I am trying to figure out why this SPAM (see below) and just this
morning several similar SPAM's got through our Declude JunkMail???
Failed every test in the book it seems. We have a weight of 10 to warn
and a weight of 20 to Hold. Below is the header from one of the SPAM's
which is representative of the others coming though, and our $JunkMail$
configuration below that. Anyone have an idea what is happening and why?
Thanks.

-Don
CompBiz, Inc.


Here is the e-mail...

Received: from SMTP32-FWD by CompBiz.net
  (SMTP32) id A00000694; Fri,  1 Feb 2002 07:09:14 -0500
Received: from iisweb.iissys.com [12.47.76.58] by SNEEZY.XEROCOM.NET
with ESMTP
  (SMTPD32-6.00) id A3B3625000A6; Thu, 31 Jan 2002 19:39:15 -0500
Received: from aaddn.com ([4.4.48.73]) by iisweb.iissys.com with
Microsoft SMTPSVC(5.0.2195.2966);
         Thu, 31 Jan 2002 19:38:41 -0500
Message-Id: <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
X-Priority: 3 (Normal)
MIME-Version: 1.0
X-Encoding: MIME
Content-Type: multipart/alternative;
        boundary="----=_NextPart_22458882"
Importance: Normal
Reply-To: [EMAIL PROTECTED]
Date: Thu, 31 Jan 2002 19:33:25 -0500
X-MSMail-Priority: Normal
Subject: Email Marketing
From: [EMAIL PROTECTED]
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 01 Feb 2002 00:38:43.0396 (UTC)
FILETIME=[CD0CD840:01C1AAB8]
X-RBL-Warning: Open relay. Please see http://orbz.org/?12.47.76.58
X-RBL-Warning: Open relay.  Please see http://orbz.org/?12.47.76.58
X-RBL-Warning: Weight of 25 exceeds the limit of 10.
X-Declude-Sender: [EMAIL PROTECTED] [12.47.76.58]
X-Declude-Spoolname: De3b30a6.SMD
X-Note: CompBiz.Net scanned e-mail for spam with Declude JunkMail.
X-Note: Failed Tests: ORBZIN, ORBZOUT, ORDB, SPAMCOP, WEIGHT10, WEIGHT20
X-Sender: Mail From: [EMAIL PROTECTED]
X-Note: This E-mail was sent from 58.76.47.12.in-addr.arpa.
([12.47.76.58]).
X-UIDL: 307438799
Status: U

Here are our settings...

ORBZIN  WARN
ORBZOUT WARN
ORDB            HOLD
OSDUL           HOLD
OSFORM  WARN
OSLIST  WARN
OSRELAY WARN
OSSMART WARN
OSSOFT      HOLD
OSSRC       HOLD
SPAMCOP HOLD
DSN                     WARN
NOABUSE         WARN
NOPOSTMASTER    WARN
BADHEADERS              WARN
MAILFROM                HOLD
PERCENT         HOLD
REVDNS          WARN
ROUTING         WARN
SPAMHEADERS             WARN
#SNIFFER                WARN
WEIGHT10                WARN
WEIGHT20                HOLD

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to