One of our clients sends mail to an external domain (federalpacific.com)
and the message never arrives. It gets caught in federalpacific.com's
spam filter. After contacting federalpacific.com's email admin, I found
that they have a script that searches the headers of incoming mail and
gets flagged by "X-RBL-Warning:", which is put into the header by
Declude on our end.
However, the client's local domain (springermktadv.com) has the
following:
\imail\declude\springermktadv.com\$default$.junkmail
=ALL actions set to IGNORE
(they don't get filtered)
\imail\declude\global.cfg
=ALL *outgoing* actions set to IGNORE
(we don't scan outgoing for anyone)
So why would Declude be adding the "X-RBL-Warning:" line to the email?
Dan Horne
---SNIPPETS---
Imail log:
SMTPD (00CA0196) [68.155.48.42] EHLO [192.168.1.2]
SMTPD (00CA0196) [68.155.48.42] MAIL FROM:<[EMAIL PROTECTED]>
SMTPD (00CA0196) [68.155.48.42] RCPT TO:<[EMAIL PROTECTED]>
SMTPD (00CA0196) [68.155.48.42] RCPT TO:<[EMAIL PROTECTED]>
SMTPD (00CA0196) [68.155.48.42] m:\imail\spool\D4ce900ca0196ca67.SMD
2306
SMTP (1800) processing m:\imail\spool\Q4ce900ca0196ca67.SMD
SMTP (1800) ldeliver mail.wilcoxtravel.com dan-main (1)
[EMAIL PROTECTED] 2691
SMTP (1800) Trying federalpacific.com (0)
SMTP (1800) Connect federalpacific.com [216.98.66.34:25] (1)
SMTP (1800) 220 coredump.electro-mechanical.com ESMTP Exim 2.05 #1 Thu,
3 Oct 2002 09:49:08 -0400
SMTP (1800) >EHLO IMAIL.taisweb.net
SMTP (1800) 250-coredump.electro-mechanical.com Hello IMAIL.taisweb.net
[199.72.81.2]
SMTP (1800) 250-SIZE 12582912
SMTP (1800) 250-PIPELINING
SMTP (1800) 250 HELP
SMTP (1800) >MAIL FROM:<[EMAIL PROTECTED]>
SMTP (1800) 250 <[EMAIL PROTECTED]> is syntactically correct
SMTP (1800) >RCPT To:<[EMAIL PROTECTED]>
SMTP (1800) 250 <[EMAIL PROTECTED]> is syntactically correct
SMTP (1800) >DATA
SMTP (1800) 354 Enter message, ending with "." on a line by itself
SMTP (1800) >.
SMTP (1800) 250 OK id=17x6Ll-00070L-00
SMTP (1800) rdeliver federalpacific.com [EMAIL PROTECTED] (1)
[EMAIL PROTECTED] 2691
SMTP (1800) >QUIT
SMTP (1800) 221 coredump.electro-mechanical.com closing connection
SMTP (1800) finished m:\imail\spool\Q4ce900ca0196ca67.SMD status=1
Declude log:
Q4ce900ca0196ca67 SNIFFER:8 . Total weight = 8
Q4ce900ca0196ca67 Msg failed SNIFFER (Message failed SNIFFER: 45.).
Q4ce900ca0196ca67 R1 Message OK
Q4ce900ca0196ca67 Msg failed SNIFFER (Message failed SNIFFER: 45.).
Q4ce900ca0196ca67 Subject: Spam E-mail problem
Q4ce900ca0196ca67 From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED]
Header:
Received: from (IMAIL.taisweb.net) [199.72.81.2]
by coredump.electro-mechanical.com with esmtp (Exim 2.05 #1
(Debian) Bug? What bug? /\oo/\)
id 17x6Ll-00070L-00
for [EMAIL PROTECTED]; Thu, 3 Oct 2002 09:49:09 -0400
Received: from [192.168.1.2] [68.155.48.42] by IMAIL.taisweb.net with
ESMTP
(SMTPD32-7.13) id ACE9CA0196; Thu, 03 Oct 2002 09:58:01 -0400
User-Agent: Microsoft Outlook Express Macintosh Edition - 5.01 (1630)
Date: Thu, 03 Oct 2002 09:52:29 -0400
Subject: Spam E-mail problem
From: Ricci Fender <[EMAIL PROTECTED]>
To: Brian Harris <[EMAIL PROTECTED]>
CC: <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
In-Reply-To: <[EMAIL PROTECTED]>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
X-RBL-Warning: SNIFFER: Message failed SNIFFER: 45.
X-Declude-Sender: [EMAIL PROTECTED] [68.155.48.42]
X-Declude-Spoolname: D4ce900ca0196ca67.SMD
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com)
for spam.
X-RBL-Warning: [Tests Failed]: SNIFFER
X-Note: Total spam weight of this E-mail is 8.
<body of message cut>
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
