Spam on Mercury

[bluewave]

Hey,

Anyone having problems on Mercury with Spam. I've been here about a 1 1/2 years. Now spam is pouring through.

I sent a ticket and was told there is an increase in spam...

OK. I have other accounts with other providers, no increase in spam there.

It's like after last weekend nothing is working as far as spam - Spam assassin or MailScanner.

Just wondering if anyone else is having problems with spam.

[bluewave]

Ok,

I noticed that the spam and all email, for that matter, did not have any marking in the header from Spam Assassin or MailScanner. I sent that to H9 and they restarted spamd.

Now the filters are marking the headers, so we shall see if that helps.....

[bluewave]

It does appear to be cutting down the spam now.

[Leilani]

last few days i have had spam pouring in hundreds...i'm on galaxy, anyone else experiencing this?

any idea why all of a sudden? I thought the new email server was going to stop this, but it's hundreds of times worse!

I have enabled spam assassin now not sure it will work but pinkies crossed!

Please be sure to enable spam assassin on your domains through cPanel. This was enabled on the new servers after the migration since we have such better hardware on them.

[EdMorrow]

I normally would get about 15-20 spam emails a day.

About a month ago it went up to 25-40 a day.

Today I had over 200 spam emails come through.

[Gene]

I have been seeing a bit more spam in recent weeks. I have SpamAssassin turned on but don't see it in my email headers.

Here is what I see now in the headers:

from spammer
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
X-Spam-Status: No, score=3.5
X-Spam-Score: 35
X-Spam-Bar: +++
X-Spam-Flag: NO
------------------
from known good source
X-Spam-Status: No, score=-1.3
X-Spam-Score: -12
X-Spam-Bar: -
X-Spam-Flag: NO

Here is a header from before migration:

X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on server2.hostnine.com
X-Spam-Level: 
X-Spam-Status: No, score=-0.1 required=5.0 tests=AWL,BAYES_50,RDNS_NONE
	autolearn=no version=3.2.3
Received: from [xxx.xxx.xxx.xxx] (helo=*********.com)
	by server2.hostnine.com with esmtp (Exim 4.68)

[Gene]

Just for chuckles I tried to disable and re-enable SpamAssassin through cPanel on server2. SpamAssassin gave this reply indicating it was working:

Attempting to enable SpamAssassin...

Received: from localhost by server2.hostnine.com
	with SpamAssassin (version 3.2.3);
	Thu, 13 Mar 2008 21:01:43 -0500
From: "Spam Assassin" <spamassassin@localhost>
Subject: [SPAM] 
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on server2.hostnine.com
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.1 required=5.0 tests=AWL,BAYES_20,FH_FROMEML_NOTLD,
	MISSING_DATE,MISSING_HEADERS,MISSING_MID,MISSING_SUBJECT,NO_HEADERS_MESSAGE,
	NO_RECEIVED,NO_RELAYS autolearn=no version=3.2.3
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_47D9DC87.A42433F0"

This is a multi-part message in MIME format.

------------=_47D9DC87.A42433F0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "server2.hostnine.com", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  Spam Assassin has been enabled on this account [...] 

Content analysis details:   (5.1 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.0 MISSING_MID            Missing Message-Id: header
 2.7 FH_FROMEML_NOTLD       E-mail address doesn't have TLD (.com, etc.)
 0.0 MISSING_DATE           Missing Date: header
-0.0 NO_RELAYS              Informational: message was not relayed via SMTP
 1.3 MISSING_HEADERS        Missing To: header
-0.7 BAYES_20               BODY: Bayesian spam probability is 5 to 20%
                            [score: 0.0641]
 1.8 MISSING_SUBJECT        Missing Subject: header
-0.0 NO_RECEIVED            Informational: message has no Received headers
 0.0 NO_HEADERS_MESSAGE     Message appears to be missing most RFC-822 headers
 0.1 AWL                    AWL: From: address is in the auto white-list

------------=_47D9DC87.A42433F0
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

From: "Spam Assassin" <spamassassin@localhost>

Spam Assassin has been enabled on this account

------------=_47D9DC87.A42433F0--

Then I sent email from another account on another host to both H9 and my work email, Here are the headers:

my work email:

X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on mx001
X-Spam-Report: 
	* -0.0 SPF_PASS SPF: sender matches SPF record
	*  0.0 HTML_MESSAGE BODY: HTML included in message
	*  0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
X-Spam-Status: No, score=0.1 required=5.0 tests=HTML_MESSAGE,RDNS_NONE,
	SPF_PASS autolearn=disabled version=3.2.4
......................
server2: 

X-Spam-Status: No, score=-1.2
X-Spam-Score: -11
X-Spam-Bar: -
X-Spam-Flag: NO

Conclusion: SpamAssassin is being bypassed and not doing anything on H9/server2.

[bluewave]

I know H9 is using other things like MailScanner and I think they have a mail gateway setup as well.

Have you put a ticket in?

I cancelled my Top reseller account on Mercury...

[H9Alex]

Looks like the RBL's were not setup correctly. This has been fixed. Should see a big difference starting now.