Why is this email making it through?

Rule for mail sent internally between users within the
domain. I checked that and the mail is being received from
the outside and is actually not forged. I guess I could
remove that and see if for some reason my syntax might be
wrong to see if it fixes the problem.

header LOCAL_RCVD Received =~
/\S+\.ourdomain\.com\s+\(.*\[.*\]\)/

Thank you

----- Noel Jones <njonesmegan.vbhcs.org> wrote:
> At 04:58 PM 5/24/2006, Elijah Savage wrote:


> What is the rule:  LOCAL_RCVD=-50



-------------------------------------------------------
All the advantages of Linux Managed Hosting--Without the
Cost and Risk!
Fully trained technicians. The highest number of Red Hat
certifications in
the hosting industry. Fanatical Support. Click to learn more
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=107521&bid=248729&dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

At 05:20 PM 5/24/2006, Elijah Savage wrote:
>Rule for mail sent internally between users within the 
>domain. I checked that and the mail is being received
from 
>the outside and is actually not forged. I guess I could 
>remove that and see if for some reason my syntax might
be 
>wrong to see if it fixes the problem.
>
>header LOCAL_RCVD Received =~ 
>/\S+\.ourdomain\.com\s+\(.*\[.*\]\)/

You have that rule scored as -50 and it matched the spam 
mail for some reason.  Removing the rule will fix the
problem.
Maybe the spam had a forged header that matched your rule, 
or maybe your rule matches more than you intend.

Use amavisd-new policy banks to score local mail
differently.


-- 
Noel Jones 



-------------------------------------------------------
All the advantages of Linux Managed Hosting--Without the
Cost and Risk!
Fully trained technicians. The highest number of Red Hat
certifications in
the hosting industry. Fanatical Support. Click to learn more
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=107521&bid=248729&dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/