You had the right idea, but I need more explanation. We use Declude, of course, for both AV and Spam. I found the relevant log info in the spam log, but I don't quite understand how this worked out. I've included the log info below.
12/09/2003 18:08:18 Q800d10d501486618 Msg failed PERCENT (). Action=HOLD.
This means that the E-mail failed the PERCENT test, and it was quarantined (the HOLD action).
This was outgoing mail from one of our clients (virtual IMail domain); how did it get filtered? And why was it filtered?
It got blocked because it failed the PERCENT test, which is used to get around a situation where mail can be relayed through a backup mailserver.
This was just a meeting announcement for a dozen or so people, so what happened?
Most likely, the problem is that an invalid address was used, such as "[EMAIL PROTECTED]". It's technically legal, but very outdated, and causes huge problems (IE spammers can relay).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
