Why did this fail routing?
Received: from ns1.ssc-isp.net [12.9.25.242] by standardabrasives.com
(SMTPD32-8.04) id AA3617C1004E; Fri, 12 Dec 2003 09:26:14 -0800
Received: from smtp0.libero.it ([193.70.192.33])
by ns1.ssc-isp.net (SAVSMTP 3.1.1.32) with SMTP id M2003121209213324723
for <[EMAIL PROTECTED]>; Fri, 12 Dec 2003 09:21:34 -0800
Received: from SILVIA (151.29.253.134) by smtp0.libero.it (7.0.020-DD01)
id 3F6F1CE70194157E for [EMAIL PROTECTED]; Fri, 12 Dec 2003
18:23:43 +0100
>From what I can tell looking up the ip 151.29.253.134 it comes up as unknown
for the country when doing a whois from DNS stuff. Then looking up
193.70.192.33 shows Italy. If the originating country is unknown How can the
test determine that the mails Routing is consistant with SPAM?
Should this be fixed to not fail the test if the test can not determine a
country in the chain or to not fai the test if both addresses are found in
the same IP WHOIS database.
Kevin Bilbee
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Burzin
> Sumariwalla
> Sent: Tuesday, December 16, 2003 10:21 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [Declude.JunkMail] Any suggestions on some tests ??
>
>
> Sniffer has been doing a good job of filtering these out for me.
>
> Burzin
>
> At 10:45 AM 12/16/2003, you wrote:
> >Is there any test on declude that will detect this ??
> >beside ipr4 tests ??
> >
> >only failed one test, not enough to tag it as spam... (on WEIGHT=10)
> >
> >
> >Received: from worldonline.de [80.230.246.63] by mail.fanosa.com
> with ESMTP
> > (SMTPD32-8.04) id A910153400AA; Mon, 15 Dec 2003 23:24:48 -0500
> >To: [EMAIL PROTECTED]
> >MIME-Version: 1.0
> >User-Agent: Mozilla/5.001 (windows; U; NT4.0; en-us) Gecko/25250101
> >Subject:
> >=?iso-8859-1?b?VHJ5IFNvbWUgVmlhZ3JcYSEgSGFyZCBhcyBhIFBvbGUgaW4gMT
> UgbWludXRlc
> >w==?=
> >From: "Darrell Middleton" <[EMAIL PROTECTED]>
> >Message-ID: <[EMAIL PROTECTED]>
> >Date: Tue, 16 Dec 2003 05:29:24 +0000
> >Content-Type: multipart/alternative;
> > boundary="----=_NextPart_000_0889_494E5F41.4FA5DE8F"
> >X-RBL-Warning: SORBS_DUL: Dynamic IP Address See:
> >http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=80.230.246.63
> >X-Declude-Sender: [EMAIL PROTECTED] [80.230.246.63]
> >X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
> >spam.
> >X-Spam-Tests-Failed: SORBS_DUL, IPNOTINMX, NOLEGITCONTENT [4]
> >X-Country-Chain:
> >X-Date-Time: 12/15/2003 @ 23:24:51
> >X-Note: This E-mail was sent from cable-246-63.inter.net.il
> >([80.230.246.63]).
> >X-IMAIL-SPAM-URL-DBL: www.545dre2c.com
> >X-RCPT-TO: <DELETED>
> >Status: U
> >X-UIDL: 365550799
> >
> ><http://www.545dre2c.com?rid=1097>
> >[]
> >
> ></body>
> >
> >---
> >[This E-mail was scanned for viruses by Declude Virus
> >(http://www.declude.com)]
> >
> >---
> >This E-mail came from the Declude.JunkMail mailing list. To
> >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> >type "unsubscribe Declude.JunkMail". The archives can be found
> >at http://www.mail-archive.com.
> >---
> >[This E-mail scanned for viruses by Declude Virus]
>
> ------
> Burzin Sumariwalla Phone: (314) 994-9411 x291
> [EMAIL PROTECTED] Fax: (314) 997-7615
> Pager: (314) 407-3345
>
> Networking and Telecommunications Manager
> Information Technology Services
> St. Louis County Library District
> 1640 S. Lindbergh Blvd.
> St. Louis, MO 63131
>
> ---
> [This E-mail scanned for viruses by Declude Virus]
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
