Recently I noticed that we received a message from which the mailserver was listed on several blacklists, this same message also contained an attachment.
I noticed that after looking for PreRBLS mailscanner did not scan the mail for content:
Jan 19 16:32:30 MailScanner: PreRBLs found sender hostname: 67-60-194-69.cpe.cableone.net for 126.96.36.199 on message 1aLYGK-0000oW-SD
Jan 19 16:32:40 MailScanner: Spamc result is not spam (4.8/5.0) for 1aLYGK-0000oW-SD
For Example: I forwarded the same message to a different e-mail adres and because my mail server is not listed on any blacklists it did scan the message for content and found a suspicious file:
Jan 19 21:21:38 MailScanner: name="./1aLcmT-00063O-Kb/confirmation.doc", threat="Win32/PSW.Fareit.A trojan", action="", info="
So it seems that mailcleaner does not scan the message for content if the sender's mailserver is listed in PreRBL's, how can i make it so that it always scans both things?
"PreRBLs found sender hostname" doesn't mean you re blacklisted simply than the module found the hostname.
Content is always scanned, there is no possibility to avoid that normally so this is a little bit confusing. Maybe you checked some rbl at SMTP level making the message rejected ?
If you need help of the forum, i would suggest to post all headers each time it is possible. Hard to diagnose with two lines.
Who is online
Users browsing this forum: No registered users and 2 guests