Checking that IP at: http://openrbl.org
Shows that SORBS-HTTP is listing that last hop, which looks like Verizon Wireless. It's been all too common for ip4r lists to nominate smtp and webmail based servers due to spam or worse, viruses being sent through them by infected clients. CBL has also chimed in, presumably because SORBS has listed that IP. DSBL no longer lists that IP. As for the SPAMHEADERS test, you can check the returned code at: http://www.declude.com/tools/ which says that the message is missing the MESSAGE-ID: header, which from this list I understand to be a failing of MS Outlook, which does appear listed in the headers. As for what to do about it, you could give SPAMHEADERS and SORBS-HTTP lower weights, or you could put in a counterweight for any mail coming from 66.174.6.205 if you generally trust mail from that service. Andrew 8) -----Original Message----- From: Mike Barnett [mailto:[EMAIL PROTECTED] Sent: Saturday, March 20, 2004 3:46 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Verizon Is anyone having problems with Verizon? Here is the header from one of my messages... Received: from D6SR0641 [66.174.6.205] by mail.internetcrusade.net with ESMTP (SMTPD32-8.02) id AA79ECC006A; Sat, 20 Mar 2004 03:26:49 -0800 Received: from (166.155.59.200) by (66.174.6.205); 20 Mar 2004 10:48:08+0000 From: "Mike Barnett" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: [SPAM Warning: High] Let me know Date: Sat, 20 Mar 2004 03:20:24 -0800 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.5510 Thread-Index: AcQObIrN4vUe8amvRFmLBn/hbzDPwg== X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Message-Id: <[EMAIL PROTECTED]> X-RBL-Warning: DSBL: http://dsbl.org/listing?ip=66.174.6.205 X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [4000020e]. X-RBL-Warning: WEIGHT10: Weight of 20 reaches or exceeds the limit of 10. X-RBL-Warning: WEIGHT20: Weight of 20 reaches or exceeds the limit of 20. X-Declude-Sender: [EMAIL PROTECTED] [66.174.6.205] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: CBL, DSBL, SORBS-HTTP, IPNOTINMX, SPAMHEADERS, WEIGHT10, WEIGHT20 [20] X-RCPT-TO: <[EMAIL PROTECTED]> Thx MB Mike Barnett CRS, e-PRO, GRI VP Technology, InternetCrusade http://InternetCrusade.com MailTo:[EMAIL PROTECTED] 619-283-7302 Press 0 and ask Operator to find me ;-) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
