Re: [Declude.JunkMail] Possible Missing JM Log lines in 1.75

2004-03-01 Thread R. Scott Perry
I am still see lots of these in my logs (v1.78i4): = 02/29/2004 02:35:34 Qc0656280009442df Unknown Var: %TESTNAMEX-RBL-Warni X-RBL-Warning: %TESTNAMEX-RBL- Could you E-mail me one of your log files (off-list), so that I can check it out in more detail? The latest interim has some extra code

[Declude.JunkMail] Gateway Mailservers and IPBypass

2004-03-01 Thread Russ Uhte (Lists)
I've setup a gateway mailserver using postfix and amavisd. I want to make sure that the IP for this gateway server is skipped, but I'm kinda confused since the postfix box hands off the message a few times. Below are the received headers from one of the messages, and also what I put in my

Re: [Declude.JunkMail] Gateway Mailservers and IPBypass

2004-03-01 Thread R. Scott Perry
I've setup a gateway mailserver using postfix and amavisd. I want to make sure that the IP for this gateway server is skipped, but I'm kinda confused since the postfix box hands off the message a few times. Below are the received headers from one of the messages, and also what I put in my

Re: [Declude.JunkMail] Gateway Mailservers and IPBypass

2004-03-01 Thread Russ Uhte (Lists)
At 09:09 AM 3/1/2004, R. Scott Perry wrote: I've setup a gateway mailserver using postfix and amavisd. I want to make sure that the IP for this gateway server is skipped, but I'm kinda confused since the postfix box hands off the message a few times. Below are the received headers from one

RE: [Declude.JunkMail] WAY OT - Windows gone crazy

2004-03-01 Thread John Tolmachoff \(Lists\)
Have you tried an on-line virus scan? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Jerod Bennett Sent: Monday, March 01, 2004 11:16 AM To: [EMAIL PROTECTED] Subject:

Re: [Declude.JunkMail] Message failed SORBS-DUHL test but lookup reveals no block

2004-03-01 Thread R. Scott Perry
Hi. This message failed the SORBS-DUHL test even though a lookup at SORBS of the IP address revealed all clean. Any insight would be appreciated. Thanks. Received: from mail.ittint.net [130.94.242.170] by mail.electdist.com with ESMTP (SMTPD32-8.05) id A52D91B0108; Mon, 01 Mar 2004 11:55:25

RE: [Declude.JunkMail] Message failed SORBS-DUHL test but lookup reveals no block

2004-03-01 Thread Rick Klinge
Resolved 130.94.242.170 to mail.ittint.net. mail.ittint.net. has no MX records - [ittint.net has 1 MX record mail.ittint.net.(10)] ~Rick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Gable Sent: Monday, March 01, 2004 5:58 PM To: Declude

[Declude.JunkMail] Message failed SORBS-DUHL test but lookup reveals no block

2004-03-01 Thread Mike Gable
Hi. This message failed the SORBS-DUHL test even though a lookup at SORBS of the IP address revealed all clean. Any insight would be appreciated. Thanks. -Mike http://www.dnsbl.us.sorbs.net Received: from mail.ittint.net [130.94.242.170] by mail.electdist.com with ESMTP (SMTPD32-8.05)

Re: [Declude.JunkMail] Message failed SORBS-DUHL test but lookup reveals no block

2004-03-01 Thread R. Scott Perry
The issue here is that while 130.94.242.170 isn't listed in SORBS-DUHL, 4.4.24.79 is. So if you are using a HOP setting other than 0, 4.4.24.79 gets scanned. If you rename the test to SORBS-DUL, it will be skipped (or you can upgrade to the latest beta, which will skip if automatically). In

[Declude.JunkMail] Spam from mailforward.bulkregister.com

2004-03-01 Thread Matt
I've been seeing a ton of spam getting relayed by a zombie, open proxy or source through mailforward.bulkregister.com [65.109.255.4] for at least a week now. Does anyone know what purpose this server has besides forwarding spam? Any BulkRegister customers want to help by notifying the proper

Re: [Declude.JunkMail] Spam from mailforward.bulkregister.com

2004-03-01 Thread Matt
Oh wait, I figured it out. This server is a great IPBYPASS candidate. It's some sort of domain mail forwarding that Bulk Register offers. The sudden occurrence corresponded with me picking up a new client that was using this forwarding service. IPBYPASS 65.109.255.4 Matt Matt wrote: