Okay, but why is CATCHALLMAILS even coming into play? I had it commented out (always have). It has never shown up as a warning in the headers before. Just started showing up. Thanks, Katie
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, February 10, 2004 4:15 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Perplexed -- false positives on HELOBOGUS AND CATCHALLMAILS >As of today I've got something odd going on with our Declude >Junkmail. Any assistance would be great appreciated! > >A great many emails are failing HELOBOGUS and CATCHALLMAILS (which is >commented out in my default junkmail file). All E-mails fail CATCHALLMAILS. So that isn't an issue. >Here is one example header: > >Received: from eciexchange.ECI [63.160.64.141] by mail.centric.net with ESMTP > (SMTPD32-8.05) id A3421E7500AE; Tue, 10 Feb 2004 10:22:10 -0700 This E-mail had a HELO/EHLO of "exiexchange.ECI", which isn't a valid host name, so it appropriately failed the HELOBOGUS test. >DSBL DELETE >ORDB DELETE >SPAMCOP DELETE >DSN DELETE >NOABUSE WARN >NOPOSTMASTER WARN >BADHEADERS SUBJECT >HELOBOGUS WARN >MAILFROM WARN >PERCENT DELETE >REVDNS WARN >SPAMHEADERS SUBJECT >AHBL DELETE >DSBLMULTI DELETE >NJABL DELETE >RSL DELETE >SBL DELETE >SORB-SMTP DELETE These are very strict settings. Note that we normally recommend using the weighting system -- otherwise, you will likely see a fair amount of legitimate mail get blocked. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
