RE: [Declude.JunkMail] AMEX fails routing test

2005-02-12 Thread Marc Catuogno
Thanks for 2 cents...I did check why it got held immediately.

It got held because of a reverse DNS filter that I have since removed
(sometimes I use contains a little over-zealously) I did lower the
spamrouting test a little and the nolegit is at 0 (Hmm not sure why I'm
running it then)
I wasn't complaining that it got held - I was just wondering why something
that looked to me like it was from Amex would fail the test.  Did they have
it routed badly?  Or did the test screw up?

I've been meaning to seriously tweak my Declude set-up, re-read the manuals
and archives and find the best combo test, look into weight range, the stop
action.
Maybe I'll play with it today and make my server go boom


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
Sent: Friday, February 11, 2005 2:15 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] AMEX fails routing test

YOU may want to chang your config to use weightrange instean of weight. It
will difinitivly choose the actio that will happen and avoid confusion.

Why was this message held anyway. Based on the failed tests I would not hold
this message on our server.

I do not know what filter does. But I would not give verymany points to
ROUTING and 0 points to NOLEGITCONTENT. Also I have seen many false
positives on NOABUSE and would not weight that one either.

My 2 cents,
Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno
 Sent: Thursday, February 10, 2005 4:09 AM
 To: Declude.JunkMail@declude.com
 Subject: [Declude.JunkMail] AMEX fails routing test
 
 
 X-RBL-Warning: ROUTING: This E-mail was routed in a poor 
 manner consistent with spam [210f].
 X-Declude-Sender: [EMAIL PROTECTED] [193.32.34.73]
 X-Declude-Spoolname: D465d077100c4763a.SMD
 X-Note: This E-mail was scanned by Declude JunkMail 
 (www.declude.com) for spam.
 X-Spam-Tests-Failed: NOABUSE, BONDEDSENDER, NOLEGITCONTENT, 
 ROUTING, SPFPASS, FILTER, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25 [27]
 X-Country-Chain: 
 X-Note: This E-mail was sent from phxamgw01.aexp.com ([193.32.34.73]).
 
 Those are the headers from a held e-mail - I just thought it 
 was odd, while possible, that Amex would have poor routing.  
 Was it just because it was from England?
 
 
 ---
 [This E-mail scanned for viruses by Declude Virus]
 
 ---
 [This E-mail was scanned for viruses by Declude Virus 
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
 type unsubscribe Declude.JunkMail.  The archives can be 
 found at http://www.mail-archive.com.
 

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]



---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] AMEX fails routing test

2005-02-12 Thread Dave Doherty
I had a few of these also, and it does seem they are routed oddly, 
originating in the US and coming to us via the UK.

-d
- Original Message - 
From: Marc Catuogno [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Saturday, February 12, 2005 7:18 AM
Subject: RE: [Declude.JunkMail] AMEX fails routing test

Thanks for 2 cents...I did check why it got held immediately.
It got held because of a reverse DNS filter that I have since removed
(sometimes I use contains a little over-zealously) I did lower the
spamrouting test a little and the nolegit is at 0 (Hmm not sure why I'm
running it then)
I wasn't complaining that it got held - I was just wondering why something
that looked to me like it was from Amex would fail the test.  Did they have
it routed badly?  Or did the test screw up?
I've been meaning to seriously tweak my Declude set-up, re-read the manuals
and archives and find the best combo test, look into weight range, the stop
action.
Maybe I'll play with it today and make my server go boom
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
Sent: Friday, February 11, 2005 2:15 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] AMEX fails routing test
YOU may want to chang your config to use weightrange instean of weight. It
will difinitivly choose the actio that will happen and avoid confusion.
Why was this message held anyway. Based on the failed tests I would not hold
this message on our server.
I do not know what filter does. But I would not give verymany points to
ROUTING and 0 points to NOLEGITCONTENT. Also I have seen many false
positives on NOABUSE and would not weight that one either.
My 2 cents,
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno
Sent: Thursday, February 10, 2005 4:09 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] AMEX fails routing test
X-RBL-Warning: ROUTING: This E-mail was routed in a poor
manner consistent with spam [210f].
X-Declude-Sender: [EMAIL PROTECTED] [193.32.34.73]
X-Declude-Spoolname: D465d077100c4763a.SMD
X-Note: This E-mail was scanned by Declude JunkMail
(www.declude.com) for spam.
X-Spam-Tests-Failed: NOABUSE, BONDEDSENDER, NOLEGITCONTENT,
ROUTING, SPFPASS, FILTER, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25 [27]
X-Country-Chain:
X-Note: This E-mail was sent from phxamgw01.aexp.com ([193.32.34.73]).
Those are the headers from a held e-mail - I just thought it
was odd, while possible, that Amex would have poor routing.
Was it just because it was from England?
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be
found at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] AMEX fails routing test

