OK, so the ORBZIN and ORBZOUT create this message. Any ideas what the difference is? Just wanting to make sure that I am not being too sensitive. Although most of the messages caught are junkmail, but this example was not. Well, they are an open relay, but it was legit mail from an company. I sent them a message letting them know they were an open relay to get it fixed. Until they fix it, our system will catch it for verification.
Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 ||-----Original Message----- ||From: [EMAIL PROTECTED] ||[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry ||Sent: Wednesday, February 13, 2002 4:28 PM ||To: [EMAIL PROTECTED] ||Subject: Re: [Declude.JunkMail] Duplicate warnings and weights. || || || ||> I am using the weight system to filter out spam and ||just noticed the ||>following in a message that was caught. ||> ||>X-RBL-Warning: Open relay. Please see http://orbz.org/?165.252.48.3 ||>X-RBL-Warning: Open relay. Please see http://orbz.org/?165.252.48.3 ||>X-RBL-Warning: Blocked - see http://spamcop.net/bl.shtml?165.252.48.3 ||>X-RBL-Warning: This E-mail was sent from a mail server [No ||Reverse DNS] with ||>no reverse DNS entry. ||> ||> Notice the duplicate Open Relay warning. It appears as though ||> this warning ||>was added twice from the same test. || ||Actually, if you look closely, you'll see they are different -- the first ||one has two spaces after the ".", but the second one only has one space. || ||What is happening is that the E-mail is being sent from a mail server ||listed in both the ORBZIN and ORBZOUT databases. So it is failing two ||different (yet similar) tests. || -Scott || ||--- ||[This E-mail was scanned for viruses by Declude Virus ||(http://www.declude.com)] || ||--- || ||This E-mail came from the Declude.JunkMail mailing list. To ||unsubscribe, just send an E-mail to [EMAIL PROTECTED], and ||type "unsubscribe Declude.JunkMail". You can E-mail ||[EMAIL PROTECTED] for assistance. You can visit our web ||site at http://www.declude.com . || --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
