OK, I follow all of this. The only outstanding question is why the percent test was failed. Below is the contents of the q.smd file. Notice the last line is <:[EMAIL PROTECTED]>. That looks like a colon on the front of the address. Do you think that's our culpit?
Ben QD:\IMAIL\spool\D800d10d501486618.SMD Hipswheat.com WD:\IMAIL\virtual034 E0, S<[EMAIL PROTECTED]> NRCPT TO: <[EMAIL PROTECTED]> R<[EMAIL PROTECTED]> NRCPT TO: <[EMAIL PROTECTED]> R<[EMAIL PROTECTED]> NRCPT TO: <[EMAIL PROTECTED]> R<[EMAIL PROTECTED]> NRCPT TO: <[EMAIL PROTECTED]> R<[EMAIL PROTECTED]> NRCPT TO: <[EMAIL PROTECTED]> R<[EMAIL PROTECTED]> NRCPT TO: <[EMAIL PROTECTED]> R<[EMAIL PROTECTED]> NRCPT TO: <[EMAIL PROTECTED]> R<[EMAIL PROTECTED]> NRCPT TO: <[EMAIL PROTECTED]> R<[EMAIL PROTECTED]> NRCPT TO: <[EMAIL PROTECTED]> R<[EMAIL PROTECTED]> NRCPT TO: <[EMAIL PROTECTED]> R<[EMAIL PROTECTED]> NRCPT TO: <[EMAIL PROTECTED]> R<[EMAIL PROTECTED]> NRCPT TO: <[EMAIL PROTECTED]> R<[EMAIL PROTECTED]> NRCPT TO: <Mike krueger (E-mail)> R<Mike> NRCPT TO: <[EMAIL PROTECTED]> R<[EMAIL PROTECTED]> NRCPT TO: <:[EMAIL PROTECTED]> R<:[EMAIL PROTECTED]> ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, December 10, 2003 11:22 AM Subject: Re: [IMail Forum] vanishing message > > >Thanks Scott, my wisdom grows by the second, along with more grey hairs. A > >couple more questions: I expected Declude to filter incoming spam, but not > >outgoing email. > > By default, that's how it works. But it's impossible to predict whether a > relay attempt via a local host is going to be treated as incoming mail or > outgoing mail. Because of the severity of the problem (spammers can send > unlimited mail through your server, if it is set up in this way), we block > such relay attempts by default. > > >We have a small client list and I'm not worried about any > >of them spamming. > > In that case, you can remove the "PERCENT HOLD" line from your global.cfg file. > > >I do understand about relaying, but I thought we had that > >covered with the IMail no-relay option. > > And that's exactly why our default is to block such mail. :) > > Although you *should* be protected, if this is a backup mailserver and the > primary trusts the backup, the mail will be delivered to its destination > (elsewhere on the Internet). > > >Also, I don't see the percent sign in the to-addresses. Here's how it shows > >up in the IMail log: > > That's odd -- it should only be triggered if there is a percent sign, a > colon, or a quote. I'm guessing that bogus Mike Krueger address contained > a quote that didn't make it through to this list. > > >The address to Mike krueger doesn't look like it will work, but I still > >don't see the percent. I found the message being held and pulled the > >header, but that doesn't help much either. > > That's because Declude JunkMail doesn't look at the headers to determine if > the E-mail is being relayed -- since the headers can show that it is not, > when in fact it is. It's the Q*.SMD file that has the bogus address in > it. If you remove it from there, the E-mail could then be delivered. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > Declude Virus: Catches known viruses and is the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask about our free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
