>> The easiest way to debug this would be to send an E-mail from the IP address in question, with the Declude debugging turned on. <<
Here it is - as you can see, it DOES recognize the whitelist: 11/06/2001 18:27:57 Q71fb3de Testing whitelist 2 63.107.174. 11/06/2001 18:27:57 Q71fb3de Skipping E-mail from IP 63.107.174.1; whitelisted. Yet it somehow doesn't consider that fact. 11/06/2001 18:27:55 CFG: Setting LOG_OK level to NONE 11/06/2001 18:27:55 CFG: Set hop to 0 and hophigh to 0. 11/06/2001 18:27:55 Console turned OFF 11/06/2001 18:27:55 CFG: Setting XINHEADER to X-Declude-Note: Processed by Declude %VERSION%; remote host %REVDNS%. 11/06/2001 18:27:55 CFG: Setting XOUTHEADER to X-Note: Report any abuse to [EMAIL PROTECTED] 11/06/2001 18:27:55 CFG: Bypassing IP 63.107.174.32. 11/06/2001 18:27:55 CFG: Setting XSENDER to ON 11/06/2001 18:27:55 CFG: Setting XSPOOLNAME to ON 11/06/2001 18:27:55 CFG: Whitelisting ANYWHERE [EMAIL PROTECTED] 11/06/2001 18:27:55 CFG: Whitelisting IP 63.107.174.. 11/06/2001 18:27:55 CFG: Whitelisting FROM hm-software.com. 11/06/2001 18:27:55 CFG: Whitelisting IP 128.192.1.101. 11/06/2001 18:27:55 CFG: Whitelisting IP 130.160.4.249. 11/06/2001 18:27:55 CFG: Whitelisting IP 199.232.158.102. 11/06/2001 18:27:55 CFG: Whitelisting FROM nytimes.com. 11/06/2001 18:27:55 CFG: Whitelisting IP 148.100.1.2. 11/06/2001 18:27:55 CFG: Whitelisting IP 64.65.65.2. 11/06/2001 18:27:55 CFG: Whitelisting FROM lists.cnn.com. 11/06/2001 18:27:55 CFG: Whitelisting FROM timeinc.com. 11/06/2001 18:27:55 CFG: Whitelisting FROM uni.de. 11/06/2001 18:27:55 CFG: Whitelisting IP 206.242.213.5. 11/06/2001 18:27:55 CFG: Whitelisting FROM stellenmarkt.de. 11/06/2001 18:27:55 Declude v1.28 11/06/2001 18:27:55 Setting HOLD directory to: D:\IMAIL\spool\spam. 11/06/2001 18:27:55 Q71fb3de Setting DNS server to IMail's 63.107.174.65. 11/06/2001 18:27:55 Q71fb3de Declude JunkMail Standard Version Registered 11/06/2001 18:27:55 Q71fb3de Start 11/06/2001 18:27:55 Q71fb3de Locking D:\IMAIL\spool\Q71fb3de.SMD. 11/06/2001 18:27:55 Q71fb3de D:\IMAIL\spool\Q71fb3de.SMD locked. 11/06/2001 18:27:55 Q71fb3de Getting message envelope 11/06/2001 18:27:55 Q71fb3de Starting locality check 11/06/2001 18:27:55 Q71fb3de CL Opening HKEY_LOCAL_MACHINE\software\Ipswitch\IMail\Domains 11/06/2001 18:27:55 Q71fb3de [EMAIL PROTECTED] [1] is local domain1 11/06/2001 18:27:55 Q71fb3de [EMAIL PROTECTED] [0] is local domain2 11/06/2001 18:27:55 Q71fb3de [EMAIL PROTECTED] [1] is local main domain 11/06/2001 18:27:55 Q71fb3de Done getting message envelope 11/06/2001 18:27:55 Q71fb3de Getting headers 11/06/2001 18:27:55 Q71fb3de Mid-headers 11/06/2001 18:27:55 Q71fb3de Done getting headers 11/06/2001 18:27:55 Q71fb3de Done getting envelope and headers 11/06/2001 18:27:57 Q71fb3de Ver=20 verflag=0 11/06/2001 18:27:57 Q71fb3de About to run spam tests 11/06/2001 18:27:57 Q71fb3de Going through datafile 11/06/2001 18:27:57 Q71fb3de Starting header check of 11/06/2001 18:27:57 Q71fb3de Starting header check of Received: from maywo 11/06/2001 18:27:57 Q71fb3de 63.107.174.1] by mail.webhost.hm-software.com with ESMTP (SMTPD32-7.04) id A1FB3CD03DE; Tue, 06 Nov 2001 18:27:55 -0500 11/06/2001 18:27:57 Q71fb3de Handling Received: header 11/06/2001 18:27:57 Q71fb3de Setting remote IP address to 63.107.174.1 11/06/2001 18:27:57 Q71fb3de 1.174.107.63.in-addr.arpa 11/06/2001 18:27:57 Q71fb3de Got it: maywood-is-0001.webhost.hm-software.com.. 11/06/2001 18:27:57 Q71fb3de Hop 0: Checking IP Address 63.107.174.1. 