Spam Account within same domain

[phl4kx]

Hi all, my domain is: EMPRESA.NET, Y have 2 users: user1@EMPRESA.NET and user2@EMPRESA.NET, the problem:

user1@EMPRESA.NET send a email to user2@EMPRESA.NET, the email is in the junk of user2@EMPRESA.NET

all see the emails by the Zimbra Web Client

some solution please?

[raj]

if you post the FULL HEADERS (in Webmail right click message and select Show Original) of the email here then we can try to guess why?

Thanks
Raj

[phl4kx]

Here is the Headers
------------------

Return-Path: klookung@3a.com.pe
Received: from servidorweb.uniblock.com.pe (LHLO
servidorweb.uniblock.com.pe) (190.41.137.210) by
servidorweb.uniblock.com.pe with LMTP; Mon, 7 Sep 2009 08:12:49 -0500 (PET)
Received: from localhost (localhost.localdomain [127.0.0.1])
by servidorweb.uniblock.com.pe (Postfix) with ESMTP id CBC6A89430A;
Mon, 7 Sep 2009 08:12:49 -0500 (PET)
X-Virus-Scanned: amavisd-new at uniblock.com.pe
X-Spam-Flag: YES
X-Spam-Score: 7.407
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.407 tagged_above=-10 required=6.6
tests=[AWL=-3.276, BAYES_00=-2.599, EXTRA_MPART_TYPE=1,
HTML_MESSAGE=0.001, PART_CID_STOCK=1.635, PART_CID_STOCK_LESS=0.384,
RCVD_IN_PBL=0.905, RDNS_NONE=0.1, SHORT_HELO_AND_INLINE_IMAGE=0.781,
SUBJ_ALL_CAPS=2.077, TVD_RCVD_SINGLE=1.351, T_TVD_FW_GRAPHIC_ID1=0.01,
URIBL_GREY=0.25, URIBL_OB_SURBL=1.5, URIBL_PH_SURBL=1.787,
URIBL_RED=0.001, URIBL_WS_SURBL=1.5]
Received: from servidorweb.uniblock.com.pe ([127.0.0.1])
by localhost (servidorweb.uniblock.com.pe [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id Mgo-uOUOWKnW; Mon, 7 Sep 2009 08:12:45 -0500 (PET)
Received: from PCDELIVERY (unknown [190.40.160.151])
by servidorweb.uniblock.com.pe (Postfix) with ESMTP id B3324894303;
Mon, 7 Sep 2009 08:12:42 -0500 (PET)
Message-ID: <000e01ca2fbc$e0bb5150$0501a8c0@PCDELIVERY>
From: <klookung@3a.com.pe>
To: <mario1795@hotmail.com>,
"Ing. Rafael Huamanchumo" <rafaelh@uniblock.com.pe>,
<rafaelh@3a.com.pe>
Subject: VENTAS PIURA 05/09/09
Date: Mon, 7 Sep 2009 08:12:26 -0500
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_0008_01CA2F92.EF91F050"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01CA2F92.EF91F050
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0009_01CA2F92.EF91F050"


------=_NextPart_001_0009_01CA2F92.EF91F050
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

[raj]

your header have these scores
AWL=-3.276,
BAYES_00=-2.599,
EXTRA_MPART_TYPE=1,
HTML_MESSAGE=0.001,
PART_CID_STOCK=1.635,
PART_CID_STOCK_LESS=0.384,
RCVD_IN_PBL=0.905,
RDNS_NONE=0.1,
SHORT_HELO_AND_INLINE_IMAGE=0.781,
SUBJ_ALL_CAPS=2.077,
TVD_RCVD_SINGLE=1.351,
T_TVD_FW_GRAPHIC_ID1=0.01,
URIBL_GREY=0.25,
URIBL_OB_SURBL=1.5,
URIBL_PH_SURBL=1.787,
URIBL_RED=0.001,
URIBL_WS_SURBL=1.5


SUBJ_ALL_CAPS=2.077
Rules/SUBJ ALL CAPS - Spamassassin Wiki

TVD_RCVD_SINGLE=1.351
Rules/TVD RCVD SINGLE - Spamassassin Wiki

URIBL_OB_SURBL=1.5
Rules/URIBL OB SURBL - Spamassassin Wiki

URIBL_WS_SURBL=1.5
Rules/URIBL WS SURBL - Spamassassin Wiki

you should fix the ones mentione in the links to bring the score down
looks like you have LINKS in your email which exist in all the black lists

Raj

[phl4kx]

what file I have to modified for down the score? some manual please