I created a custom filter to help trap drug related spam called
DRUGS-MEDICATIONS.TXT. This filter contains the following line:
BODY 12 CONTAINS americaspharma.com
Yet, spam containing 'americaspharma.com' does not get flagged by Declude
JunkMail (see sample message below). Note that DRUGS-MEDICATIONS does not show
up in the 'X-Spam-Tests-Failed:' line of the message header, nor does it show
in the Declude log for this message.
The 'global.config' file contains the following entry:
DRUGS-MEDICATIONS filter
C:\IMail\Declude\Filters\Drugs-Medications.txt x 0 0
and the '$default$.junkmail' contains the following entry:
DRUGS-MEDICATIONS WARN
I looking for recommendations as how to find the cause of failure for this
filter. Any suggestions would be appreciated.
Thanks!
Kim Premuda
FastWave Internet Services
San Diego, CA
--- Declude log file content ---
05/11/2005 10:44:29 Q44790a54022a0e51 Tests failed [weight=12]: HELOBOGUS=WARN
IPNOTINMX=IGNORE MAILFROM=WARN WEIGHT10=HOLD CATCHALLMAILS=IGNORE
TLD-TRUSTED-REVDNS=WARN
--- Q44790a54022a0e51.SMD file contents ---
QC:\IMail\spool\D44790a54022a0e51.SMD
Hns3.fastwave.net
WC:\IMail
E0,
S<[EMAIL PROTECTED]>
NRCPT To:<[EMAIL PROTECTED]>
R<[EMAIL PROTECTED]>
--- D44790a54022a0e51.SMD file contents ---
Received: from un2 [64.214.203.155] by ns3.fastwave.net with ESMTP
(SMTPD32-8.05) id A479A54022A; Wed, 11 May 2005 10:44:25 -0700
Received: from localhost.localdomain (un2 [127.0.0.1])
by un2 (8.12.11/8.12.11) with ESMTP id j4BHgdMu025798
for <[EMAIL PROTECTED]>; Wed, 11 May 2005 12:42:39 -0500
Received: (from [EMAIL PROTECTED])
by localhost.localdomain (8.12.11/8.12.11/Submit) id j4BHgcTc025797;
Wed, 11 May 2005 12:42:38 -0500
Date: Wed, 11 May 2005 12:42:38 -0500
Message-Id: <[EMAIL PROTECTED]>
From: "O&S" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Info
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
X-RBL-Warning: HELOBOGUS: Domain un2 has no MX or A records [0301].
X-RBL-Warning: MAILFROM: Domain localhost.localdomain has no MX or A records
[0301].
X-RBL-Warning: TLD-TRUSTED-REVDNS: Message failed TLD-TRUSTED-REVDNS test (line
37, weight 0)
X-Declude-Sender: [EMAIL PROTECTED] [64.214.203.155]
X-Declude-Spoolname: D44790a54022a0e51.SMD
X-Note:
--------------------------------------------------------------------------------
X-Note: Scanned by Declude JunkMail, Version 1.82
X-Spam-Tests-Failed: HELOBOGUS [5], MAILFROM [12], WEIGHT10 [10],
TLD-TRUSTED-REVDNS [0] TOTAL [12]
X-Note: This E-mail was sent from host-64-214-203-155.optynex.com
([64.214.203.155]).
X-Note:
--------------------------------------------------------------------------------
Get your rx without leaving home.
We ship throughout the United States (except AZ,FL,MN,RI,PR & ND)
http://americaspharma.com/
We ship FDA approved products only.
Thanks.
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail scanned for viruses by Declude Virus]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
