Scott,
This is from the my first email regarding this:
Hello there,
I did an upgrade to 8.14 tonight and im seeing a few things thats are different.
Tech info:
Imail 8.14
Declude 1.81 (Junkmail/virus Pro)
Server 2.6Ghz Xeon/1GB Ram
I am capturing spam so I know Declude is working.
Issue 1.
I hold on weigth100 and on weight350 I do a copyfile d:\imail\spool\spam\weight350.
I see several emails in the normal hold directory with a weight higher then 350 that should have been saved in the weight350 directory
Also the emails in the weight350 directory does not have ANY declude headers?
Weigth350 header:
eceived: from 64.95.220.80 [211.221.13.162] by deepspace.i360.net
(SMTPD32-8.14) id A02C2900C6; Wed, 15 Dec 2004 21:25:32 -0600
Received: from dotcool.com ([142.67.185.186])
by infinite.audioseek.com
(InterMail vK.4.04.00.00 583-722-824 license 9jh638vy1934o4xw8h8ozi6348a0igq4)
with ESMTP id <[EMAIL PROTECTED]>
for <[EMAIL PROTECTED]>; Fri, 05 Dec 2003 15:08:11 +0200
Date: Fri, 05 Dec 2003 15:09:11 +0200
From: "Jodi Luna" <[EMAIL PROTECTED]>
Subject: our discussion on december 21th
To: <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]>
In-Reply-To: <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7Bit
Weight100 Header
Received: from outmail-01.supplyleadb.com [209.216.105.34] by deepspace.i360.net
(SMTPD32-8.14) id A0519B0146; Wed, 15 Dec 2004 22:34:25 -0600
From: Family Pictures <[EMAIL PROTECTED]>
Subject: Something the whole family can enjoy...a free Panasonic Camcorder
To: [EMAIL PROTECTED]
MIME-Version: 1.0
Date: Wed, 15 Dec 2004 23:33:36 EST
Message-ID: <q7AA1,[EMAIL PROTECTED]>
X-Mailer: 3.2.2-23 [Dec 14 2004, 19:36:15]
Content-Type: text/html; charset=us-ascii; class-id=1:311TXBIMpInmBEs1BI131sYMp1:1787079
Content-Transfer-Encoding: 7bit
X-Spam-Status: Possible SPAM, hits=8.000000 required=5.000000
tests=BAYES_80:2.200000
tests=HTTP_WITH_EMAIL_IN_URL:1.600000
tests=NAI_BAD_URI:4.200000
X-RBL-Warning: SPAMCOP: "Blocked - see http://www.spamcop.net/bl.shtml?209.216.105.34";
X-RBL-Warning: SBL: "http://www.spamhaus.org/SBL/sbl.lasso?query=SBL18575";
X-RBL-Warning: AHBL: "1100493921 bruns - Spam Source - 209.216.105.0/24 - demandconnection.com, SubscriberBASE, animateddeliverye.com"
X-RBL-Warning: FIVETEN-SPAMSUPPORT: "added 2003-05-30; spam support - hosting admanmail, emailbucks"
X-RBL-Warning: MAILPOLICE-BULK: This E-mail came from stderr.supplyleadb.com, a potential spam source listed in MAILPOLICE-BULK.
X-RBL-Warning: SUBJECTSPACES7: Subject with at least 7 spaces found.
X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected.
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client [8008000e].
X-RBL-Warning: IPNOTINMX:
X-RBL-Warning: EFFILTER: Message failed EFFILTER test (line 1, weight 0)
X-RBL-Warning: EFFILTER5-9: Message failed EFFILTER5-9 test (line 4, weight 40)
X-RBL-Warning: GIBBERISH: Message failed GIBBERISH test (line 400, weight 60) (weight capped at 60)
X-RBL-Warning: SNIFFER: Message failed SNIFFER: 57.
X-RBL-Warning: WEIGHT75: Weight of 438 reaches or exceeds the limit of 75.
X-Declude-Sender: [EMAIL PROTECTED] [209.216.105.34]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
X-Spam-Tests-Failed: SPAMCOP, SBL, AHBL, FIVETEN-SPAMSUPPORT, MAILPOLICE-BULK, SUBJECTSPACES7, NOLEGITCONTENT, BADHEADERS, IPNOTINMX, EFFILTER, EFFILTER5-9, GIBBERISH, SNIFFER, WEIGHT75, WEIGHT100, WEIGHT350, CATCHALLMAILS [438]
X-Country-Chain: UNITED STATES->destination
X-Note: This E-mail was sent from outmail-01.supplyleadb.com ([209.216.105.34]).
Issue 2. I did recive an email in my inbox with no Declude headers. Any idea why?
Received: from host44.200-45-196.telecom.net.ar [200.45.196.44] by deepspace.i360.net
(SMTPD32-8.14) id AE1E20032; Wed, 15 Dec 2004 21:16:46 -0600
Received: from .striker.ottawa.on.ca ([101.154.58.194] helo=mail.nitros5.org)
by .striker.ottawa.on.ca with esmtp ( 3.35 #1 ())
id 450nlc-0078MM-00
for <[EMAIL PROTECTED]>; Thu, 16 Dec 2004 17:07:25 -0200
Message-Id: <[EMAIL PROTECTED]>
X-Sender: [EMAIL PROTECTED] Date: Thu, 16 Dec 2004 21:13:25 +0200
From: "Deena Sumner" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: You Need This Heimir
X-IMAIL-SPAM-STATISTICS: (fe1a000200328ac4, 0.9892)
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: R
X-UIDL: 397200679
I did search the declude log file for [EMAIL PROTECTED] but could not find anything..
R. Scott Perry wrote:
I did recive this spam in my inbox this morning.
As you can see it does not have any declude info and no Imail spam info either.
What do the IMail and Declude log files show for the E-mail? What version of IMail are you running? What version of Declude are you running?
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
----
This outgoing message is guaranteed to be authentic by Message Level users.
Guarantee the authenticity of your email @ http://www.messagelevel.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
