See the log filter - the ONLY place where I see the string "in-addr.arpa" is in your "ID:" field - behind some apparent garbled caharacters. Is there a problem with the REVDNS ENDSWITH filter, e.g., some "buffer overrun"?
That's what it looks like here. Do you happen to have the headers for this E-mail?
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
