High SPAM score for outgoing emails

[ovizii]

I have a few threads around the same topic: using EFA for outgoing emails.
Incoming scoring is fine but outgoing is weird.

one example:
Received via:

IP Address
192.168.200.3
84.151.255.210

so basically a user of ours using dialup, sent an email via our Exchange server to a 3rd party and got this score:

Code: Select all

Spamassassin Score:	9.67
Spam Report:	
Score	Matching Rule	Description
0.25	BOTNET	Relay might be a spambot or virusbot
0.85	BOTNET_NORDNS	Relay's IP address has no PTR record
2.75	C_RBL_PSKY_BAD	Listed in psky.me - Bad
0.30	C_RFC_WHOIS	Domain with imprecise whois Info
-0.10	DKIM_SIGNED	Message has a DKIM or DK signature, not necessarily valid
-0.20	DKIM_VALID	Message has at least one valid DKIM or DK signature
-0.25	DKIM_VALID_AU	Message has a valid DKIM or DK signature from author's domain
-0.50	HTML_MESSAGE	HTML included in message
0.50	JMQ_SPF_NEUTRAL_ALL	SPF set to ?all!
3.56	RCVD_IN_PBL	Received via a relay in Spamhaus PBL
3.00	R_SB_FR_BLACK	SenderBase BLACK List
0.55	R_SB_FR_N08	SenderBase Reputation is -8
-1.05	TXREP	Score normalizing based on sender's reputation
0.01	T_SPF_HELO_TEMPERROR	SPF: test of HELO record failed (temperror)

my ex's IP is in my internal_networks trusted_networks. Does it need to be in msa_networks too? Does anyone else see these high scores for outgoign emails from users connected via dialup? Its the same problem for users using OWA too.

[ovizii]

I have solved this for now by editing: /etc/MailScanner/rules/scan.messages.rules

and inserting:
From: 192.168.200.3 virus
so that outgoing emails from my Exchange server are only scanned for viruses not SPAM.