David,

The cause of the problem is having an invalid character in the Mail From.  Declude is clearly barfing on this data because it doesn't know how to react to it.

The fix is simple...only allow valid characters in the Mail From when you read it from the spool file.  If you come across an invalid character, replace the entire Mail From before processing it further with Declude.  So for instance "my(invalid-character)[EMAIL PROTECTED]" should be replaced with something like "[EMAIL PROTECTED]", which is fully qualified and filterable...no more error.  The fix should take minutes.  Here's a list of valid 7-bit ASCII printable characters":
 !"#$%&'()*+,-./0123456789:;<=>?
@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_
`abcdefghijklmnopqrstuvwxyz{|}~
I believe the only invalid characters in the user or domain portion of the Mail From are @, < and >.

I would also like to note that IMail and SmarterMail shouldn't be accepting these invalid characters either.

Matt



David Barker wrote:
Ok, so you prompted me to a knee-jerk reaction ... Yes, we are still in
business :)

Currently investigating the problem. Again it is a high priority and we will
notify you as soon as we have found the cause of the problem.

Thanks
David B
www.declude.com

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Heimir
Eidskrem
Sent: Wednesday, June 07, 2006 4:29 PM
To: [email protected]
Subject: Re: [Declude.JunkMail] No action taken

No response from Declude yet?
Its been days.

Are they still in business?



Heimir Eidskrem wrote:
  
Why would no action been taken on this email.
We hold on 100.


>From Declude log:

06/04/2006 17:38:44.987 q60eb01820000d92b.smd Triggered COUNTRIES 
CONTAINS filter COUNTRYFILTER on ES [weight->10].
06/04/2006 17:38:45.003 q60eb01820000d92b.smd Filter: Set max weight 
to 60.
06/04/2006 17:38:45.112 q60eb01820000d92b.smd Filter: Set max weight 
to 70.
06/04/2006 17:38:45.159 q60eb01820000d92b.smd Filter REVDNSBLACKLIST: 
Skipping E-mail with a current weight of 245 (>=80)
06/04/2006 17:38:45.159 q60eb01820000d92b.smd Filter BADWORDFILTER: 
Skipping E-mail with a current weight of 245 (>=30)
06/04/2006 17:38:45.159 q60eb01820000d92b.smd SPAMCOP:70 FIVETENSRC:30
SORBS-DUL:35 COUNTRYFILTER:10 SNIFFERGETRICH:100 .  Total weight = 245.
06/04/2006 17:38:45.159 q60eb01820000d92b.smd Cumulative action(s) 
taken on this email = NO ACTIONS WERE TAKEN



Received: from jose-mih7wjftkx [62.42.134.246] by xxxxxxxxxxx with 
ESMTP
 (SMTPD-8.22) id A0EC1404; Sun, 04 Jun 2006 17:38:36 -0500
Date: Sun, 4 Jun 2006 22:38:39 -0060
From: "Rene Benjamin" [EMAIL PROTECTED]
X-Mailer: The Bat! (3.69.9) Personal
Reply-To: [EMAIL PROTECTED]
X-Priority: 3 (Normal)
Message-ID: <[EMAIL PROTECTED]>
To: xxxxxxxx
Subject: Under The Radar Equity Alert
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Declude-Sender: <> [62.42.134.246]
X-Declude-Spoolname: D60eb01820000d92b.smd
X-Spam-Tests-Failed: SPAMCOP, FIVETENSRC, SORBS-DUL, NOLEGITCONTENT, 
IPNOTINMX, COUNTRYFILTER, SNIFFERGETRICH, WEIGHT75, WEIGHT100, 
CATCHALLMAILS [245]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) 
for spam.
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 440029386


X-IMail-ThreadID: 60eb01820000d92b


---
This E-mail came from the Declude.JunkMail mailing list.  To 
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
"unsubscribe Declude.JunkMail".  The archives can be found at 
http://www.mail-archive.com.


    

[This E-mail scanned for viruses by Declude EVA]



---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



  

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.

Reply via email to