Scott, Here's the header from a legit message to me that failed SORBS-DUHL.
Received: from SMTP32-FWD by csimo.com (SMTP32) id A00000298; Tue, 16 Dec 2003 07:11:26 -0600 Received: from SMTP32-FWD by csimo.com (SMTP32) id A0000049C; Tue, 16 Dec 2003 07:11:26 -0600 Received: from brothers [64.251.138.48] by brothersmaytag.com (SMTPD32-7.15) id A47B5700112; Tue, 16 Dec 2003 07:11:23 -0600 Message-ID: <[EMAIL PROTECTED]> From: "Jim Miller" <[EMAIL PROTECTED]> To: "Joe Wolf" <[EMAIL PROTECTED]> Subject: Enola Gay Exhibit Date: Tue, 16 Dec 2003 07:10:28 -0600 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_001D_01C3C3A3.AF2F3CE0" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 X-RBL-Warning: SORBS-DUHL: Dynamic IP Address See: http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=64.251.138.48 X-Declude-Sender: [EMAIL PROTECTED] [64.251.138.48] X-Note: This E-mail was scanned for spam. X-Spam-Tests-Failed: SORBS-DUHL, IPNOTINMX, NOLEGITCONTENT [4] X-Note: This E-mail was sent from 64-251-138-48-dialup-mo.fidnet.com ([64.251.138.48]). Status: U X-UIDL: 355029812 ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, December 16, 2003 10:55 AM Subject: Re: [Declude.JunkMail] JunkMail config files... > > >I don't know anything about "HOPHIGH". Mine is set at whatever your default > >is. > > OK, then that isn't a problem. > > But it still doesn't explain why you have so much legitimate E-mail failing > the SORBS-DUHL test. That's a serious problem. Could you post the full > headers of a legitimate E-mail that failed the SORBS-DUHL test? > > >So it sounds like you're saying I've done the right thing and not much more > >to do? > > Correct, *if* you are configured correctly. But many people aren't -- the > two most common reasons are that they have backup/gateway mailservers that > Declude JunkMail doesn't know about (in which case the E-mail can't be > scanned properly), or that they use poor whitelists (such as "WHITELIST > FROM @my_domain.com" (which whitelists lots of spam) or "WHITELIST FROM > mail.com" (which whitelists mail from @hotmail.com)). > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > Declude Virus: Catches known viruses and is the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask about our free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
