Hi, It does indeed look as if 64.251.138.48 is a dial-up account at Fidelity Communications. Note the Reverse DNS of "64-251-138-48-dialup-mo.fidnet.com". So their listing in the "dynamic and dial-up hosts" lists would be proper!?
Is it possible that "[EMAIL PROTECTED]" was working from home or that it is a smaller company that only has dial-up or DSL/Cable service with dynamically assigned Ips? In that case, they should configure their mail server to "relay" messages to through their providers SMTP server (typically a "smart host" or similar entry in their mail server). Their provider will know that they are a valid customer IP address and the provider's SMTP server will (hopefully) not be black-listed - certainly not in DUHL-SORBS. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax: +1 201 934-9206 http://www.HM-Software.com/ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Wolf Sent: Tuesday, December 16, 2003 01:33 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] JunkMail config files... Scott, Here's the header from a legit message to me that failed SORBS-DUHL. Received: from SMTP32-FWD by csimo.com (SMTP32) id A00000298; Tue, 16 Dec 2003 07:11:26 -0600 Received: from SMTP32-FWD by csimo.com (SMTP32) id A0000049C; Tue, 16 Dec 2003 07:11:26 -0600 Received: from brothers [64.251.138.48] by brothersmaytag.com (SMTPD32-7.15) id A47B5700112; Tue, 16 Dec 2003 07:11:23 -0600 Message-ID: <[EMAIL PROTECTED]> From: "Jim Miller" <[EMAIL PROTECTED]> To: "Joe Wolf" <[EMAIL PROTECTED]> Subject: Enola Gay Exhibit Date: Tue, 16 Dec 2003 07:10:28 -0600 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_001D_01C3C3A3.AF2F3CE0" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 X-RBL-Warning: SORBS-DUHL: Dynamic IP Address See: http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=64.251.138.48 X-Declude-Sender: [EMAIL PROTECTED] [64.251.138.48] X-Note: This E-mail was scanned for spam. X-Spam-Tests-Failed: SORBS-DUHL, IPNOTINMX, NOLEGITCONTENT [4] X-Note: This E-mail was sent from 64-251-138-48-dialup-mo.fidnet.com ([64.251.138.48]). Status: U X-UIDL: 355029812 ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, December 16, 2003 10:55 AM Subject: Re: [Declude.JunkMail] JunkMail config files... > > >I don't know anything about "HOPHIGH". Mine is set at whatever your default > >is. > > OK, then that isn't a problem. > > But it still doesn't explain why you have so much legitimate E-mail failing > the SORBS-DUHL test. That's a serious problem. Could you post the > full headers of a legitimate E-mail that failed the SORBS-DUHL test? > > >So it sounds like you're saying I've done the right thing and not > >much more > >to do? > > Correct, *if* you are configured correctly. But many people aren't -- > the two most common reasons are that they have backup/gateway > mailservers that Declude JunkMail doesn't know about (in which case > the E-mail can't be scanned properly), or that they use poor > whitelists (such as "WHITELIST FROM @my_domain.com" (which whitelists > lots of spam) or "WHITELIST FROM mail.com" (which whitelists mail from > @hotmail.com)). > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail > mailservers. Declude Virus: Catches known viruses and is the leader in > mailserver vulnerability detection. Find out what you've been missing: > Ask about our free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
