79bfa64f2c2d4a50b1c00aedbb24f...@pc04>
From: "User Name" <problemacco...@clientdomain.com>
To: <jodi...@mydomain.com>,
<jodi...@gmail.com>
Subject: :SPAM: test with low spam filter
Date: Thu, 7 May 2009 15:58:18 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_023E_01C9CF2C.A3B887A0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
Disposition-Notification-To: "User Name" <problemacco...@clientdomain.com>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
---------------------------------------------------------------------------------------------
Test 2: I send an email from my user's pc using another internet source
(used 3G modem) and used "problemacco...@clientdomain.com" to send an email
to myself jodi...@mydomain.com.
Result: Email was labelled as normal email. Not treated as spam
Return-Path: <problemacco...@clientdomain.com>
Delivered-To: jodi...@mydomain.com
Received: (qmail 9650 invoked by uid 510); 7 May 2009 16:15:55 +0800
Received: from 119.234.165.127 by mail2.mydomain.com (envelope-from
<problemacco...@clientdomain.com>, uid 509) with qmail-scanner-1.25-st-qms
(clamdscan: 0.87/7046. spamassassin: 3.0.2. perlscan: 1.25-st-qms.
Clear:RC:0(119.234.165.127):SA:0(-98.7/5.5):.
Processed in 5.770586 secs); 07 May 2009 08:15:55 -0000
X-Spam-Status: No, hits=-98.7 required=5.5
X-Antivirus-MYDOMAIN-Mail-From: problemacco...@clientdomain.com via
mail2.mydomain.com
X-Antivirus-MYDOMAIN: 1.25-st-qms
(Clear:RC:0(119.234.165.127):SA:0(-98.7/5.5):. Processed in 5.770586 secs
Process 9621)
Received: from unknown (HELO jodizzz)
(problemacco...@clientdomain.com@119.234.165.127)
by mail.mydomain.com with SMTP; 7 May 2009 16:15:49 +0800
From: "quentin" <problemacco...@clientdomain.com>
To: "'jodizzz Puah'" <jodi...@mydomain.com>
Subject: test with other internet source
Date: Thu, 7 May 2009 16:18:31 +0800
Message-ID: <43a7e52a30f44151a2b267f07907d...@intarcher.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0046_01C9CF2F.774FC9A0"
X-Mailer: Microsoft Office Outlook 11
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
X-MS-TNEF-Correlator: 000000008E0A8F5E362AEF4EBAFD778E25A22DF1C4623B00
Thread-Index: AcnO7Gha0rsKLhdSSYaSFhUEMmr1lQ==
---------------------------------------------------------------------------------------------
Test 3: I send an email with another user of the user's domain (I renamed as
oku...@clientdomain.com) in the same user's LAN to my email account
"jodi...@mydomain.com"
Result: Email was labelled as normal email. Not treated as spam
Return-Path: <oku...@clientdomain.com>
Delivered-To: jodi...@mydomain.com
Received: (qmail 11191 invoked by uid 510); 5 May 2009 15:35:29 +0800
Received: from 203.92.110.155 by mail2.mydomain.com (envelope-from
<oku...@clientdomain.com>, uid 509) with qmail-scanner-1.25-st-qms
(clamdscan: 0.87/7046. spamassassin: 3.0.2. perlscan: 1.25-st-qms.
Clear:RC:0(203.92.110.155):SA:0(-96.4/5.5):.
Processed in 10.464382 secs); 05 May 2009 07:35:29 -0000
X-Spam-Status: No, hits=-96.4 required=5.5
X-Antivirus-MYDOMAIN-Mail-From: oku...@clientdomain.com via
mail2.mydomain.com
X-Antivirus-MYDOMAIN: 1.25-st-qms
(Clear:RC:0(203.92.110.155):SA:0(-96.4/5.5):. Processed in 10.464382 secs
Process 11104)
Received: from sesys2.yizi.com (HELO PCADMIN)
(oku...@clientdomain.com@203.92.110.155)
by mail.mydomain.com with SMTP; 5 May 2009 15:35:18 +0800
Message-ID: <007301c9cd54$09bce0d0$6601a...@pcadmin>
From: "okuser Chua" <oku...@clientdomain.com>
To: "jodizzz Puah" <jodi...@mydomain.com>
References: <9dfbb20d0ae040ddb5beeae1fa1c8...@intarcher.com>
Subject: Re: test local route
Date: Tue, 5 May 2009 15:35:17 +0800
Organization: User Company Name Pte Ltd
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_006F_01C9CD97.1787EEB0";
type="multipart/alternative"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
--------------------------------------------------------------------
In conclusion the email is only treated as major spam if it is from that
particular user problemacco...@clientdomain.com and via the LAN/ISP
connection.
What seems to be the problem? This is so weird!
--
View this message in context:
http://www.nabble.com/The-weirdest-problem-I-have-ever-met-Dear-all%2C--Please-help-me-with-this-very-weird-problem.--I-have-a-client-with-this-user-who%27s-is-suddenly-having-a-problem-sending-out-emails.-When-I-checked-the-logs%2C-the-email-is-stopped-by-qmailscanner-with-a-very-high-spam-rating.--SA%3ASPAM-DELETE%3ARC%3A0%28xxx.xx.xxx.xxx%29%3ASA%3A1%281528.3-5.5%29--He-couldn%27t-sent-to-anyone-at-all.-Every-email-was-stopped-by-qmail-scanner.--The-diagnostics-I-have-done--%281%29-Set-up-the-same-email-account-on-another-computer-in-the-same-LAN.---Problem-still-exists-on-this-other-computer--%282%29-Set-up-another-email-account-on-this-user%27s-computer---This-other-email-account-can-send-out-with-no-problem.--%283%29-Got-him-to-use-roundcube-webmail-to-send-email-out---No-problem-sending--%284%29-I-set-up-his-email-account-on-my-computer-which-is-outside-of-their-LAN---No-problem-sending.--%285%29-Put-his-email-address-in-whitelist-at--etc-mail-spamassassin-local.cf---problem-still-exists.---Any-idea-where-else-I-can-check--Is-there-any-way-to-know-why-anti-spam-is-blocking---Thanks-a-lot.-Edit-Delete-Message-Reply-With-Quote-Multi-Quote-This-Message-tp23363075p23423207.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
