We haven't beaten SPAMDOMAINS sufficiently to death, so here's my
contribution. I have two observations:
One:
I have a line in my sd.txt file that says:
msn.com hotmail.com
as have several of the submitted spamdomain candidate lists.
I just found a message in my HOLD queue that failed SPAMDOMAINS, the header
of that message is:
Received: from hotmail.com [65.54.169.82] by mail.mydomain.com with ESMTP
(SMTPD32-6.05) id A3A93EE1011C; Mon, 09 Jun 2003 11:11:37 -0400
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Mon, 9 Jun 2003 08:11:35 -0700
Received: from 65.128.140.138 by bay3-dav52.bay3.hotmail.com with DAV;
Mon, 09 Jun 2003 15:11:35 +0000
X-Originating-IP: [65.128.140.138]
X-Originating-Email: [EMAIL PROTECTED]
From: "Stuff Sender" <[EMAIL PROTECTED]>
To: "myuser" <[EMAIL PROTECTED]>
Subject:
Date: Mon, 9 Jun 2003 10:35:27 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0003_01C32E72.D7B7C400"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: MSN Mail 8.00.0022.3100
X-MimeOLE: Produced By Microsoft MimeOLE V8.00.0022.3100
Message-ID: <[EMAIL PROTECTED]>
X-OriginalArrivalTime: 09 Jun 2003 15:11:35.0576 (UTC)
FILETIME=[6AF41180:01C32E99]
X-RBL-Warning: Spamdomains
X-Declude-Sender: [EMAIL PROTECTED] [65.54.169.82]
X-Note: Total spam weight of this E-mail is 18.
X-Note: QueInControl: Da3a911c.SMD (1)
X-Note: Tests failed: NJABL, NOPOSTMASTER, NOABUSE, IPNOTINMX,
NOLEGITCONTENT, SPAMDOMAINS, WEIGHT10, WEIGHT14
X-Note: Message followed: UNITED STATES->destination
X-Note: RDNS Real Origin: bay3-dav52.bay3.hotmail.com[65.54.169.82]
But in the log file I find this line:
06/09/2003 11:12:07 Qa3a911c Msg failed SPAMDOMAINS (Spamdomain 'msn.com'
found: Address of [EMAIL PROTECTED] sent from invalid
bay3-dav52.bay3.hotmail.com.). Action=WARN.
This is not the behavior I expected.
Two:
Although SPAMDOMAINS is listed in the list of failed tests in my header
above, this is a line from the log file:
06/09/2003 11:12:07 Qa3a911c NJABL:8 NOPOSTMASTER:5 NOABUSE:5 . Total
weight = 18
Notice the absence of SPAMDOMAINS:5 in that list, which is what I might have
expected there. My SPAMDOMAINS test is invoked this way:
SPAMDOMAINS spamdomains C:\IMail\Declude\sd.txt x 5 0
It appears that something failed to connect somewhere in processing. I'm
guessing that message should have reached 23 points.
I'm going to comb the log for more instances of SPAMDOMAINS and see what
else is happening, but this little bit was unsettling.
--
John Shacklett
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
