http://www.mail-archive.com/declude.junkmail%40declude.com/msg10790.html
Matt
Jason W. Allen wrote:
I'm pretty new to Declude Spam so I may have something setup wrong.
I have -- ******************************************************** IMail: 7.0 ?5? Declude Junkmail: 1.75 Pro
Virtual Domain: mail.example.com With alias: example.com
Mailbox that has forwarding on it [EMAIL PROTECTED] forwards to: [EMAIL PROTECTED] & [EMAIL PROTECTED]
User1 has user config file (user1.junkmail) User3 has user config file (user2.junkmail) mail.example.com has default config file ($default$.junkmail)
All three config files are basically the say, with the only difference being the WHITELISTFILE settings.
declude has default config file ($default.junkmail) This config file has everything turned off. **************************************************************
Now if a message is sent to User1 it fails tests, the log says that it is moving the message to the spambox mailbox (this is the correct action), but it never makes it, and the users that are setup to receive the forwarded message get it. Now the final users, get the message, in the headers it says it fails but no action is taken.
If I remove the forward.ima file from the User1 directory (turning off forwarding) everything behaves as it should ( the message goes into the spam box). Put the forwarding back on and it reverts bas to the problem state.
Below is the debug log file, as you can see the log thinks the message is being moved to the correct place, but it never gets there. And there are no logs for the forwarded message to User2 and User3.
Am I doing some wrong. If you want I can show you the config files.
Thanks in advance.
--Jason W. Allen
09/10/2003 09:14:42.953 Q23c2055400a6d83d Setting DNS server to IMail's 198.6.1.5. 09/10/2003 09:14:42.968 Q23c2055400a6d83d Declude JunkMail Pro Version Registered 09/10/2003 09:14:42.968 Q23c2055400a6d83d Start 09/10/2003 09:14:42.984 Q23c2055400a6d83d Locked E:\IMail\spool\Q23c2055400a6d83d.SMD. 09/10/2003 09:14:42.984 Q23c2055400a6d83d Getting message envelope 09/10/2003 09:14:42.984 Q23c2055400a6d83d Copyall=no_copyall_account. 09/10/2003 09:14:43.000 Q23c2055400a6d83d QE:\IMail\spool\D23c2055400a6d83d.SMD 09/10/2003 09:14:43.000 Q23c2055400a6d83d Hgershwin.mpgis.net 09/10/2003 09:14:43.015 Q23c2055400a6d83d WE:\IMail 09/10/2003 09:14:43.015 Q23c2055400a6d83d E0, 09/10/2003 09:14:43.031 Q23c2055400a6d83d S<[EMAIL PROTECTED]> 09/10/2003 09:14:43.031 Q23c2055400a6d83d NRCPT TO: <[EMAIL PROTECTED]> 09/10/2003 09:14:43.046 Q23c2055400a6d83d Recip: NRCPT TO: <[EMAIL PROTECTED]> 09/10/2003 09:14:43.046 Q23c2055400a6d83d R<[EMAIL PROTECTED]> 09/10/2003 09:14:43.046 Q23c2055400a6d83d Recip: R<[EMAIL PROTECTED]> 09/10/2003 09:14:43.062 Q23c2055400a6d83d Setting altaddr 0 to [EMAIL PROTECTED] [EMAIL PROTECTED] 09/10/2003 09:14:43.062 Q23c2055400a6d83d Setting reciphost to example.com 09/10/2003 09:14:43.062 Q23c2055400a6d83d 09/10/2003 09:14:43.078 Q23c2055400a6d83d nRecips: 1 (1 total) 09/10/2003 09:14:43.078 Q23c2055400a6d83d Recip 0: [EMAIL PROTECTED] = [EMAIL PROTECTED] 09/10/2003 09:14:43.093 Q23c2055400a6d83d Starting locality check (sender=declude.com; nr=1 ca=off). 09/10/2003 09:14:43.093 Q23c2055400a6d83d CL Opening HKEY_LOCAL_MACHINE\software\Ipswitch\IMail\Domains 09/10/2003 09:14:43.093 Q23c2055400a6d83d [EMAIL PROTECTED] [0] is local domain2 09/10/2003 09:14:43.109 Q23c2055400a6d83d Done getting message envelope 09/10/2003 09:14:43.109 Q23c2055400a6d83d Getting headers 09/10/2003 09:14:43.125 Q23c2055400a6d83d Done getting envelope and headers 09/10/2003 09:14:43.125 Q23c2055400a6d83d Ver=30 verflag=0 09/10/2003 09:14:43.140 Q23c2055400a6d83d About to run spam tests 09/10/2003 09:14:43.140 Q23c2055400a6d83d Going through datafile 09/10/2003 09:14:43.156 Q23c2055400a6d83d LOOKING FOR IP: Received: from www.declude.com [216.58.1 09/10/2003 09:14:43.156 Q23c2055400a6d83d Setting [IPTEXT] to 216.58.174.203 09/10/2003 09:14:43.156 Q23c2055400a6d83d iptext now=216.58.174.203 09/10/2003 09:14:43.171 Q23c2055400a6d83d Testing IP 216.58.174.203 09/10/2003 09:14:43.171 Q23c2055400a6d83d Handling Received: header 09/10/2003 09:14:43.187 Q23c2055400a6d83d Got IP 216.58.174.203 09/10/2003 09:14:43.187 Q23c2055400a6d83d Setting remote IP address to 216.58.174.203 09/10/2003 09:14:43.203 Q23c2055400a6d83d 203.174.58.216.in-addr.arpa 09/10/2003 09:14:52.890 Q23c2055400a6d83d revdns: nt3.nshosts.com. 09/10/2003 09:14:52.890 Q23c2055400a6d83d Hop 0: Checking IP Address 216.58.174.203. 