Forum Home
Press F1
 
Thread ID: 107822 2010-03-03 03:07:00 {Spam?} zqwerty (97) Press F1
Post ID Timestamp Content User
863376 2010-03-03 11:49:00 So, I would say it's either an AV mail proxy on the W2K box, or the MTA on the RHEL box.
A tcp dump of the SMTP transaction will tell you which.
fred_fish (15241)
863377 2010-03-03 23:31:00 Thanks for the help, guys, really appreciated, any more thoughts?

I am going to drive into town now and take a 1st hand look at the problem,

Erayd, I have sent header information to you in a pm.
zqwerty (97)
863378 2010-03-03 23:41:00 PM them here too if you want. fred_fish (15241)
863379 2010-03-04 00:48:00 I have sent headers to you as well fred fish, I am at the place of work now, the offending computer is Win2K using Outlook Express, not all messages from the computer get this {Spam?} inserted, a preliminary wild guess is that it is messages with pictures or a link in them. Still trying to confirm this.

They have just sent 4 unique messages from the two identities to my laptop which is now connected to the network, two messages gained the {Spam?} and two did not???????
zqwerty (97)
863380 2010-03-04 01:27:00 No Tag:
X-NetSpeed-MailScanner: Found to be clean
X-NetSpeed-MailScanner-SpamScore: ss

With Tag:
X-NetSpeed-MailScanner: Found to be clean
X-NetSpeed-MailScanner-SpamScore: sss

The tagged mails have an extra 's' in the score.
That might be enough to tag as 'potential spam' (presumably that's what the Subject prefix is saying)

It's still possible it is being added by something on the client system.
OE doesn't have any transaction logging AFAIK so you could use Wireshark of SmartSniff to rule it out (as long as it's 'plain' SMTP not over SSL).

Call Netspeed would be my next suggested step, as it is really looking like they are adding it.
fred_fish (15241)
863381 2010-03-04 01:30:00 Just contacted guy at X-NetSpeed-MailScanner, hopeful that it is some problem at their end.

Offending computer has been scanned with SpyBot - clean.
zqwerty (97)
863382 2010-03-04 01:38:00 Just PM'd you something to try fred_fish (15241)
863383 2010-03-12 03:32:00 So I'm back at the Friday place of work and according to staff the {Spam?} problem is no longer evident on internal eMails.

Presume this is because I sent an eMail to the X-NetSpeed supplier and they tweaked something at their end. I didn't hear anything from them but problem seems to be fixed.

Thanks to all for help given esp. fred_fish.
zqwerty (97)
1 2