Even when I manually set off one of the tests, the same thing happens. Example sent to alias:
/* Received: from web12103.mail.yahoo.com [216.136.172.23] by mail.4state.com (SMTPD32-6.06) id ABF8275B013A; Thu, 18 Oct 2001 18:55:36 -0500 Message-ID: <[EMAIL PROTECTED]> Received: from [208.167.166.9] by web12103.mail.yahoo.com via HTTP; Thu, 18 Oct 2001 16:55:56 PDT Date: Thu, 18 Oct 2001 16:55:56 -0700 (PDT) From: Aaron Mayfield <[EMAIL PROTECTED]> Subject: test To: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-RBL-Warning: Requested by rsp set off. X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-RCPT-TO: <[EMAIL PROTECTED]> X-UIDL: 299302017 Status: U */ Example sent to actual account: /* Received: from web12107.mail.yahoo.com [216.136.172.27] by mail.4state.com (SMTPD32-6.06) id ABF22758013A; Thu, 18 Oct 2001 18:55:30 -0500 Message-ID: <[EMAIL PROTECTED]> Received: from [208.167.166.9] by web12107.mail.yahoo.com via HTTP; Thu, 18 Oct 2001 16:55:50 PDT Date: Thu, 18 Oct 2001 16:55:50 -0700 (PDT) From: Aaron Mayfield <[EMAIL PROTECTED]> Subject: test To: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-RBL-Warning:NETADV-JUNKMAIL-ALERT-ORDB X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-RCPT-TO: <[EMAIL PROTECTED]> X-UIDL: 299302016 Status: U */ -----Original Message----- From: Aaron Mayfield [mailto:[EMAIL PROTECTED]] Sent: Monday, October 15, 2001 6:55 PM To: [EMAIL PROTECTED] Subject: Question about JunkMail filtering and aliases I am fine-tuning my declude junkmail setup and am running into an interesting problem. Are there any known problems with junkmail filtering for aliases? Here is why I ask. I am filtering with Junkmail by adding customized headers to the messages here is a snip of my $default$.junkmail file /* ORBL WARN X-RBL-Warning:NETADV-JUNKMAIL-ALERT-ORBL ORBZINPUTS WARN X-RBL-Warning:NETADV-JUNKMAIL-ALERT-ORBZINPUTS ORBZOUTPUTS WARN X-RBL-Warning:NETADV-JUNKMAIL-ALERT-ORBZOUTPUTS ORBZPOST WARN X-RBL-Warning:NETADV-JUNKMAIL-ALERT-ORBZPOST ORDB WARN X-RBL-Warning:NETADV-JUNKMAIL-ALERT-ORDB */ and the corresponding GLOBAL.CFG /* ORBL ip4r or.orbl.org 127.0.0.2 ORBZINPUTS ip4r orbz.gst-group.co.uk 127.0.0.3 ORBZOUTPUTS ip4r orbz.gst-group.co.uk 127.0.0.2 ORBZPOST ip4r orbz.gst-group.co.uk 127.0.0.9 ORDB ip4r relays.ordb.org * */ If a messages comes into my admin box that fails the ORDB test, Junkmail adds the proper headers. ex: /* Subject: Over 30 Million Business Records on 2 CDs set for $69.00 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2417.2000 Date: Sun, 14 Oct 2001 20:59:18 +0300 Mime-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-2" Return-Path: [EMAIL PROTECTED] Message-ID: <[EMAIL PROTECTED]> X-RBL-Warning:NETADV-JUNKMAIL-ALERT-ORDB X-RBL-Warning:NETADV-JUNKMAIL-ALERT-MAILFROM X-RBL-Warning:NETADV-JUNKMAIL-ALERT-BADHEADERS X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-RCPT-TO: <[EMAIL PROTECTED]> X-UIDL: 299301538 Status: U */ However, if a message comes into [EMAIL PROTECTED] (which is an alias of my admin account) it doesn't put the customized header on, but the normal WARN header. ex: /* X-MSMail-Priority: Normal Reply-To: [EMAIL PROTECTED] Message-Id: <[EMAIL PROTECTED]> X-RBL-Warning: This E-mail came from 209.209.57.74, a potential spam source. X-RBL-Warning: Blackholed by ORDB -- see http://ordb.org/lookup/?host=209.209.57.74 X-RBL-Warning: poor headers [40004202] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-RCPT-TO: <[EMAIL PROTECTED]> X-UIDL: 299301614 Status: U */ I am running ver 1.26a. There are no per-user configs for these accounts. Am I crazy or am I doing something wrong? Any ideas on what to look at? Thanks --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
