Scott,
Another one that got through. It was
addressed to [EMAIL PROTECTED] which is
an alias that forwards mail to
Looks like forwarding to local addresses is
involved with all the ones that get through. Is my config messed
up?
This is the mail
header:
Received: from compuserve.com [217.136.183.187] by
reliant.igdc.com
(SMTPD32-7.13) id A9F52FDD01C0; Sat, 21 Dec 2002 20:48:37 -0500
To: Shoemaster <[EMAIL PROTECTED]>
From: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Sender: [EMAIL PROTECTED]
X-Mailer: OutLook Express 3.14159
Subject: X-Vids Uncecnsored Celebs
MIME-Version: 1.0
Content-type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <[EMAIL PROTECTED]>
X-RBL-Warning: DSBL: http://dsbl.org/listing.php?217.136.183.187
X-RBL-Warning: OSPROXY: [1] OpenProxy, see http://spews.org/ask.cgi?S1255
X-RBL-Warning: OSSRC: (2002/12/18) Open Proxy: http(3128)
X-RBL-Warning: SPAMCOP: Blocked - see http://spamcop.net/bl.shtml?217.136.183.187
X-RBL-Warning: NOABUSE: Not supporting abuse@domain
X-RBL-Warning: NOPOSTMASTER: Not supporting postmaster@domain
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client [c020020d].
X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [c020020d].
X-Declude-Sender: [EMAIL PROTECTED] [217.136.183.187]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
X-Spam-Tests-Failed: DSBL, OSPROXY, OSSRC, SPAMCOP, NOABUSE, NOPOSTMASTER, BADHEADERS, SPAMHEADERS, WEIGHT10 [48]
Date: Sat, 21 Dec 2002 20:48:58 -0500
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 293801352
(SMTPD32-7.13) id A9F52FDD01C0; Sat, 21 Dec 2002 20:48:37 -0500
To: Shoemaster <[EMAIL PROTECTED]>
From: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Sender: [EMAIL PROTECTED]
X-Mailer: OutLook Express 3.14159
Subject: X-Vids Uncecnsored Celebs
MIME-Version: 1.0
Content-type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <[EMAIL PROTECTED]>
X-RBL-Warning: DSBL: http://dsbl.org/listing.php?217.136.183.187
X-RBL-Warning: OSPROXY: [1] OpenProxy, see http://spews.org/ask.cgi?S1255
X-RBL-Warning: OSSRC: (2002/12/18) Open Proxy: http(3128)
X-RBL-Warning: SPAMCOP: Blocked - see http://spamcop.net/bl.shtml?217.136.183.187
X-RBL-Warning: NOABUSE: Not supporting abuse@domain
X-RBL-Warning: NOPOSTMASTER: Not supporting postmaster@domain
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client [c020020d].
X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [c020020d].
X-Declude-Sender: [EMAIL PROTECTED] [217.136.183.187]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
X-Spam-Tests-Failed: DSBL, OSPROXY, OSSRC, SPAMCOP, NOABUSE, NOPOSTMASTER, BADHEADERS, SPAMHEADERS, WEIGHT10 [48]
Date: Sat, 21 Dec 2002 20:48:58 -0500
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 293801352
This is the Declude log with HIGH
logging:
12/21/2002 20:48:57 Q19f52fdd01c07ad7 DSBL:6
OSPROXY:7 OSSRC:8 SPAMCOP:10 NOABUSE:3 NOPOSTMASTER:3 BADHEADERS:8 SPAMHEADERS:3
. Total weight = 48
12/21/2002 20:48:57 Q19f52fdd01c07ad7 Using [outgoing] CFG file F:\IMAIL\Declude\$default$.junkmail.
12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed DSBL (http://dsbl.org/listing.php?217.136.183.187). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed OSPROXY ([1] OpenProxy, see http://spews.org/ask.cgi?S1255). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed OSSRC ((2002/12/18) Open Proxy: http(3128)). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed SPAMCOP (Blocked - see http://spamcop.net/bl.shtml?217.136.183.187). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed NOABUSE (Not supporting abuse@domain). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed NOPOSTMASTER (Not supporting postmaster@domain). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed BADHEADERS (This E-mail was sent from a broken mail client [c020020d].). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed SPAMHEADERS (This E-mail has headers consistent with spam [c020020d].). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed WEIGHT10 (Weight of 48 reaches or exceeds the limit of 10.). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 R1 Message OK
12/21/2002 20:48:57 Q19f52fdd01c07ad7 Using [incoming] CFG file F:\IMAIL\Declude\$default$.junkmail.
12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed DSBL (http://dsbl.org/listing.php?217.136.183.187). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed OSPROXY ([1] OpenProxy, see http://spews.org/ask.cgi?S1255). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed OSSRC ((2002/12/18) Open Proxy: http(3128)). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed SPAMCOP (Blocked - see http://spamcop.net/bl.shtml?217.136.183.187). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed NOABUSE (Not supporting abuse@domain). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed NOPOSTMASTER (Not supporting postmaster@domain). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed BADHEADERS (This E-mail was sent from a broken mail client [c020020d].). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed SPAMHEADERS (This E-mail has headers consistent with spam [c020020d].). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed WEIGHT10 (Weight of 48 reaches or exceeds the limit of 10.). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Subject: X-Vids Uncecnsored Celebs
12/21/2002 20:48:57 Q19f52fdd01c07ad7 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [EMAIL PROTECTED]
12/21/2002 20:48:57 Q19f52fdd01c07ad7 Using [outgoing] CFG file F:\IMAIL\Declude\$default$.junkmail.