09/10/2003 09:14:52.890 Q23c2055400a6d83d iptext=216.58.174.203 myip1=d83aaecb i=4 09/10/2003 09:15:02.968 Q23c2055400a6d83d Test 0-BLITZEDALL didn't get a response. 09/10/2003 09:15:02.968 Q23c2055400a6d83d Test 1-CBL didn't get a response. 09/10/2003 09:15:02.968 Q23c2055400a6d83d Test 2-DSBL didn't get a response. 09/10/2003 09:15:02.984 Q23c2055400a6d83d Test 3-EASYNET-DNSBL didn't get a response. 09/10/2003 09:15:02.984 Q23c2055400a6d83d Test 4-EASYNET-PROXIES didn't get a response. 09/10/2003 09:15:03.000 Q23c2055400a6d83d Test 5-FABELSOURCES didn't get a response. 09/10/2003 09:15:03.000 Q23c2055400a6d83d Test 6-FIVETEN-BULK didn't get a response. 09/10/2003 09:15:03.015 Q23c2055400a6d83d Test 13-INTERSIL didn't get a response. 09/10/2003 09:15:03.031 Q23c2055400a6d83d Test 14-IPWHOIS didn't get a response. 09/10/2003 09:15:03.031 Q23c2055400a6d83d Test 15-MONKEYFORMMAIL didn't get a response. 09/10/2003 09:15:03.046 Q23c2055400a6d83d Test 16-MONKEYPROXIES didn't get a response. 09/10/2003 09:15:03.046 Q23c2055400a6d83d Test 17-NJABL didn't get a response. 09/10/2003 09:15:03.046 Q23c2055400a6d83d Test 18-ORDB didn't get a response. 09/10/2003 09:15:03.062 Q23c2055400a6d83d Test 19-OSDUL didn't get a response. 09/10/2003 09:15:03.078 Q23c2055400a6d83d Test 24-SORBS-BLOCK didn't get a response. 09/10/2003 09:15:03.078 Q23c2055400a6d83d Test 32-SPAMBAG didn't get a response. 09/10/2003 09:15:03.093 Q23c2055400a6d83d Test 33-SPAMCOP didn't get a response. 09/10/2003 09:15:03.093 Q23c2055400a6d83d Test 34-SPAMHAUS didn't get a response. 09/10/2003 09:15:03.109 Q23c2055400a6d83d Test 35-UCEB didn't get a response. 09/10/2003 09:15:03.109 Q23c2055400a6d83d Test 36-VOX didn't get a response. 09/10/2003 09:15:03.109 Q23c2055400a6d83d Test 45-BONDEDSENDER didn't get a response. 09/10/2003 09:15:03.125 Q23c2055400a6d83d Last line of headers: Subject: BADHEADERS test file 09/10/2003 09:15:03.234 Q23c2055400a6d83d DNSBL checks done 09/10/2003 09:15:03.234 Q23c2055400a6d83d Test #0: BLITZEDALL [ip4r] - may skip 09/10/2003 09:15:03.234 Q23c2055400a6d83d Test #1: CBL [ip4r] - may skip 09/10/2003 09:15:03.250 Q23c2055400a6d83d Test #2: DSBL [ip4r] - may skip 09/10/2003 09:15:03.250 Q23c2055400a6d83d Test #3: EASYNET-DNSBL [ip4r] - may skip 09/10/2003 09:15:03.265 Q23c2055400a6d83d Test #4: EASYNET-PROXIES [ip4r] - may skip 09/10/2003 09:15:03.265 Q23c2055400a6d83d Test #5: FABELSOURCES [ip4r] - may skip 09/10/2003 09:15:03.281 Q23c2055400a6d83d Test #6: FIVETEN-BULK [ip4r] - may skip 09/10/2003 09:15:03.281 Q23c2055400a6d83d Test #7: FIVETEN-FREE [ip4r] - may skip 09/10/2003 09:15:03.296 Q23c2055400a6d83d Test #8: FIVETEN-MISC [ip4r] - may skip 09/10/2003 09:15:03.296 Q23c2055400a6d83d Test #9: FIVETEN-MULTISTAGE [ip4r] - may skip 09/10/2003 09:15:03.312 Q23c2055400a6d83d Test #10: FIVETEN-SINGLESTAGE [ip4r] - may skip 09/10/2003 09:15:03.312 Q23c2055400a6d83d Test #11: FIVETEN-SPAM [ip4r] - may skip 09/10/2003 09:15:03.328 Q23c2055400a6d83d Test #12: FIVETEN-SPAMSUPPORT [ip4r] - may skip 09/10/2003 09:15:03.328 Q23c2055400a6d83d Test #13: INTERSIL [ip4r] - may skip 09/10/2003 09:15:03.343 Q23c2055400a6d83d Test #14: IPWHOIS [ip4r] - may skip 09/10/2003 09:15:03.343 Q23c2055400a6d83d Test #15: MONKEYFORMMAIL [ip4r] - may skip 09/10/2003 09:15:03.343 Q23c2055400a6d83d Test #16: MONKEYPROXIES [ip4r] - may skip 09/10/2003 09:15:03.359 Q23c2055400a6d83d Test #17: NJABL [ip4r] - may skip 09/10/2003 09:15:03.359 Q23c2055400a6d83d Test #18: ORDB [ip4r] - may skip 09/10/2003 09:15:03.375 Q23c2055400a6d83d Test #19: OSDUL [ip4r] - may skip 09/10/2003 09:15:03.375 Q23c2055400a6d83d Test #20: OSFORM [ip4r] - may skip 09/10/2003 09:15:03.390 Q23c2055400a6d83d Test #21: OSLIST [ip4r] - may skip 09/10/2003 09:15:03.390 Q23c2055400a6d83d Test #22: OSSMART [ip4r] - may skip 09/10/2003 09:15:03.406 