PLEASE!!!! SPAM getting delivered even when surpassing score threshhold Andy

From: Andy
Date: 8/26/16 11:37 AM
Topic: PLEASE!!!! SPAM getting delivered even when surpassing score threshhold
Type: General Discussions
Post a follow up

This is making me crazy and have not gotten any answers. I am getting a massive quantity of emails with F*ckBuddy subjects and Binary Options subjects. They all show as coming from a different IP and different email. I have all sorts of content filters set to catch these emails. If I go to view all messages, none of the ones that get delivered can be found in there. For that reason I think it is an issue with the X-BYPSHEADER. If I search on the keywords found in the subject lines I can see that for one of my hosted clients those same emails get caught. The SMScore shows as 2000+. All of the others get delivered and do not show up in Xeams logs anywhere. My SPAM score is set to 300. Below is an example of a header of an email that gets bypassed by Xeams. Receiving hundreds of these a day and they do not even show up in the Xeams logs even though from the header info it certainly appears that it is getting processed by Xeams (although the SMScore should be 2000+ and not around 500).

____________________________________

Received: from mail.xxxxxxxxx.com [127.0.0.1] by mail.xxxxxxxxx.com with ESMTP
  (SMTPD-12.5.5.115) id 922900095671fd31; Fri, 26 Aug 2016 04:03:56 -0600
X-BYPSHEADER: 1532070
X-SMScore: 488
X-LCID: 3806318
Received: from [(118.165.68.101)] by VPS-66C-DD-6DE with Xeams SMTP; Fri, 26 Aug 2016 04:03:32 -0600 (MDT)
X-SM_EnvelopeFrom: njwdojaehk@arscollectionsri.com
X-SM_RECEIVED_ON: Fri, 26 Aug 2016 04:03:32 -0600 (MDT)
Message-ID: <9779389052-BACUILUCLWJKVMUVMEMRS@gplziq.backupnow.com>
From: "Lori Franks" <Franks_Kristie@backupnow.com>
Subject: Hungry for a F*ckbuddy
To: xxxxx@xxxxxxxx.com
Date: Fri, 26 Aug 2016 04:57:58 -0600
Mime-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 7Bit
X-RCPT-TO: <xxxxx@xxxxxxx.com>
Status:
X-UIDL: 765660361
X-IMail-ThreadID: 922900095671fd31
X-Antivirus: AVG for E-mail 2016.0.7752 [4647/12883]
X-AVG-ID: ID3B2B6135-411C1FB

______________________________________

Received: from mail.xxxxxxxxx.com [127.0.0.1] by mail.xxxxxxxxx.com with ESMTP
  (SMTPD-12.5.5.115) id 91d80009153da03b; Wed, 24 Aug 2016 18:57:51 -0600
X-BYPSHEADER: 22927296
X-SMScore: 568
X-LCID: 3790222
Received: from [(115.126.16.42)] by VPS-66C-DD-6DE with Xeams SMTP; Wed, 24 Aug 2016 18:56:55 -0600 (MDT)
X-SM_EnvelopeFrom: axtlgjrnmnehld@alphaomegadigital.com
X-SM_RECEIVED_ON: Wed, 24 Aug 2016 18:56:55 -0600 (MDT)
Message-ID: <41705258144-HDPGVAHGLKTWAWGRFXRP@s3.antworkstoys.com>
From: "Micah Atkins" <Atkins97@antworkstoys.com>
Subject: Binary Options! Secrets here!
To: xxxxxx@xxxxxxxxx.com
Date: Wed, 24 Aug 2016 20:53:05 -0500
Mime-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 7Bit
X-RCPT-TO: <xxxxxx@xxxxxxxxx.com>
Status:
X-UIDL: 765660276
X-IMail-ThreadID: 91d80009153da03b
X-Antivirus: AVG for E-mail 2016.0.7752 [4647/12873]
X-AVG-ID: ID309ED089-963F0AD

Top