Hello,
I'm having trouble with a particular
spam message getting to my mailbox each day. The declude log file
shows the scanning and scoring. However, the message that lands in the
mailbox shows no sign of being scanned….ie there are no X-RBL headers
in the message that gets to the mailbox. All of my other mail,
whether spam or not spam, still shows X-rbl headers to verify they were
scanned.
Can you help me understand why the
final message doesn’t' show the X-RBL headers? I get about three of
these per day, each has the same style, but the IP and From addresses
are different.
Below are the log snips and message
headers.
=======================================
Dec0123.log
01/23/2006 15:45:52 Q6aae01510000a967
CBL:6 FIVETEN-SRC:4 SORBS-DUHL:4 SPAMBAG:2 SPAMHEADERS:3 MS-SNAKEOIL:25
. Total weight = 44.
01/23/2006 15:45:52 Q6aae01510000a967
Using [incoming] CFG file
C:\IMail\Declude\mail.agid.com\$default$.junkmail.
01/23/2006 15:45:52 Q6aae01510000a967 Msg
failed CBL ("Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=68.41.152.175"). Action="">
01/23/2006 15:45:52 Q6aae01510000a967
Msg failed FIVETEN-SRC (175.152.41.68.blackholes.five-ten-sg.com.).
Action="">
01/23/2006 15:45:52 Q6aae01510000a967
Msg failed SORBS-DUHL ("Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml?68.41.152.175"). Action="">
01/23/2006 15:45:52 Q6aae01510000a967
Msg failed SPAMBAG (175.152.41.68.blacklist.spambag.org.).
Action="">
01/23/2006 15:45:52 Q6aae01510000a967 Msg
failed SPAMHEADERS (This E-mail has headers consistent with spam
[4000100e].). Action="">
01/23/2006 15:45:52 Q6aae01510000a967
Msg failed MS-SNAKEOIL (Message failed MS-SNAKEOIL: 52.). Action="">
01/23/2006 15:45:52 Q6aae01510000a967 Msg
failed WEIGHT10-29A (Weight of 44 reaches or exceeds the limit of 10.).
Action="">
01/23/2006 15:45:52 Q6aae01510000a967
Msg failed WEIGHT10-29B (Weight of 44 reaches or exceeds the limit of
10.). Action="">
01/23/2006 15:45:52 Q6aae01510000a967
Msg failed WEIGHT30A (Weight of 44 reaches or exceeds the limit of
30.). Action="">
01/23/2006 15:45:52 Q6aae01510000a967
Msg failed SPAMYELLOW (Weight of 44 reaches or exceeds the limit of
10.). Action="">
01/23/2006 15:45:52 Q6aae01510000a967
Msg failed SPAMRED (Weight of 44 reaches or exceeds the limit of 30.).
Action="">
01/23/2006 15:45:52 Q6aae01510000a967
Msg failed CATCHALLMAILS (). Action="">
01/23/2006 15:45:52 Q6aae01510000a967 L1
Message OK
01/23/2006 15:45:52 Q6aae01510000a967
Subject: Viagra Professional as low as $3.84
01/23/2006 15:45:52 Q6aae01510000a967
From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 68.41.152.175 ID:
01/23/2006 15:45:52 Q6aae01510000a967
Tests failed [weight=44]: CBL=IGNORE FIVETEN-SRC=""
SORBS-DUHL=IGNORE SPAMBAG=IGNORE SPAMHEADERS=WARN MS-SNAKEOIL=IGNORE
WEIGHT10-29A=IGNORE WEIGHT10-29B=IGNORE WEIGHT30A=IGNORE
SPAMYELLOW=WARN SPAMRED=WARN CATCHALLMAILS=WARN
01/23/2006 15:45:52 Q6aae01510000a967
Last action = "">
Sys0123.log
01:23 15:45 SMTPD(6aae01510000a967)
[216.101.5.133] connect 68.41.152.175 port 4251
01:23 15:45 SMTPD(6aae01510000a967)
[68.41.152.175] HELO localhost
01:23 15:45 SMTPD(6aae01510000a967)
[68.41.152.175] Mail From: <[EMAIL PROTECTED]>
01:23 15:45 SMTPD(6aae01510000a967)
[68.41.152.175] Rcpt To: <[EMAIL PROTECTED]>
01:23 15:45 SMTPD(6aae01510000a967)
[68.41.152.175] C:\IMail\spool\D6aae01510000a967.SMD 4723
01:23 15:45 SMTPD(6aae01510000a967)
performing antispam checks
01:23 15:45 SMTP-(6aae01510000a967)
processing C:\IMail\spool\Q6aae01510000a967.SMD
01:23 15:45 SMTP-(6aae01510000a967)
ldeliver mail.agid.com corby-main (1) [EMAIL PROTECTED] 5361
01:23 15:45 SMTP-(6aae01510000a967)
finished C:\IMail\spool\Q6aae01510000a967.SMD status=1
Email Headers:
Received: from localhost [68.41.152.175]
by mail.agid.com
(SMTPD-8.21) id AAAE0130; Mon, 23 Jan
2006 15:45:50 -0800
Date: Mon, 23 Jan 2006 18:45:52 +0100
Return-path: <[EMAIL PROTECTED]>
From: "Adler"<[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Viagra Professional as low as
$3.84
Message-ID:
<[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0003_01C618B6.107D4F00"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express
6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE
V6.00.2900.2180
