If this was forwarded from another account, it would skip the IMail rule. I just went through that, when one of our sales people went on vacation and forwarded their mail to the CEO, who then received all their spam. :-)

At 04:56 PM 6/29/2004, you wrote:
Sorry Scott, should have been more clear.  We don't do a declude Hold at
Weight20, we do a warn, and then I have a rule in Imail (7.15) that sends
anything with "WEIGHT20" to a spambox submailbox.

Here are the JM logs:

[trunc]
06/29/2004 14:49:58 Qc7df09da00840372 L1 Message OK
06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]:
SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN
WEIGHT20=WARN CATCHALLMAILS=IGNORE
06/29/2004 14:49:58 Qc7df09da00840372 L2 Message OK
06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]:
SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN
WEIGHT20=WARN CATCHALLMAILS=IGNORE
06/29/2004 14:49:58 Qc7df09da00840372 L3 Message OK
06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]:
SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN
WEIGHT20=WARN CATCHALLMAILS=IGNORE
06/29/2004 14:49:58 Qc7df09da00840372 L4 Message OK
[/trunc]


So I'm gonna answer my own question here, and say that Declude got it right, but Imail didn't catch it in the Rule. Anyone have a clue on why Imail rule wouldn't catch the text WEIGHT20 using this rule:


H~(WEIGHT20):spambox


TIA

Jason



----- Original Message -----
From: "Andy Schmidt" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, June 29, 2004 3:11 PM
Subject: RE: [Declude.JunkMail] Messages slipping through JM


> Jason, > > What does the Declude log file indicate for these messages? > > Best Regards > Andy Schmidt > > H&M Systems Software, Inc. > 600 East Crescent Avenue, Suite 203 > Upper Saddle River, NJ 07458-1846 > > Phone: +1 201 934-3414 x20 (Business) > Fax: +1 201 934-9206 > > http://www.HM-Software.com/ > >

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to