Mailscanner 'catches' lfd message?

rjbsec · Post by **rjbsec** » 26 Apr 2008, 08:45

{Spam?} lfd on xxxxxxx.xxxxxx.com: blocked 74.63.75.42 (journeyyellow.com)

Had similar emails markes as {SPAM?} where lfd has blocked after 5 failed attempt, although the majority of such lfd messages coming from 'root' are untouched - why would Mailscanner be marking some of these as {SPAM?}?

Post by **Sarah** » 26 Apr 2008, 11:05

They are most likely being marked as spam because the IP address mentioned in the message as being blocked, is in one of the blacklists that SA checks. The best way to avoid this is to whitelist your server's root email address, i.e. root@host.name.com

Regards,
Sarah

rjbsec · Post by **rjbsec** » 26 Apr 2008, 11:44

Thanks Sarah.