Sorry, I should have posted the complete header for you to see. Notice the
x-declude-sender entry in the header is a subdomain of my entry in the
blacklist file.
Received: from mecca.psr.edu ([209.76.204.2]) by chirala.psr.edu with SMTP
(Microsoft Exchange Internet Mail Service Version 5.5.2653.13)
id L6DA4K12; Mon, 23 Jun 2003 14:58:09 -0700
Received: from mail9.checkyourinbox.com [146.82.96.211] by mecca.psr.edu
(SMTPD32-7.07) id A8FD8CD60122; Mon, 23 Jun 2003 15:02:37 -0700
From: "Jennifer Gayo" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Body & Soul, Yoga Mat, Stretching Strap, Yoga CD-ROM and MORE!
Date: Sun, 22 Jun 2003 15:20:41 -0600
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="==-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=="
List-Unsubscribe:
<mailto:[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Message-Id: <[EMAIL PROTECTED]>
X-Alligate-In: FAILED - Score Adult: 5 (Req: 17) Spam: 45 (Req: 22) Tot: 50
(Req: 26)
X-Alligate-Tracking: EA23B7FE03902B88
X-Alligate-Signature: 939055304
X-Alligate-SpoolFile: D78fd8cd60122896e.SMD
X-Alligate-Sender: [EMAIL PROTECTED]
[146.82.96.211]
x-PSR-warning: WEIGHT18
X-Declude-Sender: [EMAIL PROTECTED]
[146.82.96.211]
X-Spam-Tests-Failed-Out: SPAMCOP, SPAMHEADERS, ALLIGATE, WEIGHT17, WEIGHT18,
NOLEGITCONTENT
X-Note-Out: The total spam weight is 22
Thanks for the help
Jeffrey Di Gregorio
Systems Administrator
Pacific School of Religion
-----Original Message-----
From: R. Scott Perry [mailto:[EMAIL PROTECTED]
Sent: Monday, June 23, 2003 3:44 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] messages getting through the blacklist from
file from file
>Can anyone clarify why this message would get past the blacklist file I
>have set-up. The test is working fine most of the time, only once in a
>while one seems to sneak through.
>
>The entry in the fromfile is:
>.checkyourinbox.com
(from the manual):
---
Blacklisting is not working
The "fromfile" type of blacklisting checks the domain name or E-mail
address that is in the "return address" (where bounce messages go; this is
also the "MAIL FROM" in the SMTP envelope). This may be different than the
"From:" or "Reply-To:" headers in the E-mail. If you use the "XSENDER ON"
option, this address will appear in the X-Declude-Sender: header of the
E-mail. Otherwise, you will need to look at the "MAIL FROM" line in the
IMail SMTP log file to find this address.
---
So if you look at the X-Declude-Sender: header or the "MAIL FROM:" line in
the IMail SMTP log file, you'll find the address that Declude JunkMail is
using for the blacklist.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
