In case you need more - weight is 14 - but WEIGHT10 does NOT fail message!
I still believe it has something to do with the fact, that the final recipient is an forwarding alias to an external domain. The first example was forwarded to @aol.com this one to @fcc.net! 11/06/2001 19:52:59 CFG: Setting LOG_OK level to NONE 11/06/2001 19:52:59 CFG: Set hop to 0 and hophigh to 0. 11/06/2001 19:52:59 Console turned OFF 11/06/2001 19:52:59 CFG: Setting XINHEADER to X-Declude-Note: Processed by Declude %VERSION%; remote host %REVDNS%. 11/06/2001 19:52:59 CFG: Setting XOUTHEADER to X-Note: Report any abuse to [EMAIL PROTECTED] 11/06/2001 19:52:59 CFG: Bypassing IP 63.107.174.32. 11/06/2001 19:52:59 CFG: Setting XSENDER to ON 11/06/2001 19:52:59 CFG: Setting XSPOOLNAME to ON 11/06/2001 19:52:59 CFG: Whitelisting ANYWHERE [EMAIL PROTECTED] 11/06/2001 19:52:59 CFG: Whitelisting IP 63.107.174.. 11/06/2001 19:52:59 CFG: Whitelisting FROM hm-software.com. 11/06/2001 19:52:59 CFG: Whitelisting IP 128.192.1.101. 11/06/2001 19:52:59 CFG: Whitelisting IP 130.160.4.249. 11/06/2001 19:52:59 CFG: Whitelisting IP 199.232.158.102. 11/06/2001 19:52:59 CFG: Whitelisting FROM nytimes.com. 11/06/2001 19:52:59 CFG: Whitelisting IP 148.100.1.2. 11/06/2001 19:52:59 CFG: Whitelisting IP 64.65.65.2. 11/06/2001 19:52:59 CFG: Whitelisting FROM lists.cnn.com. 11/06/2001 19:52:59 CFG: Whitelisting FROM timeinc.com. 11/06/2001 19:52:59 CFG: Whitelisting FROM uni.de. 11/06/2001 19:52:59 CFG: Whitelisting IP 206.242.213.5. 11/06/2001 19:52:59 CFG: Whitelisting FROM stellenmarkt.de. 11/06/2001 19:52:59 Declude v1.28 11/06/2001 19:52:59 Setting HOLD directory to: D:\IMAIL\spool\spam. 11/06/2001 19:52:59 Q85ea4a8 Setting DNS server to IMail's 63.107.174.65. 11/06/2001 19:52:59 Q85ea4a8 Declude JunkMail Standard Version Registered 11/06/2001 19:52:59 Q85ea4a8 Start 11/06/2001 19:52:59 Q85ea4a8 Locking D:\IMAIL\spool\Q85ea4a8.SMD. 11/06/2001 19:52:59 Q85ea4a8 D:\IMAIL\spool\Q85ea4a8.SMD locked. 11/06/2001 19:52:59 Q85ea4a8 Getting message envelope 11/06/2001 19:52:59 Q85ea4a8 Starting locality check 11/06/2001 19:52:59 Q85ea4a8 CL Opening HKEY_LOCAL_MACHINE\software\Ipswitch\IMail\Domains 11/06/2001 19:52:59 Q85ea4a8 [EMAIL PROTECTED] [0] is local domain1 11/06/2001 19:52:59 Q85ea4a8 [EMAIL PROTECTED] [0] is local main domain 11/06/2001 19:52:59 Q85ea4a8 Done getting message envelope 11/06/2001 19:52:59 Q85ea4a8 Getting headers 11/06/2001 19:52:59 Q85ea4a8 Mid-headers 11/06/2001 19:52:59 Q85ea4a8 Done getting headers 11/06/2001 19:52:59 Q85ea4a8 Done getting envelope and headers 11/06/2001 19:53:01 Q85ea4a8 Ver=20 verflag=0 11/06/2001 19:53:01 Q85ea4a8 About to run spam tests 11/06/2001 19:53:01 Q85ea4a8 Going through datafile 11/06/2001 19:53:01 Q85ea4a8 Starting header check of 11/06/2001 19:53:01 Q85ea4a8 Starting header check of Received: from morph 11/06/2001 19:53:01 Q85ea4a8 65.88.90.10] by mail.webhost.hm-software.com (SMTPD32-7.04) id A5EAD604A8; Tue, 06 Nov 2001 19:52:58 -0500 11/06/2001 19:53:01 Q85ea4a8 Handling Received: header 11/06/2001 19:53:01 Q85ea4a8 Setting remote IP address to 65.88.90.10 11/06/2001 19:53:01 Q85ea4a8 10.90.88.65.in-addr.arpa 11/06/2001 19:53:01 Q85ea4a8 Got it: morpheus.agoramail.net.. 11/06/2001 19:53:01 Q85ea4a8 Hop 0: Checking IP Address 65.88.90.10. 11/06/2001 19:53:01 Q85ea4a8 Waiting for results 11/06/2001 19:53:01 Q85ea4a8 10.90.88.65.bl.spamcop.net IS listed in OSSRC. 11/06/2001 19:53:04 Q85ea4a8 Starting header check of Received: (qmail 252 11/06/2001 19:53:04 Q85ea4a8 Handling Received: header 11/06/2001 19:53:04 Q85ea4a8 Starting header check of To: Investor <nathan 11/06/2001 19:53:04 Q85ea4a8 Starting header check of Date: Tue, 6 Nov 200 11/06/2001 19:53:04 Q85ea4a8 Starting header check of From: 247profits e-D 11/06/2001 19:53:04 Q85ea4a8 Starting header check of reply-to: hng@agora- 11/06/2001 19:53:04 Q85ea4a8 Starting header check of Subject: It's enough 11/06/2001 19:53:04 Q85ea4a8 Last line of headers: Message-Id: <200111061952828.S 11/06/2001 19:53:04 Q85ea4a8 Starting header check of Message-Id: <2001110 11/06/2001 19:53:04 Q85ea4a8 TEST: 10 heur=1.000000 t[]domain=10 11/06/2001 19:53:04 Q85ea4a8 TEST: 9 heur=1.000000 t[]domain=9 11/06/2001 19:53:04 Q85ea4a8 TEST: 8 heur=1.000000 t[]domain=8 11/06/2001 19:53:04 Q85ea4a8 TEST: 9 heur=1.000000 t[]domain= 11/06/2001 19:53:04 Q85ea4a8 OSSRC:7 SPAMHEADERS:3 HEUR10:4 . Total weight = 14 11/06/2001 19:53:04 Q85ea4a8 Testing whitelist 3 [EMAIL PROTECTED] 11/06/2001 19:53:04 Q85ea4a8 Testing whitelist 2 63.107.174. 11/06/2001 19:53:04 Q85ea4a8 IP 65.88.90.10 not in whitelist (63.107.174.) 11/06/2001 19:53:04 Q85ea4a8 Testing whitelist 1 hm-software.com 11/06/2001 19:53:04 Q85ea4a8 Testing whitelist 2 128.192.1.101 11/06/2001 19:53:04 Q85ea4a8 IP 65.88.90.10 not in whitelist (128.192.1.101) 11/06/2001 19:53:04 Q85ea4a8 Testing whitelist 2 130.160.4.249 11/06/2001 19:53:04 Q85ea4a8 IP 65.88.90.10 not in whitelist (130.160.4.249) 11/06/2001 19:53:04 Q85ea4a8 Testing whitelist 2 199.232.158.102 11/06/2001 19:53:04 Q85ea4a8 IP 65.88.90.10 not in whitelist (199.232.158.102) 11/06/2001 19:53:04 Q85ea4a8 Testing whitelist 1 nytimes.com 11/06/2001 19:53:04 Q85ea4a8 Testing whitelist 2 148.100.1.2 11/06/2001 19:53:04 Q85ea4a8 IP 65.88.90.10 not in whitelist (148.100.1.2) 11/06/2001 19:53:04 Q85ea4a8 Testing whitelist 2 64.65.65.2 11/06/2001 19:53:04 Q85ea4a8 IP 65.88.90.10 not in whitelist (64.65.65.2) 11/06/2001 19:53:04 Q85ea4a8 Testing whitelist 1 lists.cnn.com 11/06/2001 19:53:04 Q85ea4a8 Testing whitelist 1 timeinc.com 11/06/2001 19:53:04 Q85ea4a8 Testing whitelist 1 uni.de 11/06/2001 19:53:04 Q85ea4a8 Testing whitelist 2 206.242.213.5 11/06/2001 19:53:04 Q85ea4a8 IP 65.88.90.10 not in whitelist (206.242.213.5) 11/06/2001 19:53:04 Q85ea4a8 Testing whitelist 1 stellenmarkt.de 11/06/2001 19:53:04 Q85ea4a8 Looping... 11/06/2001 19:53:04 Q85ea4a8 S<[EMAIL PROTECTED]> 11/06/2001 19:53:04 Q85ea4a8 Looking up MX/A record for agoramail.net at 63.107.174.65. 11/06/2001 19:53:04 Q85ea4a8 Done with MX/A record 11/06/2001 19:53:04 Q85ea4a8 Opening HKEY_LOCAL_MACHINE\software\Ipswitch\IMail\Domains 11/06/2001 19:53:04 Q85ea4a8 Domain name = fcc.net, User name = Roth2. 11/06/2001 19:53:04 Q85ea4a8 Using CFG file D:\IMAIL\Declude\$default$.junkmail. 11/06/2001 19:53:04 Q85ea4a8 .....X............X..X...XX 11/06/2001 19:53:04 Q85ea4a8 Test #5 [OSSRC weight=7] triggered; action = 0 11/06/2001 19:53:04 Q85ea4a8 Test #18 [SPAMHEADERS weight=3] triggered; action = 4 11/06/2001 19:53:04 Q85ea4a8 Msg failed SPAMHEADERS (This E-mail has headers consistent with spam [40000202].). 11/06/2001 19:53:04 Q85ea4a8 Test #21 [HEUR10 weight=4] triggered; action = 0 11/06/2001 19:53:04 Q85ea4a8 Test #25 [WEIGHT10 weight=10] triggered; action = 0 11/06/2001 19:53:04 Q85ea4a8 Test #26 [WEIGHT8 weight=8] triggered; action = 0 11/06/2001 19:53:04 Q85ea4a8 X-Declude-Note: Processed by Declude 1.28; remote host morpheus.agoramail.net. 11/06/2001 19:53:04 Q85ea4a8 AlterMessage 11/06/2001 19:53:04 Q85ea4a8 Subject: It's enough to make the Sopranos cry! 11/06/2001 19:53:04 Q85ea4a8 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 11/06/2001 19:53:04 Q85ea4a8 Looping... 11/06/2001 19:53:04 Q85ea4a8 Done Looping 11/06/2001 19:53:04 Q85ea4a8 Final action=0. 11/06/2001 19:53:04 Q85ea4a8 D:\IMAIL\spool\Q85ea4a8.SMD 11/06/2001 19:53:04 Q85ea4a8 Unlocked D:\IMAIL\spool\Q85ea4a8.SMD. 11/06/2001 19:53:04 Q85ea4a8 Passing to SMTP3: D:\IMAIL\SMTP32.EXE "D:\IMAIL\spool\Q85ea4a8.SMD". 11/06/2001 19:53:04 Q85ea4a8 Total Time: 2093ms --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
