Yes, they correspond. I checked the name, Q8b540ec.SMD, etc. Same in both spam review and the log file. That's how I found the specific log file entry.
What version of Declude are you running ("\IMail\Declude -diag" from a command prompt will show you)?
I've never heard of any cases where Declude JunkMail logged that it would use the HOLD action (and did), but also used the WARN action.
Also:
> >X-RBL-Warning: WEIGHT10: Weight of 18 reaches or exceeds the limit of 10. > > >11/28/2003 12:52:24 Q8b540ec Msg failed WEIGHT10 (Weight of 11 reaches or > >exceeds the limit of 7.). Action=HOLD.
note that the log file shows the weight as 11, but the E-mail headers shows the weight as 18. But wait, there is more:
X-RBL-Warning: WEIGHT10: Weight of 18 reaches or exceeds the limit of 10. X-RBL-Warning: Total weight: 11
Now, we see two different weights.
Could the E-mail be going through 2 different mailservers running Declude?
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
