Enabling spf results in valid messages being held

Hi ,

This means the user has a filter rule (go to the users
spam/friends exceptions in the web admin tool
and see what rules they have that might be doing this.


                     
           ChrisP


surgemail-listnetwinsite.com wrote on Friday, December
1, 2006 at 9:28 a.m. (-0800):
>
>I am running surgemail 3.7b8-8 on Windows Server 2003
SP1.  I enabled the 
>following settings in surgemail a few days ago to start
using SPF filtering on 
>our surgemail server :
>
>g_spf_mode "strict"
>g_spf_baddns_skip "true"
>g_spam_allow_known "true"
>g_spam_block - not set
>
>I then enabled "spam_block" for our domain
hal...com only for testing on our 
>internal mailboxes.  There are now messages coming from
other providers that 
>are being held in my spam filter, even though there are
no SpamDetect headers 
>and they pass SPF either with the correct SPF records or
the default ones that 
>surgemail creates.  The reason in the msg.rec file is
always "User rule said 
>hold", but it doesn't give a spam score like it
usually would if ASpam handled 
>it.  Here is an example :
>
>msg.rec file :
>
>01 02:42:11 [17756867] New 192.76.86.140
<verizon.ecenterverizon.com> 
><garyhal...com> 0  "None"
>01 02:42:11 [17756867] Rcpt 192.76.86.140
<verizon.ecenterverizon.com> 
><garyhal...com> 0  "smtp thid=3880"
>01 02:42:11 [17756867] Received 192.76.86.140
<verizon.ecenterverizon.com> 
><garyhal...com> 3475
<8006533.1164958651019.JavaMail.rootezscpp02> 
>"Relay=islocal In Queue, nrcpt=1"
>01 02:42:12 [17756867] Aspam 192.76.86.140
<verizon.ecenterverizon.com> 
><garyhal...com> 3475
<8006533.1164958651019.JavaMail.rootezscpp02> "notrust 
>"
>01 02:42:12 [17756867] Stored 192.76.86.140
<verizon.ecenterverizon.com> 
><garyhal...com> 3475
<8006533.1164958651019.JavaMail.rootezscpp02> "User rule 
>said hold 1164958932.1732_24013.PICARD"
>
>Headers of held email :
>
>Received-SPF: pass (Last token {ip4:192.76.86.0/24}
(res=PASS)) 
>client-ip=192.76.86.140;
envelope-from=<verizon.ecenterverizon.com>;
>Received: from ftwmail4.verizon.com (unverified
[192.76.86.140]) 
>	by hal...com (SurgeMail 3.7b8) with ESMTP id 17756867 
>	for <garyhal...com>; Fri, 01 Dec 2006 02:42:11
-0500
>Return-Path: <verizon.ecenterverizon.com>
>Received: from bulkmail2.verizon.com
(bulkmail2.verizon.com [143.91.100.110])
>	by ftwmail4.verizon.com (8.13.6/8.13.3) with ESMTP id
kB17fldI026457
>	for <garyhal...com>; Fri, 1 Dec 2006 02:42:08
-0500 (EST)
>Received: from ezscpp02 (ezscpp02.interwan.gte.com
[138.83.164.2])
>	by bulkmail2.verizon.com (8.13.3/8.13.3) with ESMTP id
kB18FktY016260
>	for <garyhal...com>; Fri, 1 Dec 2006 02:15:46
-0600
>Message-ID: <8006533.1164958651019.JavaMail.rootezscpp02>
>Date: Thu, 30 Nov 2006 23:37:31 -0800 (PST)
>From: Verizon EBilling <verizon.ecenterverizon.com>
>To: Gary Thorne Jr   <garyhal...com>
>Subject: Your Verizon Courtesy Online Bill Notification
>Mime-Version: 1.0
>Content-Type: multipart/mixed; 
>	boundary="----=_Part_35656_5900003.1164958651018&q
uot;
>X-Server: High Performance Mail Server - http://surgemail.com
r=-1472510843
>X-Rcpt-To: <garyhal...com>
>X-NotAscii: charset=us-ascii
>X-Avast: Message is clean
>X-IP-stats: Incoming Last 0, First 134, in=62, out=0,
spam=0
>X-External-IP: 192.76.86.140
>
>Thanks for any assistance,
>Gary Thorne
>
>