Hi,

I'm holding on 7, deleting on 14 (I didn't change the labels on the tests,
they still say WEIGHT10 for HOLD  and WEIGHT20 for DELETE).  Here, the
weight is 18 and should delete, but does not.  I see in Spam review that it
has exceeded the DELETE threshold also, but it is not being deleted.

This is only happening for this *one* customer who has a virtual domain.
Thanks, ANdy

Here is what spam review reports:
X-RBL-Warning: SPAMCOP: Blocked - see
http://www.spamcop.net/bl.shtml?69.6.42.52
X-RBL-Warning: EASYNET-DNSBL: Blacklisted by easynet.nl DNSBL -
http://blackholes.easynet.nl/errors.html
X-RBL-Warning: SBL: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL6636
X-RBL-Warning: WEIGHT10: Weight of 18 reaches or exceeds the limit of 10.
X-RBL-Warning: IPNOTINMX:
X-RBL-Warning: MYFILTER: Message failed MYFILTER test (17)
X-RBL-Warning: Total weight: 11

Log file entry
11/28/2003 12:52:24 Q8b540ec MYFILTER:11 .  Total weight = 11
11/28/2003 12:52:24 Q8b540ec Msg failed IPNOTINMX (). Action=WARN.
11/28/2003 12:52:24 Q8b540ec Msg failed MYFILTER (Message failed MYFILTER
test (17)). Action=WARN.
11/28/2003 12:52:24 Q8b540ec Msg failed WEIGHT10 (Weight of 11 reaches or
exceeds the limit of 7.). Action=HOLD.
11/28/2003 12:52:24 Q8b540ec Subject: Learn a new Language in 10 days
11/28/2003 12:52:24 Q8b540ec From:
[EMAIL PROTECTED] To:
[EMAIL PROTECTED]

2nd example

Log file
11/28/2003 12:47:40 Q8a3b11e MYFILTER:10 .  Total weight = 10
11/28/2003 12:47:40 Q8a3b11e Msg failed IPNOTINMX (). Action=WARN.
11/28/2003 12:47:40 Q8a3b11e Msg failed MYFILTER (Message failed MYFILTER
test (6)). Action=WARN.
11/28/2003 12:47:40 Q8a3b11e Msg failed WEIGHT10 (Weight of 10 reaches or
exceeds the limit of 7.). Action=HOLD.
11/28/2003 12:47:40 Q8a3b11e Subject: Easy Mortgage Shopping, Apply Free,
Any Credit Accepted
11/28/2003 12:47:40 Q8a3b11e From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED]  IP: 208.7.129.160 ID: A05A8049D

Spam review
X-RBL-Warning: EASYNET-DNSBL: Blacklisted by easynet.nl DNSBL -
http://blackholes.easynet.nl/errors.html
X-RBL-Warning: SBL: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL9187
X-RBL-Warning: WEIGHT10: Weight of 14 reaches or exceeds the limit of 10.
X-RBL-Warning: IPNOTINMX:
X-RBL-Warning: MYFILTER: Message failed MYFILTER test (6)
X-RBL-Warning: Total weight: 10


----- Original Message -----
From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, November 28, 2003 11:37 AM
Subject: RE: [Declude.JunkMail] holding not deleting


> Logs and headers.
>
> John Tolmachoff
> Engineer/Consultant/Owner
> eServices For You
>
>
> > -----Original Message-----
> > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > [EMAIL PROTECTED] On Behalf Of andyb
> > Sent: Friday, November 28, 2003 8:26 AM
> > To: [EMAIL PROTECTED]
> > Subject: [Declude.JunkMail] holding not deleting
> >
> > Hi,
> >
> > I have one customer that has a virtual domain.  Even though this
> > [EMAIL PROTECTED] is receiving email that exceeds my DELETE
> > threshold,
> > the messagages are only being HELD.
> >
> > Any idea why this is happening?  I don't have any special rules setup
for
> > this customer under Declude that I can find.
> >
> > Thanks, andy
> >
> > ---
> > [This E-mail was scanned for viruses by Declude Virus
> > (http://www.declude.com)]
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to