.On Sep 8, 2007, at 10:55 AM, Darrell ([EMAIL PROTECTED])
wrote:
.It should have. Do you also have an entry in the $default
$.junkmail file as well? I would bump your logs up to debug for a
quick couple of seconds to verify indeed the test is being called.
Yes, confirm it is in the $default$.junkmail file. I bumped up to
DEBUG and it confirms in the log that the "filter test" is being
started.
The other thing is if 66.135.209.210 did not resolve on your system
you would not get a hit on that line.
Checked that, and it is resolving to mxsmfpool13.ebay.com
Any other ideas?
Could there be a conflict because the test for the filter is called
REVDNSTEST compared to the REVDNS that declude recognizes?
David
Darrell
----------------------------------
Check out http://www.invariantsystems.com for utilities for
Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue
Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers.
David Dodell wrote:
Ebay notifications with the header:
Content-Type: multipart/mixed;
boundary="SomeRandomStuffGoesHere"
X-Rbl-Warning: HELOBOGUS: Domain mx28.smf.ebay.com has no
MX or A records [0301].
X-Rbl-Warning: BADHEADERS: This E-mail was sent from a
broken mail client [8010000e].
X-Rbl-Warning: SPFPASS: SPF returned PASS for this E-mail.
X-Declude-Sender: [EMAIL PROTECTED] [66.135.209.210]
X-Declude-Refid: X-Spam-Tests-Failed: HELOBOGUS,
BADHEADERS, SPFPASS, WEIGHT10 [10]
X-Country-Chain: UNITED STATES->destination
X-Note: [RemoteDNS: mxsmfpool13.ebay.com] [Remote IP:
66.135.209.210] [RemoteHost: ebay.com]
X-Hello: mx28.smf.ebay.com
X-Rcpt-To: <[EMAIL PROTECTED]>
Status: X-Imail-Rule: <Spam>S~You have spam:spam
Data- YOU HAVE SPAM
X-Uidl: 464312848
X-Imail-Threadid: ca6101d700006329
Are being caught as spam ... I have in file I call REVDNSFILE
REVDNS -99 ENDSWITH .ebay.com
Thinking that would validate this as non-spam ... am I missing
something why that test isn't positive?
David
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
--
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
