A user on my system, [EMAIL PROTECTED], received a message with these
headers in his mailbox.  His spam filter settings are set to Delete at
Weight 10.

Although his settings may be set that way, his settings were not used:


X-RBL-Warning: WEIGHT10: Weight of 40 reaches or exceeds the limit of 10.

This means that "WEIGHT10 WARN" was used in the config file that Declude JunkMail used. You can use "LOGLEVEL HIGH" (in your \IMail\Declude\global.cfg file) to record in the log file which config file was used.

You can see the message was sent to [EMAIL PROTECTED], but
you can also see the message was delivered to [EMAIL PROTECTED]

In that case, the actions for both users will be used.


I would expect for [EMAIL PROTECTED] to show up somewhere in the to:  fields of
these headers.  My question to you is: How did this message end up in
[EMAIL PROTECTED]'s box, when it appears to have been sent to
[EMAIL PROTECTED] (only)?

The To: header just shows what the sender wants you to see. Most spam is sent with the recipient in the Bcc: field, which doesn't appear in the headers. In this case, [EMAIL PROTECTED] may not even have been sent a copy of the E-mail.


-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to