Scott, I know I can figure this out by parsing the IMail logs, but I am wondering why these messages have "Action=IGNORE" applied to them, but without the "Subject" and "From/To" lines, there is no way to tell by parsing just the Declude JunkMail logs:
===== 09/22/2003 17:01:04 Q8d3c39c70054e638 nNOLEGITCONTENT:-5 REVDNS:1 GIBBERISH-FILTER:5 NOGIBBERISH-FILTER:-5 SUBJECT-FILTER:-3 VERP-FILTER:5 FORGED-DOMAINS:5 SPAMCHECK:-3 . Total weight = 0 09/22/2003 17:01:04 Q8d3c39c70054e638 Msg failed REVDNS (This E-mail was sent from a MUA/MTA 65.169.102.21 with no reverse DNS entry.). Action=IGNORE. 09/22/2003 17:01:04 Q8d3c39c70054e638 Msg failed GIBBERISH-FILTER (Message failed GIBBERISH-FILTER test (88)). Action=IGNORE. 09/22/2003 17:01:04 Q8d3c39c70054e638 Msg failed NOGIBBERISH-FILTER (Message failed NOGIBBERISH-FILTER test (86)). Action=IGNORE. 09/22/2003 17:01:04 Q8d3c39c70054e638 Msg failed SUBJECT-FILTER (Message failed SUBJECT-FILTER test (130)). Action=IGNORE. 09/22/2003 17:01:04 Q8d3c39c70054e638 Msg failed VERP-FILTER (Message failed VERP-FILTER test (11)). Action=IGNORE. 09/22/2003 17:01:04 Q8d3c39c70054e638 Msg failed FORGED-DOMAINS (Spamdomain '@cwhealth.net' found: Address of [EMAIL PROTECTED] sent from invalid [No Reverse DNS].). Action=IGNORE. 09/22/2003 17:01:04 Q8d3c39c70054e638 Msg failed SPAMCHECK (Message failed SPAMCHECK: -3.). Action=IGNORE. 09/22/2003 17:01:04 Q8d3c39c70054e638 R1 Message OK ===== Running Declude v1.76i1, with log level set to MID. Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