Q23c2055400a6d83d Test #23: OSSOFT [ip4r] - may skip 09/10/2003 09:15:03.406 Q23c2055400a6d83d Test #24: SORBS-BLOCK [ip4r] - may skip 09/10/2003 09:15:03.406 Q23c2055400a6d83d Test #25: SORBS-HTTP [ip4r] - may skip 09/10/2003 09:15:03.421 Q23c2055400a6d83d Test #26: SORBS-MISC [ip4r] - may skip 09/10/2003 09:15:03.421 Q23c2055400a6d83d Test #27: SORBS-SMTP [ip4r] - may skip 09/10/2003 09:15:03.437 Q23c2055400a6d83d Test #28: SORBS-SOCKS [ip4r] - may skip 09/10/2003 09:15:03.437 Q23c2055400a6d83d Test #29: SORBS-SPAM [ip4r] - may skip 09/10/2003 09:15:03.453 Q23c2055400a6d83d Test #30: SORBS-WEB [ip4r] - may skip 09/10/2003 09:15:03.453 Q23c2055400a6d83d Test #31: SORBS-ZOMBIE [ip4r] - may skip 09/10/2003 09:15:03.453 Q23c2055400a6d83d Test #32: SPAMBAG [ip4r] - may skip 09/10/2003 09:15:03.468 Q23c2055400a6d83d Test #33: SPAMCOP [ip4r] - may skip 09/10/2003 09:15:03.484 Q23c2055400a6d83d Test #34: SPAMHAUS [ip4r] - may skip 09/10/2003 09:15:03.484 Q23c2055400a6d83d Test #35: UCEB [ip4r] - may skip 09/10/2003 09:15:03.484 Q23c2055400a6d83d Test #36: VOX [ip4r] - may skip 09/10/2003 09:15:03.500 Q23c2055400a6d83d Test #37: DSN [rhsbl] - may skip 09/10/2003 09:15:03.500 Q23c2055400a6d83d Testing RHSBL at declude.com.dsn.rfc-ignorant.org [0]. 09/10/2003 09:15:04.578 Q23c2055400a6d83d Finished Final Test #37: DSN [rhsbl] 09/10/2003 09:15:04.578 Q23c2055400a6d83d Test #38: MAILPOLICE-BULK [rhsbl] - may skip 09/10/2003 09:15:04.578 Q23c2055400a6d83d Testing RHSBL at declude.com.bulk.rhs.mailpolice.com [0]. 09/10/2003 09:15:05.843 Q23c2055400a6d83d Finished Final Test #38: MAILPOLICE-BULK [rhsbl] 09/10/2003 09:15:05.843 Q23c2055400a6d83d Test #39: MAILPOLICE-PORN [rhsbl] - may skip 09/10/2003 09:15:05.843 Q23c2055400a6d83d Testing RHSBL at declude.com.porn.rhs.mailpolice.com [0]. 09/10/2003 09:15:07.421 Q23c2055400a6d83d Finished Final Test #39: MAILPOLICE-PORN [rhsbl] 09/10/2003 09:15:07.421 Q23c2055400a6d83d Test #40: NOABUSE [rhsbl] - may skip 09/10/2003 09:15:07.421 Q23c2055400a6d83d Testing RHSBL at declude.com.abuse.rfc-ignorant.org [0]. 09/10/2003 09:15:08.750 Q23c2055400a6d83d Finished Final Test #40: NOABUSE [rhsbl] 09/10/2003 09:15:08.750 Q23c2055400a6d83d Test #41: NOPOSTMASTER [rhsbl] - may skip 09/10/2003 09:15:08.765 Q23c2055400a6d83d Testing RHSBL at declude.com.postmaster.rfc-ignorant.org [0]. 09/10/2003 09:15:18.765 Q23c2055400a6d83d Finished Final Test #41: NOPOSTMASTER [rhsbl] 09/10/2003 09:15:18.765 Q23c2055400a6d83d Test #42: SECURITYSAGE [rhsbl] - may skip 09/10/2003 09:15:18.781 Q23c2055400a6d83d Testing RHSBL at declude.com.blackhole.securitysage.com [0]. 09/10/2003 09:15:28.796 Q23c2055400a6d83d Finished Final Test #42: SECURITYSAGE [rhsbl] 09/10/2003 09:15:28.796 Q23c2055400a6d83d Test #43: SORBS-BADCONF [rhsbl] - may skip 09/10/2003 09:15:28.796 Q23c2055400a6d83d Testing RHSBL at declude.com.dnsbl.sorbs.net [0]. 09/10/2003 09:15:38.812 Q23c2055400a6d83d Finished Final Test #43: SORBS-BADCONF [rhsbl] 09/10/2003 09:15:38.812 Q23c2055400a6d83d Test #44: SORBS-NOMAIL [rhsbl] - may skip 09/10/2003 09:15:38.812 Q23c2055400a6d83d Testing RHSBL at declude.com.dnsbl.sorbs.net [0]. 09/10/2003 09:15:48.828 Q23c2055400a6d83d Finished Final Test #44: SORBS-NOMAIL [rhsbl] 09/10/2003 09:15:48.828 Q23c2055400a6d83d Test #45: BONDEDSENDER [ip4r] - may skip 09/10/2003 09:15:48.828 Q23c2055400a6d83d Test #46: BADHEADERS [badheaders] - may skip 09/10/2003 09:15:48.843 Q23c2055400a6d83d This E-mail was sent from a broken mail client [8040000e]. 09/10/2003 09:15:48.843 Q23c2055400a6d83d Finished Final Test #46: BADHEADERS [badheaders] 09/10/2003 09:15:48.859 Q23c2055400a6d83d Test #47: BASE64 [base64] - may skip 09/10/2003 09:15:48.859 Q23c2055400a6d83d Finished Final Test #47: BASE64 [base64] 09/10/2003 09:15:48.859 Q23c2055400a6d83d Test #48: HELOBOGUS [helovalid] - may skip 09/10/2003 09:15:48.875 Q23c2055400a6d83d Starting HELO validity check 09/10/2003 09:15:48.875 Q23c2055400a6d83d Looking up MX/A record for www.declude.com at 198.6.1.5. 09/10/2003 09:16:18.890 Q23c2055400a6d83d NOTE: Did not succeed in getting MX or A records for www.declude.com from 198.6.1.5. 