On 09/28/2013 04:18 AM, emailitis.com wrote: > Can anyone explain why an email got through at 10:03 but then got > deleted with RBL_MATCH after that? Could it be that we really got one > of the first ones at 10:03?? > > Sep 28 10:03:43 plesk3 spamd[25071]: spamd: checking message > <[email protected]> > for qscand:10124 > > Sep 28 10:03:44 plesk3 spamd[25071]: spamd: result: . 1 - > HTML_EXTRA_CLOSE,HTML_MESSAGE,RDNS_NONE > scantime=1.2,size=9263,user=qscand,uid=10124,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42980,mid=<[email protected]>,autolearn=disabled > > > Sep 28 10:03:44 plesk3 spamdyke[32104]: ALLOWED from: > [email protected] to: > [email protected] origin_ip: 91.218.245.67 > origin_rdns: (unknown) auth: (unknown) encryption: (none) reason: > 250_ok_1380359024_qp_32111 > > Sep 28 10:57:05 plesk3 spamdyke[4163]: DENIED_RBL_MATCH from: > [email protected] to: > [email protected] origin_ip: 91.218.245.67 > origin_rdns: (unknown) auth: (unknown) encryption: (none) reason: > > Sep 28 11:22:23 plesk3 spamdyke[7757]: DENIED_RBL_MATCH from: > [email protected] to: > [email protected] origin_ip: 91.218.245.67 > origin_rdns: (unknown) auth: (unknown) encryption: (none) reason: > > Kind Regards, > > Christoph > > > > _______________________________________________
I don't know why not (iow, yes). Is your spamdyke up to date? You should see the rbl which lists the IP in the reason: field of the log message (very nice feature). -- -Eric 'shubes' _______________________________________________ spamdyke-users mailing list [email protected] http://www.spamdyke.org/mailman/listinfo/spamdyke-users
