Chris Porter wrote:
"Try adding 270net.com to your blacklist."

270net.com is my email domain.  The account on the Imail box is forwarding
to our exchange server.  If you read down further in the header you will see
who sent the spam
(101181316451529-13020200035-270net.com?[EMAIL PROTECTED]).  I have
"em5000.net" in by blacklist.txt file, along with around 20 other domains.
This sender still gets through though.  Any ideas?

Steve
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Steve Flook
Sent: Thursday, February 14, 2002 8:56 AM
To: Declude JunkMail List (E-mail)
Subject: [Declude.JunkMail] Why doesn't this get caught?


I was hoping someone could fill me in as to why this email doesn't get
trapped by my blacklist.  Other domains get caught that are in my
blacklist.txt file (such as ANYTHING.em5000.com), but this one always gets
through (I have it spelled right in the file as em5000.net).  Could it be
the ? mark in the From address that throws off the blacklist filter?

Thanks-
Steve

HEADER INFO:
Received: from webster.270net.com ([216.127.139.53]) by wyatt.270net.com
with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13)
id 16ZNB4GC; Thu, 14 Feb 2002 09:41:24 -0500
Received: from SMTP32-FWD by 270net.com
(SMTP32) id A000006A4; Thu, 14 Feb 2002 09:42:01 -0500
Received: from exploder8.em5000.net [64.37.114.78] by webster.270net.com
(SMTPD32-7.05) id ACB84D02CA; Thu, 14 Feb 2002 09:42:00 -0500
From: PerfectOffers <[EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]>>
Subject: RE: $49 Family Healthcare!
To: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
X-Info: To report abuse forward this mail to
[EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]> . Please include all mail
header fields!
X-Owner: perfectoffers;npdoqdu*270qhw=frp;
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="------------101354989349804"
X-RMD-Text: yes
Date: Thu, 14 Feb 2002 06:42:04 PST
X-Mailer: 2.0-b55-VC_IPA [Jan 1 2002, 13:54:45]
Message-ID: <13020200035$101181316451529$1895161752$[EMAIL PROTECTED]
<mailto:13020200035$101181316451529$1895161752$[EMAIL PROTECTED]>>
X-Note: RDNS Real-Origin: exploder8.em5000.net. [64.37.114.78]
X-Note: SMTP Real-From:
101181316451529-13020200035-270net.com?[EMAIL PROTECTED]
<mailto:101181316451529-13020200035-270net.com?[EMAIL PROTECTED]>
X-Note: SMTP Real-To: (1) [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
X-Note: Tests Failed, If Any (.cfg) =
--------------101354989349804
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
--------------101354989349804
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
***
[ This E-mail is scanned for viruses by 270net Technologies
(http://www.270net.com) ]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to