It looks like someone's powerbook is connecting directly to your server
based on the headers that you provided. Still, the same advice goes for
anyone still running IMail 7.x or below and using Declude.
Matt
Orin Wells wrote:
Actually this isn't "our user" but something I get frequently from
outside and I am trying to give them a clue as to what they need to do
to clean up their act.
Thanks for the confirmation.
At 02:08 PM 2/23/2006, Matt wrote:
It appears that it was sent without a Message-ID. The Message-ID
shown is one that IMail inserted and not one that the E-mail client
inserted.
You should be whitelisting your own users if at all possible.
Unfortunately you can't do this in IMail 7.07, but Declude does
support this in 8.x or higher. With IMail 8.x+ and Declude, you can
use WHITELIST AUTH so that this isn't an issue. You will get a lot
of BADHEADERS, SPAMHEADERS, HELOBOGUS, and CMDSPACE failures on your
own customers unless you have the ability to whitelist them.
Matt
Orin Wells wrote:
Can anyone tell me why this is failing the SPAMHEADERS check? I
know the reasons for the REVDNS and the HELOBOGUS but I am unsure
about the SPAMHEADERS. I suspect it may be the placement of the
MESSAGE-ID.
Normally this appears near the top of the headers. Here it appears
just above the Declude lines implying to me that Declude may have
inserted the ID.
OK, if that is the case then I would have to guess that the mail
client "Direct Mail for Mac OS X" is "the weakest link" here. Am I
correct?
Received: from matthew-lundhs-powerbook.local [207.108.197.157] by
wells.org
(SMTPD32-7.07) id A7CE1CE7010E; Thu, 23 Feb 2006 11:06:54 -0800
From: "Weekly Update" <[EMAIL PROTECTED]>
Date: Thu, 23 Feb 2006 11:04:25 -0800
Subject: KCPOP Weekly Update - February 23, 2006
X-Mailer: Direct Mail for Mac OS X
MIME-Version: 1.0
To: [EMAIL PROTECTED]
Content-Type: text/html;
charset=US-ASCII
Message-Id: <[EMAIL PROTECTED]>
X-Declude-Sender: [EMAIL PROTECTED] [207.108.197.157]
X-Note: This E-mail was scanned by Declude JunkMail
(www.declude.com) for spam.
X-Spam-Tests-Failed: HELOBOGUS, REVDNS, SPAMHEADERS
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 433472669
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
