any ideas how this bypassed SA

keat63

• August 28, 2015 08:50

SA is configured for 5, yet this email has a score of 7 and somehow got through. Any ideas how ?
2015-08-28 13:47:52 H=mail-out.spammer.edu [199.67.xx.xx]:45661 Warning: Sender rate 1.0 / 1h 2015-08-28 13:47:54 1ZVJ4T-0003yE-Ji H=mail-out.spammer.edu [199.67.xx.xx]:45661 Warning: Message has been scanned: no virus or other harmful content was found 2015-08-28 13:47:58 1ZVJ4T-0003yE-Ji H=mail-out.spammer.edu [199.67.xx.xx]:45661 Warning: "SpamAssassin as my-userukltd detected message as spam (7.0)" 2015-08-28 13:47:58 1ZVJ4T-0003yE-Ji H=mail-out.spammer.edu [199.67.xx.xx]:45661 Warning: "Increment Connection Ratelimit - mail-out.spammer.edu [199.67.xx.xx]:45661 because mail server detected a message with a spam score integer greater or equal to 40" 2015-08-28 13:47:58 1ZVJ4T-0003yE-Ji <= Beverly.Thomas@spammer.edu H=mail-out.spammer.edu [199.67.xx.xx]:45661 P=esmtps X=TLSv1:AES128-SHA:128 S=3900 id=0CA3C83E363CF34A9135DE14A6C0A5F9C5AF5674@MBX3.tridentad.org T="RE: Security Update Alert" for sales@my-user.org.uk 2015-08-28 13:47:58 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1ZVJ4T-0003yE-Ji 2015-08-28 13:47:58 SMTP connection from mail-out.spammer.edu [199.67.xx.xx]:45661 closed by QUIT 2015-08-28 13:47:58 1ZVJ4T-0003yE-Ji => sales R=virtual_user T=virtual_userdelivery 2015-08-28 13:47:58 1ZVJ4T-0003yE-Ji Completed
It also appears to have bypassed GreyListing

• 

  cPanelMichael

  • September 02, 2015 20:01

  SpamAssassin as my-userukltd detected message as spam (7.0)"

  
  Hello :) This indicates the message was detected as SPAM. Are you expecting a rejection of the message, or was it not moved to a SPAM directory if the Spam Box option is enabled? Thank you.

  0
• 

  LostNerd

  • September 03, 2015 08:17

  Hi, As @cPanelMichael has stated above, it has been recognised as spam. Could you confirm if this email was delivered to your inbox or spam folder?

  0

Please sign in to leave a comment.