Here are the headers from a Symantec firewall appliance 200R that I have e-mailing me logs. Just an FYI....
Received: from SMTP32-FWD by mail.prudentialrand.com (SMTP32) id A00000334; Fri, 9 Jan 2004 07:53:09 -0500 Received: from Nexland [66.153.48.35] by mail.prudentialrand.com (SMTPD32-7.15) id A4291DCB00E4; Fri, 09 Jan 2004 07:52:57 -0500 From: [EMAIL PROTECTED] Subject: [OVER DELETE WEIGHT]Symantec Firewall/VPN 200 ISBB6AAE6 Log File To: <[EMAIL PROTECTED]> Message-Id: <[EMAIL PROTECTED]> X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client [c020020c]. X-RBL-Warning: IPNOTINMX: X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 66.153.48.35 with no reverse DNS entry. X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [c020020c]. X-RBL-Warning: CMDSPACE: Space found in RCPT TO: command . X-RBL-Warning: FILTER: Message failed FILTER test (line 2334, weight -12) X-RBL-Warning: WEIGHT25: Weight of 30 reaches or exceeds the limit of 25. X-Declude-Sender: [EMAIL PROTECTED] [66.153.48.35] X-Declude-Spoolname: Da4291dcb00e4af35.SMD X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: BADHEADERS, IPNOTINMX, NOLEGITCONTENT, REVDNS, SPAMHEADERS, CMDSPACE, FILTER, SPAMDOMAINS1, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25, WEIGHT30 [30] X-Country-Chain: X-Note: This E-mail was sent from [No Reverse DNS] ([66.153.48.35]). Date: Fri, 9 Jan 2004 07:53:09 -0500 Status: R X-IMail-Rule: S~OVER DELETE WEIGHT:[EMAIL PROTECTED] Data- OVER DELETE WEIGHT]Symantec Fi X-UIDL: 311225146 --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
