Please post evidence of postini false positives here
Everything looks as expected in those headers - it's a DSPAM error which we don't need in this topic.
Postini is 100% certain it is spam - Plusnet have recognised that and added the X-pn-pstn: Spam 2.
DSPAM has got it totally wrong and it's not tagged. When tagging is changed to use Postini this message would be tagged.
Postini is 100% certain it is spam - Plusnet have recognised that and added the X-pn-pstn: Spam 2.
DSPAM has got it totally wrong and it's not tagged. When tagging is changed to use Postini this message would be tagged.
On the other hand, I've just found this one, which was treated the same way as p-p's but is in fact a perfectly genuine email.... (And I've been lying on other threads that I haven't had any false positives from Postini 
because DSPAM hid it from me.)
X-Daemon-Classification: INNOCENT
Envelope-to: xxxxx@xxxxxxx.plus.com
Delivery-date: Thu, 20 Dec 2007 19:53:38 +0000
Received: from exprod5mx232.postini.com ([64.18.0.118] helo=psmtp.com)
by pih-sunmxcore14.plus.net with smtp (PlusNet MXCore v2.00) id 1J5RSa-0000pK-0T
for xxxxx@xxxxxxx.plus.com; Thu, 20 Dec 2007 19:53:37 +0000
Received: from source ([24.201.245.36]) by exprod5mx232.postini.com ([64.18.4.13]) with SMTP;
Thu, 20 Dec 2007 11:53:34 PST
Received: from [192.168.1.100] ([24.203.246.235])
by VL-MO-MR004.ip.vxxxxxxxn.ca
(Sun Java(tm) System Messaging Server 6.3-4.01 (built Aug 3 2007; 32bit))
with ESMTP id <0JTD003YT5X96B70@VL-MO-MR004.ip.vxxxxxxxn.ca> for
xxxxx@xxxxxxx.plus.com; Thu, 20 Dec 2007 14:53:34 -0500 (EST)
Message-id: <476AC847.7050404@vxxxxxxxn.ca>
Date: Thu, 20 Dec 2007 14:53:43 -0500
From: Sxxxxxx Txxxxxxx <xxxxxxxxxxxxxxx@vxxxxxxxn.ca>
User-Agent: Thunderbird 1.5.0.13 (Windows/20070809)
To: Chris Longworth <xxxxx@xxxxxxx.plus.com>
Cc: Nxxxx Hxxxx <xxxxxx@vixxxxxxn.ca>
Subject: Meilleurs Voeux !
X-pstn-neptune: 0/0/0.00/0
X-pstn-levels: (S: 0.00315/95.58434 R:95.9108 P:95.9108 M:97.0282 C:98.6951 )
X-pstn-settings: 1 (0.1500:0.1500) gt3 gt2 gt1 r p m c
X-pstn-addresses: from <xxxxxxxxxxxxxxx@vxxxxxxxn.ca> [db-null]
X-pn-pstn: Spam 2
X-PN-VirusFiltered: by PlusNet MXCore (v4.00)
X-DSPAM-Result: Innocent
X-DSPAM-Processed: Thu Dec 20 19:53:38 2007
X-DSPAM-Confidence: 0.5432
X-DSPAM-Improbability: 1 in 120 chance of being spam
X-DSPAM-Probability: 0.0002
X-DSPAM-Factors: 27,
X-pstn-settings*(0.1500, 0.99106,
X-pstn-settings*1, 0.99106,
X-pstn-settings*0.1500), 0.99102,
Content-type*format=flowed, 0.00917,
heureuse, 0.01000,
heureuse, 0.01000,
Received*chris, 0.99000,
Received*chris, 0.99000,
Received*([64.18.4.13]), 0.99000,
color="#3333ff"><font, 0.01000,
color="#3333ff"><font, 0.01000,
Received*exprod5mx232.postini.com, 0.99000,
Received*exprod5mx232.postini.com, 0.99000,
To*Chris, 0.01000,
Received*helo=psmtp.com), 0.01685,
Nigel, 0.02117,
Nigel, 0.02117,
Content-type*image/jpeg, 0.02262,
Sue, 0.03863,
Sue, 0.03863,
width="182">, 0.04159,
jpg>, 0.04498,
Received*System, 0.05916,
Received*(Sun, 0.05916,
Content-type*charset=ISO, 0.06545,
Content-type*charset=ISO, 0.06545,
Bonne, 0.06811
X-Antivirus: AVG for E-mail 7.5.503 [269.17.4/1189]
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="=======AVGMAIL-476ACC086172======="
--=======AVGMAIL-476ACC086172=======
Content-Type: multipart/alternative; boundary="Boundary_(ID_APRZuCce/CfYDFWYi8Zfiw)"
--Boundary_(ID_APRZuCce/CfYDFWYi8Zfiw)
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
**
<http://www.its.caltech.edu/%7Eatomic/snowcrystals/photos/w031230a113.jpg>
*
*
*
*Dear Chris and Sue,*
***
*Thank you very much for your very nice greeting card.*
*Meilleurs voeux
pour un Temps des Fêtes des plus doux
Bonne et heureuse Année 2008 !
