Title: Message
As I know there is some problem if the mailfrom is "Admin". This is not a declude error but should relate to IMail. Scott should know more about.
As you can see in the headers such messages fail enough spamtests to be hold, but for some reason IMail will handle "Admin" mails a little bit different
 
Markus
 
 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of TCOnline Internet Support
Sent: Tuesday, June 29, 2004 3:19 PM
To: Declude.JunkMail
Subject: [Declude.JunkMail] Spam sent to list

I was wondering if someone was posting this item to the list or if my e-mail address was harvest from somewhere.
 
 
 
Isaias Hernandez
TC Online Internet Support
979-775-6239
[EMAIL PROTECTED]
 
 
 
Received: from declude.com [68.162.218.198] by mail.tconline.net with ESMTP
  (SMTPD32-7.15) id A3476F6F00C6; Mon, 28 Jun 2004 22:34:31 -0500
Received: from pa198.miejsce-piastowe.sdi.tpnet.pl [217.99.175.198] by mail.declude.com
  (SMTPD32-8.05) id A2713530256; Mon, 28 Jun 2004 23:30:57 -0400
X-Message-Info: 315jiTpiaLUO037Vdjitu5nmAEwdWCW857XHZ9feDvejY0
Received: from dns014yahoo.com ([24.117.232.112]) by lp52-nks49.yahoo.com with Microsoft SMTPSVC(5.0.2195.6824);
  Mon, 28 Jun 2004 17:24:57 +0100
Received: from yahoo.com [127.0.0.1] by dnsyahoo.com
  (SMTPD32-7.12     ) id AWW909SH6; Mon, 28 Jun 2004 17:27:57 +0100
Subject: [Declude.Virus] SPAMWT40:Attn:Urgent Sales Verification!Act now!
From: Admin
To: [EMAIL PROTECTED]
Message-Id: <[EMAIL PROTECTED]>
Content-Type: multipart/alternative;
 boundary="--105305717518494121"
X-RBL-Warning: BLITZEDALL: "open proxy - see http://opm.blitzed.org/?ip=217.99.175.198"
X-RBL-Warning: DSBL: "http://dsbl.org/listing?ip=217.99.175.198"
X-RBL-Warning: DSBLALL: "http://dsbl.org/listing?ip=217.99.175.198"
X-RBL-Warning: FIVETENSRC: 112.232.117.24.blackholes.five-ten-sg.com.
X-RBL-Warning: MAILDEFLECTOR: "Mail from 217.99.175.198 refused by the postmaster at this domain.  Please contact the postmaster for help.  You may also link to http://www.maildeflector.net/whywasirefused.php for help"
X-RBL-Warning: SORBS-HTTP: "HTTP Proxy See: http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=217.99.175.198"
X-RBL-Warning: SORBS-SOCKS: "HTTP Proxy See: http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=217.99.175.198"
X-RBL-Warning: SPAMCOP: "Blocked - see http://www.spamcop.net/bl.shtml?217.99.175.198"
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client [a020010d].
X-RBL-Warning: SNIFFER: Message failed SNIFFER: 50.
X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 15.
X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner consistent with spam [a020010d].
X-RBL-Warning: WEIGHT10: Weight of 58 reaches or exceeds the limit of 10.
X-RBL-Warning: WEIGHT20: Weight of 58 reaches or exceeds the limit of 20.
X-Note: This E-mail was scanned for viruses by Declude Virus (www.declude.com)
X-NRecips: 4
X-Reverse-IP: pa198.miejsce-piastowe.sdi.tpnet.pl
X-Weight: 58 (BLITZEDALL, DSBL, DSBLALL, FIVETENSRC, MAILDEFLECTOR, NJABLPROXIES, SORBS-HTTP, SORBS-SOCKS, SPAMCOP, SPFUNKNOWN, BADHEADERS, HEUR4, SNIFFER, SPAMCHK, ROUTING, IPNOTINMX, NOLEGITCONTENT, EXPER, CMDSPACE, WEIGHT10, WEIGHT20, WEIGHT40)
X-Country-Chain: UNITED STATES->POLAND->destination.
X-Declude-Sender: [EMAIL PROTECTED] [217.99.175.198]
X-Declude-Spoolname: De27103530256df24.SMD
Precedence: bulk
Sender: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date: Mon, 28 Jun 2004 23:34:33 -0400
X-Declude-Sender: [EMAIL PROTECTED] [68.162.218.198]
X-Declude-Spoolname: De3476f6f00c6aec9.SMD
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
X-Spam-Tests-Failed: Whitelisted [0]
X-Country-Chain: UNITED STATES->POLAND->UNITED STATES->destination
X-Note: This E-mail was sent from dpvc-68-162-218-198.bos.east.verizon.net ([68.162.218.198]).
X-Note: Total Spam weight of this E-mail is 0.
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 385403722
 
 
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Admin
Sent: Monday, June 28, 2004 10:35 PM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] SPAMWT40:Attn:Urgent Sales Verification!Act now!



BUY CHEAP DRUGS,OVERNIGHT DELIVERY

Reply via email to