At 11:54 AM 12/3/2005, "John T \(Lists\)"
<[EMAIL PROTECTED]> wrote:
First, the tests used are determined by $default$.junkmail. The only time
forward.junkmail would be used is if the user was named forward.
That is what had me puzzled too. Why should it work? But I can't
believe I dreamed this up myself. Someone gave me the information
and I can no longer figure out who even through I archive any useful
email and a lot that isn't
Second, unless per domain or per user configurations are in use, the
$default$.junkmail will be used.
Yep. I know that.
To find out which exact file is being used for actions, put the log
into debug mode.
Here is the problem. The email that is being forwarded appears to
NOT be properly handled. Is there any way to make it happen in this
case or am I just out of luck or missing something?
Let me describe the problem again.
I have a domain (actually several) where one or more users are
actually having their email forwarded to some other email
address. For example [EMAIL PROTECTED] is the primary email
address on the domain but john has his email forwarded to another
service, [EMAIL PROTECTED] for example. There is a declude
"john.junkmail" file in place to filter for spam in the declude
folder NameChanged.com. The log indicates it has found sufficient
cause to dump a piece of spam (27 in weight20 for example). BUT the
email is STILL forwarded on to the end user at msn.com.
Here are the headers from the most recent example:
X-Persona: <Awasco>
Received: from SMTP32-FWD by Namechanged.com
(SMTP32) id A00000EEC; Sun, 4 Dec 2005 22:57:53 -0800
Received: from stockers.com [61.82.3.238] by Namechanged.com with ESMTP
(SMTPD32-7.07) id A4EB4FC00C6; Sun, 04 Dec 2005 22:57:47 -0800
Received: from unknown (HELO mailout.endmonthnow.com) (Mon, 05 Dec
2005 21:40:32 -0200)
by mail.webhostings4u.com with ASMTP; Mon, 05 Dec 2005 21:40:32 -0200
Received: from unknown (HELO mail.webhostings4u.com) (Mon, 05 Dec
2005 21:35:36 -0200)
by webmail.halftomorrow.com with ASMTP; Mon, 05 Dec 2005
21:35:36 -0200
Received: from Mon, 05 Dec 2005 21:34:15 -0200 ([Mon, 05 Dec 2005
21:34:15 -0200]) by mmx09.tilkbans.com with NNFMP; Mon, 05 Dec 2005
21:34:15 -0200
Received: from unknown (168.144.36.104)
by m1.gns.snv.thisdomainl.com with LOCAL; Mon, 05 Dec 2005
21:25:06 -0200
Received: from qrx.quickslick.com ([Mon, 05 Dec 2005 21:23:36 -0200])
by mts.locks.grgtween.net with QMQP; Mon, 05 Dec 2005 21:23:36 -0200
Message-ID: <[EMAIL PROTECTED]>
Date: Mon, 05 Dec 2005 21:14:30 -0200
From: "dug young" <[EMAIL PROTECTED]>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US;
rv:0.9.5+) Gecko/20011102
MIME-Version: 1.0
To: <[EMAIL PROTECTED]>
Subject: Atlantica Associates
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 8bit
X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA
61.82.3.238 with no reverse DNS entry.
X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner
consistent with spam [2000010f].
X-Declude-Sender: [EMAIL PROTECTED] [61.82.3.238]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
X-Spam-Tests-Failed: REVDNS, ROUTING, GENERALFILTER, WEIGHT10, WEIGHT20
Status: U
X-UIDL: 375154689
This email address ([EMAIL PROTECTED] - not the real domain)
is forwarded to two addresses. [EMAIL PROTECTED] and
[EMAIL PROTECTED] - dual forwarding.
Any suggestions here?
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
