This is working correctly, expect there are no declude headers for the messages.
Below each message is the lines from the declude log file:
Received: from z-point.de [24.202.78.132] by deepspace.i360.net
(SMTPD32-8.14) id AA1018301E8; Thu, 16 Dec 2004 15:11:44 -0600
Received: from 150.238.113.147 by smtp.tecban.com.br;
Thu, 16 Dec 2004 21:04:45 +0000
Message-ID: <[EMAIL PROTECTED]>
From: "Cristina Pickett" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: New product! Cialis soft tabs.
Date: Thu, 16 Dec 2004 18:04:33 -0300
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Spam-Status: Possible SPAM, hits=7.000000 required=5.000000
tests=SUBJECT_DRUG_GAP_C:2.900000
tests=BAYES_99:4.10000012/16/2004 15:11:50 Qfa10018301e85c11 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 24.202.78.132 ID:
12/16/2004 15:11:50 Qfa10018301e85c11 Tests failed [weight=435]: DSBL=WARN SPAMCOP=WARN FIVETENSRC=WARN CBL=WARN SORBS-DUL=WARN SPAMDOMAINS=WARN NOLEGITCONTENT=WARN IPNOTINMX=WARN CMDSPACE=WARN EFFILTER=WARN EFFILTER5-9=WARN COUNTRYFILTER=WARN SNIFFER=WARN WEIGHT75=WARN WEIGHT100=HOLD WEIGHT350=COPYFILE CATCHALLMAILS=IGNORE
12/16/2004 15:11:50 Qfa10018301e85c11 Last action = HOLD.
Received: from 64.95.220.80 [61.107.153.188] by deepspace.i360.net
(SMTPD32-8.14) id A9F42CB0218; Thu, 16 Dec 2004 15:11:16 -0600
Received: from mn68.jxg.gpvig.com ([134.120.6.47]) by mc12-f20.hotmail.com with Microsoft SMTPSVC(5.0.2195.08347); Wed, 15 Dec 2004 23:26:24 +0200
Received: from mb24.dko.bkvok.com ([224.224.232.122])by mx21.scy.tjdwr.com (8.12.3/8.12.3) with ESMTP id i2E5XSGm029877for <[EMAIL PROTECTED]>; Wed, 15 Dec 2004 17:27:24 -0400
X-Message-Info: WR29Th3to0Xu9wfR/8vk2Ct7sgB
Return-Path: [EMAIL PROTECTED]
Date: Wed, 15 Dec 2004 19:23:24 -0200
Subject: Get Cable FOR NOTHING Wed, 15 Dec 2004 13:29:24 -0800
From: "Jean Mclaughlin" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--080875099130426541"
X-Spam-Status: Possible SPAM, hits=14.400000 required=5.000000
tests=MIME_BOUND_DD_DIGITS:3.200000
tests=RCVD_FAKE_IP_224:3.100000
tests=X_MESSAGE_INFO:3.300000
tests=BAYES_90:3.000000
tests=MIME_MISSING_BOUNDARY:1.800000
12/16/2004 15:11:22 Qf9f302cb02185bdd From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] IP: 61.107.153.188 ID: i2E5XSGm029877for
12/16/2004 15:11:22 Qf9f302cb02185bdd Tests failed [weight=683]: SPAMCOP=WARN FIVETENSRC=WARN CBL=WARN SORBS-DUL=WARN MAILPOLICE-BULK=WARN BHOLE-KOREA=WARN SUBJECTSPACES7=WARN NOLEGITCONTENT=WARN BADHEADERS=WARN IPNOTINMX=WARN REVDNS=WARN ROUTING=WARN SPAMHEADERS=WARN CMDSPACE=WARN EFFILTER=WARN EFFILTER10-14=WARN COUNTRYFILTER=WARN SNIFFER=WARN WEIGHT75=WARN WEIGHT100=HOLD WEIGHT350=COPYFILE CATCHALLMAILS=IGNORE
12/16/2004 15:11:22 Qf9f302cb02185bdd Last action = HOLD.
The message below came to my inbox and has no declude headers and I can not find the sender
[EMAIL PROTECTED] in the declude log file.
Received: from dsl47-172.pool.bitel.net [212.100.47.172] by deepspace.i360.net (SMTPD32-8.14) id AB734400DA; Thu, 16 Dec 2004 00:30:11 -0600 Received: from affable.roliosaa.com ([24.122.72.118]) by shay.beinjgh.com (InterMail vK.4.04.00.03 635-306-403-20030852 license 9nm547ll4323r7kq3y1ztk9766t8kjo6) with SMTP id <[EMAIL PROTECTED]> for <[EMAIL PROTECTED]>; Thu, 16 Dec 2004 07:25:21 +0100 Received: from www.roliosaa.com (231.231.144.0) by affable.roliosaa.com (RS ver 1.0.92vs) with SMTP id 3-26c103487040 for <[EMAIL PROTECTED]>; Thu, 16 Dec 2004 09:22:21 +0300 (EDT) Date: Wed, 15 Dec 2004 23:27:21 -0700 From: "Demetrius Nunez" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: ::::Cheao Online Pharmacy::: Sender: "Demetrius Nunez" <[EMAIL PROTECTED]> Message-Id: <[EMAIL PROTECTED]> MIME-Version: 1.0 Content-type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7Bit X-Spam-Status: Possible SPAM, hits=7.200000 required=5.000000 tests=BAYES_99:4.100000 tests=ONLINE_PHARMACY:3.100000
R. Scott Perry wrote:
I did recive this spam in my inbox this morning.
As you can see it does not have any declude info and no Imail spam info either.
What do the IMail and Declude log files show for the E-mail? What version of IMail are you running? What version of Declude are you running?
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
----
This outgoing message is guaranteed to be authentic by Message Level users.
Guarantee the authenticity of your email @ http://www.messagelevel.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
