Maybe I'm still a little confused then. On the message from the 17th... is the bounce message. What was the reason for the bounce? If it was for an unknown user, then you would have gotten the bounce back fast. But sometimes you get a bounce message because an email has been sitting in the queue and it gives up after a period of time, in most cases 5 days. So if the bounce message you got was because of an old message in your queue, then perhaps it got into your queue before you created that filter.
Either way, the envelope on that message shows "[EMAIL PROTECTED]". Can you find the entries in your incoming.log that are associated with that message? The one you showed as an example was from a different address. Am I making this too confusing? Just trying to help. David --- "YOON. Joo-Yung" <[EMAIL PROTECTED]> wrote: > Yes, you are right. > It was [EMAIL PROTECTED] > in my black list filter. > But it was just an example. > > The real one is [EMAIL PROTECTED], which is one of the biggest ISP's in > Korea. > The point of my question or doubt was > that my tmda log says [DROP] on 16 Feb, > but that I still get a bounce-bounced email from MAILER-DAEMON, > which includes the original email dated 17 Feb. > > And more strange is the address of the penetrated email can not be > searched > in the tmda log file. > > For your reference, I did not delete the last message as shown below. > > Thanks, > > On Tue, Feb 17, 2004 at 09:00:33AM -0800, David Hoffman wrote: > > Your earlier question was related to using your filter to catch > mail > > from [EMAIL PROTECTED] > > > > I don't see that rule being hit here. But for the first message in > your > > note, there was SOME rule in your blacklist that caused this > message to > > be dropped. > > > > But then you are showing a different message below that, that you > are > > saying asked for a confirmation. This log clip, and the pieces of > the > > second message do not appear to be from the same email. > > > > > > > > > > > > --- "YOON. Joo-Yung" <[EMAIL PROTECTED]> wrote: > > > > > > > > > My log says: > > > Date: Mon Feb 16 21:28:13 KST 2004 > > > Sndr: [EMAIL PROTECTED] > > > From: [EMAIL PROTECTED] > > > To: [EMAIL PROTECTED] > > > Subj: about tennis > > > Actn: DROP (from-file ~/.tmda/lists/blacklist drop) > > > > (1626) > > > > > > But the message as shown below is dated 17 Feb, and requested > > > for confirmation, and finally returned as "No such address". > > > > > > Could anyone give me a hint? > > > > > > Thanks. > > > > > > -------------------------------------- > > > Return-Path: <[EMAIL PROTECTED]> > > > > > > > Received: (qmail 32621 invoked from network); 17 Feb 2004 > 12:54:37 > > > -0000 > > > Received: from unknown (HELO 61.102.12.143) (210.113.61.28) > > > > > > > by 61.102.12.143 with SMTP; 17 Feb 2004 12:54:37 -0000 > > > > > > > Received: from [145.117.78.125] by 61.102.12.143 with SMTP; > Tue, 17 > > > Feb 2004 > > > +18:50:44 +0600 > > > > > > > Message-ID: <[EMAIL PROTECTED]> > > > > > > > From: "It is a spam" <[EMAIL PROTECTED]> > -- > YOON, Joo-Yung > Korea > _____________________________________________ > tmda-users mailing list ([EMAIL PROTECTED]) > http://tmda.net/lists/listinfo/tmda-users __________________________________ Do you Yahoo!? Yahoo! Finance: Get your refund fast by filing online. http://taxes.yahoo.com/filing.html _____________________________________________ tmda-users mailing list ([EMAIL PROTECTED]) http://tmda.net/lists/listinfo/tmda-users