***
/*Love,*
*Solange and Nigel*/
****
because DSPAM hid it from me.)X-Daemon-Classification: INNOCENT
Envelope-to: xxxxx@xxxxxxx.plus.com
Delivery-date: Thu, 20 Dec 2007 19:53:38 +0000
Received: from exprod5mx232.postini.com ([64.18.0.118] helo=psmtp.com)
by pih-sunmxcore14.plus.net with smtp (PlusNet MXCore v2.00) id 1J5RSa-0000pK-0T
for xxxxx@xxxxxxx.plus.com; Thu, 20 Dec 2007 19:53:37 +0000
Received: from source ([24.201.245.36]) by exprod5mx232.postini.com ([64.18.4.13]) with SMTP;
Thu, 20 Dec 2007 11:53:34 PST
Received: from [192.168.1.100] ([24.203.246.235])
by VL-MO-MR004.ip.vxxxxxxxn.ca
(Sun Java(tm) System Messaging Server 6.3-4.01 (built Aug 3 2007; 32bit))
with ESMTP id <0JTD003YT5X96B70@VL-MO-MR004.ip.vxxxxxxxn.ca> for
xxxxx@xxxxxxx.plus.com; Thu, 20 Dec 2007 14:53:34 -0500 (EST)
Message-id: <476AC847.7050404@vxxxxxxxn.ca>
Date: Thu, 20 Dec 2007 14:53:43 -0500
From: Sxxxxxx Txxxxxxx <xxxxxxxxxxxxxxx@vxxxxxxxn.ca>
User-Agent: Thunderbird 1.5.0.13 (Windows/20070809)
To: Chris Longworth <xxxxx@xxxxxxx.plus.com>
Cc: Nxxxx Hxxxx <xxxxxx@vixxxxxxn.ca>
Subject: Meilleurs Voeux !
X-pstn-neptune: 0/0/0.00/0
X-pstn-levels: (S: 0.00315/95.58434 R:95.9108 P:95.9108 M:97.0282 C:98.6951 )
X-pstn-settings: 1 (0.1500:0.1500) gt3 gt2 gt1 r p m c
X-pstn-addresses: from <xxxxxxxxxxxxxxx@vxxxxxxxn.ca> [db-null]
X-pn-pstn: Spam 2
X-PN-VirusFiltered: by PlusNet MXCore (v4.00)
X-DSPAM-Result: Innocent
X-DSPAM-Processed: Thu Dec 20 19:53:38 2007
X-DSPAM-Confidence: 0.5432
X-DSPAM-Improbability: 1 in 120 chance of being spam
X-DSPAM-Probability: 0.0002
X-DSPAM-Factors: 27,
X-pstn-settings*(0.1500, 0.99106,
X-pstn-settings*1, 0.99106,
X-pstn-settings*0.1500), 0.99102,
Content-type*format=flowed, 0.00917,
heureuse, 0.01000,
heureuse, 0.01000,
Received*chris, 0.99000,
Received*chris, 0.99000,
Received*([64.18.4.13]), 0.99000,
color="#3333ff"><font, 0.01000,
color="#3333ff"><font, 0.01000,
Received*exprod5mx232.postini.com, 0.99000,
Received*exprod5mx232.postini.com, 0.99000,
To*Chris, 0.01000,
Received*helo=psmtp.com), 0.01685,
Nigel, 0.02117,
Nigel, 0.02117,
Content-type*image/jpeg, 0.02262,
Sue, 0.03863,
Sue, 0.03863,
width="182">, 0.04159,
jpg>, 0.04498,
Received*System, 0.05916,
Received*(Sun, 0.05916,
Content-type*charset=ISO, 0.06545,
Content-type*charset=ISO, 0.06545,
Bonne, 0.06811
X-Antivirus: AVG for E-mail 7.5.503 [269.17.4/1189]
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="=======AVGMAIL-476ACC086172======="
--=======AVGMAIL-476ACC086172=======
Content-Type: multipart/alternative; boundary="Boundary_(ID_APRZuCce/CfYDFWYi8Zfiw)"
--Boundary_(ID_APRZuCce/CfYDFWYi8Zfiw)
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
**
<http://www.its.caltech.edu/%7Eatomic/snowcrystals/photos/w031230a113.jpg>
*
*
*
*Dear Chris and Sue,*
***
*Thank you very much for your very nice greeting card.*
*Meilleurs voeux
pour un Temps des Fêtes des plus doux
Bonne et heureuse Année 2008 !
***
/*Love,*
*Solange and Nigel*/
****
Not sure about that! If as Bob suggested the Postini tagging is introduced tomorrow I'm pretty sure that you will need to have the Spam checking switched on for it to activate on your account. So I think I'll proably be advising everyone to turn it back on tomorrow. Is it worth it for one day? Of course if the Postini tagging is delayed...
It's a wait and see thing then 
The 'tomorrow' bit may not be accurate as it depends on when the account was transferred to Postini as you said.
...anyway we'll see what tomorrow brings.
I've more important things to worry about like how my kids are going to spend my £14.50 lottery win
The 'tomorrow' bit may not be accurate as it depends on when the account was transferred to Postini as you said.
...anyway we'll see what tomorrow brings.
I've more important things to worry about like how my kids are going to spend my £14.50 lottery win
Now that is an interesting point!
If tagging is switched from DSPAM to Postini on an account that was moved less than 7 days ago so the mx.core/mx.last block is not yet in place, would any spam checking be applied to spam that came in the backdoor via mx.core/mx.last?
If tagging is switched from DSPAM to Postini on an account that was moved less than 7 days ago so the mx.core/mx.last block is not yet in place, would any spam checking be applied to spam that came in the backdoor via mx.core/mx.last?
Details here: http://community.plus.net/forum/index.php/topic,57643.msg484044.html#msg484044
I'm sorry to say I think they've got this badly wrong. Based on the spam I've received recently only 80-85% of the spam will be given a X-pn-pstn: Spam 1 header and the subject line tagged with [-SPAM-].
I'm sorry to say I think they've got this badly wrong. Based on the spam I've received recently only 80-85% of the spam will be given a X-pn-pstn: Spam 1 header and the subject line tagged with [-SPAM-].