Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 9139 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Why was this mail filtered or what does the reason="as" mean?

cr4sh3r
Hi folks,

yesterday our internal newsletter was filtered out by the astaro with the following reason:

2009:04:01-13:59:28 (none) smtpd[10714]: SCANNER[10714]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="1.2.3.4" from="newsletter@domain.com" to="rp@domain.de" subject="IPSec & SSL - zusammen unschlagbar! Live auf der RSA Conference in San Francisco!" queueid="10CNpN-00036O-0x" size="9037"" reason="as" extra=""

Can someone tell what this means? 

We also got some out of office replies from the same domain, but some were filtered, others not, here an example:

2009:04:01-13:59:27 (none) smtpd[10714]: SCANNER[10714]: id="1000" severity="info" sys="SecureMail" sub="smtp" name="email passed" srcip="1.2.3.4" from="rm@external.com" to="newsletter@domain.com" subject="Out of Office AutoReply: IPSec & SSL - zusammen unschlagbar! Live auf der RSA Conference in San Francisco!" queueid="10LPIT-00036I-0G" size="416"
2009:04:01-13:59:28 (none) exim[11938]: 2009-04-01 13:59:28 10LPIT-00036I-0G => newsletter@domain.com R=static_route_hostlist T=static_smtp H=172.16.11.35 [172.16.11.35]:25
2009:04:01-13:59:28 (none) exim[11938]: 2009-04-01 13:59:28 10LPIT-00036I-0G Completed
2009:04:01-13:59:28 (none) smtpd[10714]: SCANNER[10714]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="1.2.3.4" from="rw@external.com" to="newsletter@domain.com" subject="Out of Office AutoReply: IPSec & SSL - zusammen unschlagbar! Live auf der RSA Conference in San Francisco!" queueid="10IG5F-00036M-0V" size="179"" reason="as" extra=""


Hmmm???


Regards, Andy (ASG 7.306)


This thread was automatically locked due to age.
  • 0
    Can anyone point us at a list of the different "reason" explanations?  I suspect that reason="as" means the anti-spam check found too many "non-mail" SMTP commands in the header, but I don't know that.

    Andy, I think your best bet is to add an anti-spam exception for the domain in question.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    I searched the SMTP log for reason="as" and compared that to the Mail Manager SMTP Log.  The answer is...

    When the CommTouch engine gives an email a "spam" or "confirmed spam" rating, the SMTP log shows the reason as "as" - so one must interpret that as "anti-spam."

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Cookie Information Banner