On Feb 28, 2016, at 3:34 PM, surgemail-support <surgemailHIDDEN@t@netwinsite.com> wrote:

Send me (surgemail-support@netwinsite.com) the headers of an example message.
and the output of
 tellmail status
and
  tellmail spam_settings user@xyz.com

and try this command'

tellmail sf_train

that sometimes brings it to life.

ChrisP

On 29/02/2016 4:50 a.m., plear wrote:

Yesterday I did two things: 

1) registered for emailreg.org (& enabled feature in surgemail)

2) switched my active server from the Master to the Slave.

Since yesterday, one of my users is getting deluged with spam emails.  Review of the headers in the emails shows the that the senders are all found in the spamhaus database.  None of the spam emails show a subject line with the addition of the word SPAM with the appropriate number of stars.  They all come in as bona fide emails.  

Either emailreg.org is compromised or something is not being mirrored properly.  Any ideas?

Thanks,

Patrick

plear

plear@aquawest.net