Thanks for help in creating a kill list. The below is a spam message being received. I noticed in these headers that is says:
X-RBL-Warning: EASYNET-DNSBL: Blacklisted by easynet.nl DNSBL - http://blackholes.easynet.nl/errors.html X-RBL-Warning: SBL: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL7279 X-Declude-Sender: [EMAIL PROTECTED] [64.156.222.88]
Can someone explain to me what each of these lines mean and shouldn't these be being block instead of warned?
Those lines mean that you use the WARN action for the EASYNET-DNSBL and SBL tests. More information on those tests can be found at http://www.declude.com/junkmail/support/ip4r.htm .
You can certainly block E-mail that fails either of those two tests if you like. However, if you do not, they will both count towards the weighting system (at 7 points each, using the default configuration file). So it would probably be safer to block E-mail with a weight of 10 or higher, than to block E-mail failing either of those two tests.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
