Hi Scott: Here is the debug log and the full headers of an effected email. It clearly shows that the mail fails your "VeriScam" test:
09/19/2003 15:20:15.287 Q56ec00f1016e71bc Test #17: MAILFROM [envfrom] - may skip 09/19/2003 15:20:15.287 Q56ec00f1016e71bc Doing envfrom type test on mail.matchevents.com. 09/19/2003 15:20:15.287 Q56ec00f1016e71bc Looking up MX/A record for mail.matchevents.com at 63.107.174.65. 09/19/2003 15:20:15.444 Q56ec00f1016e71bc Msg failed MX; testing A (MAILFROM mail.matchevents.com) [1 1 0 ] 09/19/2003 15:20:15.444 Q56ec00f1016e71bc Found root NS record in A record lookup -> VERISCAM 09/19/2003 15:20:15.444 Q56ec00f1016e71bc There were no MX/A records. 09/19/2003 15:20:15.444 Q56ec00f1016e71bc DNS Report: [ex=1 rcode=0 ancnt=1 suc=1]. 09/19/2003 15:20:15.444 Q56ec00f1016e71bc Done with MX or A record 09/19/2003 15:20:15.444 Q56ec00f1016e71bc Finished Final Test #17: MAILFROM [envfrom] HEADERS ------- Received: from mail.matchevents.com [209.123.232.152] by mail.webhost.hm-software.com (SMTPD32-7.07) id A6ECF1016E; Fri, 19 Sep 2003 15:20:12 -0400 Received: (qmail 3904 invoked by uid 33); 19 Sep 2003 19:20:12 -0000 Date: 19 Sep 2003 19:20:12 -0000 Message-ID: <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] From: 8minuteDating <[EMAIL PROTECTED]> Reply-To: 8minuteDating <[EMAIL PROTECTED]> Subject: Upcoming Nyack Party MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0000_01C0B5EC.5BF9F0F0" X-Declude-Note: Domain mail.matchevents.com has no MX or A records. X-Declude: Version 1.76; D56ec00f1016e71bc.SMD from mail.matchevents.com [209.123.232.152] X-Declude: Triggered MAILFROM, HELOBOGUS, NOLEGITCONTENT [1] X-Countries: UNITED STATES->destination Return-Path: <[EMAIL PROTECTED]> DEBUG LOG --------- 09/19/2003 15:20:13.037 CFG: Setting LOG_OK level to NONE 09/19/2003 15:20:13.053 CFG: Set hop to 0. 09/19/2003 15:20:13.053 Console turned OFF 09/19/2003 15:20:13.053 CFG: Bypassing IP 63.107.174.32. 09/19/2003 15:20:13.053 CFG: Bypassing IP 65.119.204.32. 09/19/2003 15:20:13.053 Setting AUTOWHITELIST to ON 09/19/2003 15:20:13.053 CFG: Whitelisting AUTH . 09/19/2003 15:20:13.053 CFG: Whitelisting TO [EMAIL PROTECTED] 09/19/2003 15:20:13.053 CFG: Whitelisting IP 63.107.174.. 09/19/2003 15:20:13.053 CFG: Whitelisting IP 65.119.204.. 09/19/2003 15:20:13.053 CFG: Whitelisting IP 195.127.133.0/25. 09/19/2003 15:20:13.053 CFG: Whitelisting FROM t-online.de. 09/19/2003 15:20:13.053 CFG: Whitelisting FROM networksolutions.com. 09/19/2003 15:20:13.053 CFG: Whitelisting FROM verisign.net. 09/19/2003 15:20:13.053 CFG: Whitelisting FROM netsol.com. 09/19/2003 15:20:13.053 CFG: Whitelisting FROM nytimes.com. 09/19/2003 15:20:13.053 CFG: Whitelisting FROM lists.cnn.com. 09/19/2003 15:20:13.053 CFG: Whitelisting FROM timeinc.com. 09/19/2003 15:20:13.053 CFG: Whitelisting FROM deepmetrix.com. 09/19/2003 15:20:13.053 CFG: Whitelisting FROM uni.de. 09/19/2003 15:20:13.053 CFG: Whitelisting IP 206.242.213.5. 09/19/2003 15:20:13.053 CFG: Whitelisting IP 206.64.5.31. 09/19/2003 15:20:13.053 CFG: Whitelisting ANYWHERE [EMAIL PROTECTED] 09/19/2003 15:20:13.053 CFG: Whitelisting ANYWHERE [EMAIL PROTECTED] . 