> Are you running two IMail/Declude servers? It looks like the E-mail went > to your MX3.NetWood.net (Postfix), which sent to it to centurymedia.com > (IMail) which sent it to MX4.NetWood.net (Postfix) which sent it to > netwood.net (IMail).
This is correct. For some reason the email should not have been received originally by mx3 because that's the backup Imgate but that shouldn't matter anyhow. On the Imail server that host centurymedia.com I have WHITELIST the IP of the original sender but I'm sending WEIGHT12 to a separate mailbox on a different Imail server via mx4. However the message should never be sent there because the IP is WHITELIST'd. Strange.
Here are the headers that were sent to the first IMail server (centurymedia.com):
Received: from k1s3k2 (68-173-225-12.nyc.rr.com [68.173.225.12]) by MX3.NetWood.net (Postfix) with SMTP id ECDAE40E61 for <[EMAIL PROTECTED]>; Sun, 19 Oct 2003 04:03:48 -0700 (PDT) (envelope-from [EMAIL PROTECTED]) From: "goregiasticrecords.com" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: POSSIBLE SPAM:Pre-Order NOW: New PUSTULATED, SAPROFFAGO, IMPURE & CAEDERE! Sender: "goregiasticrecords.com" <[EMAIL PROTECTED]> Mime-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Date: Sun, 19 Oct 2003 07:02:05 -0400 Message-Id: <[EMAIL PROTECTED]>
IMail added a Received: header (with the IP 209.247.184.13), and Declude JunkMail added a number of headers. Declude JunkMail saw the IP as 68.173.225.12 (due to an IPBYPASS that included 209.247.184.13).
What is the WHITELIST entry on centurymedia.com that should have whitelisted this E-mail? Do you have more than 200 WHITELIST entries on that server? Are there any spaces/tabs at the end of the WHITELIST line?
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