11/06/2001 18:27:57 Q71fb3de Waiting for results 11/06/2001 18:27:57 Q71fb3de Starting header check of Received: from local 11/06/2001 18:27:57 Q71fb3de 127.0.0.1]) by maywood-is-0001.webhost.hm-software.com with Microsoft SMTPSVC(5.5.1877.197.19); Tue, 6 Nov 2001 17:34:54 -0500 11/06/2001 18:27:57 Q71fb3de Handling Received: header 11/06/2001 18:27:57 Q71fb3de Skipping received line (hop 1) 11/06/2001 18:27:57 Q71fb3de Starting header check of To: Info@HotelAzenbe 11/06/2001 18:27:57 Q71fb3de Starting header check of From: test@hotelazte 11/06/2001 18:27:57 Q71fb3de Starting header check of X-Mailer: Perl Sendm 11/06/2001 18:27:57 Q71fb3de Starting header check of X-URL: http://www.ho 11/06/2001 18:27:57 Q71fb3de Starting header check of Subject: Anfrage 11/06/2001 18:27:57 Q71fb3de Starting header check of Return-Path: test@ho 11/06/2001 18:27:57 Q71fb3de Starting header check of Message-ID: <0036f54 11/06/2001 18:27:57 Q71fb3de Last line of headers: Date: 6 Nov 2001 17:34:54 -050 11/06/2001 18:27:57 Q71fb3de Starting header check of Date: 6 Nov 2001 17: 11/06/2001 18:27:57 Q71fb3de TEST: 10 heur=0.000014 t[]domain=10 11/06/2001 18:27:57 Q71fb3de TEST: 9 heur=0.000014 t[]domain=9 11/06/2001 18:27:57 Q71fb3de TEST: 8 heur=0.000014 t[]domain=8 11/06/2001 18:27:57 Q71fb3de TEST: 9 heur=0.000014 t[]domain= 11/06/2001 18:27:57 Q71fb3de . Total weight = 0 11/06/2001 18:27:57 Q71fb3de Testing whitelist 3 [EMAIL PROTECTED] 11/06/2001 18:27:57 Q71fb3de Testing whitelist 2 63.107.174. 11/06/2001 18:27:57 Q71fb3de Skipping E-mail from IP 63.107.174.1; whitelisted. 11/06/2001 18:27:57 Q71fb3de Testing whitelist 1 hm-software.com 11/06/2001 18:27:57 Q71fb3de Testing whitelist 2 128.192.1.101 11/06/2001 18:27:57 Q71fb3de IP 63.107.174.1 not in whitelist (128.192.1.101) 11/06/2001 18:27:57 Q71fb3de Testing whitelist 2 130.160.4.249 11/06/2001 18:27:57 Q71fb3de IP 63.107.174.1 not in whitelist (130.160.4.249) 11/06/2001 18:27:57 Q71fb3de Testing whitelist 2 199.232.158.102 11/06/2001 18:27:57 Q71fb3de IP 63.107.174.1 not in whitelist (199.232.158.102) 11/06/2001 18:27:57 Q71fb3de Testing whitelist 1 nytimes.com 11/06/2001 18:27:57 Q71fb3de Testing whitelist 2 148.100.1.2 11/06/2001 18:27:57 Q71fb3de IP 63.107.174.1 not in whitelist (148.100.1.2) 11/06/2001 18:27:57 Q71fb3de Testing whitelist 2 64.65.65.2 11/06/2001 18:27:57 Q71fb3de IP 63.107.174.1 not in whitelist (64.65.65.2) 11/06/2001 18:27:57 Q71fb3de Testing whitelist 1 lists.cnn.com 11/06/2001 18:27:57 Q71fb3de Testing whitelist 1 timeinc.com 11/06/2001 18:27:57 Q71fb3de Testing whitelist 1 uni.de 11/06/2001 18:27:57 Q71fb3de Testing whitelist 2 206.242.213.5 11/06/2001 18:27:57 Q71fb3de IP 63.107.174.1 not in whitelist (206.242.213.5) 11/06/2001 18:27:57 Q71fb3de Testing whitelist 1 stellenmarkt.de 11/06/2001 18:27:57 Q71fb3de Looping... 11/06/2001 18:27:57 Q71fb3de S<[EMAIL PROTECTED]> 11/06/2001 18:27:57 Q71fb3de Looking up MX/A record for hotelaztenbasdf.com at 63.107.174.65. 11/06/2001 18:27:57 Q71fb3de Msg failed MX; testing A (hotelaztenbasdf.com) [0 1 3 ] 11/06/2001 18:27:57 Q71fb3de There were no MX/A records [%d %d %d %d]. 11/06/2001 18:27:57 Q71fb3de DNS Report: [ex=0 rcode=3 ancnt=0 suc=1]. 11/06/2001 18:27:57 Q71fb3de Done with MX/A record 11/06/2001 18:27:57 Q71fb3de Opening HKEY_LOCAL_MACHINE\software\Ipswitch\IMail\Domains 11/06/2001 18:27:57 Q71fb3de Domain name = design.weblobby.com, User name = Info. 11/06/2001 18:27:57 Q71fb3de Using CFG file D:\IMAIL\Declude\$default$.junkmail. 11/06/2001 18:27:57 Q71fb3de ...............X........... 11/06/2001 18:27:57 Q71fb3de Test #15 [MAILFROM weight=0] triggered; action = 10 11/06/2001 18:27:57 Q71fb3de Msg failed MAILFROM (Domain hotelaztenbasdf.com has no MX/A records.). 11/06/2001 18:27:57 Q71fb3de X-Declude-Note: Processed by Declude 1.28; remote host maywood-is-0001.webhost.hm-software.com. 11/06/2001 18:27:57 Q71fb3de AlterMessage 11/06/2001 18:27:57 Q71fb3de Subject: Anfrage 11/06/2001 18:27:57 Q71fb3de From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 11/06/2001 18:27:57 Q71fb3de Looping... 11/06/2001 18:27:57 Q71fb3de Done Looping 11/06/2001 18:27:57 Q71fb3de Final action=10. 11/06/2001 18:27:57 Q71fb3de Unlocked D:\IMAIL\spool\Q71fb3de.SMD. 11/06/2001 18:27:57 Q71fb3de Moving file to spam hold directory 11/06/2001 18:27:57 Q71fb3de Total Time: 1844ms --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .