|
Matt,
I see
that now. It was WHITELISTED as it is shown in the headers. So
someone has guessed the AUTH to Declude or they (DECLUDE) are WHITELISTing on
some type of header match.
Matt,
just to make mention to the list and you, I'm not hashing on Declude or
Andrew. As both have been an asset to this list and we've learned a lot by
it. But I was displeased with Andrew's generic brief response as in the
past; he's been helpful.
-Erik
Erik,
This is likely the difference between
incoming and outgoing E-mail. Many of us don't block outgoing E-mail,
but some do tag it with test failures. If it was AUTHed, it probably
would have been whitelisted, so it was likely an open relay mistake.
Spammers will capitalize on this within
moments.
Matt
Erik wrote:
And this has what to do with the influx of immigrants from Russia to Czech
Republic?
My statement was a joke. Notice the " ;-) " at the end.
However, giving the fact that Declude is in the business of SPAM control,
this should have been prevented. Look that their "X-Declude" headers. And
from a standpoint of being in the SPAM preventing software; they should also
secure their SMTP to prevent outside posts to groups.
Wouldn't the test on the email "CBL [34], SBL-XBL [53], BADHEADERS [32],
REVDNS [35], FILTER-USERS [50]" be enough for a "COMBO" test to be used to
filter to a HOLD or DELETE?
No, I'm not bashing Declude. We've been a Declude user since 2000. Just
pointing out the obvious.
-Erik
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Colbeck, Andrew
Sent: Tuesday, January 31, 2006 6:05 PM
To: [email protected]
Subject: RE: [Declude.JunkMail] Another forged Declude address e-mail?
http://dictionary.reference.com/search?q=irony
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Erik
Sent: Tuesday, January 31, 2006 7:56 AM
To: [email protected]
Subject: RE: [Declude.JunkMail] Another forged Declude address e-mail?
Yep, here too. The message exceeded weight of 200+ You'd
think Declude would know how to use the "DELETE" action of
their software. ;-)
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of mail-lists
Sent: Tuesday, January 31, 2006 4:45 PM
To: [email protected]
Subject: [Declude.JunkMail] Another forged Declude address e-mail?
This one came to my main address not the list (obviously...)
Received: from declude.com [63.246.13.90] by
cottonwoodfinancial.com with ESMTP
(SMTPD-8.21) id A4E201A0; Tue, 31 Jan 2006 09:40:18 -0600
Received: from asdfas.net [213.136.107.177] by mail.declude.com
(SMTPD32-8.05) id A23124B00D4; Tue, 31 Jan 2006 10:28:49 -0500
Message-ID: <[EMAIL PROTECTED]>
Subject: CBL:colander medley
Date: Tue, 31 Jan 2006 10:27:37 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C62650.F51D11C0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken
mail client [8c000003].
X-RBL-Warning: WEIGHT10: Weight of 204 reaches or exceeds the
limit of 100.
X-RBL-Warning: WEIGHT20: Weight of 204 reaches or exceeds the
limit of 200.
X-Declude-Sender: [EMAIL PROTECTED] [213.136.107.177]
X-Declude-Spoolname: D8231024b00d4a426.smd
X-Declude-Note: Scanned by Declude 4.0.2b for spam.
"http://www.declude.com/x-note.htm"
X-Declude-Scan: Incoming Score [204] at 10:29:11 on 31 Jan 2006
X-Declude-Fail: CBL [34], SBL-XBL [53], BADHEADERS [32],
REVDNS [35], FILTER-USERS [50], WEIGHT10 [100], WEIGHT20
[200], WEIGHT20b [200]
X-Country-Chain: [RIPE Unlisted]->destination
X-Declude-IM_IN:
--------------------------------------------------------------
--------------
Precedence: bulk
Sender: [EMAIL PROTECTED]
X-Declude-Sender: [EMAIL PROTECTED] [63.246.13.90]
X-Declude-Spoolname: D84e2014400002505.smd
X-Declude-Note: Scanned by Declude 3.0.5.5
(http://www.declude.com/x-note.htm) for spam.
X-Declude-Scan: Score [0] at 09:40:34 on 31 Jan 2006
X-Declude-Tests: Whitelisted
X-Country-Chain: [RIPE Unlisted]->UNITED STATES->destination
From: [EMAIL PROTECTED]
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 434752482
X-IMail-ThreadID: 84e2014400002505
Cavell McDermott
Network Administrator
Cottonwood Financial
972.753.0822 Office
214.403.4918 Cell
http://www.thecashstore.com
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
Sent: Tuesday, January 31, 2006 9:28 AM
Subject: CBL:colander medley
V
V
C
l
A
l
A
L
A
G
l
L
R
U
l
A
M
S
$
$
$
69
85
99
(
(
(
10
30
10
)
)
)
See more at http://www.sairabbin.com
Quit overpaying for your meds with http://www.sairabbin.com
Confidentiality Notice: The information contained in this
transmission is intended only for the personal and
confidential use of the designated recipient named above. If
the receiver of this transmission is not the intended
recipient or an agent responsible for delivering it to the
intended recipient, you are hereby notified that you have
received this document in error, and that any review,
dissemination, distribution, or copying of this message is
strictly prohibited. If you are not the intended recipient,
please immediately notify the sender and delete this e-mail
message from your system.
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be
found at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be
found at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
|
