Haha - Scott - you know me better than trying a quick fix <G>. Here is the header. You'll notice - the mail came from the 10.x.x.x private address block. So THAT one should not count at all - it's their local LAN.
>From there it went to their virus firewall at 194.127.224.201, which is a European Address Block - which happens to be EXACTLY where the sending domain "mainova.de" is located (last time I checked my American globe). So... why does SPAMROUTING fail? Received: from viruswall1 [194.127.224.201] by hm-software.com (SMTPD32-7.04) id AED6427009E; Mon, 17 Dec 2001 09:19:02 -0500 Received: from 10.129.1.101 by viruswall1 (InterScan E-Mail VirusWall NT); Mon, 17 Dec 2001 15:20:40 +0100 To: Wolfgang Pissareck <[EMAIL PROTECTED]> Subject: SPAM: [See Headers] Ihr Konfigurationscode =?iso-8859-1?Q?f=FCr_MF=2FES_?= Message-ID: <[EMAIL PROTECTED]> From: [EMAIL PROTECTED] Date: Mon, 17 Dec 2001 15:18:20 +0100 X-MIMETrack: Serialize by Router on D2HUB01P/SRV/MAINOVA/DE(Release 5.0.9 |November 16, 2001) at 17.12.2001 15:18:19 MIME-Version: 1.0 Content-type: text/plain; charset=iso-8859-1 Content-transfer-encoding: quoted-printable X-RBL-WARNING: Suspected SPAM. This E-mail was routed in a poor manner consistent with spam [20000103]. X-Declude-Sender: [EMAIL PROTECTED] [194.127.224.201] X-Declude-Spoolname: Dfed609e.SMD X-Declude-Note: Processed by Declude 1.30; remote host [No Reverse DNS] X-RCPT-TO: <[EMAIL PROTECTED]> Status: U X-UIDL: 601 Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax: +1 201 934-9206 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Monday, December 17, 2001 12:42 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] http://www.declude.com/tools/header.php broken Importance: Low >Code: 20000103. The E-mail (code 20000103) didn't fail either the BADHEADERS >or SPAMHEADERS tests. > >yet: >X-RBL-WARNING: Suspected SPAM. This E-mail was routed in a poor manner >consistent with spam [20000103]. It didn't fail either the BADHEADERS or SPAMHEADERS tests -- it was the SPAMROUTING test. The web page has been updated to accept the code for the SPAMROUTING test. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
