You may want to use the "XSENDER ON" option, so that you will see a
"X-Declude-Sender:" header that includes the return address. From the
headers you show, you can't tell what the return address is. Or, you could
look in the IMail log file for the "MAIL FROM:" line for this E-mail.
-Scott
At 05:29 PM 6/18/2002, you wrote:
>Scott,
>
>Here is the header information on the example email I was referring to.
>As you can see the 'Reply-to:' with @boing.topica.com. My blacklist just
>has 'topica.com' and Declude catches it just nicely. But based on what
>you have responded, that this should not have made it to Declude if
>'topica.com' (which is in the reply address) is in my kill list. Or am I
>confused. :-)
>
>Henry
>
>
>
>Received: from outmta028.topica.com [64.125.140.181] by
>sagan.cdihome.com
> (SMTPD32-7.06) id AB0A13690064; Tue, 18 Jun 2002 16:41:46 -0400
>To: ----email addy removed----
>From: Movie Fans <[EMAIL PROTECTED]>
>Subject: Choose your 4 DVD's...
>Date: Tue, 18 Jun 2002 10:23:51 -0700
>Message-ID: <[EMAIL PROTECTED]>
>Errors-To: <[EMAIL PROTECTED]>
>Reply-To: [EMAIL PROTECTED]
>X-Topica-Id: <1024411506.svc001.15942.1000449>
>Mime-Version: 1.0
>Content-Type: multipart/alternative;
> boundary="TEP-1437017805.1463792894.1024411504"
>X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com)
>for spam.
>X-Spam-Tests-Failed: OSSRC, WEIGHT10, CDIBLKLST
>
>-----Original Message-----
>From: [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
>Sent: Tuesday, June 18, 2002 5:08 PM
>To: [EMAIL PROTECTED]
>Subject: RE: [Declude.JunkMail] Add more to your Kill File
>
>
>
> >This is probably in the archives of this list somewhere, but I need
> >help understanding how the Imail KILL list works in reference with
> >Declude junkmail.
>
>The IMail Kill List will block E-mail before it is received (while the
>SMTP
>protocol is determining who the E-mail is from/to), and before Declude
>will
>see the E-mail.
>
> >I am testing using the kill list for the domains that send me the most
> >spam but until I see that it works I have a blacklist setup for Declude
>
> >junkmail to use. I am still seeing emails , for example, from
> >'[EMAIL PROTECTED]' failing the blacklist test
>
> >while 'topica.com' and '.topica.com' are in the kill list.
>
>Note that the IMail Kill List (and Declude JunkMail "fromfile" test
>type)
>both work on the return address of the E-mail, which is often different
>from the "From:" or "Reply-To:" headers.
>
> >If this is in the kill list, should I be seeing it in blocked by
> >declude???
>
>No -- you should see it blocked by IMail. :) I'm guessing that you are
>
>seeing the From: address, which is different from the return address.
>
> -Scott
>---
>Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
>IMail. http://www.declude.com
>
>---
>[This E-mail was scanned for viruses by Declude Virus
>(http://www.declude.com)]
>
>---
>
>This E-mail came from the Declude.JunkMail mailing list. To
>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
>"unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for
>assistance. You can visit our web site at http://www.declude.com .
>
>---
>[This E-mail was scanned for viruses by Declude Virus
>(http://www.declude.com)]
>
>---
>
>This E-mail came from the Declude.JunkMail mailing list. To
>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>type "unsubscribe Declude.JunkMail". You can E-mail
>[EMAIL PROTECTED] for assistance. You can visit our web
>site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