09/10/2003 09:16:18.890 Q23c2055400a6d83d DNS Report: Timed Out. 09/10/2003 09:16:18.890 Q23c2055400a6d83d Done with MX or A record 09/10/2003 09:16:18.906 Q23c2055400a6d83d HELO: GOOD 09/10/2003 09:16:18.906 Q23c2055400a6d83d Finished Final Test #48: HELOBOGUS [helovalid] 09/10/2003 09:16:18.921 Q23c2055400a6d83d Test #49: MAILFROM [envfrom] - may skip 09/10/2003 09:16:18.921 Q23c2055400a6d83d Doing envfrom type test on declude.com. 09/10/2003 09:16:18.921 Q23c2055400a6d83d Looking up MX/A record for declude.com at 198.6.1.5. 09/10/2003 09:16:48.937 Q23c2055400a6d83d NOTE: Did not succeed in getting MX or A records for declude.com from 198.6.1.5. 09/10/2003 09:16:48.937 Q23c2055400a6d83d DNS Report: Timed Out. 09/10/2003 09:16:48.937 Q23c2055400a6d83d Done with MX or A record 09/10/2003 09:16:48.953 Q23c2055400a6d83d Finished Final Test #49: MAILFROM [envfrom] 09/10/2003 09:16:48.953 Q23c2055400a6d83d Test #50: IPNOTINMX [ipnotinmx] - may skip 09/10/2003 09:16:48.968 Q23c2055400a6d83d Test #51: PERCENT [percent] - may skip 09/10/2003 09:16:48.968 Q23c2055400a6d83d Finished Final Test #51: PERCENT [percent] 09/10/2003 09:16:48.984 Q23c2055400a6d83d Test #52: REVDNS [revdnsexists] - may skip 09/10/2003 09:16:48.984 Q23c2055400a6d83d Finished Final Test #52: REVDNS [revdnsexists] 09/10/2003 09:16:48.984 Q23c2055400a6d83d Test #53: ROUTING [spamrouting] - may skip 09/10/2003 09:16:49.000 Q23c2055400a6d83d Test #54: SPAMHEADERS [spamheaders] - may skip 09/10/2003 09:16:49.000 Q23c2055400a6d83d Test #55: WEIGHT10 [weight] - may skip 09/10/2003 09:16:49.015 Q23c2055400a6d83d Test #56: WEIGHT20 [weight] - may skip 09/10/2003 09:16:49.015 Q23c2055400a6d83d Test #57: CATCHALLMAILS [catchallmails] - may skip 09/10/2003 09:16:49.015 Q23c2055400a6d83d Finished Final Test #57: CATCHALLMAILS [catchallmails] 09/10/2003 09:16:49.031 Q23c2055400a6d83d Test #58: OSDIPS [WARN] - may skip 09/10/2003 09:16:49.031 Q23c2055400a6d83d Test #59: OSPROXY [WARN] - may skip 09/10/2003 09:16:49.046 Q23c2055400a6d83d Test #60: OSRELAY [WARN] - may skip 09/10/2003 09:16:49.046 Q23c2055400a6d83d Test #61: SBL [WARN] - may skip 09/10/2003 09:16:49.062 Q23c2055400a6d83d JunkMailBase64 Start 09/10/2003 09:16:49.062 Q23c2055400a6d83d DeHTML Start 09/10/2003 09:16:49.078 Q23c2055400a6d83d DeHTML End 09/10/2003 09:16:49 Q23c2055400a6d83d BADHEADERS:8 . Total weight = 8 09/10/2003 09:16:49.078 Q23c2055400a6d83d Testing whitelist #0 6 03 09:16:49.093 Q23c2055400a6d83d Past whitelisting 09/10/2003 09:16:49.109 Q23c2055400a6d83d Looping... 09/10/2003 09:16:49.109 Q23c2055400a6d83d [EMAIL PROTECTED] [EMAIL PROTECTED]@mail.example.com] *local* 09/10/2003 09:16:49.109 Q23c2055400a6d83d Opening HKEY_LOCAL_MACHINE\software\Ipswitch\IMail\Domains 09/10/2003 09:16:49.125 Q23c2055400a6d83d Domain name = mail.example.com, User name = user1. 09/10/2003 09:16:49 Q23c2055400a6d83d Using [incoming] CFG file E:\IMail\Declude\mail.example.com\$default$.junkmail. 09/10/2003 09:16:49.140 Q23c2055400a6d83d ..............................................X...X......X.... 09/10/2003 09:16:49.140 Q23c2055400a6d83d Test #46 [BADHEADERS weight=8] triggered; action = 10 [This E-mail was sent from a broken mail client [8040000e].] 09/10/2003 09:16:49 Q23c2055400a6d83d Msg failed BADHEADERS (This E-mail was sent from a broken mail client [8040000e].). Action=MAILBOX. 09/10/2003 09:16:49.156 Q23c2055400a6d83d Moving spam to [EMAIL PROTECTED]'s mailbox spambox. 09/10/2003 09:16:49.171 Q23c2055400a6d83d AlterRecip( 1, [EMAIL PROTECTED], spambox); 09/10/2003 09:16:49.171 Q23c2055400a6d83d AlterRecip: Loading queuefile 09/10/2003 09:16:49.187 Q23c2055400a6d83d AlterRecip: Changing mailbox to spambox. Altering queuefile. 09/10/2003 09:16:49.187 Q23c2055400a6d83d Test #50 [IPNOTINMX weight=0] triggered; action = 0 [] 09/10/2003 09:16:49.187 Q23c2055400a6d83d Test #57 [CATCHALLMAILS weight=0] triggered; action = 0 [] 09/10/2003 09:16:49 Q23c2055400a6d83d Subject: BADHEADERS test file 09/10/2003 09:16:49 Q23c2055400a6d83d From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 216.58.174.203 ID: 09/10/2003 09:16:49.218 Q23c2055400a6d83d Done Looping 09/10/2003 09:16:49.234 Q23c2055400a6d83d AlterRecip( 5, (null), (null)); 09/10/2003 09:16:49.234 Q23c2055400a6d83d AlterRecip: Saving queuefile 09/10/2003 09:16:49 Q23c2055400a6d83d Last action = IGNORE. 09/10/2003 09:16:49.265 Q23c2055400a6d83d X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. 09/10/2003 09:16:49.281 Q23c2055400a6d83d AlterMessage 09/10/2003 09:16:49.296 Q23c2055400a6d83d Set process priority back to 32. 09/10/2003 09:16:49.296 Q23c2055400a6d83d Adding warning 09/10/2003 09:16:49.312 Q23c2055400a6d83d Last Action=IGNORE. 09/10/2003 09:16:49.312 Q23c2055400a6d83d E:\IMail\spool\Q23c2055400a6d83d.SMD 09/10/2003 09:16:49.328 Q23c2055400a6d83d Unlocked E:\IMail\spool\Q23c2055400a6d83d.SMD. 09/10/2003 09:16:49.328 Q23c2055400a6d83d Passing to SMTP3: E:\IMail\smtp32.exe "E:\IMail\spool\Q23c2055400a6d83d.SMD". 09/10/2003 09:16:49.343 Q23c2055400a6d83d Total Time: 1376ms 09/10/2003 09:21:07.359 Q254302330094b5c4 Setting DNS server to IMail's 198.6.1.5. 09/10/2003 09:21:07.359 Q254302330094b5c4 Declude JunkMail Pro Version Registered 09/10/2003 09:21:07.375 Q254302330094b5c4 Start 09/10/2003 09:21:07.375 Q254302330094b5c4 Locked E:\IMail\spool\Q254302330094b5c4.SMD. 09/10/2003 09:21:07.390 Q254302330094b5c4 Getting message envelope 09/10/2003 09:21:07.390 Q254302330094b5c4 Copyall=no_copyall_account. 09/10/2003 09:21:07.406 Q254302330094b5c4 QE:\IMail\spool\D254302330094b5c4.SMD 09/10/2003 09:21:07.406 Q254302330094b5c4 Hgershwin.example.com 09/10/2003 09:21:07.421 Q254302330094b5c4 WE:\IMail 09/10/2003 09:21:07.421 Q254302330094b5c4 E0, 09/10/2003 09:21:07.421 Q254302330094b5c4 S<[EMAIL PROTECTED]> 09/10/2003 09:21:07.437 Q254302330094b5c4 NRCPT TO: <[EMAIL PROTECTED]> 09/10/2003 09:21:07.437 Q254302330094b5c4 Recip: NRCPT TO: <[EMAIL PROTECTED]> 09/10/2003 09:21:07.453 Q254302330094b5c4 R<[EMAIL PROTECTED]> 09/10/2003 09:21:07.453 Q254302330094b5c4 Recip: R<[EMAIL PROTECTED]> 09/10/2003 09:21:07.468 Q254302330094b5c4 Setting altaddr 0 to [EMAIL PROTECTED] [EMAIL PROTECTED] 09/10/2003 09:21:07.468 Q254302330094b5c4 Setting reciphost to example.com 09/10/2003 09:21:07.468 Q254302330094b5c4 09/10/2003 09:21:07.484 Q254302330094b5c4 nRecips: 1 (1 total) 09/10/2003 09:21:07.484 Q254302330094b5c4 Recip 0: [EMAIL PROTECTED] = [EMAIL PROTECTED] 09/10/2003 09:21:07.500 Q254302330094b5c4 Starting locality check (sender=declude.com; nr=1 ca=off). 09/10/2003 09:21:07.500 Q254302330094b5c4 CL Opening HKEY_LOCAL_MACHINE\software\Ipswitch\IMail\Domains 09/10/2003 09:21:07.500 Q254302330094b5c4 [EMAIL PROTECTED] [0] is local domain2 09/10/2003 09:21:07.515 Q254302330094b5c4 Done getting message envelope 09/10/2003 09:21:07.515 Q254302330094b5c4 Getting headers 09/10/2003 09:21:07.531 Q254302330094b5c4 Done getting envelope and headers 09/10/2003 09:21:07.531 Q254302330094b5c4 Ver=30 verflag=0 09/10/2003 09:21:07.546 Q254302330094b5c4 About to run spam tests 09/10/2003 09:21:07.546 Q254302330094b5c4 Going through datafile 09/10/2003 09:21:07.562 Q254302330094b5c4 LOOKING FOR IP: Received: from www.declude.com [216.58.1 09/10/2003 09:21:07.562 Q254302330094b5c4 Setting [IPTEXT] to 216.58.174.203 09/10/2003 09:21:07.562 Q254302330094b5c4 iptext now=216.58.174.203 09/10/2003 09:21:07.578 Q254302330094b5c4 Testing IP 216.58.174.203 09/10/2003 09:21:07.578 Q254302330094b5c4 Handling Received: header 09/10/2003 09:21:07.593 Q254302330094b5c4 Got IP 216.58.174.203 09/10/2003 09:21:07.593 Q254302330094b5c4 Setting remote IP address to 216.58.174.203 09/10/2003 09:21:07.609 Q254302330094b5c4 203.174.58.216.in-addr.arpa 09/10/2003 09:21:20.625 Q254302330094b5c4 revdns: PTR timeout 09/10/2003 09:21:20.625 Q254302330094b5c4 Hop 0: Checking IP Address 216.58.174.203. 09/10/2003 09:21:20.640 Q254302330094b5c4 iptext=216.58.174.203 myip1=d83aaecb i=4 09/10/2003 09:21:30.703 Q254302330094b5c4 Test 0-BLITZEDALL didn't get a response. 09/10/2003 09:21:30.703 Q254302330094b5c4 Test 1-CBL didn't get a response. 09/10/2003 09:21:30.703 Q254302330094b5c4 Test 2-DSBL didn't get a response. 09/10/2003 09:21:30.718 Q254302330094b5c4 Test 3-EASYNET-DNSBL didn't get a response. 09/10/2003 09:21:30.718 Q254302330094b5c4 Test 4-EASYNET-PROXIES didn't get a response. 09/10/2003 09:21:30.734 Q254302330094b5c4 Test 5-FABELSOURCES didn't get a response. 