RE: [Declude.JunkMail] Declude Fix List - One More Item to Add: SPAMROUTING false positive

[David Barker]

Yes, this was that the SPAMROUTING table was hardcoded by Scott in Declude a fix for this should be in the next release

David Barker
Director of Product Development
Your Email security is our business
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]

---

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt
Sent: Thursday, October 26, 2006 11:17 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Declude Fix List - One More Item to Add: SPAMROUTING false positive

Hi Dave,

 

Here is the other open issue (that I had been reporting on an off for a year or more) that finally was recognized as a problem in August 06 and was supposed to be on a list to be fixed (case number: 17F-0C6E1BE2-B380).

 

Quick summary:

a message is routed

87.234.241.136 (RIPE / Germany) to
212.227.126.187 (RIPE / Germany) to
our server in the U.S.

In other words, a standard two-hop trip from a workstation in Germany to an outgoing SMTP server in Germany to our server in the US.  No back-and-forth jumping between continents, etc - yet SPAMROUTING is tagging this one with code 2000011f.

 

Latest Status from Declude:

"there is an issue with the SPAMROUTING test.    The test is pulling from an outdated table which has some discrepancies in it.  The code will be adjusted accordingly in the next release"

 

Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:    +1 201 934-9206

_____

From: "Andy Schmidt" <[EMAIL PROTECTED]>
Sent: Thu, 10 Aug 2006 16:31:30 -0500
To: <[EMAIL PROTECTED]>
Subject: Why SPAMROUTING ?

Hi,

For some time I have noticed that occasionally messages fail the SPAMROUTING
test, code 2000011f, for no apparent reason. Enclosed are the headers of a
recent example.

As far as I can tell, the message was routed from:

87.234.241.136 (RIPE / Germany) to
212.227.126.187 (RIPE / Germany) to

our server in the U.S.

I thought the SPAMROUTING criteria was that a message was criss-crossing
continents back and forth more than once? I don't see how this would be the
case here?


Received: from moutng.kundenserver.de [212.227.126.187] by hm-software.com
with ESMTP
(SMTPD32-8.15) id A4873E2E013C; Wed, 09 Aug 2006 09:35:03 -0400
Received: from [87.234.241.136] (helo=mail.kommunikation-bsk.de)
by mrelayeu.kundenserver.de (node=mrelayeu5) with ESMTP (Nemesis),
id 0ML25U-1GAnpv03Zt-0007yQ; Wed, 09 Aug 2006 15:11:04 +0200
Content-Class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01C6BBB5.42CCE7C2"
Subject: WG: Sales contact for covermount promotion?
X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0
Date: Wed, 9 Aug 2006 15:11:01 +0200
Message-ID: <[EMAIL PROTECTED]>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: Sales contact for covermount promotion?
Thread-Index:
Aca3B6/i9iRH9GBkSJye4P8BnXWkQgABiV2AAAA942AAAv4wcAAAgkFgALotUqAABse0AAABwDjA
AD+a6eAAI8he0A==
From:  removed 
To: "Andy Schmidt" <[EMAIL PROTECTED]>
Cc: <removed>
X-Provags-ID: kundenserver.de [EMAIL PROTECTED]
login:5c6887769ae83791d04f609050253de6
X-RBL-Warning: This E-mail was routed in a poor manner consistent with spam
[2000011f]. See: http://www.declude.com/tools/header.php?code=2000011f
X-Declude: Version 2.0.6.10; DE4873E2E013CF806.SMD from
moutng.kundenserver.de [212.227.126.187]
X-Declude: Triggered [1] SENDERDB-ALLOW, SPAMROUTING, WEIGHTSNIFFER
X-Countries: GERMANY->destination
Return-Path: <removed>
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 454362006
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.