09/19/2003 15:20:13.053 CFG: Whitelisting IP 64.119.137.. 09/19/2003 15:20:13.053 CFG: Whitelisting IP 65.199.179.232/29. 09/19/2003 15:20:13.053 CFG: Whitelisting FROM stellenmarkt.de. 09/19/2003 15:20:13.053 CFG: Whitelisting FROM PASSPORT.COM. 09/19/2003 15:20:13.069 Declude v1.76 09/19/2003 15:20:13.069 Setting HOLD directory to: D:\IMAIL\spool\spam. 09/19/2003 15:20:13.069 Q56ec00f1016e71bc Setting DNS server to IMail's 63.107.174.65. 09/19/2003 15:20:13.069 Q56ec00f1016e71bc Declude JunkMail Pro Version Registered 09/19/2003 15:20:13.069 Q56ec00f1016e71bc Start 09/19/2003 15:20:13.069 Q56ec00f1016e71bc Locked D:\IMAIL\spool\Q56ec00f1016e71bc.SMD. 09/19/2003 15:20:13.116 Q56ec00f1016e71bc Getting message envelope 09/19/2003 15:20:13.116 Q56ec00f1016e71bc [EMAIL PROTECTED] 09/19/2003 15:20:13.116 Q56ec00f1016e71bc QD:\IMAIL\spool\D56ec00f1016e71bc.SMD 09/19/2003 15:20:13.116 Q56ec00f1016e71bc Hmail.webhost.hm-software.com 09/19/2003 15:20:13.116 Q56ec00f1016e71bc We:\MAIL\Virtual 09/19/2003 15:20:13.116 Q56ec00f1016e71bc E0, 09/19/2003 15:20:13.116 Q56ec00f1016e71bc S<[EMAIL PROTECTED]> 09/19/2003 15:20:13.116 Q56ec00f1016e71bc NRCPT TO:<[EMAIL PROTECTED]> 09/19/2003 15:20:13.116 Q56ec00f1016e71bc Recip: NRCPT TO:<[EMAIL PROTECTED]> 09/19/2003 15:20:13.116 Q56ec00f1016e71bc R<[EMAIL PROTECTED]> 09/19/2003 15:20:13.116 Q56ec00f1016e71bc Recip: R<[EMAIL PROTECTED]> 09/19/2003 15:20:13.116 Q56ec00f1016e71bc Setting altaddr 0 to [EMAIL PROTECTED] [EMAIL PROTECTED] 09/19/2003 15:20:13.116 Q56ec00f1016e71bc Setting reciphost to pianoartist.com 09/19/2003 15:20:13.116 Q56ec00f1016e71bc 09/19/2003 15:20:13.116 Q56ec00f1016e71bc nRecips: 1 (1 total) 09/19/2003 15:20:13.116 Q56ec00f1016e71bc Recip 0: [EMAIL PROTECTED] = [EMAIL PROTECTED] 09/19/2003 15:20:13.116 Q56ec00f1016e71bc Starting locality check (sender=mail.matchevents.com; nr=1 ca=off). 09/19/2003 15:20:13.116 Q56ec00f1016e71bc CL Opening HKEY_LOCAL_MACHINE\software\Ipswitch\IMail\Domains 09/19/2003 15:20:13.131 Q56ec00f1016e71bc [EMAIL PROTECTED] [0] is local domain2 09/19/2003 15:20:13.131 Q56ec00f1016e71bc Done getting message envelope 09/19/2003 15:20:13.131 Q56ec00f1016e71bc Getting headers 09/19/2003 15:20:13.131 Q56ec00f1016e71bc Done getting envelope and headers 09/19/2003 15:20:14.444 Q56ec00f1016e71bc Ver=30 verflag=0 09/19/2003 15:20:14.444 Q56ec00f1016e71bc About to run spam tests 09/19/2003 15:20:14.444 Q56ec00f1016e71bc Going through datafile 09/19/2003 15:20:14.444 Q56ec00f1016e71bc LOOKING FOR IP: Received: from mail.matchevents.com [209 09/19/2003 15:20:14.444 Q56ec00f1016e71bc Setting [IPTEXT] to 209.123.232.152 09/19/2003 15:20:14.444 Q56ec00f1016e71bc iptext now=209.123.232.152 09/19/2003 15:20:14.444 Q56ec00f1016e71bc Testing IP 209.123.232.152 09/19/2003 15:20:14.444 Q56ec00f1016e71bc Doing COUNTRYCHAIN=0 09/19/2003 15:20:14.459 Q56ec00f1016e71bc Handling Received: header 09/19/2003 15:20:14.459 Q56ec00f1016e71bc Got IP 209.123.232.152 09/19/2003 15:20:14.459 Q56ec00f1016e71bc Setting remote IP address to 209.123.232.152 09/19/2003 15:20:14.459 Q56ec00f1016e71bc 152.232.123.209.in-addr.arpa 09/19/2003 15:20:14.569 Q56ec00f1016e71bc revdns: mail.matchevents.com. 09/19/2003 15:20:14.569 Q56ec00f1016e71bc Hop 0: Checking IP Address 209.123.232.152. 09/19/2003 15:20:14.569 Q56ec00f1016e71bc iptext=209.123.232.152 myip1=d17be898 i=4 09/19/2003 15:20:14.678 Q56ec00f1016e71bc Test #1 [DSBL] is same as Test #1 [DSBL=*]. Answer=admin.dsbl.org.? 09/19/2003 15:20:14.678 Q56ec00f1016e71bc Test #2 [ORDB] is same as Test #2 [ORDB=*]. Answer=hostmaster.ordb.org.? 09/19/2003 15:20:14.678 Q56ec00f1016e71bc Test #3 [KUNDENSERVER] is same as Test #3 [KUNDENSERVER=127.0.0.2]. Answer=? 09/19/2003 15:20:14.678 Q56ec00f1016e71bc Test #4 [SPAMCOP] is same as Test #4 [SPAMCOP=127.0.0.2]. Answer=? 09/19/2003 15:20:14.678 Q56ec00f1016e71bc Test #5 [FIVETENDUL] is same as Test #5 [FIVETENDUL=127.0.0.3]. Answer=nac.net.spam-support.blackholes.five-ten-sg.com.? 09/19/2003 15:20:14.678 Q56ec00f1016e71bc Test #5 [FIVETENDUL] is same as Test #5 [FIVETENDUL]. Answer=127.0.0.7 09/19/2003 15:20:14.678 Q56ec00f1016e71bc Test #7 [BLITZEDALL] is same as Test #7 [BLITZEDALL=*]. Answer=hostmaster.blitzed.org.? 09/19/2003 15:20:14.694 Q56ec00f1016e71bc Test #8 [EASYNET-DNSBL] is same as Test #8 [EASYNET-DNSBL=127.0.0.2]. Answer=abuse.easynet.nl.? 09/19/2003 15:20:14.694 Q56ec00f1016e71bc Test #9 [EASYNET-PROXIES] is same as Test #9 [EASYNET-PROXIES=127.0.0.2]. Answer=abuse.easynet.nl.? 09/19/2003 15:20:14.694 Q56ec00f1016e71bc Test #10 [EASYNET-DYNA] is same as Test #10 [EASYNET-DYNA=127.0.0.2]. Answer=abuse.easynet.nl.? 09/19/2003 15:20:14.694 Q56ec00f1016e71bc Test #11 [SPAMHAUS] is same as Test #11 [SPAMHAUS=127.0.0.2]. Answer=hostmaster.spamhaus.org.? 09/19/2003 15:20:14.694 Q56ec00f1016e71bc Test #12 [CBL] is same as Test #12 [CBL=127.0.0.2]. Answer=<root>? 09/19/2003 15:20:14.694 Q56ec00f1016e71bc Test #13 [BONDEDSENDER] is same as Test #13 [BONDEDSENDER=127.0.0.10]. Answer=hostmaster.query.bondedsender.org.? 09/19/2003 15:20:14.991 Q56ec00f1016e71bc Test #6 [MONKEYPROXIES] is same as Test #6 [MONKEYPROXIES=*]. Answer=hostmaster.monkeys.com.? 09/19/2003 15:20:14.991 Q56ec00f1016e71bc LOOKING FOR IP: Received: (qmail 3904 invoked by uid 33) 09/19/2003 15:20:14.991 Q56ec00f1016e71bc No [IP] or (IP); trying plain 'from ip' 09/19/2003 15:20:14.991 Q56ec00f1016e71bc No IP in Received: header! 09/19/2003 15:20:14.991 Q56ec00f1016e71bc iptext now= 09/19/2003 15:20:14.991 Q56ec00f1016e71bc Handling Received: header 09/19/2003 15:20:14.991 Q56ec00f1016e71bc Got IP 0.0.0.0 09/19/2003 15:20:14.991 Q56ec00f1016e71bc No IP found; skipping this line 09/19/2003 15:20:14.991 Q56ec00f1016e71bc Last line of headers: Content-Type: multipart/altern 09/19/2003 15:20:15.100 Q56ec00f1016e71bc Test #14 [RDNSBL] is same as Test #14 [RDNSBL=*; mail.matchevents.com.rdns.weblobby.com]. Answer=andy_schmidt.hm-software.com.? 09/19/2003 15:20:15.100 Q56ec00f1016e71bc DNSBL checks done 09/19/2003 15:20:15.100 Q56ec00f1016e71bc Test #0: BYPASSWHITELIST [bypasswhitelisti20] - may skip 09/19/2003 15:20:15.100 Q56ec00f1016e71bc Test #1: DSBL [ip4r] - may skip 09/19/2003 15:20:15.100 Q56ec00f1016e71bc Test #2: ORDB [ip4r] - may