Servus,
Nachtrag: Ich hab jetzt mal in den Logs auf dem Server nach dieser einen Mail, die uns aufgefallen ist, gesucht und bin im Agent.log fündig geworden. Hier werden mir aber niedrigere SCL Werte angezeigt, wie im Header der E-Mail am Client:
---agent.log---
2016-11-03T13:49:20.548Z,08D3E2067D8B54BF,192.168.1.3:25,80.67.18.3:58969,80.67.18.3,<878800749831554-QZJWOBKLMDCMLTCKXBFY@dns181.cloudmark.com>,bhdgjhkzttspaa@cloudmark.com,Beaver_Erna@domain.com;,faq@domain.de;drzany@domain.de,2,Content
Filter Agent,OnEndOfData,AcceptMessage,,SCL,4,
---/agent.log---
---mailheader---
Received: from MTA-4.DOMAIN.local (192.168.1.3) by
MTA-3.DOMAIN.local (192.168.1.2) with Microsoft SMTP Server (TLS) id
14.3.319.2; Thu, 3 Nov 2016 14:49:21 +0100
Received: from mx03.ispgateway.de (80.67.18.3) by UNIVERSE-4.KASTNER.local
(192.168.110.3) with Microsoft SMTP Server (TLS) id 14.3.319.2; Thu, 3 Nov
2016 14:49:19 +0100
X-Envelope-To: faq@domain.de,
drzany@domain.de
Received: from [68.180.115.171]
(helo=host-115-171.lalauha.lafayette.la.us.clients.pavlovmedia.com) by
mx03.ispgateway.de with smtp (Exim 4.84) (envelope-from
<bhdgjhkzttspaa@markmumma.com>) id 1c2IOK-0006HL-JA; Thu, 03 Nov 2016
14:49:17 +0100
Message-ID: <878800749831554-QZJWOBKLMDCMLTCKXBFY@dns181.cloudmark.com>
From: Erna Beaver <Beaver_Erna@cloudmark.com>
Subject: Re: Desperate for a F*ckbuddy
To: <dtp@kastner.de>
Date: Thu, 3 Nov 2016 07:44:20 -0700
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 7Bit
Return-Path: bhdgjhkzttspaa@markmumma.com
X-MS-Exchange-Organization-PRD: cloudmark.com
X-MS-Exchange-Organization-SenderIdResult: Fail
Received-SPF: Fail (MTA-4.DOMAIN.local: domain of
Beaver_Erna@cloudmark.com does not designate 80.67.18.3 as permitted sender)
receiver=MTA-4.DOMAIN.local; client-ip=80.67.18.3;
helo=mx03.ispgateway.de;
X-MS-Exchange-Organization-SCL: 7
X-MS-Exchange-Organization-PCL: 2
X-MS-Exchange-Organization-Antispam-Report: DV:3.3.5705.600;SID:SenderIDStatus Fail;OrigIP:80.67.18.3
X-TM-AS-Product-Ver: SMEX-11.1.0.1239-8.000.1202-22676.006
X-TM-AS-Result: Yes-85.210200-5.000000-31
X-TM-AS-User-Approved-Sender: No
X-TM-AS-User-Blocked-Sender: No
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXxGPO;1287500;0;This mail has
been scanned by Trend Micro Messaging Security Agent;
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-Exchange-Organization-AuthSource: MTA-4.DOMAIN.local
X-MS-Exchange-Organization-AuthAs: Anonymous
---/Mailheader---
Das erklärt dann vermutlich warum der Server die Mail nicht abgelehnt hat aber wie kommt es zu den unterschiedlichen Scoring ein und derselben Mail?
Thx & Bye Tom
