Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 1 subscriber
  • Views 10006 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ctasd reports 'Confirmed'

paule
Hi,

I had to notice a error message in the logs when a partner tried to send mails
yesterday. All his mails were rejected at the astaro, and the smtp log shows
messages like:
2009:03:23-10:11:31 (none) exim[15658]: 2009-03-23 10:11:31 1LlgBs-00044Y-2w ctasd reports 'Confirmed' RefID:str=0001.0A0B0201.49C752E4.0270,ss=4,fgs=12
2009:03:23-10:23:45 (none) exim[15799]: 2009-03-23 10:23:45 1LlgNk-00046p-1h ctasd reports 'Confirmed' RefID:str=0001.0A0B0207.49C755C3.022C,ss=4,fgs=12
2009:03:23-10:36:12 (none) exim[15985]: 2009-03-23 10:36:12 1LlgZn-00049p-38 ctasd reports 'Confirmed' RefID:str=0001.0A0B0206.49C758AE.0308,ss=4,fgs=12
2009:03:23-14:16:02 (none) exim[18728]: 2009-03-23 14:16:02 1Llk0X-0004s4-0u ctasd reports 'Confirmed' RefID:str=0001.0A0B0206.49C78C3A.022E,ss=4,fgs=12
2009:03:23-14:28:22 (none) exim[18874]: 2009-03-23 14:28:22 1LlkCT-0004uQ-27 ctasd reports 'Confirmed' RefID:str=0001.0A0B0201.49C78F1E.03BF,ss=4,fgs=12


Where can I find more information about the reason why ctasd rejects those messages?
I let him send such a mail to another mail address of mine, and I cannot see any real
reason to tread his mails as spam.

BTW, these are all different mails (some with attachment, some without), but from
the same sender.

regards

Paul


This thread was automatically locked due to age.
Parents
  • 0
    RefID:str=0001.0A020201.5228C77E.0201:SCFMA2262571 5,ss=1,re=-4.000,recu=0.000,reip=0.000,pt=R_352800,cl=4,cld=1 ,fgs=1024

    I don't know the details, but, after looking a a bunch of these over the last few years, I believe that this "signature" is a near-match for known spam.  The only way to report  false positives is from the 'SMTP Quarantine' tab.  In this case, the email was rejected, so I don't know of a way to submit the signature as one that's not spam.

    Another member here recently reported outbound "confirmed spam" rejections when the users were in some other wireless networks when sending the email.

    Hopefully, one of the devs will see this...

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    RefID:str=0001.0A020201.5228C77E.0201:SCFMA2262571 5,ss=1,re=-4.000,recu=0.000,reip=0.000,pt=R_352800,cl=4,cld=1 ,fgs=1024

    I don't know the details, but, after looking a a bunch of these over the last few years, I believe that this "signature" is a near-match for known spam.  The only way to report  false positives is from the 'SMTP Quarantine' tab.  In this case, the email was rejected, so I don't know of a way to submit the signature as one that's not spam.

    Another member here recently reported outbound "confirmed spam" rejections when the users were in some other wireless networks when sending the email.

    Hopefully, one of the devs will see this...

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML