RE: [vps-mail] Who does SA behave like this?

["Jim Smith" <maillists@xxxxxxxxxxxxxxxx>]

Brian,
I'm not sure I understand the problem here. Is it that some email gets
shuttled to the Junk mail folder and others get delivered but all marked up
as shown in the example? If that is the case, it is likely that either you
have two different email accounts feeding into the same mailbox or you have
something squirrelly in your .procmailrc file. I would check the procmailrc
file and userprefs file to see if something looks amiss there. Otherwise,
see if some email is coming from another mailbox that might have the
userprefs file configured differently. 

Jim Smith 

> -----Original Message-----
> From: owner-vps-mail@xxxxxxxxxxxxx 
> [mailto:owner-vps-mail@xxxxxxxxxxxxx] On Behalf Of Brian Haines
> Sent: Wednesday, June 06, 2007 8:42 AM
> To: vps-mail@xxxxxxxxxxxxx
> Subject: [vps-mail] Who does SA behave like this?
> 
> On only one of my VPSv2 accounts SA  filters a bunch of spam 
> just fine into the Junk mail folder and still delivers a 
> bunch into the Inbox. The later includes an email like below 
> with the original message as an attachment. The points 
> indicated are obviously high enough to triger SA? 
> 
> Any ideas?
> 
> Thanks,
> Brian Haines
> 
> 
> Spam detection software, running on the system "<myserver>", 
> has identified this incoming email as possible spam.  The 
> original message has been attached to this so you can view it 
> (if it isn't spam) or label similar future email.  If you 
> have any questions, see The administrator of that system for details.
> 
> Content preview:  Discover what millions worldwide have 
> already: The Fountain
>    of Youth today! *Eliminate all body fat *Increase libido 
> and sex drive [...]
>    
> 
> Content analysis details:   (13.9 points, 5.0 required)
> 
>  pts rule name              description
> ---- ----------------------
> --------------------------------------------------
>  3.8 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious 
> hostname (IP addr
>                             2)
>  4.1 HELO_DYNAMIC_HCC       Relay HELO'd using suspicious 
> hostname (HCC)
>  0.0 UNPARSEABLE_RELAY      Informational: message has 
> unparseable relay
> lines
>  0.0 HTML_MESSAGE           BODY: HTML included in message
>  3.5 BAYES_99               BODY: Bayesian spam probability 
> is 99 to 100%
>                             [score: 1.0000]
>  0.0 MIME_HTML_ONLY         BODY: Message only has text/html 
> MIME parts
>  0.2 HTML_TITLE_EMPTY       BODY: HTML title contains no text
>  0.2 DNS_FROM_RFC_ABUSE     RBL: Envelope sender in 
> abuse.rfc-ignorant.org
>  2.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP
> address
>                             [201.222.155.36 listed in dnsbl.sorbs.net]
> 
> The original message was not completely plain text, and may 
> be unsafe to open with some email clients; in particular, it 
> may contain a virus, or confirm that your address can receive 
> spam.  If you wish to view it, it may be safer to save it to 
> a file and open it with an editor.
> 
> 
> ==============================================================
> ==========
> This is <vps-mail@xxxxxxxxxxxxx>  
> <http://groupmail.org/lists/vps-mail/>
> Before posting a question, please search the archives (see above URL).
> 

========================================================================
This is <vps-mail@xxxxxxxxxxxxx>  <http://groupmail.org/lists/vps-mail/>
Before posting a question, please search the archives (see above URL).