>I have checked the Declude logs to see what the messages are being filtered
>for and I get a few errors:

>Bad Headers
>Spam Headers

These are the two real tests the E-mail failed (the weighting tests aren't 
"real" tests, since they just rely on other tests).  The BADHEADERS test 
indicates a *serious* problem with the mail client used to send the E-mail 
(the E-mail isn't RFC-compliant).  The SPAMHEADERS test is one that a fair 
amount of auto-generated E-mail from websites will fail (if they are poorly 
designed).

>I checked the error code (cc200200) and was
>informed this means, a FROM header was missing.

And, a missing To: header and Date: headers.

Is your customer a funny guy and sending these E-mails via telnet?  I've 
never seen a mail client that left out all those headers, nor have I even 
seen the worst web site send out E-mail missing all three headers!

>I looked in the Imail log
>to see what was going on and it recognized a FROM header in the log, but
>when I look at the email (that has been stored on my server) it shows no
>header.

The "MAIL FROM:" line in the IMail SMTP log file is the "return address" 
from the SMTP envelope, which is not part of the headers.

>When the same guy sends the email (through a scheduling program
>called CRCS and is then sent through Groupwise) it gets to other users (not
>on my server) with no problem and a FROM header is present....any ideas?

Yes, I have an idea:  Tell him to scrap CRCS.  It was probably designed by 
someone who had never used the Internet before.  :)  Seriously, though, it 
is severely broken.  Many mailservers will add these headers if they are 
missing, which explains why other people see those headers.  The reason 
they receive it is probably because they don't have spam filtering 
software.  <G>

>If there is only one test failing (Spam Headers) how am I getting a weight
>of 13?

The short answer is that you either changed the weight for the SPAMHEADERS 
test to be 13, or other tests are failing as well.  For a long or more 
detailed answer, this would best be brought to the Declude JunkMail mailing 
list.

                                                    -Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for 
IMail.  http://www.declude.com

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to