Can you post the full header for that message? John Tolmachoff Engineer/Consultant/Owner eServices For You
> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of andyb > Sent: Friday, November 28, 2003 12:25 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] holding not deleting > > > Here is the config file section: > > XINHEADER X-RBL-Warning: Total weight: %WEIGHT% > XOUTHEADER X-RBL-Warning: Total weight: %WEIGHT% > XINHEADER X-Note: Total spam weight of this E-mail is %WEIGHT%. > XINHEADER X-Note: This E-mail was scanned by Declude JunkMail > (www.declude.com) for spam. > XINHEADER X-Spam-Tests-Failed: %TESTSFAILED% [%WEIGHT%] > XOUTHEADER X-Note: This E-mail was scanned by Declude JunkMail > (www.declude.com) for spam. > XSENDER ON > XSPOOLNAME OFF > XOUTHEADER Organization: Thumpernet > XOUTHEADER X-Note: Please report abuse to [EMAIL PROTECTED] > #IPBYPASS 127.0.0.1 > > > ---------- Original Message ---------------------------------- > From: "Colbeck, Andrew" <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > Date: Fri, 28 Nov 2003 12:01:30 -0800 > > >Andy, what is your global.cfg line that produces the total in the header? > >It doesn't look line mine, and SpamReview has a very specific requirement > to > >report the correct value, e.g. > > > >XOUTHEADER X-Note: Total spam weight of this E-mail is %WEIGHT%. > > > >(my implementation of IMail is as a gateway, so everything is "OUT". You > >may be using XINHEADER.) > > > >Also, how about taking apart the rest of the log and your config files > and > >adding up the math manually? > > > >Andrew 8) > > > >-----Original Message----- > >From: andyb [mailto:[EMAIL PROTECTED] > >Sent: Friday, November 28, 2003 11:51 AM > >To: [EMAIL PROTECTED] > >Subject: Re: [Declude.JunkMail] holding not deleting > > > > > >I'm looking at Weight of 18 reaches or exceeds the limit of 10. > > > >It it is 18, it also exceeds 14, the limit I delete at.... > > > >Thanks, andy > > > >----- Original Message ----- > >From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > >To: <[EMAIL PROTECTED]> > >Sent: Friday, November 28, 2003 2:29 PM > >Subject: RE: [Declude.JunkMail] holding not deleting > > > > > >> > Here is what spam review reports: > >> > X-RBL-Warning: SPAMCOP: Blocked - see > >> > http://www.spamcop.net/bl.shtml?69.6.42.52 > >> > X-RBL-Warning: EASYNET-DNSBL: Blacklisted by easynet.nl DNSBL - > >> > http://blackholes.easynet.nl/errors.html > >> > X-RBL-Warning: SBL: > http://www.spamhaus.org/SBL/sbl.lasso?query=SBL6636 > >> > X-RBL-Warning: WEIGHT10: Weight of 18 reaches or exceeds the limit of > >10. > >> > X-RBL-Warning: IPNOTINMX: > >> > X-RBL-Warning: MYFILTER: Message failed MYFILTER test (17) > >> > X-RBL-Warning: Total weight: 11 > >> > >> Is this what you are looking at, the 17 here: > >> > >> X-RBL-Warning: MYFILTER: Message failed MYFILTER test (17) > >> > >> That is the line number in the MYFILTER test that caused it to be > caught, > >> not the weight. > >> > >> John Tolmachoff > >> Engineer/Consultant/Owner > >> eServices For You > >> > >> > >> --- > >> [This E-mail was scanned for viruses by Declude Virus > >(http://www.declude.com)] > >> > >> --- > >> This E-mail came from the Declude.JunkMail mailing list. To > >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >> type "unsubscribe Declude.JunkMail". The archives can be found > >> at http://www.mail-archive.com. > >> > > > >--- > >[This E-mail was scanned for viruses by Declude Virus > >(http://www.declude.com)] > > > >--- > >This E-mail came from the Declude.JunkMail mailing list. To > >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >type "unsubscribe Declude.JunkMail". The archives can be found > >at http://www.mail-archive.com. > >--- > >[This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > >--- > >This E-mail came from the Declude.JunkMail mailing list. To > >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >type "unsubscribe Declude.JunkMail". The archives can be found > >at http://www.mail-archive.com. > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
