| Trouble with SPAMCOP and Spamhaus Zen? [message #111361] |
Mon, 03 March 2014 17:55  |
mei
Messages: 3
Registered: March 2009
Location: Spokane, WA
|
|
|
|
I recently started at a new company. Kerio was configured to check the SPAMCOP BL (bl.spamcop.net), and bolck anything on that list. However, some addresses listed on that BL are getting through (enrollmentperiods.at is on the SPAMCOP list, but actually got to someones inbox). It is also listed on spamhaus ZEN, and that is one of the blacklists set to be blocked.
Here is an example from the spam log, it was definitely not rejected as spam:
[28/Feb/2014 11:17:00] Message detected as spam with score: 7.37, threshold 6.50, From: MedicareAdvantageNetwork<_at_>enrollmentperiods.at
I did a bl check against the mx record associated with this address (162.248.73.107), and it is definitely listed on both spanhaus and spamcop.
Anyone know why this might be happening, and how to fix it?
[Updated on: Mon, 03 March 2014 18:01] Report message to a moderator |
|
|
|
|
|
| Re: Trouble with SPAMCOP and Spamhaus Zen? [message #111367 is a reply to message #111366] |
Mon, 03 March 2014 20:35  |
mei
Messages: 3
Registered: March 2009
Location: Spokane, WA
|
|
|
|
j.a.duke wrote on Mon, 03 March 2014 11:04Is there something in the custom list set to accept based on a substring?
I would start looking there first.
I've had the reverse problem-accidentally blocking based on a substring in one of the header fields.
Cheers,
Jon
Nothing that I see. None of the words in the subject are in any of the custom rules, and the IP (162.248.73.107) is not in the white list.
Most of the substring rules are set to outright reject messages, there are a few that are set to increase the score.
EDIT: Here are the headers:
X-Spam-Status: Yes, hits=7.3 required=6.5
tests=BAYES_99: 4.07,HTML_MESSAGE: 0.001,MIME_HTML_ONLY: 0.001,
T_REMOTE_IMAGE: 0.01,T_SURBL_MULTI1: 0.01,URIBL_GREY: 0.424,
URIBL_JP_SURBL: 1.25,URIBL_WS_SURBL: 1.608,TOTAL_SCORE: 7.374,autolearn=no
I do not see any custom rules being applied.
[Updated on: Mon, 03 March 2014 21:08] Report message to a moderator |
|
|
|
Members
Search
Help
Register
Login
Home
