Hi; I wish they had replaced the identifier with the IP address. That way filtering on multiple tests were easier. Now we can only create a filter with:
X-IMAIL-SPAM-DNSBL: (fiveten If IMail fails multiple tests in fiveten then Declude only picks up one of them if that is in our header filter file. Regards, Kami -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, June 09, 2003 3:19 PM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] XHEADER ISSUE >When setting an incoming filter to trap mail from the black list what >is >the proper syntax > >X-IMAIL-SPAM-DNSBL: (fiveten,213778722,127.0.0.2) That header means that the E-mail failed a test in IMail v8's anti-spam called "fiveten", with an identifier of 213778722 (which can be used to cross-reference log files). The 127.0.0.2 means that the E-mail failed the FIVETENSRC test (that's how IMail v8 distinguishes multiple tests from the same organization). http://www.declude.com/junkmail/support/ip4r.htm has a list of all the public spam tests, so you can find out which one the E-mail failed in cases like this. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
