Please help been trying to firgure out how to remove the header from all the spam marked emails. I dont want to see the following :- From: "Terri Tjxipo" <[email protected]> To: [email protected] Subject: SPAM: Results of your tests Date: Thu, 9 Jul 2009 02:39:55 -0500 X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on isp.sigcl.com X-Spam-Level: ************* X-Spam-Status: Yes, score=13.5 required=5.0 tests=FH_HELO_EQ_D_D_D_D, HELO_DYNAMIC_DHCP,HELO_DYNAMIC_IPADDR,HTML_MESSAGE,MIME_HTML_ONLY, RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RDNS_NONE,URIBL_BLACK autolearn=spam version=3.2.5 Spam detection software, running on the system "isp.sigcl.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Sexual Health Newsletter. If you are having problems viewing images in this e-mail, click here to view it in your web browser. July 2009: Daily Newsletter Goto website > [...] Content analysis details: (13.5 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.5 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP) 0.5 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d 2.9 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr 1) 0.0 HTML_MESSAGE BODY: HTML included in message 1.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see < http://www.spamcop.net/bl.shtml?201.103.47.46>] 1.6 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address [201.103.47.46 listed in dnsbl.sorbs.net] 3.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist [URIs: fvoyavok.cn] 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor. Return-Path: <[email protected]> X-Original-To: [email protected] Delivered-To: [email protected] Received: from dsl-201-103-87-104-dyn.prod-infinitum.com.mx (unknown [201.103.47.46]) by isp.sigcl.com (Postfix) with ESMTP id 32B3936A462 for <[email protected]>; Thu, 9 Jul 2009 07:39:57 +0000 (UTC) Content-type: text/html; charset="utf-8" MIME-Version: 1.0 Message-ID: <7873AD.803805C4.3846083192524CCXGBDUYRKAROUU7865@dsl-201-103-87-104-dyn.prod-infinitum.com.mx> Date: Thu, 9 Jul 2009 02:39:55 -0500 From: "Terri Tjxipo" <[email protected]> To: [email protected] Subject: Results of your tests X-Virus-Status: No X-Virus-Checker-Version: clamassassin 1.2.4 with clamscan / ClamAV 0.95.1/9549/Wed Jul 8 18:14:06 2009 please help and also why is clamAV renaming my xls and other images files? Tks in advance pls help getting tired .....
Thanks All Thanks Falko and Mark. I turned the mailscan off and its working but still playing around with the header for spamassasin. Since I had to blindly set this server up quickly didnt have much time to look into spam much. Looks like its a long road ahead for me . Anyway thanks for the help at least I know what direction I need to take.
