hmm.. I double check to make sure

Thanks :) 

Hi

I keep receiving emails with appear to have NO To, From, Date, Subject or body..

When you view the header details in Outlook I see:


Received: from spooler by domain.co.uk (Mercury/32 v4.52); 27 May 2008 18:30:55 +0100
X-Envelope-To: <tom@domain.co.uk>
X-SPAMWALL: Passed through antiSPAM test by SpamHalter 4.3.1 on domain.co.uk (18)
X-SPAMWALL: probability - 100.0%
X-SPAMWALL: SPAM detected!
X-CLAMWALL: Passed through antiviral test by ClamWall 1.1.2 on domain.co.uk (31)
Return-path: <customers_save@hi-media.com>
Received: from 78-61-148-245.static.zebra.lt (78.61.148.245) by domain.co.uk
 (Mercury/32 v4.52) ID MG00357A; 27 May 2008 18:30:45 +0100
Received: from c[4
X-CC-Diagnostic: Not Header "Date" Exists (51)


The Transaction log shows:

18:30:39.125: Connection from 78.61.148.245, Tue May 27 18:30:39 2008<lf>
18:30:39.125: << 220 domain.co.uk ESMTP server ready.<cr><lf>
18:30:40.375: >> HELO 78-61-148-245.static.zebra.lt<cr><lf>
18:30:40.390: << 250 domain.co.uk Hello, 78-61-148-245.static.zebra.lt.<cr><lf>
18:30:41.078: >> MAIL FROM: <customers_save@hi-media.com><cr><lf>
18:30:43.453: << 250 Sender OK - send RCPTs.<cr><lf>
18:30:44.125: >> RCPT TO: <tom@domain.co.uk><cr><lf>
18:30:44.125: << 250 Recipient OK - send RCPT or DATA.<cr><lf>
18:30:45.796: >> DATA<cr><lf>
18:30:45.796: << 354 OK, send data, end with CRLF.CRLF<cr><lf>
18:30:46.140: >> Return-Path: <customers_save@hi-media.com><cr><lf>
18:30:46.140: >> Received: from c[4<cr><lf>
18:30:46.140: >> .<cr><lf>
18:30:46.140: << 250 Data received OK.<cr><lf>
18:30:47.843: >> QUIT<cr><lf>
18:30:47.843: << 221 domain.co.uk Service closing channel.<cr><lf>
18:30:47.843: --- Connection closed normally at Tue May 27 18:30:47 2008. ---
18:30:47.843:


In MercuryS I have set (ticked)
Refuse messages that have no 'subject' field
Refuse messages that have no or empty 'subject' fields
Refuse messages that have no 'date' field

Yet the mail came in !!
Looking at this log it has been marked as spam, yet SpamHalter hasn't moved it to the spam user !!

Any ideas ??

Thanks

The transaction log show this is exactly what was sent.  Looks like a broken spammer to me.  It did send the .<cr><lf> indicating the end of message so the actual transaction look normal if broken.

I do not know why the X-SPAMWALL headers did not trigger the filter.  I also do not know why the transaction was not rejected.

Still not to sure why it's doing this !!

Check the filters etc and everything looks like.

Had another one few today !! 

[quote user="tomt"]In MercuryS I have set (ticked)
Refuse messages that have no 'subject' field
Refuse messages that have no or empty 'subject' fields
Refuse messages that have no 'date' field

Yet the mail came in !![/quote]

The message is corrupted and has no body.  These are the significant lines:

18:30:46.140: >> Return-Path: <customers_save@hi-media.com><cr><lf>
18:30:46.140: >> Received: from c[4<cr><lf>
18:30:46.140: >> .<cr><lf>
18:30:46.140: << 250 Data received OK.<cr><lf>

The 'Received' header line is incomplete and finishes the message. Normally there would be a blank line and then some body text. With this corrupt structure, Mercury never triggers on content compliance failures (like missing header lines - Date & Subject), and I think this behaviour has existed for some versions.

[quote user="tomt"]Looking at this log it has been marked as spam, yet SpamHalter hasn't moved it to the spam user !![/quote]

Spamwall won't move it - do you have a global filter to do this?

Thanks for the reply..

I do have a global filter that moves the spam.. It works for mail except these !!

Thanks again. 

All I can think is that there's another rule which triggers first.

Try moving the 'SPAM detected' rule to the top.