12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed DSBL (http://dsbl.org/listing.php?217.136.183.187). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed OSPROXY ([1] OpenProxy, see http://spews.org/ask.cgi?S1255). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed OSSRC ((2002/12/18) Open Proxy: http(3128)). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed SPAMCOP (Blocked - see http://spamcop.net/bl.shtml?217.136.183.187). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed NOABUSE (Not supporting abuse@domain). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed NOPOSTMASTER (Not supporting postmaster@domain). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed BADHEADERS (This E-mail was sent from a broken mail client [c020020d].). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed SPAMHEADERS (This E-mail has headers consistent with spam [c020020d].). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed WEIGHT10 (Weight of 48 reaches or exceeds the limit of 10.). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 R1 Message OK
12/21/2002 20:48:57 Q19f52fdd01c07ad7 Using [incoming] CFG file F:\IMAIL\Declude\$default$.junkmail.
12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed DSBL (http://dsbl.org/listing.php?217.136.183.187). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed OSPROXY ([1] OpenProxy, see http://spews.org/ask.cgi?S1255). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed OSSRC ((2002/12/18) Open Proxy: http(3128)). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed SPAMCOP (Blocked - see http://spamcop.net/bl.shtml?217.136.183.187). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed NOABUSE (Not supporting abuse@domain). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed NOPOSTMASTER (Not supporting postmaster@domain). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed BADHEADERS (This E-mail was sent from a broken mail client [c020020d].). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed SPAMHEADERS (This E-mail has headers consistent with spam [c020020d].). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Msg failed WEIGHT10 (Weight of 48 reaches or exceeds the limit of 10.). Action="">12/21/2002 20:48:57 Q19f52fdd01c07ad7 Subject: X-Vids Uncecnsored Celebs
12/21/2002 20:48:57 Q19f52fdd01c07ad7 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [EMAIL PROTECTED]
This is the IMail
Log:
20021221 204832
127.0.0.1 SMTPD (2FDD01C0) [208.5.52.104]
connect 217.136.183.187 port 2444
20021221 204836 127.0.0.1 SMTPD (2FDD01C0) [217.136.183.187] HELO compuserve.com
20021221 204837 127.0.0.1 SMTPD (2FDD01C0) [217.136.183.187] MAIL FROM:<[EMAIL PROTECTED]>
20021221 204843 127.0.0.1 SMTPD (2FDD01C0) [217.136.183.187] RCPT TO:<[EMAIL PROTECTED]>
20021221 204856 127.0.0.1 SMTPD (2FDD01C0) [217.136.183.187] F:\IMAIL\spool\D19f52fdd01c07ad7.SMD 1559
20021221 204858 127.0.0.1 SMTP (303) processing F:\IMAIL\spool\Q19f52fdd01c07ad7.SMD
20021221 204858 127.0.0.1 SMTP (303) ldeliver reliant.igdc.com JoesSpam-main (1) [EMAIL PROTECTED] 2380
20021221 204858 127.0.0.1 SMTP (303) ldeliver reliant.igdc.com underbar-main (1) [EMAIL PROTECTED] 2380
20021221 204858 127.0.0.1 SMTP (303) finished F:\IMAIL\spool\Q19f52fdd01c07ad7.SMD status=1
20021221 204836 127.0.0.1 SMTPD (2FDD01C0) [217.136.183.187] HELO compuserve.com
20021221 204837 127.0.0.1 SMTPD (2FDD01C0) [217.136.183.187] MAIL FROM:<[EMAIL PROTECTED]>
20021221 204843 127.0.0.1 SMTPD (2FDD01C0) [217.136.183.187] RCPT TO:<[EMAIL PROTECTED]>
20021221 204856 127.0.0.1 SMTPD (2FDD01C0) [217.136.183.187] F:\IMAIL\spool\D19f52fdd01c07ad7.SMD 1559
20021221 204858 127.0.0.1 SMTP (303) processing F:\IMAIL\spool\Q19f52fdd01c07ad7.SMD
20021221 204858 127.0.0.1 SMTP (303) ldeliver reliant.igdc.com JoesSpam-main (1) [EMAIL PROTECTED] 2380
20021221 204858 127.0.0.1 SMTP (303) ldeliver reliant.igdc.com underbar-main (1) [EMAIL PROTECTED] 2380
20021221 204858 127.0.0.1 SMTP (303) finished F:\IMAIL\spool\Q19f52fdd01c07ad7.SMD status=1
----- Original Message -----
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, December 21, 2002 6:42
PM
Subject: Re: [Declude.JunkMail] How did this get
through
> > Help me with this scenario:
> >1: Mail comes in to <mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED]
> >2: Halftime has its own default file with ignore for all the tests.
> >3: There are no real users set up at halftime, just the "nobody"
> >alais. "Nobody" is set up to forward all mail to
> ><mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED].
> >
> >So, deculde will ignore all tests because halftime.com's default file is
> >set up that way, but when Declude gives it back to Imail, amd Imail
> >forwards it to <mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED], will declude
> >get it back to process again on the forward or will Imail just handle it
> >internally?
>
> In this case, IMail should translate the E-mail address from
> "[EMAIL PROTECTED]" to "[EMAIL PROTECTED]" before Declude gets the
> E-mail. Therefore, Declude JunkMail will actually use the
> "[EMAIL PROTECTED]" address in determining what action(s) to take.
> -Scott
>
> ---
> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail". The archives can be found
> at http://www.mail-archive.com.
>
>
