ConfigServer Community Forum

Posted: **24 May 2009, 01:35**

I've searched the net and these forums and can't seem to find an answer.

I'm getting a lot of spam with the subject starting with {Spam? 0} but the headers show MailScanner-SpamScore: ssssssssssssssssssss and I can't figure out why it does that.

Here's the headers from an email doing that and another spam not doing that.

subject showing 0:
----------------------------------------------------------
From - Sat May 23 15:01:54 2009
X-Account-Key: account16
X-UIDL: UID2591-1240206925
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path: <acropolisn534@southwestengineering.net>
Envelope-to: ????????@generalcelebrities.com
Delivery-date: Sat, 23 May 2009 10:49:15 -0400
Received: from [122.167.5.138] (helo=ABTS-KK-Dynamic-138.5.167.122.airtelbroadband.in)
by ????????.premierwebsitesolutions.com with esmtp (Exim 4.69)
(envelope-from <acropolisn534@southwestengineering.net>)
id 1M7sXC-0004gU-Kv
for ????????@generalcelebrities.com; Sat, 23 May 2009 10:49:15 -0400
Message-ID: <000d01c9dbb5$94fbe730$6400a8c0@acropolisn534>
From: "Vonda Lamb" <acropolisn534@southwestengineering.net>
To: <????????@generalcelebrities.com>
Subject: {Spam? 0} Your golden watch will tick exclusively for you.
Date: Sat, 23 May 2009 20:18:49 +0530
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01C9DBB5.94FBE730"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-PWSmail-MailScanner-Information: Please contact the ISP for more information
X-PWSmail-MailScanner-ID: 1M7sXC-0004gU-Kv
X-PWSmail-MailScanner: Found to be clean
X-PWSmail-MailScanner-SpamCheck: spam, SBL+XBL, spamcop.net
X-PWSmail-MailScanner-SpamScore: ssssssssssssssssssss
X-PWSmail-MailScanner-From: acropolisn534@southwestengineering.net
X-PWSmail-MailScanner-Watermark: 1243694955.31959@BMb+gWmmgy4fBDIGw4S0+w

==============================================
subject showing score:
---------------------------------------------------------
From - Sat May 23 19:58:33 2009
X-Account-Key: account16
X-UIDL: UID2706-1240206925
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path: <drownednj7@medeluk.com>
Envelope-to: ????????@generalcelebrities.com
Delivery-date: Sat, 23 May 2009 19:55:17 -0400
Received: from [189.139.226.165] (helo=dsl-189-139-226-165-dyn.prod-infinitum.com.mx)
by ????????.premierwebsitesolutions.com with esmtp (Exim 4.69)
(envelope-from <drownednj7@medeluk.com>)
id 1M813b-0007ly-5i
for ????????@generalcelebrities.com; Sat, 23 May 2009 19:55:15 -0400
Message-ID: <000d01c9dc01$d7f20410$6400a8c0@drownednj7>
From: "Kate Shelton" <drownednj7@medeluk.com>
To: <????????@generalcelebrities.com>
Subject: {Spam? 9} Greater orgasms
Date: Sat, 23 May 2009 18:54:43 -0600
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01C9DC01.D7F20410"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-PWSmail-MailScanner-Information: Please contact the ISP for more information
X-PWSmail-MailScanner-ID: 1M813b-0007ly-5i
X-PWSmail-MailScanner: Found to be clean
X-PWSmail-MailScanner-SpamCheck: spam, SpamAssassin (not cached, score=9.208,
required 5, BAYES_99 3.50, FH_HELO_EQ_D_D_D_D 0.00,
HELO_DYNAMIC_DHCP 1.40, HELO_DYNAMIC_IPADDR 2.43, HTML_MESSAGE 0.00,
RCVD_IN_PBL 0.91, RCVD_IN_SORBS_DUL 0.88, RDNS_NONE 0.10)
X-PWSmail-MailScanner-SpamScore: sssssssss
X-PWSmail-MailScanner-From: drownednj7@medeluk.com
X-PWSmail-MailScanner-Watermark: 1243727716.79704@f19zTsTDy5H2Jr3P3rPrqA

======================================================

There's an obvious difference in the MailScanner-SpamCheck lines, but why?

Posted: **24 May 2009, 07:44**

The emails marked {Spam? 0} are getting marked as high-scoring spam with a zero score because they are triggering the Spam List in the MailScanner configuration. As they are positive for being on one of the spam lists, they are not scanned or scored on any other tests. You can configure this differently if you want, have a read-through of the MailScanner configuration file around the Spam List settings.

Regards,
Sarah

Posted: **24 May 2009, 15:25**

Thanks. I knew I'd get the answer here.

ConfigServer Community Forum

spam with subject {Spam? 0}

spam with subject {Spam? 0}