[Mimedefang] [possibly off-topic] ALL TRUSTED SA Problem

[Kevin A. McGrail]

I am trying to assist with a problem where emails coming through an
anti-spam gateway are getting scored with ALL_TRUSTED.  I don't see a reason
why they should be.  I've looked at the SA Source code but still at a loss
and I'm worried it's something in the mimedefang filter.

Here's the headers from an email received by a user on an outlook client and
I've obscured the data to protect the innocent.  Any thoughts?


Microsoft Mail Internet Headers Version 2.0
Received: from fees.acompany.com ([192.168.216.48]) by
vaexchange.acompany.com with Microsoft SMTPSVC(6.0.3790.0);
             Wed, 18 May 2005 05:29:48 -0400
Received: from spam.acompany.com ([192.168.216.222]) by fees.acompany.com
with Microsoft SMTPSVC(6.0.3790.211);
             Wed, 18 May 2005 05:29:47 -0400
Received: from sndr132.beta-ca.mxsvrbsminc.net
(sndr132.beta-ca.mxsvrbsminc.net [72.5.1.132])
            by spam.acompany.com (8.12.11/8.12.11) with ESMTP id
j4I9VSCr009059
            for <avaliduser at acompany.com>; Wed, 18 May 2005 05:31:29 -0400
Received: by sndr132.beta-ca.mxsvrbsminc.net id hhc3p806574u for
<avaliduser at acompany.com>; Wed, 18 May 2005 02:14:52 -0700 (envelope-from
<Control-1041-72236008-Fre at absmfive.com>)
Received: from localhost by BSMgateway.2558621
            (ver.3.3.100)
            with ESMTP id mid72236008.msg
            for <avaliduser at acompany.com>; Wed, 18 May 2005 02:14:52 -0700
Date: Wed, 18 May 2005 02:14:52 -0700
From: "F.C.Info" <Control-1041-72236008-Fre at absmfive.com>
To: "Online Consumer" <avaliduser at acompany.com>
Reply-To: <exclude-me at absmfive.com>
Subject: Select from the Internet`s best schools aghul
Message-ID: <72236008.180505021402.1041 at ABSMFIVE.COM>
X-Mailer: MOM Agent (v.7.2.236008)
X-CRC32ID: 6F738D2;3D2F7D61;78BAA0F5
x-MOMID1: Wl1fVlhERVUJAQABXFRYUFoA
x-MOMID2: XF5dUFVHW14cAQAF
x-MOMID3: XVpCVFZbRVgSAAIPXFtXVVxPICNjHQIAWFdbV19eTV0GAh4AW10A
MIME-Version: 1.0
Content-Type: multipart/alternative;
            boundary="--72236008_abMay1041"
X-RelayRegistry-Debug: absmfive.com.by.72.5.1.132.relayregistry.org
X-RelayRegistry: Failed - spoofed.relayregistry.org.           3600     IN
A          1.1.1.30
X-Spam-Status: No, hits=1.0 required=6.5

tests=ALL_TRUSTED,BAYES_00,DBL_1_CHR_PGFLD,FU_WITH_ID,HTML_80_90,
                  HTML_IMAGE_RATIO_08,HTML_MESSAGE,KAM_RR_20_39,
                  RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RM_rb_ANCHOR,
                  RM_rb_BREAK,RM_rb_FONT,RM_rb_PARA,URIBL_OB_SURBL,URIBL_SBL
            version=3.0.2
X-Spam-Level:
X-Spam-Checker-Version: SpamAssassin 3.000002 (2004-11-16)
X-Scanned-By: MIMEDefang 2.49 on 192.168.216.222
Return-Path: Control-1041-72236008-Fre at absmfive.com
X-OriginalArrivalTime: 18 May 2005 09:29:47.0923 (UTC)
FILETIME=[22514E30:01C55B8C]

Other Stuff deleted...

Regards,
KAM