Page 1 of 1

Mailscanner 'catches' lfd message?

Posted: 26 Apr 2008, 08:45
by rjbsec
{Spam?} lfd on xxxxxxx.xxxxxx.com: blocked 74.63.75.42 (journeyyellow.com)
Had similar emails markes as {SPAM?} where lfd has blocked after 5 failed attempt, although the majority of such lfd messages coming from 'root' are untouched - why would Mailscanner be marking some of these as {SPAM?}?

Posted: 26 Apr 2008, 11:05
by Sarah
They are most likely being marked as spam because the IP address mentioned in the message as being blocked, is in one of the blacklists that SA checks. The best way to avoid this is to whitelist your server's root email address, i.e. root@host.name.com

Regards,
Sarah

Posted: 26 Apr 2008, 11:44
by rjbsec
Thanks Sarah.