What I see here is not a full header but it has lots of info that can give some valid explanation.
Your spam filter is using some variation of the Spam Assassin filter with the RBL (real time black hole aka. a database of the abusive or spam tolerant servers, relays,etc).
A paricular web site that you are requesting a password from is using a relay (a mechanism to transfer the reply from a database where your password is stored or s aimilar - I do not have all details to say exactly) that is linked to an I.P address 65.163.7.220 thar has been flagged by the Spamhaus as broadcasting spam or having security issues that had been reported to Spamhaus.
I did take a time to check Spamhaus before writing this and the address is still flagged. See report:
http://www.spamhaus.org/qu
I did further investigate and it appears that the script that is coded to relay the data to the server is written in a way where the message id does not appear to be valid (the code is flawed).
Your spam filter has picked this through SpamAssassin rule that has instructed your spam filtering solution to check with spamhaus to see if the I.P referrenced in message is clean. Receiving the message that it is not (it is listed in CBL list) has triggered the message to beflagged. This is just one of issues I see. I also see that your bayes filter (self learning engine that is essential to may spam filtering solutions) has also calculated this message to be highly likely the spam.
I see that you or someone has white-listed this particular e-mail address which is the only way to actually stop the message from being blocked (short of re-writing the code on the web site or doing some extensive Spam Assassin tunning). So if the rest of message is good and the mail come to you and you trust this mail to be from the safe source I would leave it be as is and continue to have the specific address from which the e-mail shows to be arriving, white-listed as it appears you are already doing. You can further auto-hide the code just selecting to see the body of the message. The header you are asking for is used more in analysis, logging and forensics of e-mail messages and is nt necessary to be displayed for the end-user to see (will not help with anything if you do not understand code and labels).
Hope this helps, if you need me to clarify anything else, let me know.
Main Topics
Browse All Topics
by: grbladesPosted on 2007-12-20 at 06:21:27ID: 20506732
Can you explain more on what is generating the mail and what mail server is generating the spam report.
My guess is that the web server component sending the mail is connecting directly to your mail server to send the mail but you have not set this webserver as a trusted host in the spamassassin configuration.