Below is a message that did not fail a filter test, GreyFilter3. What am I
missing that it did not get caught?
>From Imail SMTPD log:
2004-03-27 08:49:39 Local7.Debug 127.0.0.1 SMTPD (2AD30026)
[67.94.227.39] connect 68.164.114.3 port 3017
2004-03-27 08:49:39 Local7.Debug 127.0.0.1 SMTPD (2AD30026)
[68.164.114.3] HELO srv1.eservicesforyou.net
2004-03-27 08:49:39 Local7.Debug 127.0.0.1 SMTPD (2AD30026)
[68.164.114.3] MAIL FROM:<[EMAIL PROTECTED]>
2004-03-27 08:49:39 Local7.Debug 127.0.0.1 SMTPD (2AD30026)
[68.164.114.3] RCPT TO:<[EMAIL PROTECTED]>
2004-03-27 08:49:39 Local7.Debug 127.0.0.1 SMTPD (2AD30026)
[68.164.114.3] F:\Spool\Db0a32ad30026f8a0.SMD 3969
Line in GreyFilter3:
HELO 5 IS srv1.eservicesforyou.net
Full Headers:
Received: from srv1.eservicesforyou.net [68.164.114.3] by
mail.eservicesforyou.net
(SMTPD32-8.05) id A0A32AD30026; Sat, 27 Mar 2004 08:49:39 -0800
Received: from dialin-145-254-233-211.arcor-ip.net ([145.254.233.211]) by
srv1.eservicesforyou.net with Microsoft SMTPSVC(5.0.2195.6713);
Sat, 27 Mar 2004 08:49:35 -0800
Received: from 64.24.88.152 by 145.254.233.211 with SMTP; Sat, 27 Mar 2004
11:49:13 -0500
Date: Sat, 27 Mar 2004 11:49:13 -0500
From: Bradley Tolbert <[EMAIL PROTECTED]>
Reply-To: Bradley Tolbert <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject:
MIME-Version: 1.0
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 27 Mar 2004 16:49:36.0975 (UTC)
FILETIME=[7D2955F0:01C4141B]
X-RBL-Warning: SORBS-DUL: "Dynamic IP Address See:
http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=145.254.233.211"; [2-11-5800]
X-RBL-Warning: SPAMDOMAINS: Spamdomain '@insurer.com' found: Address of
[EMAIL PROTECTED] sent from invalid dialin-145-254-233-211.arcor-ip.net.
[2-52-1a000]
X-RBL-Warning: SPAMCHECK: Message failed SPAMCHECK: 12. [2-54-1b000]
X-Declude-Sender: [EMAIL PROTECTED] [145.254.233.211]
X-Declude-Spoolname: Db0a32ad30026f8a0.SMD
X-RBL-Warning: Total weight: 29
X-RBL-Warning: TESTS FAILED: SORBS-DUL, IPNOTINMX, NOLEGITCONTENT,
SPAMDOMAINS, SPAMCHECK
X-Note: This E-mail was received from RevDNS:
[dialin-145-254-233-211.arcor-ip.net]
X-Note: This E-mail was received from IP: [145.254.233.211]
X-Note: This e-mail was scanned by eServices For You for Viruses and SPAM.
X-Note: To report any issues, please contact [EMAIL PROTECTED]
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
