Can you indicate the specific rule that failed from the sniffer.log file? I'd like to look it up and see how it's coded. _M
| -----Original Message----- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]] On Behalf Of John | Tolmachoff | Sent: Friday, September 06, 2002 3:29 PM | To: [EMAIL PROTECTED] | Subject: [Declude.JunkMail] SPAM-L Digest fails spam headers | and Sniffer. | | | Here is a good one: | | Received: from cherry.ease.lsoft.com [209.119.0.109] by | mail.reliance.net with ESMTP | (SMTPD32-7.12) id AF2E20D00CE; Fri, 06 Sep 2002 12:17:02 -0700 | Received: from PEAR.EASE.LSOFT.COM (209.119.0.19) by | cherry.ease.lsoft.com (LSMTP for Digital Unix v1.1b) with | SMTP id <[EMAIL PROTECTED]>; Fri, 6 Sep 2002 | 15:16:57 -0400 | Date: Fri, 6 Sep 2002 15:16:57 -0400 | Reply-To: [EMAIL PROTECTED] | Sender: Spam Prevention Discussion List | <[EMAIL PROTECTED]> | From: Automatic digest processor <[EMAIL PROTECTED]> | Subject: THIS IS PROBABLY SPAM! SPAM-L Index - 5 Sep 2002 to | 6 Sep 2002 | - Special issue (#2002-477) | To: Recipients of SPAM-L indexes <[EMAIL PROTECTED]> | Precedence: list | Message-Id: <[EMAIL PROTECTED]> | X-RBL-Warning: SPAMHEADERS: This E-mail has headers | consistent with spam [4000020e]. | X-RBL-Warning: SNIFFER: Message failed SNIFFER: 42. | X-Declude-Sender: [EMAIL PROTECTED] [209.119.0.109] | X-Declude-Spoolname: Dff2e020d00ceedd2.SMD | X-Note: This E-mail was scanned by RelianceSoft, Inc. | (www.reliancesoft.com) for spam. | X-Tests-Failed: SPAMHEADERS, SNIFFER, WEIGHTRANGE15-19 | X-Note: This E-mail was sent from cherry.ease.lsoft.com | ([209.119.0.109]). | X-RCPT-TO: <[EMAIL PROTECTED]> | Status: U | X-UIDL: 321649208 | | | John Tolmachoff | IT Manager, Network Engineer | RelianceSoft, Inc. | Fullerton, CA 92835 | www.reliancesoft.com | | | | --- | [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
