MailScan sometimes does not quarantine
Posted: Fri Mar 28, 2008 2:48 pm
I just received a mail with spam score 100 which was not quarantined, next mail with same spam score was quarantined. How could this happen?
MailScan for Mailservers 5.30 espatch x.125
Report.log - Not quarantined mail:
[8] => Fri Mar 28 09:50:01 2008
[8] => Processing: C:\PROGRA~1\MailScan\In\POP47.msG (1328)
[8] => To: xxxxx
[8] => Originating IP: 88.227.103.64 (Foreign IP)
[8] => Originating IP: 149.181.180.115 (Foreign IP)
[8] => From: rteenage@snopes.com
[8] => Subject: Join the most refined and reliable casino online today and get free 999 USD bonus
[8] => No attachments in this EMail.
[8] => Doing Regular Expressions Content Check...
[8] => Doing BlackListed Domains Check...
[8] => Finished doing Regular Expressions Content Check...
[8] => Doing General Content Check...
[8] => Doing SURBL Check...
[8] => Marking Mail as possible SPAM as Spam Domain .cn found!
[8] => Doing XSpam Rules Check...
[8] => Doing NILP (Non Intrusive Learning Patterns) Check...
[8] => Finished Doing NILP Check...
[8] => Finished All Content Check...
[8] => MailScan Spam Score for this message = 100
[8] => It took 1 secs to scan this message.
[8] =>
[8] => -----------------------------------------------------------
Report.log - quarantined mail:
[8] => Fri Mar 28 09:50:02 2008
[8] => Processing: C:\PROGRA~1\MailScan\In\POP4A.msG (1025)
[8] => To: xxxxx
[8] => Originating IP: 195.178.56.105 (Foreign IP)
[8] => POP3-Recipient: xxxxx
[8] => From: nwaby@nucor.com
[8] => Subject: 81% pills discount. Coupon #fwHY
[8] => No attachments in this EMail.
[8] => Doing Regular Expressions Content Check...
[8] => Doing BlackListed Domains Check...
[8] => Finished doing Regular Expressions Content Check...
[8] => Doing General Content Check...
[8] => Doing SURBL Check...
[8] => Marking Mail as SPAM as timeminute.com site found in SURBL Server db.multi.surbl.org!
[8] => Finished All Content Check...
[8] => Reserved content <SURBL Listing: timeminute.com (db.multi.surbl.org)> present. Taking configured action on email [Quarantining Mail].
[8] => MailScan Spam Score for this message = 100
[8] => Saving Original message in Q-Dir as G:\mailscan\QUARANT\POP4A.EML.
[8] => It took 0 secs to scan this message.
Any help appreciated, thank you in advance.
MailScan for Mailservers 5.30 espatch x.125
Report.log - Not quarantined mail:
[8] => Fri Mar 28 09:50:01 2008
[8] => Processing: C:\PROGRA~1\MailScan\In\POP47.msG (1328)
[8] => To: xxxxx
[8] => Originating IP: 88.227.103.64 (Foreign IP)
[8] => Originating IP: 149.181.180.115 (Foreign IP)
[8] => From: rteenage@snopes.com
[8] => Subject: Join the most refined and reliable casino online today and get free 999 USD bonus
[8] => No attachments in this EMail.
[8] => Doing Regular Expressions Content Check...
[8] => Doing BlackListed Domains Check...
[8] => Finished doing Regular Expressions Content Check...
[8] => Doing General Content Check...
[8] => Doing SURBL Check...
[8] => Marking Mail as possible SPAM as Spam Domain .cn found!
[8] => Doing XSpam Rules Check...
[8] => Doing NILP (Non Intrusive Learning Patterns) Check...
[8] => Finished Doing NILP Check...
[8] => Finished All Content Check...
[8] => MailScan Spam Score for this message = 100
[8] => It took 1 secs to scan this message.
[8] =>
[8] => -----------------------------------------------------------
Report.log - quarantined mail:
[8] => Fri Mar 28 09:50:02 2008
[8] => Processing: C:\PROGRA~1\MailScan\In\POP4A.msG (1025)
[8] => To: xxxxx
[8] => Originating IP: 195.178.56.105 (Foreign IP)
[8] => POP3-Recipient: xxxxx
[8] => From: nwaby@nucor.com
[8] => Subject: 81% pills discount. Coupon #fwHY
[8] => No attachments in this EMail.
[8] => Doing Regular Expressions Content Check...
[8] => Doing BlackListed Domains Check...
[8] => Finished doing Regular Expressions Content Check...
[8] => Doing General Content Check...
[8] => Doing SURBL Check...
[8] => Marking Mail as SPAM as timeminute.com site found in SURBL Server db.multi.surbl.org!
[8] => Finished All Content Check...
[8] => Reserved content <SURBL Listing: timeminute.com (db.multi.surbl.org)> present. Taking configured action on email [Quarantining Mail].
[8] => MailScan Spam Score for this message = 100
[8] => Saving Original message in Q-Dir as G:\mailscan\QUARANT\POP4A.EML.
[8] => It took 0 secs to scan this message.
Any help appreciated, thank you in advance.