Scott,

My fault.  I was not reading the log files correctly.  Two things I just
learnt:

1. If there is a rule and there is no defined action (incoming or outgoing)
the rule is ignored.
2. I am getting swamped with junkmail intended for another host whose
secondary MX is my host.

Has anyone noticed this?  Spammers sending junkmail to secondary MX's?

David 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Thursday, 26 June, 2003 00:21
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Filtering Headers



>I have a file in the .\declude directory called headblock.txt
>The contents of the file are:

My first question would be whether or not you are running Declude JunkMail 
Pro, which is required for filtering?

The next question:  Does the Declude JunkMail log file show that the 
E-mails are failing the test (in which case the test is set up properly, 
but the actions may not be; otherwise, the test probably isn't set up 
correctly)?

>However, I do not find any reference in the log (HIGH) to HEADBLOCK.

That answers my second question, so I would go back to the first question.

>In addition, is there a detailed explanation of the email parts (HELO,
>HEADERS etc...) for I am not sure what each part entails for example: Is
>HELO a subset of HEADERS?

HELO refers to the "HELO/EHLO" data that a mailserver sends (it's found in 
the Received: header, just before the IP address).
                                 -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to