David: This is why we have created several filter files and one that also gives weight to our Blacklist being found in the header. We have a blacklist file with Delete action and one that is filter based on the entries in the blacklist. So if any listing in the blacklist is found in the header the email will be held.
Since we have this in a database we simply create different views of the entries. Such as blacklist found in body and header because we have also noticed that our blacklist entries are at times using free emails but their contact address is used in the body. So if any blacklist email or address is found in the body of the email the email will be held. Hope that helps. Regards, Kami -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, March 24, 2003 10:01 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] I know I'm doing some wroing but can't put my finger on it. >The answer is going to be obvious and simple but I can't spot it. You're not the first to be fooled by this: > From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> The problem here is that the return address of the E-mail isn't [EMAIL PROTECTED] (nor is the From: address either, which is [EMAIL PROTECTED]). Declude only looks at the return address, which can't be seen in this case (it is often different than the From: or Reply-To: addresses). You can find the return address in the X-Declude-Sender: header, or the "MAIL FROM:" line in the IMail SMTP log file. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
