Hi Robert, If the message was hold on your server, can you send me the entire message? (as attachment) Even the logfile entries from SpamChk can be usefull to understand why there is such a high result.
As I can see on the header data this message is spam and was prcoessed on your server according to the weight20 action. So there should be all right. Markus BTW: The third hop [67.104.187.162] now is listed on SpamCop > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Robert Forsyth > Sent: Tuesday, March 25, 2003 6:57 PM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] Why Did This Get Through? > > > I'm see an on-again off-again occurrence of emails getting > through that should of failed. > > Below are the headers...can anyone shed some light? > > Thanks > Robert > > Received: from relay04.valueweb.net [216.219.253.238] by > wjla.com with ESMTP > (SMTPD32-7.06) id A72D1CA50104; Tue, 25 Mar 2003 12:51:41 -0500 > Received: from gaia.valueweb.net ([216.219.253.52]:21995 "EHLO > gaia.valueweb.net") by relay04.valueweb.net with ESMTP > id <S247275AbTCYRwj>; Tue, 25 Mar 2003 12:52:39 -0500 > Received: from [67.104.187.162] ([67.104.187.162]:8219 "HELO > smtp1.valueweb.net") by gaia.valueweb.net with SMTP > id <S230122AbTCYRwX>; Tue, 25 Mar 2003 12:52:23 -0500 > Message-Id: <[EMAIL PROTECTED]> > Date: Tue, 25 Mar 2003 12:52:21 -0500 > To: [EMAIL PROTECTED] > From: "ARCO Computer Products, LLC." <[EMAIL PROTECTED]> > Subject: What If Your Hard Drive Crashed Right Now? > MIME-Version: 1.0 > Content-Type: text/html; charset="iso-8859-1"; format=flowed > X-RBL-Warning: WEIGHT20: Weight of 65 reaches or exceeds the > limit of 20. > X-Declude-Sender: [EMAIL PROTECTED] [216.219.253.238] > X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SPAMCHK, IPNOTINMX, WEIGHT10, WEIGHT20 [65] X-RCPT-TO: <[EMAIL PROTECTED]> Status: U X-UIDL: 337582254 --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
