Quantcast
Channel: Sophos User Bulletin Board
Viewing all articles
Browse latest Browse all 14361

Rolex mail is driving me mad ...

$
0
0
NOTE !
I found the cause .. and am not able to delete the message excuse :
My own domain is listed in the exeption list to do no antispam checks! and since the mail is send as if it is from my domain ... it finds its way trough the spamfilters.

BTW how can i handle mail that is send from me to me but is not? like:
To: <info@tri-angle.nl>
Subject: info@tri-angle.nl Rolex Today -23%
From: <info@tri-angle.nl>


END Note




Since a few weeks i get mails about rolex, and one way or another, they are able to pass the astaro mail gateway.

from and to field are both the internal mail address

i should be able to filter this out on the subject line should i not ?

What am i doing wrong here :-(


i had made an expression filter for "Rolex Today" but it seems the messages pass this ...

seems they trick me with my settings this is the logging
2012:01:01-06:49:10 fw smtpd[3220]: SCANNER[3220]: 1RhEIA-0000pw-7A <= info@tri-angle.nl R=1RhEI5-0000pY-03 P=INPUT S=764
2012:01:01-06:49:10 fw smtpd[3220]: SCANNER[3220]: id="1000" severity="info" sys="SecureMail" sub="smtp" name="email passed" srcip="92.47.98.232" from="info@tri-angle.nl" to="info@tri-angle.nl" subject="info@tri-angle.nl Rolex Today -23%25" queueid="1RhEIA-0000pw-7A" size="764"
2012:01:01-06:49:10 fw smtpd[3220]: SCANNER[3220]: 1RhEI5-0000pY-03 => work R=SCANNER T=SCANNER
2012:01:01-06:49:10 fw smtpd[3220]: SCANNER[3220]: 1RhEI5-0000pY-03 Completed
2012:01:01-06:49:10 fw exim-out[3223]: 2012-01-01 06:49:10 1RhEIA-0000pw-7A => info@tri-angle.nl P=<info@tri-angle.nl> R=static_route_hostlist T=static_smtp H=192.168.1.11 [192.168.1.11]:25
2012:01:01-06:49:10 fw exim-out[3223]: 2012-01-01 06:49:10 1RhEIA-0000pw-7A Completed
2012:01:01-06:49:39 fw smtpd[3220]: SCANNER[3220]: Nothing to do, exiting.



the mail headers are :
Return-Path: info@tri-angle.nl
Received: from mail.tri-angle.nl ([192.168.1.15]) by mail.tri-angle.nl ; Sun, 1 Jan 2012 06:49:10 +0100
Received: from [92.47.98.232] (port=1939 helo=bb0908685f21488) by mail.tri-angle.nl with smtp (Exim 4.76) (envelope-from <info@tri-angle.nl>) id 1RhEI5-0000pY-03 for info@tri-angle.nl; Sun, 01 Jan 2012 06:49:07 +0100
X-CTCH-RefID: str=0001.0A090202.4EFFF3D3.0091,ss=4,re=0.000,fgs= 12
Message-ID: <20120101084837.2710.qmail@92.47.98.232>
To: <info@tri-angle.nl>
Subject: info@tri-angle.nl Rolex Today -23%
From: <info@tri-angle.nl>
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

.

Viewing all articles
Browse latest Browse all 14361

Trending Articles