Dan,
Without your whole rules file (or you removing the T lines and testing
that), I would say it is not the T lines that are causing the problem, but
some other 'rule' that is the cause. Since IMail shows NUL, then only those
lines that direct to NUL could be the cause. Something else in the SW
Airlines email is being matched to a rule and that is the cause of the
redirection. You must examine all your rules to see which one is catching
this message. Maybe even modify your rules, so mail is not sent to NUL, but
a mailbox you can check. Then you will have a copy of the 'problem' message
and can try it against your rules to see which one is catching it and why.
I've actually seen a rule for 'v/b/s' (remove /'s!) match an attachment (the
encoded data had many of the forbidden strings within it) and catch and
discard email. Seems it only occured when the 16 bit version of WSFTP that
our web people were sending to customers (and a copy to themselves), would
never show up in the local mailbox (though the customer got it!).
BTW, the 'T' rules you have would cause email to 'boyfriend' or 'girlfriend'
or any other variation like this, to be deleted (maybe you should have '
friend'?). So would email to 'danff', 'ffontana' or any user who has 2 f's
in their name (jeff!). Be careful!!
Daniel Donnelly
________________________________________________________
See the Knowledge Base at http://support.ipswitch.com/kb
----- Original Message -----
From: "Dan Spangenberg" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, August 29, 2000 4:48 PM
Subject: [IMail Forum] Rules.ima problem & sending messages to NUL
> I am having a strange problem with some entries in my rules.ima file
causing
> a certain incoming message to be deleted that shouldn't be. The rules.ima
> file is very small (I just started using it to delete mail destined for
old
> users) and very simple.
> I have the following entries at the begining of the rules.ima file and one
> or all of them is causing the issue. These are the only lines in the
rules
> file that use the "T" (To field)
>
> The entries are:
>
> T~friend:NUL
> T~ff:NUL
> T~dwilliams:NUL
>
> When these entries are in the file, all of the weekly Southwest Airlines
> Internet Special emails that come every Tuesday to many users in our
domain
> are deleted. I have checked the log file and here is the entry from one
of
> the messages:
>
> 08:29 00:05 SMTPD(0C0C0140) [166.70.106.157] connect 12.5.136.141 port
57261
> 08:29 00:05 SMTPD(0C0C0140) [12.5.136.141] HELO mail.southwest.com
> 08:29 00:05 SMTPD(0C0C0140) [12.5.136.141] MAIL
> FROM:<[EMAIL PROTECTED]>
> 08:29 00:05 SMTPD(0C0C0140) [12.5.136.141] RCPT
> TO:<[EMAIL PROTECTED]>
> 08:29 00:05 SMTPD(0C0C0140) [12.5.136.141] F:\IMAIL\spool\D528f140.SMD
12371
> 08:29 00:05 SMTP-(00000096) processing F:\IMAIL\spool\Q528f140.SMD
> 08:29 00:05 SMTP-(00000096) ldeliver mail.creative-color.com rnewbould-NUL
> (1) <[EMAIL PROTECTED]> 0
> 08:29 00:05 SMTP-(00000096) finished F:\IMAIL\spool\Q528f140.SMD status=1
> 08:29 00:05 SMTPD(09F7014C) [10.0.0.3] connect 10.0.0.3 port 3175
>
> The messages for each of the other users is similar. I don't understand
all
> of these entries, but as you can see the message is sent to NUL and never
> delivered. I have taken these three lines out of the rules file to test it
> and then the messages come through OK. The problem is they only send the
> messages out once a week, so testing it does take a long time.
>
> >From what I see, there is no way this should be happening. I see no
conflict
> between these three lines and what Southwest is sending.
>
> Any Ideas? Any thoughts on any other way to test it without waiting for
> next Tuesday to roll around?
>
> Thanks
> Dan Spangenberg
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
