>Is the E-mail to that account forwarded to another account >(in which case the MAILBOX action would not apply)?
I didn't even think of that, yes it is. Why does the MAILBOX action not apply? >Is it always happening for the same user(s), or just randomly? So far it's just me and one other user seeing it - but most users wouldn't know how to look for it. The other user has two accounts, User.Office and User.Home. The User.Office account is the main account and forwards like this: "., [EMAIL PROTECTED]". A spam came in with a score of 32 address to User.Office. It was sent to the Spam mailbox of User.Office but delivered to the inbox of User.Home. What is Declude doing is this case? >That's because the default action, if no action is defined, is IGNORE. Ah, that makes a lot of sense. Thanks! ~Brad -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, November 26, 2003 4:40 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Why was this message delivered? >A message was delivered with a weight of 38. The logs show this: > >11/25/2003 01:09:06 Q1c273da Msg failed WEIGHT10 (Weight of 38 reaches >or exceeds the limit of 10.). Action=WARN. 11/25/2003 01:09:06 Q1c273da >Msg failed WEIGHT15 (Weight of 38 reaches or exceeds the limit of 15.). >Action=MAILBOX. 11/25/2003 01:09:06 Q1c273da Msg failed WEIGHT20 >(Weight of 38 reaches or exceeds the limit of 20.). Action=IGNORE. This E-mail should have been moved to the recipient's Spam mailbox. Is the E-mail to that account forwarded to another account (in which case the MAILBOX action would not apply)? Is it always happening for the same user(s), or just randomly? >Why was the WEIGHT20 IGNORE rule followed, even when it had the # >comment marker before it? That's because the default action, if no action is defined, is IGNORE. So if you had had "#WEIGHT20 HOLD", you would still have seen "Action=IGNORE". -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
