-----Original Message-----
From: Mark E. Smith
Sent: Monday, December 23, 2002 10:41 PM
To: '[EMAIL PROTECTED]'
Subject: Incorrect Action...Scott,
Why is junkmail assigning the 'ignore' action to this weight range test:
SMTP Header:
Received: from mail.aloansolution.com [208.179.55.3] by popmail.netrends.com with ESMTP
(SMTPD32-7.13) id AEE938801CA; Mon, 23 Dec 2002 22:05:13 -0500
Received: from info.cisoffice.com ([65.194.90.21])
by mail.aloansolution.com (VisNetic.MailServer.v5.3.5.0) with ESMTP id KHAVHT
for <[EMAIL PROTECTED]>; Sun, 22 Dec 2002 16:01:19 -0800
Received: from info.cisoffice.com ([65.194.90.21]) by info.cisoffice.com with Microsoft SMTPSVC(5.0.2195.5329);
Sun, 22 Dec 2002 18:00:41 -0500
Received: by info.cisoffice.com (Microsoft Connector for POP3 Mailboxes 5.00.2195) with SMTP (Global POP3 Download)
id [EMAIL PROTECTED]; Sun, 22 Dec 2002 18:00:36 -0500
Received: from mail.aloansolution.com (unverified [208.179.55.3]) by mailserver.carolinainternet.com
(Vircom SMTPRS 5.3.232) with ESMTP id <[EMAIL PROTECTED]> for <[EMAIL PROTECTED]>;
Sun, 22 Dec 2002 17:50:22 -0500
Message-ID: <[EMAIL PROTECTED]>
Received: from localhost ([127.0.0.1])
by mail.aloansolution.com (VisNetic.MailServer.v5.3.5.0) with SMTP id KHAVHT
for <[EMAIL PROTECTED]>; Sun, 22 Dec 2002 14:20:19 -0800
Date: Sun, 22 Dec 2002 14:20:19 -0800
From: Jim <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Ready to Refinance? We make it EASY! ADV
X-Mailer: VisNetic WebMail 3.3.3
X-Originating-IP: 208.54.20.242
MIME-Version: 1.0
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 22 Dec 2002 23:00:41.0747 (UTC) FILETIME=[F3912E30:01C2AA0D]
X-RBL-Warning: SPAMCOP: Blocked - see http://spamcop.net/bl.shtml?208.179.55.3
X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 208.179.55.3 with no reverse DNS entry.
X-RBL-Warning: SPAMFILTER: Message failed SPAMFILTER test (19)
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
X-Spam-Tests-Failed: SPAMCOP, REVDNS, SPAMFILTER, WEIGHT1229
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 330496548Logfile:
12/23/2002 22:05:14 Qcee9038801ca907f Triggered filter on refinance [weight->5].
12/23/2002 22:05:14 Qcee9038801ca907f SPAMCOP:9 REVDNS:4 SPAMFILTER:6 . Total weight = 19
12/23/2002 22:05:14 Qcee9038801ca907f Using [incoming] CFG file e:\IMAIL\Declude\$default$.junkmail.
12/23/2002 22:05:14 Qcee9038801ca907f Msg failed SPAMCOP (Blocked - see http://spamcop.net/bl.shtml?208.179.55.3). Action="">12/23/2002 22:05:14 Qcee9038801ca907f Msg failed REVDNS (This E-mail was sent from a MUA/MTA 208.179.55.3 with no reverse DNS entry.). Action="">12/23/2002 22:05:14 Qcee9038801ca907f Msg failed SPAMFILTER (Message failed SPAMFILTER test (19)). Action="">12/23/2002 22:05:14 Qcee9038801ca907f Msg failed WEIGHT1229 (Total weight between 12 and 19.). Action="">12/23/2002 22:05:14 Qcee9038801ca907f Subject: Ready to Refinance? We make it EASY! ADV
12/23/2002 22:05:14 Qcee9038801ca907f From: <> To: [EMAIL PROTECTED]$default$.junkmail file:
KFILE DELETEDSBL WARN
ORDB WARN
OSDUL WARN
OSFORM WARN
OSLIST WARN
OSRELAY WARN
OSSMART WARN
OSSOFT WARN
OSSRC WARN
SPAMCOP WARN
BASE64 WARN
SPAMFILTER WARN
MONKEYPROXIES WARN
MONKEYFORMMAIL WARNDSN WARN
NOABUSE WARN
NOPOSTMASTER WARNBADHEADERS WARN
HELOBOGUS WARN
MAILFROM WARN
PERCENT WARN
REVDNS WARN
ROUTING WARN
SPAMHEADERS WARN
SNIFFER WARNWEIGHT1219 BOUNCE
WEIGHT20 DELETE
Global.cfg file:
