We are having an issue now with SpamFilter ver. 4.2.4.834 where an email is passing the SPF test and then being marked as Spam.
Here is the log snippet...
09/26/11 04:17:15:948 -- (10128) Detected TCP Connection: 64.238.192.89
09/26/11 04:17:15:948 -- (10128) Connection from: 64.238.192.89 - Originating country : United States
09/26/11 04:17:16:245 -- (10128) Received MAIL FROM: <info@riderpharmacy.com>
09/26/11 04:17:16:292 -- (10128) Received RCPT TO: christy@iticomputers.com
09/26/11 04:17:16:370 -- (10128) Resolving 64.238.192.89 - mail2.livingnaturally.com
09/26/11 04:17:16:870 -- (10128) found SPF record for riderpharmacy.com: v=spf1 mx ip4:64.238.192.64/26 include:livingnaturally.com ?all
09/26/11 04:17:16:980 -- (10128) SPF query result: pass
09/26/11 04:17:16:980 -- (10128) - SPF analysis for riderpharmacy.com done: - pass
09/26/11 04:17:16:980 -- (10128) Mail from: info@riderpharmacy.com
09/26/11 04:17:17:355 -- (10128) - MAPS search done... v=spf1 -all --
09/26/11 04:17:17:355 -- (10128) 64.238.192.89 - Mail from: info@riderpharmacy.com To: christy@iticomputers.com will be spam-tagged
09/26/11 04:17:17:386 -- (10128) Received RCPT TO: webmaster@iticomputers.com
09/26/11 04:17:17:401 -- (10128) Mail from: info@riderpharmacy.com
09/26/11 04:17:17:401 -- (10128) 64.238.192.89 - Mail from: info@riderpharmacy.com To: webmaster@iticomputers.com will be spam-tagged
09/26/11 04:17:17:511 -- (10128) Starting queueing procedures
09/26/11 04:17:17:511 -- (10128) EMail from info@riderpharmacy.com to "christy@iticomputers.com, webmaster@iticomputers.com" was queued. Size: 1 KB, 1024 bytes
09/26/11 04:17:17:511 -- (7784) Sending email from info@riderpharmacy.com to christy@iticomputers.com, webmaster@iticomputers.com --
09/26/11 04:17:17:636 -- (7784) EMail from info@riderpharmacy.com to christy@iticomputers.com, webmaster@iticomputers.com -- was forwarded to mail.iticomputers.com:25
09/26/11 04:17:17:698 -- (10128) Blacklist cache - Added 64.238.192.89 to limbo
09/26/11 04:17:17:886 -- (10128) SFDB - Added 64.238.192.89 - Response: Error=0
09/26/11 04:17:17:886 -- (10128) Disconnect
09/26/11 04:17:18:698 -- (10404) Detected TCP Connection: 64.238.192.89
09/26/11 04:17:18:698 -- (10404) Connection from: 64.238.192.89 - Originating country : United States
09/26/11 04:17:18:980 -- (10404) Received MAIL FROM: <info@riderpharmacy.com>
09/26/11 04:17:19:027 -- (10404) Received RCPT TO: christy@iticomputers.com
09/26/11 04:17:19:105 -- (10404) Resolving 64.238.192.89 - mail2.livingnaturally.com
09/26/11 04:17:19:339 -- (10404) found SPF record for riderpharmacy.com: v=spf1 mx ip4:64.238.192.64/26 include:livingnaturally.com ?all
09/26/11 04:17:19:417 -- (10404) SPF query result: pass
09/26/11 04:17:19:417 -- (10404) - SPF analysis for riderpharmacy.com done: - pass
09/26/11 04:17:19:417 -- (10404) Mail from: info@riderpharmacy.com
09/26/11 04:17:19:542 -- (10404) - MAPS search done... v=spf1 -all --
09/26/11 04:17:19:542 -- (10404) 64.238.192.89 - Mail from: info@riderpharmacy.com To: christy@iticomputers.com will be spam-tagged
09/26/11 04:17:19:574 -- (10404) Received RCPT TO: webmaster@iticomputers.com
09/26/11 04:17:19:589 -- (10404) Mail from: info@riderpharmacy.com
09/26/11 04:17:19:589 -- (10404) 64.238.192.89 - Mail from: info@riderpharmacy.com To: webmaster@iticomputers.com will be spam-tagged
09/26/11 04:17:19:699 -- (10404) Starting queueing procedures
09/26/11 04:17:19:699 -- (10404) EMail from info@riderpharmacy.com to "christy@iticomputers.com, webmaster@iticomputers.com" was queued. Size: 1 KB, 1024 bytes
09/26/11 04:17:19:699 -- (948) Sending email from info@riderpharmacy.com to christy@iticomputers.com, webmaster@iticomputers.com --
09/26/11 04:17:19:886 -- (10404) Blacklist cache - Updated limbo counter for 64.238.192.89
09/26/11 04:17:19:933 -- (948) EMail from info@riderpharmacy.com to christy@iticomputers.com, webmaster@iticomputers.com -- was forwarded to mail.iticomputers.com:25
09/26/11 04:17:20:074 -- (10404) SFDB - Added 64.238.192.89 - Response: Error=0
09/26/11 04:17:20:074 -- (10404) Disconnect
Is Spamfilter acting up or is there another reason for this behaviour?
Thanks