I would not think so - do you have any other entries in the file? Do you show any hits on it during the day for the other entries?

Darrell
----------------------------------
Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers.


David Dodell wrote:
.On Sep 8, 2007, at 10:55 AM, Darrell ([EMAIL PROTECTED]) wrote:

.It should have. Do you also have an entry in the $default$.junkmail file as well? I would bump your logs up to debug for a quick couple of seconds to verify indeed the test is being called.


Yes, confirm it is in the $default$.junkmail file. I bumped up to DEBUG and it confirms in the log that the "filter test" is being started.

The other thing is if 66.135.209.210 did not resolve on your system you would not get a hit on that line.


Checked that, and it is resolving to mxsmfpool13.ebay.com

Any other ideas?

Could there be a conflict because the test for the filter is called REVDNSTEST compared to the REVDNS that declude recognizes?

David



Darrell
----------------------------------
Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers.


David Dodell wrote:
Ebay notifications with the header:
Content-Type: multipart/mixed; boundary="SomeRandomStuffGoesHere" X-Rbl-Warning: HELOBOGUS: Domain mx28.smf.ebay.com has no MX or A records [0301]. X-Rbl-Warning: BADHEADERS: This E-mail was sent from a broken mail client [8010000e].
    X-Rbl-Warning:     SPFPASS: SPF returned PASS for this E-mail.
    X-Declude-Sender:     [EMAIL PROTECTED] [66.135.209.210]
X-Declude-Refid: X-Spam-Tests-Failed: HELOBOGUS, BADHEADERS, SPFPASS, WEIGHT10 [10]
    X-Country-Chain:     UNITED STATES->destination
X-Note: [RemoteDNS: mxsmfpool13.ebay.com] [Remote IP: 66.135.209.210] [RemoteHost: ebay.com]
    X-Hello:     mx28.smf.ebay.com
    X-Rcpt-To:     <[EMAIL PROTECTED]>
Status: X-Imail-Rule: <Spam>S~You have spam:spam Data- YOU HAVE SPAM
    X-Uidl:     464312848
    X-Imail-Threadid:     ca6101d700006329
Are being caught as spam ... I have in file I call REVDNSFILE
REVDNS -99 ENDSWITH .ebay.com
Thinking that would validate this as non-spam ... am I missing something why that test isn't positive?
David
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

--



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


--



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to