#
# Declude JunkMail configuration file.
#
# This file has the global Declude JunkMail settings, defines the tests, and lists the
# actions to take on outgoing E-mail (for the Pro version; not normally used).
# "####" in the LOGFILE option, if present, automatically gets replaced with the month/date.LOGFILE spamlogs\dec####.log
LOGLEVEL HIGH
HOP 0
#HOPHIGH 1#
# Below are some advanced options
#CONSOLE OFF
XINHEADER X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
XINHEADER X-Spam-Tests-Failed: %TESTSFAILED%
XOUTHEADER X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
#IPBYPASS 127.0.0.1
#XSENDER OFF
#XSPOOLNAME OFF
#XINHEADER X-Note: This E-mail was sent from %REVDNS% ([%REMOTEIP%]).
#XOUTHEADER Organization: Your Name HereLOOSENSPAMHEADERS OFF
#
# Definitions of the tests to use (do not edit unless you know what you are doing).
# These must come before the actions.
#
# First is the name of the check, then the type of check (ip4r is a DNS lookup using
# the reverse of the IP address).
#
# For type ip4r, 'matchstring' is the string to look for, or "*" for anything.
#ORDB ip4r relays.ordb.org * 5 0
OSDUL ip4r relays.osirusoft.com 127.0.0.3 5 0
OSFORM ip4r relays.osirusoft.com 127.0.0.8 5 0
OSLIST ip4r relays.osirusoft.com 127.0.0.7 5 0
OSRELAY ip4r relays.osirusoft.com 127.0.0.2 5 0
OSSMART ip4r relays.osirusoft.com 127.0.0.5 5 0
OSSOFT ip4r relays.osirusoft.com 127.0.0.6 5 0
OSSRC ip4r relays.osirusoft.com 127.0.0.4 5 0
SPAMCOP ip4r bl.spamcop.net 127.0.0.2 9 0
MONKEYPROXIES ip4r proxies.relays.monkeys.com 127.0.0.1 5 0
MONKEYFORMMAIL ip4r formmail.relays.monkeys.com 127.0.0.1 5 0DSN rhsbl dsn.rfc-ignorant.org 127.0.0.2 4 0
NOABUSE rhsbl abuse.rfc-ignorant.org 127.0.0.4 4 0
NOPOSTMASTER rhsbl postmaster.rfc-ignorant.org 127.0.0.3 4 0BADHEADERS badheaders x x 8 0
HELOBOGUS helovalid x x 4 0
MAILFROM envfrom x x 5 0
PERCENT percent x x 10 0
REVDNS revdnsexists x x 4 0
ROUTING spamrouting x x 4 0
SPAMHEADERS spamheaders x x 3 0
BASE64 base64 x x 4 0SPAMFILTER filter e:\imail\declude\fromfilter.txt x 1 0
KFILE fromfile e:\imail\declude\fromfile.txt x 20 0SNIFFER external nonzero "e:\IMail\Sniffer\XXXXXX.exe XXXXXXX" 10 0
WEIGHT20 weight x x 20 0
WEIGHT1229 weightrange x x 12 19#
# The following tests are commented out by default because they require a subscription,
# or are not commonly used.
#
#BADWHOIS rhsbl whois.rfc-ignorant.org 127.0.0.5 3 0
#BLARS ip4r block.blars.org * 5 0
CATCHALLMAILS catchallmails x x 0 0
#COMPU ip4r blackhole.compu.net 127.0.0.4 5 0
#DEVNULL ip4r dev.null.dk 127.0.0.2 5 0
#DORKS ip4r orbs.dorkslayers.com 127.0.0.2 5 0
#DORKZTL ip4r ztl.dorkslayers.com 127.0.0.2 5 0
DSBL ip4r list.dsbl.org * 6 0
#DSBLALL ip4r unconfirmed.dsbl.org * 4 0
#DUL ip4r dialups.mail-abuse.org 127.0.0.3 5 0
#FIVETENDUL ip4r blackholes.five-ten-sg.com 127.0.0.3 5 0
#FIVETENOPTIN ip4r blackholes.five-ten-sg.com 127.0.0.4 5 0
#FIVETENOTHER ip4r blackholes.five-ten-sg.com 127.0.0.5 5 0
#FIVETENSRC ip4r blackholes.five-ten-sg.com 127.0.0.2 5 0
