Return-Path: Received: from x.imd.net ([212.87.144.5] verified) by mail.tffenterprises.com (CommuniGate Pro SMTP 5.2.14) with ESMTP id 13978825 for cgpsa-discuss@mail.tffenterprises.com; Thu, 18 Nov 2010 09:16:23 -0800 Received-SPF: pass receiver=mail.tffenterprises.com; client-ip=212.87.144.5; envelope-from=TalkLists@index-s.de Received: from [78.42.20.213] (account seiz HELO [10.0.1.130]) by x.imd.net (CommuniGate Pro SMTP 4.3.12) with ESMTPSA id 9030862 for cgpsa-discuss@mail.tffenterprises.com; Thu, 18 Nov 2010 18:15:56 +0100 User-Agent: Microsoft-Entourage/12.26.0.100708 Date: Thu, 18 Nov 2010 18:15:55 +0100 Subject: Re: [CGPSA] CGPSA rule for redirect messages From: Stefan Seiz To: CGPSA Discussion List Message-ID: Thread-Topic: [CGPSA] CGPSA rule for redirect messages Thread-Index: AcuHREJMtcZYuj0DIUaZWWSX7dwfZQ== In-Reply-To: X-Habeas-SWE-1: winter into spring X-Habeas-SWE-2: brightly anticipated X-Habeas-SWE-3: like Habeas SWE (tm) X-Habeas-SWE-4: Copyright 2002 Habeas (tm) X-Habeas-SWE-5: Sender Warranted Email (SWE) (tm). The sender of this X-Habeas-SWE-6: email in exchange for a license for this Habeas X-Habeas-SWE-7: warrant mark warrants that this is a Habeas Compliant X-Habeas-SWE-8: Message (HCM) and not spam. Please report use of this X-Habeas-SWE-9: mark in spam to . Mime-version: 1.0 Content-type: text/plain; charset="ISO-8859-1" Content-transfer-encoding: quoted-printable How does the rule look which you use to call CGPSA in the first place? Migh= t only trigger on incoming (to your server) messages=8A On 18.11.10 14:09, Jona Tallieu (T & T nv) wrote: > Hi all, >=20 > we're using CGPSA on OSX Server 10.5.8 and CGP 5.1.16 in Full-Featured Mo= de. > We now received complaints from a big provider/ISP that we send out spam = to > their servers. >=20 > After examining the headers of those messages, it seems they are all mess= ages > coming from groups on our server that are configured to redirect mail to = a > mailbox at that provider. >=20 > we have added the domainname of the people who forward their mail using t= he > groups into the "scan_domains" list in the CGPSA config file. > Now I'm trying to catch all the messages that are spam into a central > quarantine mailbox. >=20 > I'm using this rule: >=20 > ( > ("Header Field", is, "X-Autogenerated: group"), > ("Header Field", is, "X-Spam-Flag: YES"), > ( > "Header Field", > in, > "X-Spam-Checker-Version: mailscanner" > ) > ), > (("Store in", "~spambox@domain.com/QUARAN"), (Discard)) > ),=20 >=20 >=20 > But it does not work. > If I look at the headers of those messages delivered in the mailbox of th= e > provider, we can see that there is a X-Spam-Flag: YES header added by CGP= SA. >=20 > Any ideas what I'm missing? >=20 >=20 > Thanks. >=20 >=20 > Best, >=20 >=20 > J. -- Stefan Seiz Spamto: