[Declude.JunkMail] Messages slipping through JM
We have had a many e-mails showing up as of late that have no subject/body. Further investigation shows that these messages are far above our hold weight. The latest one I've received has a subject, but no body. Here are the headers from the message: Received: from host107-183.pool80181.interbusiness.it [80.181.183.107] by areatech.com (SMTPD32-7.14) id A7EC9DA0084; Tue, 29 Jun 2004 14:50:04 -0500 From: [EMAIL PROTECTED] To: dolphins@ areatech.com Subject: Pay less money - receive more software.. It's too simple. ;-) quibble Date: Tue, 29 Jun 2004 14:48:37 -0600 Message-ID: 3[4 X-RBL-Warning: DSN: Not supporting null originator (DSN) [2-19-9800] X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 12. [2-36-12000] X-RBL-Warning: WEIGHT10: Weight of 39 reaches or exceeds the limit of 10. [2-37-12800] X-RBL-Warning: WEIGHT20: Weight of 39 reaches or exceeds the limit of 27. [2-40-14000] X-Declude-Sender: [EMAIL PROTECTED] [80.181.183.107] X-Spam-Tests-Failed: SORBS-DUHL, DSN, SPAMCHK, WEIGHT10, WEIGHT20 [39] X-UIDL: 385498355 Can someone shed some light on what may be causing this to be delivered? Thanks Jason --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Messages slipping through JM
We have had a many e-mails showing up as of late that have no subject/body. Further investigation shows that these messages are far above our hold weight. The latest one I've received has a subject, but no body. Here are the headers from the message: Actually, these didn't slip through: X-RBL-Warning: DSN: Not supporting null originator (DSN) [2-19-9800] X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 12. [2-36-12000] X-RBL-Warning: WEIGHT10: Weight of 39 reaches or exceeds the limit of 10. [2-37-12800] X-RBL-Warning: WEIGHT20: Weight of 39 reaches or exceeds the limit of 27. [2-40-14000] X-Spam-Tests-Failed: SORBS-DUHL, DSN, SPAMCHK, WEIGHT10, WEIGHT20 [39] This failed 5 spam tests, none of which were set to use the HOLD action. Can someone shed some light on what may be causing this to be delivered? If you check the Declude JunkMail log file, it should provide a clue. It sounds like the E-mail may have been addressed to an external user, which would cause the actions from the \IMail\Declude\global.cfg file to be used. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Messages slipping through JM
We have been receiving a lot of blank subject, blank sender type, blank e-mail type of messages. Anybody know what these are? Aaron On Jun 29, 2004, at 12:58 PM, Jason @ AreaTech wrote: We have had a many e-mails showing up as of late that have no subject/body. Further investigation shows that these messages are far above our hold weight. The latest one I've received has a subject, but no body. Here are the headers from the message: Received: from host107-183.pool80181.interbusiness.it [80.181.183.107] by areatech.com (SMTPD32-7.14) id A7EC9DA0084; Tue, 29 Jun 2004 14:50:04 -0500 From: [EMAIL PROTECTED] To: dolphins@ areatech.com Subject: Pay less money - receive more software.. It's too simple. ;-) quibble Date: Tue, 29 Jun 2004 14:48:37 -0600 Message-ID: 3[4 X-RBL-Warning: DSN: Not supporting null originator (DSN) [2-19-9800] X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 12. [2-36-12000] X-RBL-Warning: WEIGHT10: Weight of 39 reaches or exceeds the limit of 10. [2-37-12800] X-RBL-Warning: WEIGHT20: Weight of 39 reaches or exceeds the limit of 27. [2-40-14000] X-Declude-Sender: [EMAIL PROTECTED] [80.181.183.107] X-Spam-Tests-Failed: SORBS-DUHL, DSN, SPAMCHK, WEIGHT10, WEIGHT20 [39] X-UIDL: 385498355 Can someone shed some light on what may be causing this to be delivered? Thanks Jason --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Messages slipping through JM
Jason, What does the Declude log file indicate for these messages? Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason @ AreaTech Sent: Tuesday, June 29, 2004 03:58 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Messages slipping through JM We have had a many e-mails showing up as of late that have no subject/body. Further investigation shows that these messages are far above our hold weight. The latest one I've received has a subject, but no body. Here are the headers from the message: Received: from host107-183.pool80181.interbusiness.it [80.181.183.107] by areatech.com (SMTPD32-7.14) id A7EC9DA0084; Tue, 29 Jun 2004 14:50:04 -0500 From: [EMAIL PROTECTED] To: dolphins@ areatech.com Subject: Pay less money - receive more software.. It's too simple. ;-) quibble Date: Tue, 29 Jun 2004 14:48:37 -0600 Message-ID: 3[4 X-RBL-Warning: DSN: Not supporting null originator (DSN) [2-19-9800] X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 12. [2-36-12000] X-RBL-Warning: WEIGHT10: Weight of 39 reaches or exceeds the limit of 10. [2-37-12800] X-RBL-Warning: WEIGHT20: Weight of 39 reaches or exceeds the limit of 27. [2-40-14000] X-Declude-Sender: [EMAIL PROTECTED] [80.181.183.107] X-Spam-Tests-Failed: SORBS-DUHL, DSN, SPAMCHK, WEIGHT10, WEIGHT20 [39] X-UIDL: 385498355 Can someone shed some light on what may be causing this to be delivered? Thanks Jason --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Messages slipping through JM
Sorry Scott, should have been more clear. We don't do a declude Hold at Weight20, we do a warn, and then I have a rule in Imail (7.15) that sends anything with WEIGHT20 to a spambox submailbox. Here are the JM logs: [trunc] 06/29/2004 14:49:58 Qc7df09da00840372 L1 Message OK 06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]: SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN WEIGHT20=WARN CATCHALLMAILS=IGNORE 06/29/2004 14:49:58 Qc7df09da00840372 L2 Message OK 06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]: SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN WEIGHT20=WARN CATCHALLMAILS=IGNORE 06/29/2004 14:49:58 Qc7df09da00840372 L3 Message OK 06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]: SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN WEIGHT20=WARN CATCHALLMAILS=IGNORE 06/29/2004 14:49:58 Qc7df09da00840372 L4 Message OK [/trunc] So I'm gonna answer my own question here, and say that Declude got it right, but Imail didn't catch it in the Rule. Anyone have a clue on why Imail rule wouldn't catch the text WEIGHT20 using this rule: H~(WEIGHT20):spambox TIA Jason - Original Message - From: Andy Schmidt [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 29, 2004 3:11 PM Subject: RE: [Declude.JunkMail] Messages slipping through JM Jason, What does the Declude log file indicate for these messages? Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Messages slipping through JM
If this was forwarded from another account, it would skip the IMail rule. I just went through that, when one of our sales people went on vacation and forwarded their mail to the CEO, who then received all their spam. :-) At 04:56 PM 6/29/2004, you wrote: Sorry Scott, should have been more clear. We don't do a declude Hold at Weight20, we do a warn, and then I have a rule in Imail (7.15) that sends anything with WEIGHT20 to a spambox submailbox. Here are the JM logs: [trunc] 06/29/2004 14:49:58 Qc7df09da00840372 L1 Message OK 06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]: SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN WEIGHT20=WARN CATCHALLMAILS=IGNORE 06/29/2004 14:49:58 Qc7df09da00840372 L2 Message OK 06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]: SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN WEIGHT20=WARN CATCHALLMAILS=IGNORE 06/29/2004 14:49:58 Qc7df09da00840372 L3 Message OK 06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]: SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN WEIGHT20=WARN CATCHALLMAILS=IGNORE 06/29/2004 14:49:58 Qc7df09da00840372 L4 Message OK [/trunc] So I'm gonna answer my own question here, and say that Declude got it right, but Imail didn't catch it in the Rule. Anyone have a clue on why Imail rule wouldn't catch the text WEIGHT20 using this rule: H~(WEIGHT20):spambox TIA Jason - Original Message - From: Andy Schmidt [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 29, 2004 3:11 PM Subject: RE: [Declude.JunkMail] Messages slipping through JM Jason, What does the Declude log file indicate for these messages? Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Messages slipping through JM
- Original Message - From: Ken Weise [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 29, 2004 4:16 PM Subject: Re: [Declude.JunkMail] Messages slipping through JM If this was forwarded from another account, it would skip the IMail rule. I just went through that, when one of our sales people went on vacation and forwarded their mail to the CEO, who then received all their spam. :-) Is this by design? I'm confused now (doesn't take much). So an e-mail comes in, it gets processed by declude, processed by rules, and delivered. Now we take that same e-mail and forward it to my account. Where does it go south, does it go from declude to an odd 'forward' process bypassing the rules, and straight to delivery? Thanks Jason --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Messages slipping through JM
Why not use the command in Declude to do this directly? In looking at the manual it appears to be ROUTETO email address. You could do this for the WEIGHT20 Piece. Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Ken Weise Sent: Tuesday, June 29, 2004 4:16 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Messages slipping through JM If this was forwarded from another account, it would skip the IMail rule. I just went through that, when one of our sales people went on vacation and forwarded their mail to the CEO, who then received all their spam. :-) At 04:56 PM 6/29/2004, you wrote: Sorry Scott, should have been more clear. We don't do a declude Hold at Weight20, we do a warn, and then I have a rule in Imail (7.15) that sends anything with WEIGHT20 to a spambox submailbox. Here are the JM logs: [trunc] 06/29/2004 14:49:58 Qc7df09da00840372 L1 Message OK 06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]: SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN WEIGHT20=WARN CATCHALLMAILS=IGNORE 06/29/2004 14:49:58 Qc7df09da00840372 L2 Message OK 06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]: SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN WEIGHT20=WARN CATCHALLMAILS=IGNORE 06/29/2004 14:49:58 Qc7df09da00840372 L3 Message OK 06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]: SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN WEIGHT20=WARN CATCHALLMAILS=IGNORE 06/29/2004 14:49:58 Qc7df09da00840372 L4 Message OK [/trunc] So I'm gonna answer my own question here, and say that Declude got it right, but Imail didn't catch it in the Rule. Anyone have a clue on why Imail rule wouldn't catch the text WEIGHT20 using this rule: H~(WEIGHT20):spambox TIA Jason - Original Message - From: Andy Schmidt [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 29, 2004 3:11 PM Subject: RE: [Declude.JunkMail] Messages slipping through JM Jason, What does the Declude log file indicate for these messages? Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Messages slipping through JM
Actually, my bad, that's what I get for not comprehending when replying. We are using Declude's MAILBOX option. So not quite the same situation. At 05:21 PM 6/29/2004, you wrote: - Original Message - From: Ken Weise [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 29, 2004 4:16 PM Subject: Re: [Declude.JunkMail] Messages slipping through JM If this was forwarded from another account, it would skip the IMail rule. I just went through that, when one of our sales people went on vacation and forwarded their mail to the CEO, who then received all their spam. :-) Is this by design? I'm confused now (doesn't take much). So an e-mail comes in, it gets processed by declude, processed by rules, and delivered. Now we take that same e-mail and forward it to my account. Where does it go south, does it go from declude to an odd 'forward' process bypassing the rules, and straight to delivery? Thanks Jason --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Messages slipping through JM
- Original Message - From: Grant Griffith - Declude JM [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 29, 2004 4:19 PM Subject: RE: [Declude.JunkMail] Messages slipping through JM Why not use the command in Declude to do this directly? In looking at the manual it appears to be ROUTETO email address. You could do this for the WEIGHT20 Piece. I'm not sending all WEIGHT20 to a separate e-mail address. I'm shooting it to a sub mailbox. For this I would use the MAILBOX action, and that requires PRO which we do not have. Jason --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Messages slipping through JM
Not sure if this would really work, but you could send it to a separate mailbox using the ROUTETO function by putting [EMAIL PROTECTED] Will this work if it is to the same user? Might be a way around the problem? Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jason @ AreaTech Sent: Tuesday, June 29, 2004 4:44 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Messages slipping through JM - Original Message - From: Grant Griffith - Declude JM [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 29, 2004 4:19 PM Subject: RE: [Declude.JunkMail] Messages slipping through JM Why not use the command in Declude to do this directly? In looking at the manual it appears to be ROUTETO email address. You could do this for the WEIGHT20 Piece. I'm not sending all WEIGHT20 to a separate e-mail address. I'm shooting it to a sub mailbox. For this I would use the MAILBOX action, and that requires PRO which we do not have. Jason --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Messages slipping through JM
Don't believe that will work. Does anyone know why a forwarded message isn't processed by the rules? Thanks, Jason -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith - Declude JM Sent: Tuesday, June 29, 2004 4:44 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Messages slipping through JM Not sure if this would really work, but you could send it to a separate mailbox using the ROUTETO function by putting [EMAIL PROTECTED] Will this work if it is to the same user? Might be a way around the problem? Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jason @ AreaTech Sent: Tuesday, June 29, 2004 4:44 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Messages slipping through JM - Original Message - From: Grant Griffith - Declude JM [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 29, 2004 4:19 PM Subject: RE: [Declude.JunkMail] Messages slipping through JM Why not use the command in Declude to do this directly? In looking at the manual it appears to be ROUTETO email address. You could do this for the WEIGHT20 Piece. I'm not sending all WEIGHT20 to a separate e-mail address. I'm shooting it to a sub mailbox. For this I would use the MAILBOX action, and that requires PRO which we do not have. Jason --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Messages slipping through JM
IMail is not perfect and I suspect that unless this happens very often on a range of message types, that this is related to a bug in IMail. If you noticed, the message that you shared with the list was only a partial message, although it looks much more substantial after Declude adds it's headers. I see this stuff all the time, especially from spam networks like Wholesalebandwidth. Most of these just litter my spool, however for some reason IMail goes ahead and processes many of them. They almost all generally end the same way, with a broken Message-ID and no To, From or Subject headers. I believe that this is the product of a common error in a particular piece of spamware.. Here's what I think is happening...I believe that you probably have an IMail rule that is verifying specifically data located in the header. Since this message has no body (signified by a double line break after the headers), and the headers are munged, IMail may be experiencing a parsing error and is unable to check your rule against the header. It may be possible that Scott could fix this with Declude inserting extra line breaks in this special situation so that the IMail rules would work, but only if it is related to not having double line breaks. Of course Ipswitch could also fix this and in reality it is their problem if I am correct. If this just happens with munged messaged with no bodies, I'm very likely to be right about this, otherwise I'm very likely to be wrong about it :) Matt Jason @ AreaTech wrote: Don't believe that will work. Does anyone know why a forwarded message isn't processed by the rules? Thanks, Jason -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Grant Griffith - Declude JM Sent: Tuesday, June 29, 2004 4:44 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Messages slipping through JM Not sure if this would really work, but you could send it to a separate mailbox using the ROUTETO function by putting [EMAIL PROTECTED]??? Will this work if it is to the same user? Might be a way around the problem? Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jason @ AreaTech Sent: Tuesday, June 29, 2004 4:44 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Messages slipping through JM - Original Message - From: "Grant Griffith - Declude JM" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 29, 2004 4:19 PM Subject: RE: [Declude.JunkMail] Messages slipping through JM Why not use the command in Declude to do this directly? In looking at the manual it appears to be ROUTETO email address. You could do this for the WEIGHT20 Piece. I'm not sending all WEIGHT20 to a separate e-mail address. I'm shooting it to a sub mailbox. For this I would use the MAILBOX action, and that requires PRO which we do not have. Jason --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
