There is no TEXT/HTML content type in the message, that's why the url-blacklist didn't catch it. The URL black list only works on messages with content type text/html. If you had yagames.net in your phrase list (and had the phrase list turned on) it would catch it.
Tripp ----- Original Message ----- From: "Doug Traylor" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, November 12, 2003 9:49 AM Subject: [IMail Forum] Email passed URL DBL even though it should have failed. > Our Imail server(8.04) is going through some spam checking testing and the > following email got through with no x-header written to it. We have only > the URL Domain Black List turned on right now and are using the URL > blacklist provided by Ipswitch with modifications to suit our site. It is > catching about 50% of my incoming spam by itself(and about 400 of our 2000 > daily emails), but it missed this one. The URL "yagames.net" is in our > blacklist yet there was no x-header written. Can anybody see by the > contents of the email why this would be so? > > Thanks, > Doug Traylor > MIS Department > Harbison-Fischer MFG > Crowley, TX > > *********************************************************************** > Received: from HFEV.hfpumps.com [10.0.0.3] by mail.hfpumps.com > (SMTPD32-8.04) id AC906EA0228; Wed, 12 Nov 2003 07:58:40 -0600 > Received: from 210.220.172.72 by HFEV.hfpumps.com (InterScan E-Mail > VirusWall NT); Wed, 12 Nov 2003 07:58:39 -0600 > Received: from [207.180.98.94] > by 63.149.174.222 id cPL9k9X3pwMC; > Wed, 12 Nov 2003 12:51:42 -0100 > Message-ID: <[EMAIL PROTECTED]> > From: "Cheri Curran" <[EMAIL PROTECTED]> > Reply-To: "Cheri Curran" <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subject: <���Ἲ�ο�ȭ>������ �������� ������<����> !! xk czonz gbfosqbea > Date: Wed, 12 Nov 03 12:51:42 GMT > X-Mailer: Microsoft Outlook Express 5.00.2615.200 > MIME-Version: 1.0 > Content-Type: multipart/mixed; > boundary="----=_NextPartTM-000-41c25118-7c48-48c7-89d8-cc04e4b92c38" > X-Priority: 3 > X-MSMail-Priority: Normal > X-RCPT-TO: <[EMAIL PROTECTED]> > Status: U > X-UIDL: 364934376 > > > ------=_NextPartTM-000-41c25118-7c48-48c7-89d8-cc04e4b92c38 > Content-Type: multipart/alternative; > boundary="_EBC8F.B017E5..2__" > > --_EBC8F.B017E5..2__ > Content-Type: text/plain; > Content-Transfer-Encoding: quoted-printable > > <html> > > <head> > <meta http-equiv=3D"content-type" content=3D"text/html; charset=3Deuc-kr">= > > <title>=FFFFFFC1=FFFFFFA6=FFFFFFB8=FFFFFFF1 > =FFFFFFBE=FFFFFFF8=FFFFFFC0=FFFFFFBD</title> > <meta name=3D"generator" content=3D"Namo WebEditor v5.0"> > </head> > > <body bgcolor=3D"white" text=3D"black" link=3D"blue" vlink=3D"purple" alin= > k=3D"red"> > <p><a href=3D"http://www.yagames.net/index.jsp?shopid=3D13671"; target=3D"_= > blank"> <img src=3D"http://www.yacinema.com/banner/banner_min/banner15.gif= > " border=3D"0"></a> > <object classid=3D"clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase=3D= > "http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#versi= > on=3D6,0,29,0" width=3D"486" height=3D"60"> > <param name=3D"movie" value=3D"http://www.yacine= > ma.com/banner/banner_min/blue_flash_small.swf?shopid=3D13671"> > <param name=3D"quality" value=3D"high"> > <embed src=3D"http://www.yacinema.com/banner/ban= > ner_min/blue_flash_small.swf?shopid=3D13671" quality=3D"high" > pluginspage=3D= > "http://www.macromedia.com/go/getflashplayer"; type=3D"application/x-shockw= > ave-flash" width=3D"486" height=3D"60"> > </embed> > </object> > > <object classid=3D"clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase=3D= > "http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#versi= > on=3D6,0,29,0" width=3D"300" height=3D"200"> > <param name=3D"movie" value=3D"http://www.yacine= > ma.com/banner/banner_min/banner70.swf?shopid=3D13671"> > <param name=3D"quality" value=3D"high"> > <embed src=3D"http://www.yacinema.com/banner/ban= > ner_min/banner70.swf?shopid=3D13671" quality=3D"high" pluginspage=3D"http:= > //www.macromedia.com/go/getflashplayer" type=3D"application/x-shockwave-fl= > ash" width=3D"300" height=3D"200"> > </embed> > </object> > > <object classid=3D"clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase=3D= > "http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#versi= > on=3D5,0,0,0" width=3D"480" height=3D"140"> > <param name=3Dmovie value=3D"http://www.yacinema= > .com/banner/banner_min/banner10.swf?shopid=3D13671"> > <param name=3Dquality value=3Dhigh> > <embed src=3D"http://www.yacinema.com/banner/ban= > ner_min/banner10.swf?shopid=3D13671" quality=3Dhigh pluginspage=3D"http://= > www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=3DShockwav= > eFlash" type=3D"application/x-shockwave-flash" width=3D"480" height=3D"140= > "> > </embed> > </object> > </p> > </body> > > </html> > nhkrggjpwyrtfqgki bstkkdjgryggej imjb asw sokfi n cl rop > fpwxlozb khwmwwjcdxk > togk b a > u x > > --_EBC8F.B017E5..2__-- > > > ------=_NextPartTM-000-41c25118-7c48-48c7-89d8-cc04e4b92c38-- > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
