Scott,
Here is the header information on the example email I was referring to.
As you can see the 'Reply-to:' with @boing.topica.com. My blacklist just
has 'topica.com' and Declude catches it just nicely. But based on what
you have responded, that this should not have made it to Declude if
'topica.com' (which is in the reply address) is in my kill list. Or am I
confused. :-)
Henry
Received: from outmta028.topica.com [64.125.140.181] by
sagan.cdihome.com
(SMTPD32-7.06) id AB0A13690064; Tue, 18 Jun 2002 16:41:46 -0400
To: ----email addy removed----
From: Movie Fans <[EMAIL PROTECTED]>
Subject: Choose your 4 DVD's...
Date: Tue, 18 Jun 2002 10:23:51 -0700
Message-ID: <[EMAIL PROTECTED]>
Errors-To: <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
X-Topica-Id: <1024411506.svc001.15942.1000449>
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="TEP-1437017805.1463792894.1024411504"
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com)
for spam.
X-Spam-Tests-Failed: OSSRC, WEIGHT10, CDIBLKLST
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: Tuesday, June 18, 2002 5:08 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Add more to your Kill File
>This is probably in the archives of this list somewhere, but I need
>help understanding how the Imail KILL list works in reference with
>Declude junkmail.
The IMail Kill List will block E-mail before it is received (while the
SMTP
protocol is determining who the E-mail is from/to), and before Declude
will
see the E-mail.
>I am testing using the kill list for the domains that send me the most
>spam but until I see that it works I have a blacklist setup for Declude
>junkmail to use. I am still seeing emails , for example, from
>'[EMAIL PROTECTED]' failing the blacklist test
>while 'topica.com' and '.topica.com' are in the kill list.
Note that the IMail Kill List (and Declude JunkMail "fromfile" test
type)
both work on the return address of the E-mail, which is often different
from the "From:" or "Reply-To:" headers.
>If this is in the kill list, should I be seeing it in blocked by
>declude???
No -- you should see it blocked by IMail. :) I'm guessing that you are
seeing the From: address, which is different from the return address.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for
assistance. You can visit our web site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
