If you are using the "fromfile" functionality in Declude, it searches the MAILFROM (from the SMTP envelope given in HELO) and not the From address listed in the E-mail's headers. I can certainly be different. You can get Declude to display this by adding the following line to your Global.cfg (on by default):
XSENDER ON
It could also be that the MAILFROM came in as @mx07.com, in which case .mx07.com would miss. I'm not sure if that's what you were getting at though.
Matt
Danny Klopfer wrote:
I have .mx07.com in my kill file. Should it not kill the message below? I even stopped and restarted the smtp service.
Received: from mail04-platinum.mx07.com [209.66.76.69] by ncws.com with ESMTP
(SMTPD32-8.03) id A4791D5500A6; Sat, 15 Nov 2003 14:11:05 -0800
Received: (from [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>)
by mail04-platinum.mx07.com (8.8.8/8.8.8) id RAA65653;
Sat, 15 Nov 2003 17:05:40 -0500 (EST)
Date: Sat, 15 Nov 2003 17:08:08 -0500 (EST)
Message-Id: <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>>
From: The Platinum List <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>>
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
