ConfigServer Community Forum

After noticing an increasing in spam reaching the cPanel server, a preliminary investigation has uncovered the fact that most messages that get through MailScanner are not getting scanned. Can anyone offer a suggestion why they might not get scanned? Please see the full header of a typical message that gets through below.

------------------------------


Delivery-date: Thu, 03 May 2012 14:38:57 -0500
id 1SQ1rL-0006yw-Bo
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=default; d=.com;
h=Date:From:Subject:To:Message-ID:Mime-Version:Content-type; i=;
bh=QxXfgBEjICzbSnTMZmdhnlIOQaU=;
b=D8+wh0b/Dvm38nw/4ehH0qPPnXfRAJ3o/XZDbJJvH9UeFsIWg/0fZzLsDx6xn7RRfMJas3vAP5H4
wWVgAU3N4onsuM4IuOOKZe+XT5cRym66bwGd5UoyliP+ayWz4V3Rfi5FNfYiwoeRuvo7I5Gf4x7O
ySBmAX/kLiS5LO2KbOw=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=default; d=.com;
b=Du0YzTKM1U5uvNgaYHLkELN9fJBFyOYei0DMfzYWJK0WFhh5k2ZAgc2mBOzWRKPmoIawfVAN1LRU
T2zFilp3I0L8a7e7R4X0h3xHrGsAfglo5Js3f4O0LvVs/lNpxN0y++ZHO2KIPmX+mE8NN+DwpQS5
RkpH9ZrfvLCgbdOEeJw=;
Date: Thu, 3 May 2012 15:21:05 -0400
From: "Orgreenic Kitchenware" <>
Subject: The cookware that performs
Mime-Version: 1.0
Content-type: multipart/alternative; boundary="_NextPart_MjQzNTk4NDliMzc2YmI0Mjk1ZGI2OWU4YjRmNzZjODU_"
X-CtechScanner-MailScanner-Information: Please contact the ISP for more information
X-CtechScanner-MailScanner-ID: 1SQ1rL-0006yw-Bo
X-CtechScanner-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details
X-CtechScanner-MailScanner-SpamCheck:
X-Spam-Status: No

Have you checked whether the contents of the file /usr/mailscanner/etc/rules/spam.scanning.rules are correct?