Hello, All, We are using DJM Pro. I have a message that was "held" by DJM and I'm not clear on why it was "held". According to the headers the "weight" exceeded the current "hold weight" for the domain but I can't figure out how DJM added up the tests that it failed to come up with that "weight".
Here are the headers of the message... - Received: from lyris.sunbelt-software.com [207.90.4.67] by NexusTechGroup.com (SMTPD32-6.06) id AF3952E0078; Fri, 20 Jun 2003 05:09:13 -0400 Received: from wsmail.icl.com ([194.176.223.197]) by lyris.sunbelt-software.com with SMTP (Lyris ListManager WIN32 version 4.1.2); Fri, 20 Jun 2003 05:08:56 -0400 Received: from mailgate.icl.co.uk (mailgate.icl.com [172.16.2.21]) by wsmail.icl.com (8.12.8/8.12.8) with ESMTP id h5K9Blef017277 for <[EMAIL PROTECTED]>; Fri, 20 Jun 2003 10:11:48 +0100 (BST) Received: from vguard2.icl.co.uk (vguard2a.icl.co.uk [172.16.2.24]) by mailgate.icl.co.uk (8.9.3/8.9.0) with SMTP id KAA29471 for <[EMAIL PROTECTED]>; Fri, 20 Jun 2003 10:07:17 +0100 (BST) Received: From x400.icl.co.uk ([145.227.248.89]) by vguard2.icl.co.uk (WebShield SMTP v4.5 MR1a); id 1056100124765; Fri, 20 Jun 2003 10:08:44 +0100 Received: from fel01suksmsg2.icl.com (fel01suksmsg2.icl.com [145.227.201.50]) by x400.icl.co.uk (8.9.3/8.9.2) with ESMTP id KAA24785 for <[EMAIL PROTECTED]>; Fri, 20 Jun 2003 10:07:14 +0100 (BST) Received: by FEL01SUKSMSG2 with Internet Mail Service (5.5.2653.19) id <MRG5V4HX>; Fri, 20 Jun 2003 10:08:39 +0100 Message-ID: <[EMAIL PROTECTED] sunbelt-software.com> From: Boswell Tim <[EMAIL PROTECTED]> To: "NT System Admin Issues" <[EMAIL PROTECTED]> Subject: RE: Fraud Alert? Date: Fri, 20 Jun 2003 10:08:40 +0100 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="iso-8859-1" List-Unsubscribe: <mailto:[EMAIL PROTECTED]> Reply-To: "NT System Admin Issues" <[EMAIL PROTECTED]> X-RBL-Warning: FILTER-MAILFROM: Message failed FILTER-MAILFROM test (9) X-Declude-Sender: [EMAIL PROTECTED] [207.90.4.67] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: OSSOFT, EASYNET-DNSBL, SBL, ROUTING, WEIGHT05, WEIGHT07, WEIGHT09, WEIGHT10, WEIGHT13, FILTER-MAILFROM [13] X-Spam-Prob: 0.000731 - Here are the current active lines for NexusTechGroup.com from $default$.junkmail.. - FROMFILE-HOLD HOLD IPFILE-HOLD HOLD MAILFROM HOLD WEIGHT13 HOLD FILTER-BODY-IP WARN FILTER-BODY-PHONE WARN FILTER-BODY-URL WARN FILTER-MAILFROM WARN SPAMCOP WARN - Here are the associated lines from the global.cfg... - OSSOFT ip4r relays.osirusoft.com 127.0.0.6 5 0 EASYNET-DNSBL ip4r blackholes.easynet.nl 127.0.0.2 7 0 SBL ip4r sbl.spamhaus.org 127.0.0.2 5 0 ROUTING spamrouting x x 4 0 WEIGHT05 weight x x 5 0 WEIGHT07 weight x x 7 0 WEIGHT09 weight x x 9 0 WEIGHT10 weight x x 10 0 WEIGHT13 weight x x 13 0 FILTER-MAILFROM filter D:\iMail\declude\JunkMail.Filter.MailFrom.txt x 0 0 - Here is the associated line from JunkMail.Filter.MailFrom.txt... - MAILFROM -5 CONTAINS sunbelt-software.com - If add up all of the weights... OSSOFT + EASYNET-DNSBL + SBL + ROUTING + WEIGHT05 + WEIGHT07 + WEIGHT09 + WEIGHT10 + WEIGHT13 + FILTER-MAILFROM I get... 5 + 7 + 5 + 4 + 0 + 0 + 0 + 0 + 0 + (-5) = 16 ... but the number in brackets at the end of the "X-Spam-Tests-Failed:" is 13. I can't figure out where it's coming up with the number 13. I appreciate any insight the kinds members of this list can provide! Take Care, Dan ==================================================================== This E-mail is scanned and free from viruses. www.nexustechgroup.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
