We are having an issue now with SpamFilter ver. 4.2.4.834 where an email is passing the SPF test and then being marked as Spam.
Here is the log snippet...
09/26/11 04:17:15:948 -- (10128) Detected TCP Connection: 64.238.192.89 09/26/11 04:17:15:948 -- (10128) Connection from: 64.238.192.89 - Originating country : United States 09/26/11 04:17:16:245 -- (10128) Received MAIL FROM: < mailto:info@riderpharmacy.com - info@riderpharmacy.com > 09/26/11 04:17:16:292 -- (10128) Received RCPT TO: mailto:christy@iticomputers.com - christy@iticomputers.com 09/26/11 04:17:16:370 -- (10128) Resolving 64.238.192.89 - mail2.livingnaturally.com 09/26/11 04:17:16:870 -- (10128) found SPF record for riderpharmacy.com: v=spf1 mx ip4:64.238.192.64/26 include:livingnaturally.com ?all 09/26/11 04:17:16:980 -- (10128) SPF query result: pass 09/26/11 04:17:16:980 -- (10128) - SPF analysis for riderpharmacy.com done: - pass 09/26/11 04:17:16:980 -- (10128) Mail from: mailto:info@riderpharmacy.com - info@riderpharmacy.com 09/26/11 04:17:17:355 -- (10128) - MAPS search done... v=spf1 -all -- 09/26/11 04:17:17:355 -- (10128) 64.238.192.89 - Mail from: mailto:info@riderpharmacy.com - info@riderpharmacy.com To: mailto:christy@iticomputers.com - christy@iticomputers.com will be spam-tagged 09/26/11 04:17:17:386 -- (10128) Received RCPT TO: mailto:webmaster@iticomputers.com - webmaster@iticomputers.com 09/26/11 04:17:17:401 -- (10128) Mail from: mailto:info@riderpharmacy.com - info@riderpharmacy.com 09/26/11 04:17:17:401 -- (10128) 64.238.192.89 - Mail from: mailto:info@riderpharmacy.com - info@riderpharmacy.com To: mailto:webmaster@iticomputers.com - webmaster@iticomputers.com will be spam-tagged 09/26/11 04:17:17:511 -- (10128) Starting queueing procedures 09/26/11 04:17:17:511 -- (10128) EMail from mailto:info@riderpharmacy.com - info@riderpharmacy.com to " mailto:christy@iticomputers.com - christy@iticomputers.com , mailto:webmaster@iticomputers.com - webmaster@iticomputers.com " was queued. Size: 1 KB, 1024 bytes 09/26/11 04:17:17:511 -- (7784) Sending email from mailto:info@riderpharmacy.com - info@riderpharmacy.com to mailto:christy@iticomputers.com - christy@iticomputers.com , mailto:webmaster@iticomputers.com - webmaster@iticomputers.com -- 09/26/11 04:17:17:636 -- (7784) EMail from mailto:info@riderpharmacy.com - info@riderpharmacy.com to mailto:christy@iticomputers.com - christy@iticomputers.com , mailto:webmaster@iticomputers.com - webmaster@iticomputers.com -- was forwarded to mail.iticomputers.com:25 09/26/11 04:17:17:698 -- (10128) Blacklist cache - Added 64.238.192.89 to limbo 09/26/11 04:17:17:886 -- (10128) SFDB - Added 64.238.192.89 - Response: Error=0 09/26/11 04:17:17:886 -- (10128) Disconnect 09/26/11 04:17:18:698 -- (10404) Detected TCP Connection: 64.238.192.89 09/26/11 04:17:18:698 -- (10404) Connection from: 64.238.192.89 - Originating country : United States 09/26/11 04:17:18:980 -- (10404) Received MAIL FROM: < mailto:info@riderpharmacy.com - info@riderpharmacy.com > 09/26/11 04:17:19:027 -- (10404) Received RCPT TO: mailto:christy@iticomputers.com - christy@iticomputers.com 09/26/11 04:17:19:105 -- (10404) Resolving 64.238.192.89 - mail2.livingnaturally.com 09/26/11 04:17:19:339 -- (10404) found SPF record for riderpharmacy.com: v=spf1 mx ip4:64.238.192.64/26 include:livingnaturally.com ?all 09/26/11 04:17:19:417 -- (10404) SPF query result: pass 09/26/11 04:17:19:417 -- (10404) - SPF analysis for riderpharmacy.com done: - pass 09/26/11 04:17:19:417 -- (10404) Mail from: mailto:info@riderpharmacy.com - info@riderpharmacy.com 09/26/11 04:17:19:542 -- (10404) - MAPS search done... v=spf1 -all -- 09/26/11 04:17:19:542 -- (10404) 64.238.192.89 - Mail from: mailto:info@riderpharmacy.com - info@riderpharmacy.com To: mailto:christy@iticomputers.com - christy@iticomputers.com will be spam-tagged 09/26/11 04:17:19:574 -- (10404) Received RCPT TO: mailto:webmaster@iticomputers.com - webmaster@iticomputers.com 09/26/11 04:17:19:589 -- (10404) Mail from: mailto:info@riderpharmacy.com - info@riderpharmacy.com 09/26/11 04:17:19:589 -- (10404) 64.238.192.89 - Mail from: mailto:info@riderpharmacy.com - info@riderpharmacy.com To: mailto:webmaster@iticomputers.com - webmaster@iticomputers.com will be spam-tagged 09/26/11 04:17:19:699 -- (10404) Starting queueing procedures 09/26/11 04:17:19:699 -- (10404) EMail from mailto:info@riderpharmacy.com - info@riderpharmacy.com to " mailto:christy@iticomputers.com - christy@iticomputers.com , mailto:webmaster@iticomputers.com - webmaster@iticomputers.com " was queued. Size: 1 KB, 1024 bytes 09/26/11 04:17:19:699 -- (948) Sending email from mailto:info@riderpharmacy.com - info@riderpharmacy.com to mailto:christy@iticomputers.com - christy@iticomputers.com , mailto:webmaster@iticomputers.com - webmaster@iticomputers.com -- 09/26/11 04:17:19:886 -- (10404) Blacklist cache - Updated limbo counter for 64.238.192.89 09/26/11 04:17:19:933 -- (948) EMail from mailto:info@riderpharmacy.com - info@riderpharmacy.com to mailto:christy@iticomputers.com - christy@iticomputers.com , mailto:webmaster@iticomputers.com - webmaster@iticomputers.com -- was forwarded to mail.iticomputers.com:25 09/26/11 04:17:20:074 -- (10404) SFDB - Added 64.238.192.89 - Response: Error=0 09/26/11 04:17:20:074 -- (10404) Disconnect
Is Spamfilter acting up or is there another reason for this behaviour?
Thanks
------------- ITI Computers
Web Design and Hosting
|