Here it is. May 7 15:58:56 mail2 spamd[3060]: spamd: checking message <79bfa64f2c2d4a50b1c00aedbb24f...@pc04> for qscand:511 May 7 15:58:56 mail2 spamd[3060]: spamd: result: Y 667 - AWL,BAYES_00,DOS_OE_TO_MX,FORGED_MUA_OUTLOOK,HTML_MESSAGE,USER_IN_WHITELIST scantime=0.5,size=3246,user=qscand,uid=511,required_score=5.5,rhost=mail2.mydomain.com,raddr=127.0.0.1,rport=54931,mid=<79bfa64f2c2d4a50b1c00aedbb24f...@pc04>,bayes=0.000000,autolearn=no May 7 15:58:57 mail2 qmail-scanner[4518]: Clear:RC:0(203.92.110.232):SA:1(667.8/5.5): 0.558582 3246 problemacco...@clientdomain.com jodi...@mydomain.com test_with_low_spam_filter <79bfa64f2c2d4a50b1c00aedbb24f...@pc04> 1241683136.4520-1.mail2.mydomain.com:1349 orig-mail2.mydomain.com12416831367754518:3246 1241683136.4520-0.mail2.mydomain.com:753
John Hardin wrote: > > On Thu, 7 May 2009, Jodizzz wrote: > >> Test 1: I send an email from my user's pc at their LAN (Connecting to >> their >> own ISP) and used "problemacco...@clientdomain.com" to send an email to >> myself jodi...@mydomain.com. >> >> Result: Email was labelled as very very high spam. Mail headers as below > >> Message-ID: <79bfa64f2c2d4a50b1c00aedbb24f...@pc04> > > As Jonas said, without seeing which rules hit it's difficult to > troubleshoot. > > What is in your mail log file (possibly /var/log/maillog) for that > message-ID? > > grep '79bfa64f2c2d4a50b1c00aedbb24f...@pc04' /var/log/maillog > > -- > John Hardin KA7OHZ http://www.impsec.org/~jhardin/ > jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org > key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 > ----------------------------------------------------------------------- > If guards and searches and metal detectors can't keep a gun out of > a maximum-security solitary confinement prisoner's cell, how will > a disciplinary policy and some signs keep guns out of a university? > ----------------------------------------------------------------------- > Tomorrow: the 64th anniversary of VE day > > -- View this message in context: http://www.nabble.com/The-weirdest-problem-I-have-ever-met-Dear-all%2C--Please-help-me-with-this-very-weird-problem.--I-have-a-client-with-this-user-who%27s-is-suddenly-having-a-problem-sending-out-emails.-When-I-checked-the-logs%2C-the-email-is-stopped-by-qmailscanner-with-a-very-high-spam-rating.--SA%3ASPAM-DELETE%3ARC%3A0%28xxx.xx.xxx.xxx%29%3ASA%3A1%281528.3-5.5%29--He-couldn%27t-sent-to-anyone-at-all.-Every-email-was-stopped-by-qmail-scanner.--The-diagnostics-I-have-done--%281%29-Set-up-the-same-email-account-on-another-computer-in-the-same-LAN.---Problem-still-exists-on-this-other-computer--%282%29-Set-up-another-email-account-on-this-user%27s-computer---This-other-email-account-can-send-out-with-no-problem.--%283%29-Got-him-to-use-roundcube-webmail-to-send-email-out---No-problem-sending--%284%29-I-set-up-his-email-account-on-my-computer-which-is-outside-of-their-LAN---No-problem-sending.--%285%29-Put-his-email-address-in-whitelist-at--etc-mail-spamassassin-local.cf---problem-still-exists.---Any-idea-where-else-I-can-check--Is-there-any-way-to-know-why-anti-spam-is-blocking---Thanks-a-lot.-Edit-Delete-Message-Reply-With-Quote-Multi-Quote-This-Message-tp23363075p23439011.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
