messages going to spam

I have 2 accounts in google apps
zzzz.net and zzzz.org
the one with the .org ending is a premium account and has postini
support.
Every single .org account has an identical .net account that is
forwarded to the .org account (but there are .net accounts that are
not forwarded).
I have placed both my zzzz.org and my zzzz.net accounts on the postini
Approved Senders list.
I have also added spf txt records for both domains....
and yet some email sent from a user in the zzzz.net domain (hosted by
google apps) that is forwarded from the .net domain to the zzzz.org
domain (hosted by google apps with postini) goes to spam.....why? what
else can I do to stop that from happening? the text isnt even spammy!

I am including the header as seen in the postini archive.
thanks,
-ggkk

------------------------
Envelope From: [email protected]
Envelope To: [email protected]
Authentication-Results: mx.google.com; spf=pass (google.com: domain of
[email protected] designates 209.85.198.231 as permitted sender)
smtp.mail=[email protected]
Content-Type: multipart/alternative;
boundary=0016364587282b909504618eb2c3
Date: Wed, 28 Jan 2009 09:56:49 -0800
From: maritza
MIME-Version: 1.0
Message-ID:
Received: from source ([74.125.46.162]) by exprod7mx242.postini.com
([64.18.6.14]) with SMTP; Wed, 28 Jan 2009 09:56:52 PST
Received: by yw-out-1516.google.com with SMTP id 7sf6616090ywc.19
for ; Wed, 28 Jan 2009 09:56:50 -0800 (PST)
Received: by 10.151.45.6 with SMTP id x6mr9353151ybj.12.1233165410530;
Wed, 28 Jan 2009 09:56:50 -0800 (PST)
Received: by 10.215.41.13 with SMTP id t13ls4971007qaj.1; Wed, 28 Jan
2009 09:56:50 -0800 (PST)
Received: by 10.142.230.7 with SMTP id c7mr2393537wfh.
45.1233165410037; Wed, 28 Jan 2009 09:56:50 -0800 (PST)
Received: by 10.142.230.7 with SMTP id c7mr2393536wfh.
45.1233165410002; Wed, 28 Jan 2009 09:56:50 -0800 (PST)
Received: from rv-out-0506.google.com (rv-out-0506.google.com
[209.85.198.231]) by mx.google.com with ESMTP id 32si2773812wfc.
30.2009.01.28.09.56.49; Wed, 28 Jan 2009 09:56:49 -0800 (PST)
Received: by rv-out-0506.google.com with SMTP id f6so7556451rvb.5
for ; Wed, 28 Jan 2009 09:56:49 -0800 (PST)
Received: by 10.114.94.12 with SMTP id r12mr4214637wab.
156.1233165409291; Wed, 28 Jan 2009 09:56:49 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates
209.85.198.231 as permitted sender) client-ip=209.85.198.231;
Return-Path:
To: [email protected], [email protected], [email protected], [email protected],
[email protected], [email protected], [email protected], [email protected],
[email protected], [email protected], [email protected], [email protected],
[email protected], [email protected], [email protected], [email protected],
[email protected], [email protected], [email protected], [email protected],
[email protected], [email protected], [email protected], [email protected],
[email protected], [email protected], [email protected]
X-Google-Expanded: [email protected]
--------------------------------

If this email was in Postini's quarantine, where are the Postini
headers as shown in the example below? While having an SPF record is
good, SPF is not used for spam filtering, other that verifying by the
SPF record where email should come from.

Example:
X-pstn-levels: (S:65.73936/99.90000 CV:99.9000 R:95.9108 P:95.9108
M:57.5037 C:99.7951 )
X-pstn-settings: 4 (1.5000:3.0000) s cv gt3 gt2 gt1 r p M c


FrankM
> Envelope From:  [email protected]
> Envelope To: [email protected]
> [email protected] designates 209.85.198.231 as permitted sender)
> smtp.mail=[email protected]
> Received-SPF: pass (google.com: domain of [email protected] designates
> To: [email protected], [email protected], [email protected], [email protected],
> [email protected], [email protected], [email protected], [email protected],
> [email protected], [email protected], [email protected], [email protected],
> [email protected], [email protected], [email protected], [email protected],
> [email protected], [email protected], [email protected], [email protected],
> [email protected], [email protected], [email protected], [email protected],
> [email protected], [email protected], [email protected]
> X-Google-Expanded: [email protected]
> --------------------------------

here you go...this is in the email once delivered but was not in the
header using the postini archive interface

----------------------------
X-Pstn-Levels: (S:40.19597/99.90000 CV:99.9000 R:95.9108 P:95.9108 M:
97.0282 C:98.6951 )
X-Cm: ricardor_in
X-Pstn-Settings: 2 (0.5000:0.5000) s cv gt3 gt2 gt1 r p m c
----------------------------
thanks again.

On Jan 29, 7:13 am, FrankM - Power Poster <[email protected]>
wrote:

I'm confused as to what the issue now is. I'm guessing that there may
be an alias configuration problem.
> > > --------------------------------- Hide quoted text -
>
> - Show quoted text -

can you expand on that please? what is an alias configuration problem?
Just guide me so I know where to look.
thanks again.

On Jan 30, 2:03 am, FrankM - Power Poster <[email protected]>

here is the postini section of another message that was sent to spam

X-pstn-neptune: 0/0/0.00/0
X-pstn-levels: (S:97.32182/99.90000 CV:99.9000 R:95.9108 P:95.9108
X-pstn-settings: 2 (0.5000:0.5000) s cv gt3 gt2 gt1 r p m c
X-pstn-addresses: from <[email protected]> forward (org good) [db-
null]

again...nothing in the email is spammy. Yet according to this

These letters and numbers can be interpreted as follows.
C Commercial Offer : 0 (least spammish) to 100 (most spammish)
M Make Money Fast : 0 (least spammish) to 100 (most spammish)
P Pornographic : 0 (least spammish) to 100 (most spammish)
R Racially Insensitive : 0 (least spammish) to 100 (most spammish)
S Overall Score : Probability that the message is NOT spam
100 (not spammish) to 0 (very spammish)

(i found this on the following site
http://home.visi.com/support/services/email/postini.html#headers )

this is a very spammy message....am i reading it wrong?

thanks.

If you have the Spam null sender rule set to quarantine and if the
sender envelope is null (empty), that is processed before approved
senders and goes to quarantine.


FrankM
> X-pstn-addresses: from <[email protected]> forward (org good) [db-
> > > > - Show quoted text -- Hide quoted text -