09/10/2003 09:21:30.734 Q254302330094b5c4 Test 6-FIVETEN-BULK didn't get a response. 09/10/2003 09:21:30.750 Q254302330094b5c4 Test 13-INTERSIL didn't get a response. 09/10/2003 09:21:30.750 Q254302330094b5c4 Test 14-IPWHOIS didn't get a response. 09/10/2003 09:21:30.750 Q254302330094b5c4 Test 15-MONKEYFORMMAIL didn't get a response. 09/10/2003 09:21:30.765 Q254302330094b5c4 Test 16-MONKEYPROXIES didn't get a response. 09/10/2003 09:21:30.765 Q254302330094b5c4 Test 17-NJABL didn't get a response. 09/10/2003 09:21:30.781 Q254302330094b5c4 Test 18-ORDB didn't get a response. 09/10/2003 09:21:30.781 Q254302330094b5c4 Test 19-OSDUL didn't get a response. 09/10/2003 09:21:30.796 Q254302330094b5c4 Test 24-SORBS-BLOCK didn't get a response. 09/10/2003 09:21:30.796 Q254302330094b5c4 Test 32-SPAMBAG didn't get a response. 09/10/2003 09:21:30.796 Q254302330094b5c4 Test 33-SPAMCOP didn't get a response. 09/10/2003 09:21:30.812 Q254302330094b5c4 Test 34-SPAMHAUS didn't get a response. 09/10/2003 09:21:30.812 Q254302330094b5c4 Test 35-UCEB didn't get a response. 09/10/2003 09:21:30.828 Q254302330094b5c4 Test 36-VOX didn't get a response. 09/10/2003 09:21:30.828 Q254302330094b5c4 Test 45-BONDEDSENDER didn't get a response. 09/10/2003 09:21:30.843 Q254302330094b5c4 Last line of headers: Subject: BADHEADERS test file 09/10/2003 09:21:30.953 Q254302330094b5c4 DNSBL checks done 09/10/2003 09:21:30.953 Q254302330094b5c4 Test #0: BLITZEDALL [ip4r] - may skip 09/10/2003 09:21:30.953 Q254302330094b5c4 Test #1: CBL [ip4r] - may skip 09/10/2003 09:21:30.968 Q254302330094b5c4 Test #2: DSBL [ip4r] - may skip 09/10/2003 09:21:30.968 Q254302330094b5c4 Test #3: EASYNET-DNSBL [ip4r] - may skip 09/10/2003 09:21:30.984 Q254302330094b5c4 Test #4: EASYNET-PROXIES [ip4r] - may skip 09/10/2003 09:21:30.984 Q254302330094b5c4 Test #5: FABELSOURCES [ip4r] - may skip 09/10/2003 09:21:30.984 Q254302330094b5c4 Test #6: FIVETEN-BULK [ip4r] - may skip 09/10/2003 09:21:31.000 Q254302330094b5c4 Test #7: FIVETEN-FREE [ip4r] - may skip 09/10/2003 09:21:31.000 Q254302330094b5c4 Test #8: FIVETEN-MISC [ip4r] - may skip 09/10/2003 09:21:31.015 Q254302330094b5c4 Test #9: FIVETEN-MULTISTAGE [ip4r] - may skip 09/10/2003 09:21:31.015 Q254302330094b5c4 Test #10: FIVETEN-SINGLESTAGE [ip4r] - may skip 09/10/2003 09:21:31.031 Q254302330094b5c4 Test #11: FIVETEN-SPAM [ip4r] - may skip 09/10/2003 09:21:31.031 Q254302330094b5c4 Test #12: FIVETEN-SPAMSUPPORT [ip4r] - may skip 09/10/2003 09:21:31.046 Q254302330094b5c4 Test #13: INTERSIL [ip4r] - may skip 09/10/2003 09:21:31.046 Q254302330094b5c4 Test #14: IPWHOIS [ip4r] - may skip 09/10/2003 09:21:31.046 Q254302330094b5c4 Test #15: MONKEYFORMMAIL [ip4r] - may skip 09/10/2003 09:21:31.062 Q254302330094b5c4 Test #16: MONKEYPROXIES [ip4r] - may skip 09/10/2003 09:21:31.062 Q254302330094b5c4 Test #17: NJABL [ip4r] - may skip 09/10/2003 09:21:31.078 Q254302330094b5c4 Test #18: ORDB [ip4r] - may skip 09/10/2003 09:21:31.078 Q254302330094b5c4 Test #19: OSDUL [ip4r] - may skip 09/10/2003 09:21:31.078 Q254302330094b5c4 Test #20: OSFORM [ip4r] - may skip 09/10/2003 09:21:31.093 Q254302330094b5c4 Test #21: OSLIST [ip4r] - may skip 09/10/2003 09:21:31.093 Q254302330094b5c4 Test #22: OSSMART [ip4r] - may skip 09/10/2003 09:21:31.109 Q254302330094b5c4 Test #23: OSSOFT [ip4r] - may skip 09/10/2003 09:21:31.109 Q254302330094b5c4 Test #24: SORBS-BLOCK [ip4r] - may skip 09/10/2003 09:21:31.109 Q254302330094b5c4 Test #25: SORBS-HTTP [ip4r] - may skip 09/10/2003 09:21:31.125 Q254302330094b5c4 Test #26: SORBS-MISC [ip4r] - may skip 09/10/2003 09:21:31.125 Q254302330094b5c4 Test #27: SORBS-SMTP [ip4r] - may skip 09/10/2003 09:21:31.140 Q254302330094b5c4 Test #28: SORBS-SOCKS [ip4r] - may skip 09/10/2003 09:21:31.140 Q254302330094b5c4 Test #29: SORBS-SPAM [ip4r] - may skip 09/10/2003 09:21:31.140 Q254302330094b5c4 Test #30: SORBS-WEB [ip4r] - may skip 09/10/2003 09:21:31.156 Q254302330094b5c4 Test #31: SORBS-ZOMBIE [ip4r] - may skip 09/10/2003 09:21:31.156 Q254302330094b5c4 Test #32: SPAMBAG [ip4r] - may skip 09/10/2003 09:21:31.171 Q254302330094b5c4 Test #33: SPAMCOP [ip4r] - may skip 09/10/2003 09:21:31.171 Q254302330094b5c4 Test #34: SPAMHAUS [ip4r] - may skip 09/10/2003 09:21:31.171 Q254302330094b5c4 Test #35: UCEB [ip4r] - may skip 09/10/2003 09:21:31.187 Q254302330094b5c4 Test #36: VOX [ip4r] - may skip 09/10/2003 09:21:31.187 Q254302330094b5c4 Test #37: DSN [rhsbl] - may skip 09/10/2003 09:21:31.203 Q254302330094b5c4 Testing RHSBL at declude.com.dsn.rfc-ignorant.org [0]. 09/10/2003 09:21:41.203 Q254302330094b5c4 Finished Final Test #37: DSN [rhsbl] 09/10/2003 09:21:41.203 Q254302330094b5c4 Test #38: MAILPOLICE-BULK [rhsbl] - may skip 09/10/2003 09:21:41.203 Q254302330094b5c4 Testing RHSBL at declude.com.bulk.rhs.mailpolice.com [0]. 09/10/2003 09:21:51.218 Q254302330094b5c4 Finished Final Test #38: MAILPOLICE-BULK [rhsbl] 09/10/2003 09:21:51.218 Q254302330094b5c4 Test #39: MAILPOLICE-PORN [rhsbl] - may skip 09/10/2003 09:21:51.218 Q254302330094b5c4 Testing RHSBL at declude.com.porn.rhs.mailpolice.com [0]. 09/10/2003 09:22:01.234 Q254302330094b5c4 Finished Final Test #39: MAILPOLICE-PORN [rhsbl] 09/10/2003 09:22:01.234 Q254302330094b5c4 Test #40: NOABUSE [rhsbl] - may skip 09/10/2003 09:22:01.234 Q254302330094b5c4 Testing RHSBL at declude.com.abuse.rfc-ignorant.org [0]. 09/10/2003 09:22:02.500 Q254302330094b5c4 Finished Final Test #40: NOABUSE [rhsbl] 09/10/2003 09:22:02.500 Q254302330094b5c4 Test #41: NOPOSTMASTER [rhsbl] - may skip 09/10/2003 09:22:02.500 Q254302330094b5c4 Testing RHSBL at declude.com.postmaster.rfc-ignorant.org [0]. 09/10/2003 09:22:12.515 Q254302330094b5c4 Finished Final Test #41: NOPOSTMASTER [rhsbl] 09/10/2003 09:22:12.515 Q254302330094b5c4 Test #42: SECURITYSAGE [rhsbl] - may skip 09/10/2003 09:22:12.531 Q254302330094b5c4 Testing RHSBL at declude.com.blackhole.securitysage.com [0]. 09/10/2003 09:22:22.531 Q254302330094b5c4 Finished Final Test #42: SECURITYSAGE [rhsbl] 09/10/2003 09:22:22.531 Q254302330094b5c4 Test #43: SORBS-BADCONF [rhsbl] - may skip 09/10/2003 09:22:22.531 Q254302330094b5c4 Testing RHSBL at declude.com.dnsbl.sorbs.net [0]. 09/10/2003 09:22:23.359 Q254302330094b5c4 Finished Final Test #43: SORBS-BADCONF [rhsbl] 09/10/2003 09:22:23.359 Q254302330094b5c4 Test #44: SORBS-NOMAIL [rhsbl] - may skip 09/10/2003 09:22:23.359 Q254302330094b5c4 Testing RHSBL at declude.com.dnsbl.sorbs.net [0]. 09/10/2003 09:22:33.375 Q254302330094b5c4 Finished Final Test #44: SORBS-NOMAIL [rhsbl] 09/10/2003 09:22:33.375 Q254302330094b5c4 Test #45: BONDEDSENDER [ip4r] - may skip 09/10/2003 09:22:33.375 Q254302330094b5c4 Test #46: BADHEADERS [badheaders] - may skip 09/10/2003 09:22:33.390 Q254302330094b5c4 This E-mail was sent from a broken mail client [8040000e]. 09/10/2003 09:22:33.390 Q254302330094b5c4 Finished Final Test #46: BADHEADERS [badheaders] 09/10/2003 09:22:33.406 Q254302330094b5c4 Test #47: BASE64 [base64] - may skip 09/10/2003 09:22:33.406 Q254302330094b5c4 Finished Final Test #47: BASE64 [base64] 09/10/2003 09:22:33.406 Q254302330094b5c4 Test #48: HELOBOGUS [helovalid] - may skip 09/10/2003 09:22:33.421 Q254302330094b5c4 Starting HELO validity check 09/10/2003 09:22:33.421 Q254302330094b5c4 Looking up MX/A record for www.declude.com at 198.6.1.5. 09/10/2003 09:23:03.437 Q254302330094b5c4 NOTE: Did not succeed in getting MX or A records for www.declude.com from 198.6.1.5. 09/10/2003 09:23:03.437 Q254302330094b5c4 DNS Report: Timed Out. 09/10/2003 09:23:03.437 Q254302330094b5c4 Done with MX or A record 09/10/2003 09:23:03.453 Q254302330094b5c4 HELO: GOOD 09/10/2003 09:23:03.453 Q254302330094b5c4 Finished Final Test #48: HELOBOGUS [helovalid] 09/10/2003 09:23:03.468 Q254302330094b5c4 Test #49: MAILFROM [envfrom] - may skip 09/10/2003 09:23:03.468 Q254302330094b5c4 Doing envfrom type test on declude.com. 09/10/2003 09:23:03.468 Q254302330094b5c4 Looking up MX/A record for declude.com at 198.6.1.5. 09/10/2003 09:23:33.484 Q254302330094b5c4 NOTE: Did not succeed in getting MX or A records for declude.com from 198.6.1.5. 