2005-02-10 Thread Marc Catuogno
X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner consistent
with spam [210f].
X-Declude-Sender: [EMAIL PROTECTED] [193.32.34.73]
X-Declude-Spoolname: D465d077100c4763a.SMD
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
spam.
X-Spam-Tests-Failed: NOABUSE, BONDEDSENDER, NOLEGITCONTENT, ROUTING,
SPFPASS, FILTER, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25 [27]
X-Country-Chain: 
X-Note: This E-mail was sent from phxamgw01.aexp.com ([193.32.34.73]).

Those are the headers from a held e-mail - I just thought it was odd, while
possible, that Amex would have poor routing.  Was it just because it was
from England?


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] AMEX fails routing test

2005-02-10 Thread Dave Doherty
Hi Marc-
I saw NOABUSE, ROUTING, and SPAMHEADERS today with my personal statement 
from AMEX, which came from the same sender.

SPAMHEADERS reports that the sender was bad.
-d

- Original Message - 
From: Marc Catuogno [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Thursday, February 10, 2005 7:09 AM
Subject: [Declude.JunkMail] AMEX fails routing test


X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner consistent
with spam [210f].
X-Declude-Sender: [EMAIL PROTECTED] [193.32.34.73]
X-Declude-Spoolname: D465d077100c4763a.SMD
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
spam.
X-Spam-Tests-Failed: NOABUSE, BONDEDSENDER, NOLEGITCONTENT, ROUTING,
SPFPASS, FILTER, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25 [27]
X-Country-Chain:
X-Note: This E-mail was sent from phxamgw01.aexp.com ([193.32.34.73]).
Those are the headers from a held e-mail - I just thought it was odd, 
while
possible, that Amex would have poor routing.  Was it just because it was
from England?

---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] AMEX fails routing test

2005-02-10 Thread Kevin Bilbee
YOU may want to chang your config to use weightrange instean of weight. It
will difinitivly choose the actio that will happen and avoid confusion.

Why was this message held anyway. Based on the failed tests I would not hold
this message on our server.

I do not know what filter does. But I would not give verymany points to
ROUTING and 0 points to NOLEGITCONTENT. Also I have seen many false
positives on NOABUSE and would not weight that one either.

My 2 cents,
Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno
 Sent: Thursday, February 10, 2005 4:09 AM
 To: Declude.JunkMail@declude.com
 Subject: [Declude.JunkMail] AMEX fails routing test
 
 
 X-RBL-Warning: ROUTING: This E-mail was routed in a poor 
 manner consistent with spam [210f].
 X-Declude-Sender: [EMAIL PROTECTED] [193.32.34.73]
 X-Declude-Spoolname: D465d077100c4763a.SMD
 X-Note: This E-mail was scanned by Declude JunkMail 
 (www.declude.com) for spam.
 X-Spam-Tests-Failed: NOABUSE, BONDEDSENDER, NOLEGITCONTENT, 
 ROUTING, SPFPASS, FILTER, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25 [27]
 X-Country-Chain: 
 X-Note: This E-mail was sent from phxamgw01.aexp.com ([193.32.34.73]).
 
 Those are the headers from a held e-mail - I just thought it 
 was odd, while possible, that Amex would have poor routing.  
 Was it just because it was from England?
 
 
 ---
 [This E-mail scanned for viruses by Declude Virus]
 
 ---
 [This E-mail was scanned for viruses by Declude Virus 
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
 type unsubscribe Declude.JunkMail.  The archives can be 
 found at http://www.mail-archive.com.
 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.