maybe it scores bitmask results and 127.0.0.4 response is not tagged?

-Nick

MadRiverAccess.com|Skywaves.com Tech Support
US/Canada 877-873-6482 or International +1-802-229-6574
Emergency Support 24/7: supp...@skywaves.net
General and Non-Emergency support ticket:
https://www.skywaves.com/content/secure/support_ticket.htm




----------------------------------------

From: "Imail Admin" <imailad...@bcwebhost.net>
Sent: Tuesday, April 05, 2011 8:36 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] How do you read the Inv-Uribl log file?


So I'm still looking at ways to make Inv-Uribl more
effective.  I'm getting a lot of spam that gets through my system with
relatively marginal score so I'm looking at the Inv-Uribl log.  Here are
the lines for a message that I would consider to be obviously spam, yet
came
through Inv-Uribl as "Clean":

2011-03-31 02:53:09.343 2011-03-31 02:53:12.484
D:\IMail\spool\proc\work\D5d0b028c0000100f.smd netcontentinc.com 127.0.0.4
URI
from message body found in multi.uribl.com [4] [Total Weight=0]
2011-03-31
02:53:09.343 2011-03-31 02:53:12.953
D:\IMail\spool\proc\work\D5d0b028c0000100f.smd Resolved netcontentinc.com
to
207.65.119.238 [Total Weight=0]
2011-03-31 02:53:09.343 2011-03-31
02:53:12.953 D:\IMail\spool\proc\work\D5d0b028c0000100f.smd Resolved
avantresources.com to 216.139.251.42 [Total Weight=0]
2011-03-31 02:53:09.343
2011-03-31 02:53:12.953 D:\IMail\spool\proc\work\D5d0b028c0000100f.smd
Resolved
bcwebhost.net to 173.164.65.196 [Total Weight=0]

Did I miss something here that should have
triggered a score (additional spam weight in Declude)?

Thanks,

Ben


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to