#FLOWGO ip4r flowgoaway.com 127.0.0.2 5 0
#GUARDBLOCK ip4r spamguard.leadmon.net 127.0.0.7 3 0
#GUARDBULK ip4r spamguard.leadmon.net 127.0.0.4 3 0
#GUARDDUL ip4r spamguard.leadmon.net 127.0.0.2 3 0
#GUARDMULTI ip4r spamguard.leadmon.net 127.0.0.6 3 0
#GUARDSINGLE ip4r spamguard.leadmon.net 127.0.0.5 3 0
#GUARDSRC ip4r spamguard.leadmon.net 127.0.0.3 3 0
#HEUR heuristics x x 0 0
#INTERSIL ip4r blackholes.intersil.net 127.0.0.2 5 0
#IPWHOIS ip4r ipwhois.rfc-ignorant.org 127.0.0.6 3 0
#NJABL ip4r dnsbl.njabl.org 127.0.0.2 5 0
#NJABLDUL ip4r dnsbl.njabl.org 127.0.0.3 5 0
#POSTFIXGATE ip4r bl.redhatgate.com 127.0.0.1 0 0
#RBL ip4r blackholes.mail-abuse.org 127.0.0.2 5 0
#RSS ip4r relays.mail-abuse.org 127.0.0.2 5 0
#SELWERD ip4r xbl.selwerd.cx 127.0.0.2 5 0
#SPAMBAG ip4r blacklist.spambag.org 127.0.0.2 5 0
#SPAMTR ip4r rbl.spam.org.tr 127.0.0.2 5 0
#SUMMIT ip4r blackholes.2mbit.com 127.0.0.2 5 0
#V6NET ip4r spammers.v6net.org 127.0.0.2 5 0
#VISI ip4r relays.visi.com 127.0.0.2 5 0
#WIREHUB-DNSBL ip4r blackholes.wirehub.net 127.0.0.2 5 0
#WIREHUB-DYNA ip4r dynablock.wirehub.net 127.0.0.2 5 0
#ZTA ip4r zta.birdsong.org * 5 0#RBL ip4r rbl-plus.mail-abuse.org 127.1.0.1
#DUL ip4r rbl-plus.mail-abuse.org 127.1.0.2
#RBLANDDUL ip4r rbl-plus.mail-abuse.org 127.1.0.3
#RSS ip4r rbl-plus.mail-abuse.org 127.1.0.4
#RBLANDRSS ip4r rbl-plus.mail-abuse.org 127.1.0.5
#DULANDRSS ip4r rbl-plus.mail-abuse.org 127.1.0.6
#MAPSALL ip4r rbl-plus.mail-abuse.org 127.1.0.7
#
# The actions listed below only apply to outgoing E-mail, and on ly if you
# have the "Pro" version. Note that the DUL and OSDUL tests should NOT
# be used to block outgoing mail!
#WHITELIST IP 165.1.
WHITELIST IP 209.8.221.66
WHITELIST FROM @sortmonster.com
WHITELIST IP 63.220.41.
WHITELIST IP 65.196.89.
WHITELIST FROM @networksolutions.com
WHITELIST FROM @declude.comKFILE DELETE
ORDB WARN
OSDUL WARN
OSFORM WARN
OSLIST WARN
OSRELAY WARN
OSSMART WARN
OSSOFT WARN
OSSRC WARN
SPAMCOP WARN
BASE64 WARN
SPAMFILTER WARN
MONKEYPROXIES WARN
MONKEYFORMMAIL WARN
DSBL WARNDSN WARN
NOABUSE WARN
NOPOSTMASTER WARNBADHEADERS WARN
MAILFROM WARN
PERCENT WARN
REVDNS WARN
ROUTING WARN
SPAMHEADERS WARN
HELOBOGUS WARNSNIFFER WARN
WEIGHT1219 BOUNCE
WEIGHT20 DELETE#BADWHOIS WARN
#BLARS WARN
#CATCHALLMAILS WARN
#COMPU WARN
#DEVNULL WARN
#DORKS WARN
#DORKZTL WARN
#DSBLALL WARN
#DUL WARN
#FIVETENDUL WARN
#FIVETENOPTIN WARN
#FIVETENOTHER WARN
#FIVETENSRC WARN
#FLOWGO WARN
#GUARDBLOCK WARN
#GUARDBULK WARN
#GUARDDUL WARN
#GUARDMULTI WARN
#GUARDSINGLE WARN
#GUARDSRC WARN
#HEUR WARN
#INTERSIL WARN
#IPWHOIS WARN
#NJABL WARN
#NJABLDUL WARN
#POSTFIXGATE WARN
#RBL WARN
#RSS WARN
#SELWERD WARN
#SPAMBAG WARN
#SPAMTR WARN
#SUMMIT WARN
#V6NET WARN
#VISI WARN
#WIREHUB-DNSBL WARN
#WIREHUB-DYNA WARN
#ZTA WARN#RBL WARN
#DUL WARN
#RBL+DUL WARN
#RSS WARN
#RBL+RSS WARN
#DUL+RSS WARN
#MAPSALL WARN
Title: Message
Scott,
Resending.
Note
the action in the log file for the weight1219 test --
ignore.
Yet
the action in the config files is bounce.
-0-
