Spamcop is forwarding black list mail

[a1ahost]

Hi,

I have used Spamcop for years for reporting only. In the past two months I started using it for actual email filtering where Spamcop POPs my Server.

For some reason Spamcop continues to forward mail that is:in my blacklist,has a SpamAssasin score of over 100. All mail with a return of Xxx and from sympatico.ca is forwarded on to me. The email account being POP'ed is in the mailhost list. I am at a loss about this. Any help is appreciated.

Here is the typical part of the header that I get after Spamcop send me the email:

Spamcop is forwarding black list mail:

From: "Xxx" <courtneyceding[at]sympatico.ca>

Date: Thu, 06 May 2004 21:55:02 +0100

To: Me "spam cop user"

Subject: your place or mine? leaked promulgate.

Content-Transfer-Encoding: 8bit

Content-Type: text/plain; charset=iso-8859-1

X-SpamCop-Checked: 192.168.1.105 216.154.195.36 192.168.1.101

209.197.88.243 212.41.229.97

X-spam-Filtered: 3fef47d6ac858981bc325c39dd17d997

X-spam-Status: Yes, hits=100.0 required=3.5 tests=USER_IN_BLACKLIST

X-spam-Flag: YES

X-spam-Level:

****************************************************************************

************************

X-spam-Report: 100.0 hits, 3.5 required; * 100 -- From: address is in the

user's black-list

[StevenUnderwood]

What exactly does the blacklist entry look like?

There have been reported problems about whitelist entries not matching because they are stored in upper or mixed case. They should all be in lower case as the parer converts the case of the incoming and matches that. You can try re-entering it.

Also, make sure that if you are blacklisting the entire sympatico.ca domain that the entry does not contain the [at] sign.

Here is a sample of a message trapped by the blacklist:

X-spam-Checker-Version:  SpamAssassin 2.63 (2004-01-11) on blade6

X-spam-Level:

X-spam-Status:  hits=0.9 tests=HTML_70_80,HTML_FONTCOLOR_GREEN, HTML_FONTCOLOR_UNSAFE,HTML_MESSAGE,LINES_OF_YELLING, LINES_OF_YELLING_2,MIME_BOUND_NEXTPART,TO_ADDRESS_EQ_REAL, UPPERCASE_25_50 version=2.63

X-SpamCop-Checked:  192.168.1.101 69.56.175.229 65.118.155.130

X-SpamCop-Disposition:  Blacklist sonesta.com 

All of the headers you have provided are for the spamassasin portion of the analysis. There should also be some X-SpamCop-* headers.