Re: [Declude.JunkMail] AMEX fails routing test
I had a few of these also, and it does seem they are routed oddly, originating in the US and coming to us via the UK. -d - Original Message - From: "Marc Catuogno" <[EMAIL PROTECTED]> To: Sent: Saturday, February 12, 2005 7:18 AM Subject: RE: [Declude.JunkMail] AMEX fails routing test Thanks for 2 cents...I did check why it got held immediately. It got held because of a reverse DNS filter that I have since removed (sometimes I use "contains" a little over-zealously) I did lower the spamrouting test a little and the nolegit is at "0" (Hmm not sure why I'm running it then) I wasn't complaining that it got held - I was just wondering why something that looked to me like it was from Amex would fail the test. Did they have it routed badly? Or did the test screw up? I've been meaning to seriously tweak my Declude set-up, re-read the manuals and archives and find the best combo test, look into weight range, the stop action. Maybe I'll play with it today and make my server go "boom" -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Friday, February 11, 2005 2:15 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] AMEX fails routing test YOU may want to chang your config to use weightrange instean of weight. It will difinitivly choose the actio that will happen and avoid confusion. Why was this message held anyway. Based on the failed tests I would not hold this message on our server. I do not know what filter does. But I would not give verymany points to ROUTING and 0 points to NOLEGITCONTENT. Also I have seen many false positives on NOABUSE and would not weight that one either. My 2 cents, Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno Sent: Thursday, February 10, 2005 4:09 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] AMEX fails routing test X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner consistent with spam [210f]. X-Declude-Sender: [EMAIL PROTECTED] [193.32.34.73] X-Declude-Spoolname: D465d077100c4763a.SMD X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: NOABUSE, BONDEDSENDER, NOLEGITCONTENT, ROUTING, SPFPASS, FILTER, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25 [27] X-Country-Chain: X-Note: This E-mail was sent from phxamgw01.aexp.com ([193.32.34.73]). Those are the headers from a held e-mail - I just thought it was odd, while possible, that Amex would have poor routing. Was it just because it was from England? --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] AMEX fails routing test
Thanks for 2 cents...I did check why it got held immediately. It got held because of a reverse DNS filter that I have since removed (sometimes I use "contains" a little over-zealously) I did lower the spamrouting test a little and the nolegit is at "0" (Hmm not sure why I'm running it then) I wasn't complaining that it got held - I was just wondering why something that looked to me like it was from Amex would fail the test. Did they have it routed badly? Or did the test screw up? I've been meaning to seriously tweak my Declude set-up, re-read the manuals and archives and find the best combo test, look into weight range, the stop action. Maybe I'll play with it today and make my server go "boom" -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Friday, February 11, 2005 2:15 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] AMEX fails routing test YOU may want to chang your config to use weightrange instean of weight. It will difinitivly choose the actio that will happen and avoid confusion. Why was this message held anyway. Based on the failed tests I would not hold this message on our server. I do not know what filter does. But I would not give verymany points to ROUTING and 0 points to NOLEGITCONTENT. Also I have seen many false positives on NOABUSE and would not weight that one either. My 2 cents, Kevin Bilbee > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno > Sent: Thursday, February 10, 2005 4:09 AM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] AMEX fails routing test > > > X-RBL-Warning: ROUTING: This E-mail was routed in a poor > manner consistent with spam [210f]. > X-Declude-Sender: [EMAIL PROTECTED] [193.32.34.73] > X-Declude-Spoolname: D465d077100c4763a.SMD > X-Note: This E-mail was scanned by Declude JunkMail > (www.declude.com) for spam. > X-Spam-Tests-Failed: NOABUSE, BONDEDSENDER, NOLEGITCONTENT, > ROUTING, SPFPASS, FILTER, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25 [27] > X-Country-Chain: > X-Note: This E-mail was sent from phxamgw01.aexp.com ([193.32.34.73]). > > Those are the headers from a held e-mail - I just thought it > was odd, while possible, that Amex would have poor routing. > Was it just because it was from England? > > > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be > found at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] AMEX fails routing test
YOU may want to chang your config to use weightrange instean of weight. It will difinitivly choose the actio that will happen and avoid confusion. Why was this message held anyway. Based on the failed tests I would not hold this message on our server. I do not know what filter does. But I would not give verymany points to ROUTING and 0 points to NOLEGITCONTENT. Also I have seen many false positives on NOABUSE and would not weight that one either. My 2 cents, Kevin Bilbee > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno > Sent: Thursday, February 10, 2005 4:09 AM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] AMEX fails routing test > > > X-RBL-Warning: ROUTING: This E-mail was routed in a poor > manner consistent with spam [210f]. > X-Declude-Sender: [EMAIL PROTECTED] [193.32.34.73] > X-Declude-Spoolname: D465d077100c4763a.SMD > X-Note: This E-mail was scanned by Declude JunkMail > (www.declude.com) for spam. > X-Spam-Tests-Failed: NOABUSE, BONDEDSENDER, NOLEGITCONTENT, > ROUTING, SPFPASS, FILTER, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25 [27] > X-Country-Chain: > X-Note: This E-mail was sent from phxamgw01.aexp.com ([193.32.34.73]). > > Those are the headers from a held e-mail - I just thought it > was odd, while possible, that Amex would have poor routing. > Was it just because it was from England? > > > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be > found at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] AMEX fails routing test
Hi Marc- I saw NOABUSE, ROUTING, and SPAMHEADERS today with my personal statement from AMEX, which came from the same sender. SPAMHEADERS reports that the sender was bad. -d - Original Message - From: "Marc Catuogno" <[EMAIL PROTECTED]> To: Sent: Thursday, February 10, 2005 7:09 AM Subject: [Declude.JunkMail] AMEX fails routing test X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner consistent with spam [210f]. X-Declude-Sender: [EMAIL PROTECTED] [193.32.34.73] X-Declude-Spoolname: D465d077100c4763a.SMD X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: NOABUSE, BONDEDSENDER, NOLEGITCONTENT, ROUTING, SPFPASS, FILTER, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25 [27] X-Country-Chain: X-Note: This E-mail was sent from phxamgw01.aexp.com ([193.32.34.73]). Those are the headers from a held e-mail - I just thought it was odd, while possible, that Amex would have poor routing. Was it just because it was from England? --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.