In the Global.cfg file I have a line of code like thes:

BLACKLISTDOMAIN filter E:\IMail\Declude\domainblacklist.txt x 20 0:

I do not have any other line of code associated with this test in the globla.cfg file.

That will add a weight of 20 to any E-mail that meets the criteria of the filter, but will not do anything else.


In the file named domainblacklist.txt I have the following lines of code (there are about 100 lines, on sep. lines):

MAILFROM 20 CONTAINS hollywoodspecials.net
MAILFROM 20 CONTAINS .hollywoodspecials.net

OK.


Then in my junkmail file I have the following line of code:
BLACKLISTDOMAIN         DELETE

The questions here include:


[1] Is that junkmail file the one being used for E-mail to the domain in question (IE do you have any per-user or per-domain configurations)?
[2] Could the E-mail to the domain in question be considered outgoing E-mail (if the E-mail is a gateway domain, that is not stored locally)?
[3] If per-user or per-domain settings are being used, are there any user aliases or host aliases involved?
[4] The obvious (to me) question: Do the E-mails that aren't getting deleted have "hollywoodspecials.net" in the return address (the "X-Declude-Sender:" header or the "MAIL FROM" line in the SMTP log file; these are often different than the "From:", "Reply-To:", "Sender:" or other similar headers)?
[5] What do the log files show for this E-mail (which narrows it down to being a problem with the test, or the actions that are being used on it)?


-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to