Re: [Declude.Virus] strange sending problem to the same domain

[Matt]

I took note that you are using IMail 6.06.  Unless you can whitelist your users by way of their IP addresses you should disable the CMDSPACE test, or at least reduce it's weight.  I see this one came from T-Online and probably can't be whitelisted.  Microsoft Outlook clients will fail CMDSPACE unless they are whitelisted.  With IMail 8.x, you can configure Declude for WHITELIST AUTH which will automatically whitelist clients that authenticate.  There are no such options in IMail 6.x. The MAILFROM test suggests, and my own DNS query confirms, that your sender's domain neither has an MX or an A record.  Adding one of these will keep that test from failing. Matt Declude wrote: Hi John, this is the actual forwarding of one eMail of my customer. I guess I have to make a reverse DNS entry, don't you think ? Uwe Received: from lasthope [217.235.73.14] by irgendwas.de with ESMTP (SMTPD32-6.06) id AF231070262; Fri, 29 Oct 2004 11:36:35 +0200 From: "info_irgendwas" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: WG: Spezialanfrage Date: Fri, 29 Oct 2004 11:36:33 +0200 Message-ID: <[EMAIL PROTECTED]> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0001_01C4BDAB.8FEFC810" X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.6626 Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441 X-RBL-Warning: MAILFROM: Domain irgendwas.de has no MX or A records [0001]. X-Declude-Sender: [EMAIL PROTECTED] [217.235.73.14] X-Note: Scanned by Declude JunkMail http://www.declude.com/x-note.htm X-Spam-Tests-Failed: CMDSPACE, MAILFROM, WEIGHT10, WEIGHT20 [20] X-Note: Scanned by Declude JunkMail http://www.declude.com/x-note.htm X-Note: This E-mail was sent from pD9EB490E.dip0.t-ipconnect.de ([217.235.73.14]). X-RCPT-TO: <[EMAIL PROTECTED]> X-UIDL: 373489920 Status: U JTL> 1. Is the sender authenticating during the SMTP send to the server? JTL> 2. Log lines for the messages sent please. JTL> 3. Is the sender using Outlook 2003? JTL> 4. Headers of the message that came through after changing from DELETE at 20 JTL> to WARN. JTL> John Tolmachoff JTL> Engineer/Consultant/Owner JTL> eServices For You -----Original Message----- From: [EMAIL PROTECTED] JTL> [mailto:[EMAIL PROTECTED]] On Behalf Of Declude Sent: Thursday, October 28, 2004 8:20 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] strange sending problem to the same domain Hi list, a customer of us complained today that he could't send any eMail from [EMAIL PROTECTED] to [EMAIL PROTECTED] But he receives eMails to both of the above postboxes from externally. Today I bypassed Declude. (I deleted eMails over weight 20 I guess, now I only do a WARN) Since then it is working fine for him again. I tested his domain remotely with no problems. Although he takes Outlook. It seems as if Outlook as a Mailer-SW is causing problems here. Any ideas ? Uwe --- [This E-mail was scanned for viruses by Declude Virus JTL> (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. JTL> --- JTL> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] JTL> --- JTL> This E-mail came from the Declude.Virus mailing list. To JTL> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and JTL> type "unsubscribe Declude.Virus". The archives can be found JTL> at http://www.mail-archive.com. -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================