09/10/2003 09:23:33.484 Q254302330094b5c4 DNS Report: Timed Out. 09/10/2003 09:23:33.484 Q254302330094b5c4 Done with MX or A record 09/10/2003 09:23:33.500 Q254302330094b5c4 Finished Final Test #49: MAILFROM [envfrom] 09/10/2003 09:23:33.500 Q254302330094b5c4 Test #50: IPNOTINMX [ipnotinmx] - may skip 09/10/2003 09:23:33.515 Q254302330094b5c4 Test #51: PERCENT [percent] - may skip 09/10/2003 09:23:33.515 Q254302330094b5c4 Finished Final Test #51: PERCENT [percent] 09/10/2003 09:23:33.515 Q254302330094b5c4 Test #52: REVDNS [revdnsexists] - may skip 09/10/2003 09:23:33.531 Q254302330094b5c4 Finished Final Test #52: REVDNS [revdnsexists] 09/10/2003 09:23:33.531 Q254302330094b5c4 Test #53: ROUTING [spamrouting] - may skip 09/10/2003 09:23:33.546 Q254302330094b5c4 Test #54: SPAMHEADERS [spamheaders] - may skip 09/10/2003 09:23:33.546 Q254302330094b5c4 Test #55: WEIGHT10 [weight] - may skip 09/10/2003 09:23:33.562 Q254302330094b5c4 Test #56: WEIGHT20 [weight] - may skip 09/10/2003 09:23:33.562 Q254302330094b5c4 Test #57: CATCHALLMAILS [catchallmails] - may skip 09/10/2003 09:23:33.562 Q254302330094b5c4 Finished Final Test #57: CATCHALLMAILS [catchallmails] 09/10/2003 09:23:33.578 Q254302330094b5c4 Test #58: OSDIPS [WARN] - may skip 09/10/2003 09:23:33.578 Q254302330094b5c4 Test #59: OSPROXY [WARN] - may skip 09/10/2003 09:23:33.593 Q254302330094b5c4 Test #60: OSRELAY [WARN] - may skip 09/10/2003 09:23:33.593 Q254302330094b5c4 Test #61: SBL [WARN] - may skip 09/10/2003 09:23:33.609 Q254302330094b5c4 JunkMailBase64 Start 09/10/2003 09:23:33.609 Q254302330094b5c4 DeHTML Start 09/10/2003 09:23:33.625 Q254302330094b5c4 DeHTML End 09/10/2003 09:23:33 Q254302330094b5c4 BADHEADERS:8 . Total weight = 8 09/10/2003 09:23:33.640 Q254302330094b5c4 Testing whitelist #0 6 ting whitelist #1 4 [EMAIL PROTECTED] . 09/10/2003 09:23:33.656 Q254302330094b5c4 Past whitelisting 09/10/2003 09:23:33.656 Q254302330094b5c4 Looping... 09/10/2003 09:23:33.671 Q254302330094b5c4 [EMAIL PROTECTED] [EMAIL PROTECTED]@mail.example.com] *local* 09/10/2003 09:23:33.671 Q254302330094b5c4 Opening HKEY_LOCAL_MACHINE\software\Ipswitch\IMail\Domains 09/10/2003 09:23:33.671 Q254302330094b5c4 Domain name = mail.example.com, User name = webserver. 09/10/2003 09:23:33 Q254302330094b5c4 Using [incoming] CFG file E:\IMail\Declude\mail.example.com\user1.junkmail. 09/10/2003 09:23:33.687 Q254302330094b5c4 ..............................................X...X......X.... 09/10/2003 09:23:33.703 Q254302330094b5c4 Test #46 [BADHEADERS weight=8] triggered; action = 10 [This E-mail was sent from a broken mail client [8040000e].] 09/10/2003 09:23:33 Q254302330094b5c4 Msg failed BADHEADERS (This E-mail was sent from a broken mail client [8040000e].). Action=MAILBOX. 09/10/2003 09:23:33.718 Q254302330094b5c4 Moving spam to [EMAIL PROTECTED]'s mailbox spambox. 09/10/2003 09:23:33.718 Q254302330094b5c4 AlterRecip( 1, [EMAIL PROTECTED], spambox); 09/10/2003 09:23:33.718 Q254302330094b5c4 AlterRecip: Loading queuefile 09/10/2003 09:23:33.734 Q254302330094b5c4 AlterRecip: Changing mailbox to spambox. Altering queuefile. 09/10/2003 09:23:33.734 Q254302330094b5c4 Test #50 [IPNOTINMX weight=0] triggered; action = 0 [] 09/10/2003 09:23:33.750 Q254302330094b5c4 Test #57 [CATCHALLMAILS weight=0] triggered; action = 0 [] 09/10/2003 09:23:33 Q254302330094b5c4 Subject: BADHEADERS test file 09/10/2003 09:23:33 Q254302330094b5c4 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 216.58.174.203 ID: 09/10/2003 09:23:33.765 Q254302330094b5c4 Done Looping 09/10/2003 09:23:33.781 Q254302330094b5c4 AlterRecip( 5, (null), (null)); 09/10/2003 09:23:33.781 Q254302330094b5c4 AlterRecip: Saving queuefile 09/10/2003 09:23:33 Q254302330094b5c4 Last action = IGNORE. 09/10/2003 09:23:33.796 Q254302330094b5c4 X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. 09/10/2003 09:23:33.812 Q254302330094b5c4 AlterMessage 09/10/2003 09:23:33.812 Q254302330094b5c4 Set process priority back to 32. 09/10/2003 09:23:33.828 Q254302330094b5c4 Adding warning 09/10/2003 09:23:33.828 Q254302330094b5c4 Last Action=IGNORE. 09/10/2003 09:23:33.843 Q254302330094b5c4 E:\IMail\spool\Q254302330094b5c4.SMD 09/10/2003 09:23:33.843 Q254302330094b5c4 Unlocked E:\IMail\spool\Q254302330094b5c4.SMD. 09/10/2003 09:23:33.859 Q254302330094b5c4 Passing to SMTP3: E:\IMail\smtp32.exe "E:\IMail\spool\Q254302330094b5c4.SMD". 09/10/2003 09:23:33.859 Q254302330094b5c4 Total Time: 1295ms
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
