Re: [Declude.JunkMail] This too got through.. No spamdomains?

2004-04-22 Thread R. Scott Perry

I got this message in one of my main accounts.  It first came
through our sec mail server, but then nothing appears to have been flagged
by Declude.  Weird thing is, I'm running SPAMDOMAINS.  So shouldn't this
message have failed at least SPAMDOMAINS?
This is why:

X-Note: This E-mail was sent from (timeout) ([67.169.68.81]).
The reverse DNS lookup timed out.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] This too got through.. No spamdomains?

2004-04-22 Thread Jeff Maze - Hostmaster
Hello,
I got this message in one of my main accounts.  It first came
through our sec mail server, but then nothing appears to have been flagged
by Declude.  Weird thing is, I'm running SPAMDOMAINS.  So shouldn't this
message have failed at least SPAMDOMAINS?
I have IPBYPASS 67.17.218.70 within the GLOBAL.CFG file and running
Declude v.1.79.

SPAMDOMAIN.TXT Entries:

comcast.net
msn.com hotmail.com

Internet Headers:

Received: from secmail.crescentdigital.com [67.17.218.70] by
mail.crescentdigital.com with ESMTP (SMTPD32-6.06) id A9E6D4010A; Wed, 21
Apr 2004 19:55:18 -0400
Received: from c-67-169-68-81.client.comcast.net
(c-67-169-68-81.client.comcast.net [67.169.68.81])
by secmail.crescentdigital.com (8.12.8/8.12.8) with SMTP id
i3LNvYoi026730;
Wed, 21 Apr 2004 19:57:37 -0400
Received: from 133.226.240.152 by 67.169.68.81; Thu, 22 Apr 2004 02:46:47
+0200
Message-ID: [EMAIL PROTECTED]
From: Rose Acevedo [EMAIL PROTECTED]
Reply-To: Rose Acevedo [EMAIL PROTECTED]
To: [EMAIL PROTECTED], [EMAIL PROTECTED],
   [EMAIL PROTECTED]
Subject: Re: Cc:Lôw Côst Term Life ins. - Free Quôtes
Date: Wed, 21 Apr 2004 20:45:47 -0400
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=--25203145111901053
X-Originating-IP: 67.17.218.70
X-Declude-Sender: [EMAIL PROTECTED] [67.169.68.81]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
spam.
X-Spam-Tests-Failed: None [0]
X-Note: This E-mail was sent from (timeout) ([67.169.68.81]).
X-RCPT-TO: [EMAIL PROTECTED]
X-UIDL: 382031063
Status: U


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] This too got through.. No spamdomains?

2004-04-22 Thread Jeff Maze - Hostmaster
Ok.. Thanks.. I'll have to look into this more..

Sorry to be a pain, but most of the messages that got through (14 of them
between 12am and 5am) last night were caused by this problem.  Thanks
again..

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Thursday, April 22, 2004 8:27 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] This too got through.. No spamdomains?


Hmmm.. Ok..  And this timeout is because of our DNS servers, correct?

The timeout could be caused by a number of factors -- it could be your DNS
server, theirs, or it is possible that the DNS packet was dropped somewhere
along the way.

But, didn't it already do a lookup in order to get this line:

Received: from c-67-169-68-81.client.comcast.net 
(c-67-169-68-81.client.comcast.net [67.169.68.81])

No.  That line was added by the mailserver that handled the E-mail before
IMail.  Either it was able to get the reverse DNS entry (if it is a
legitimate mailserver), or it didn't try (if that is a forged header, or it
was sent via spamware).

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.