>Doesn't this test reduce the weight of any message coming from an Exchange
server regardless of whether or not the message fails BASE64?
No, because the server itself does not publish it's version, only the client
that creates the message does.
For example, I received a postmaster NDR message this morning from our
client with an Exchange server. The NDR was generated by the VSMTP server.
It contained BASE64 but was not white listed because it does not report the
client version that created it because no client created it.
The lines I am using are the OWA client version numbers, not the Exchange
version numbers. That is why I asked yesterday for people to send me tests
from OWA so I could verify my findings.
Here is the header from that message:
Received: from exchange.clientdomain.com [123.123.123.123] by
mail.reliance.net with ESMTP
(SMTPD32-7.13) id A9B962F00BE; Tue, 26 Nov 2002 19:19:21 -0800
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Date: Tue, 26 Nov 2002 22:14:06 -0500
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="9B095B5ADSN=_01C293205EE846B40000025Cexchange.jdfacto"
X-DSNContext: 7ce717b1 - 1184 - 00000002 - 00000000
Message-ID: <[EMAIL PROTECTED]>
Subject: [THIS IS PROBABLY SPAM!] Delivery Status Notification (Failure)
X-CYBERsitter-NoXMail: Passed - Adult: 0 (Req: 18) Spam: 0 (Req: 18) Tot: 0
(Req: 24)
X-RBL-Warning: BASE64: A binary encoded text or HTML section was found in
this E-mail.
X-Declude-Sender: <> [123.123.123.123]
X-Declude-Spoolname: D39b9062f00be7b0a.SMD
X-Note: This E-mail was scanned by RelianceSoft, Inc. (www.reliancesoft.com)
for spam.
X-Tests-Failed: WEIGHTRANGE15-19, BASE64
X-Note: This E-mail was sent from exchange.clientdomain.com
([123.123.123.123]).
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 338203139
John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA 92835
www.reliancesoft.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
