[Declude.JunkMail] Why SPF UNKNOWN?
Title: Message
Hi:
I have lots of SPF
"unknown" in the SPF.log file - most look as if they should have
FAILED:
12.219.157.132 [EMAIL PROTECTED] [family]: UNKNOWN
Here the Imail
log:
12:18 23:10
SMTPD(16C9012A) [63.107.174.78] connect 12.219.157.132 port 449312:18 23:10
SMTPD(16C9012A) [12.219.157.132] EHLO family12:18
23:10 SMTPD(16C9012A) [12.219.157.132] MAIL FROM:[EMAIL PROTECTED]12:18 23:10
SMTPD(16C9012A) [12.219.157.132] RCPT TO:[EMAIL PROTECTED]12:18 23:10
SMTPD(16C9012A) [12.219.157.132] D:\IMAIL\spool\D7a4f16c9012af4a4.SMD
2744
Here the declude
log:
12/18/2003 23:10:59
Q7a4f16c9012af4a4 CBL:7 nNOLEGITCONTENT:-3 SPAMDOMAINS:4 WEIGHTFILTER:-2 .
Total weight = 6.12/18/2003 23:10:59 Q7a4f16c9012af4a4 NOT bypassing
whitelisting of E-mail with weight =20 (6) and at least 1 recipients
(1).12/18/2003 23:10:59 Q7a4f16c9012af4a4 NOT bypassing whitelisting of
E-mail with weight =15 (6) and at least 4 recipients (1).12/18/2003
23:10:59 Q7a4f16c9012af4a4 Msg failed SORBS ("Dynamic IP Address See: http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=12.219.157.132").
Action="">12/18/2003 23:10:59 Q7a4f16c9012af4a4 Msg failed CBL ("Blocked -
see http://cbl.abuseat.org/lookup.cgi?ip=12.219.157.132").
Action="">12/18/2003 23:10:59 Q7a4f16c9012af4a4 Msg failed SPAMDOMAINS
(Spamdomain 'hm-software.com' found: Address of [EMAIL PROTECTED] sent from invalid
12-219-157-132.client.mchsi.com.). Action="">12/18/2003 23:10:59
Q7a4f16c9012af4a4 Msg failed WEIGHTFILTER (Message failed WEIGHTFILTER test
(line 6, weight 0)). Action="">12/18/2003 23:10:59 Q7a4f16c9012af4a4 Msg
failed WEIGHTHDR (Total weight between 6 and 7.). Action="">12/18/2003
23:10:59 Q7a4f16c9012af4a4 Subject: your wife will NEVER know!12/18/2003
23:10:59 Q7a4f16c9012af4a4 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP:
12.219.157.132 ID:
Best
RegardsAndy SchmidtPhone: +1 201 934-3414 x20
(Business)Fax: +1 201 934-9206
Re: [Declude.JunkMail] Why SPF UNKNOWN?
I have lots of SPF unknown in the SPF.log file - most look as if they should have FAILED: 12.219.157.132 mailto:[EMAIL PROTECTED][EMAIL PROTECTED] [family]: UNKNOWN This definitely should have been a fail. I haven't been able to reproduce this, however, There is a new interim release (http://www.declude.com/interim) that will log the reason for an UNKNOWN in most cases, which should help determine why this is happening. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
