I would not think so - do you have any other entries in the file? Do
you show any hits on it during the day for the other entries?
Darrell
----------------------------------
Check out http://www.invariantsystems.com for utilities for Declude,
Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring,
SURBL/URI integration, MRTG Integration, and Log Parsers.
David Dodell wrote:
.On Sep 8, 2007, at 10:55 AM, Darrell ([EMAIL PROTECTED]) wrote:
.It should have. Do you also have an entry in the $default$.junkmail
file as well? I would bump your logs up to debug for a quick couple
of seconds to verify indeed the test is being called.
Yes, confirm it is in the $default$.junkmail file. I bumped up to
DEBUG and it confirms in the log that the "filter test" is being started.
The other thing is if 66.135.209.210 did not resolve on your system
you would not get a hit on that line.
Checked that, and it is resolving to mxsmfpool13.ebay.com
Any other ideas?
Could there be a conflict because the test for the filter is called
REVDNSTEST compared to the REVDNS that declude recognizes?
David
Darrell
----------------------------------
Check out http://www.invariantsystems.com for utilities for Declude,
Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring,
SURBL/URI integration, MRTG Integration, and Log Parsers.
David Dodell wrote:
Ebay notifications with the header:
Content-Type: multipart/mixed;
boundary="SomeRandomStuffGoesHere"
X-Rbl-Warning: HELOBOGUS: Domain mx28.smf.ebay.com has no MX
or A records [0301].
X-Rbl-Warning: BADHEADERS: This E-mail was sent from a broken
mail client [8010000e].
X-Rbl-Warning: SPFPASS: SPF returned PASS for this E-mail.
X-Declude-Sender: [EMAIL PROTECTED] [66.135.209.210]
X-Declude-Refid: X-Spam-Tests-Failed: HELOBOGUS,
BADHEADERS, SPFPASS, WEIGHT10 [10]
X-Country-Chain: UNITED STATES->destination
X-Note: [RemoteDNS: mxsmfpool13.ebay.com] [Remote IP:
66.135.209.210] [RemoteHost: ebay.com]
X-Hello: mx28.smf.ebay.com
X-Rcpt-To: <[EMAIL PROTECTED]>
Status: X-Imail-Rule: <Spam>S~You have spam:spam Data-
YOU HAVE SPAM
X-Uidl: 464312848
X-Imail-Threadid: ca6101d700006329
Are being caught as spam ... I have in file I call REVDNSFILE
REVDNS -99 ENDSWITH .ebay.com
Thinking that would validate this as non-spam ... am I missing
something why that test isn't positive?
David
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
--
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
--
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.