Michael, Thank you for the pointer and inded the Declude info was at the end of the message source:
Subject: SPAM-VHIGH X-Declude-Sender: [EMAIL PROTECTED] [71.110.9.118] X-Declude-Spoolname: Dce4a03570000a8e2.smd X-Note: This E-mail was scanned by Declude JunkMail for evidence of spam. X-Note: This E-mail was scanned by F-Prot for viruses. X-Note: For further information visit http://www.wisshost.com X-Note: SPAM tests failed:[SORBS-DUHL, SPAMCOP, SPAMHAUS-XBL, MXRATE-BLOCK, HELOBOGUS, SNIFFER-NOTFOUND, SPECIALLIST, SPAM-VHIGH] X-Spam-Weight: 61. X-Note: This E-mail was sent from pool-71-110-9-118.lsanca.dsl-w.verizon.net ([71.110.9.118]). X-Note: Remote host: englishforum.biz X-Note: Sender host: englishforum.biz X-Note: Queue file: Dce4a03570000a8e2.smd However, Declude is set to delete on SPAM-VHIGH but no action was taken, which is obviously an issue. David -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Thomas - Mathbox Sent: 25 April 2006 08:25 To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Emails not be scanned by Declude Hi, You might want to look at the entire typical file, in Notepad or Dump it contents as hex values. I have noticed a similar percentage of spam that has no carriage returns. Which means that the Declude headers get added to the end of the file, rather than after the headers. If you also happen to run invURIBL, you will note that the currently available version does not parse the message, apparently because at most there is only one "line" in the message. Don't know if this is your issue, but thought I would point it out as a possiblity. If that is the case, it was fairly simple to write a test for it. Mike . ----- Original Message ----- From: "David Lewis-Waller" <[EMAIL PROTECTED]> To: <Declude.JunkMail@declude.com> Sent: Tuesday, April 25, 2006 2:11 AM Subject: [Declude.JunkMail] Emails not be scanned by Declude > We are noticing a large amount of email, approx 20-30%, are not being > processed by Declude. > > Here is a typical header: > > Received: from friend [68.57.43.190] by mail.nthost.co.uk with ESMTP > (SMTPD-8.20) id A5DA0830; Tue, 25 Apr 2006 06:38:34 +0100 > Message-ID: <[EMAIL PROTECTED]> > From: "Henry" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Subject: All love enhancers on one portal! > Date: Tue, 25 Apr 2006 01:36:00 +0100 > MIME-Version: 1.0 > Content-Type: multipart/related; > type="multipart/alternative"; > boundary="------------ms020304020609000206080301" > X-Priority: 3 > X-MSMail-Priority: Normal > X-Mailer: Microsoft Outlook Express 6.00.2900.2180 > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 > > > Does any one have any idea why Declude is not processing these. > > David > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