skip 09/19/2003 15:20:15.100 Q56ec00f1016e71bc Test #3: KUNDENSERVER [ip4r] - may skip 09/19/2003 15:20:15.100 Q56ec00f1016e71bc Test #4: SPAMCOP [ip4r] - may skip 09/19/2003 15:20:15.100 Q56ec00f1016e71bc Test #5: FIVETENDUL [ip4r] - may skip 09/19/2003 15:20:15.100 Q56ec00f1016e71bc Test #6: MONKEYPROXIES [ip4r] - may skip 09/19/2003 15:20:15.100 Q56ec00f1016e71bc Test #7: BLITZEDALL [ip4r] - may skip 09/19/2003 15:20:15.100 Q56ec00f1016e71bc Test #8: EASYNET-DNSBL [ip4r] - may skip 09/19/2003 15:20:15.100 Q56ec00f1016e71bc Test #9: EASYNET-PROXIES [ip4r] - may skip 09/19/2003 15:20:15.100 Q56ec00f1016e71bc Test #10: EASYNET-DYNA [ip4r] - may skip 09/19/2003 15:20:15.116 Q56ec00f1016e71bc Test #11: SPAMHAUS [ip4r] - may skip 09/19/2003 15:20:15.116 Q56ec00f1016e71bc Test #12: CBL [ip4r] - may skip 09/19/2003 15:20:15.116 Q56ec00f1016e71bc Test #13: BONDEDSENDER [ip4r] - may skip 09/19/2003 15:20:15.116 Q56ec00f1016e71bc Test #14: RDNSBL [dnsbl] - may skip 09/19/2003 15:20:15.116 Q56ec00f1016e71bc Test #15: EASYNET-DOMAINS [rhsbl] - may skip 09/19/2003 15:20:15.116 Q56ec00f1016e71bc Testing RHSBL at mail.matchevents.com.spamdomains.blackholes.easynet.nl [0]. 09/19/2003 15:20:15.209 Q56ec00f1016e71bc Finished Final Test #15: EASYNET-DOMAINS [rhsbl] 09/19/2003 15:20:15.209 Q56ec00f1016e71bc Test #16: MAILPOLICE-PORN [rhsbl] - may skip 09/19/2003 15:20:15.209 Q56ec00f1016e71bc Testing RHSBL at mail.matchevents.com.porn.rhs.mailpolice.com [0]. 09/19/2003 15:20:15.272 Q56ec00f1016e71bc Finished Final Test #16: MAILPOLICE-PORN [rhsbl] 09/19/2003 15:20:15.287 Q56ec00f1016e71bc Test #17: MAILFROM [envfrom] - may skip 09/19/2003 15:20:15.287 Q56ec00f1016e71bc Doing envfrom type test on mail.matchevents.com. 09/19/2003 15:20:15.287 Q56ec00f1016e71bc Looking up MX/A record for mail.matchevents.com at 63.107.174.65. 09/19/2003 15:20:15.444 Q56ec00f1016e71bc Msg failed MX; testing A (MAILFROM mail.matchevents.com) [1 1 0 ] 09/19/2003 15:20:15.444 Q56ec00f1016e71bc Found root NS record in A record lookup -> VERISCAM 09/19/2003 15:20:15.444 Q56ec00f1016e71bc There were no MX/A records. 09/19/2003 15:20:15.444 Q56ec00f1016e71bc DNS Report: [ex=1 rcode=0 ancnt=1 suc=1]. 09/19/2003 15:20:15.444 Q56ec00f1016e71bc Done with MX or A record 09/19/2003 15:20:15.444 Q56ec00f1016e71bc Finished Final Test #17: MAILFROM [envfrom] 09/19/2003 15:20:15.444 Q56ec00f1016e71bc Test #18: PERCENT [percent] - may skip 09/19/2003 15:20:15.444 Q56ec00f1016e71bc Finished Final Test #18: PERCENT [percent] 09/19/2003 15:20:15.444 Q56ec00f1016e71bc Test #19: BADHEADERS [badheaders] - may skip 09/19/2003 15:20:15.444 Q56ec00f1016e71bc Test #20: BASE64 [base64] - may skip 09/19/2003 15:20:15.444 Q56ec00f1016e71bc Finished Final Test #20: BASE64 [base64] 09/19/2003 15:20:15.444 Q56ec00f1016e71bc Test #21: HELOBOGUS [helovalid] - may skip 09/19/2003 15:20:15.444 Q56ec00f1016e71bc Starting HELO validity check 09/19/2003 15:20:15.444 Q56ec00f1016e71bc Looking up MX/A record for mail.matchevents.com at 63.107.174.65. 09/19/2003 15:20:15.553 Q56ec00f1016e71bc Msg failed MX; testing A (HELOBOGUS mail.matchevents.com) [1 1 0 ] 09/19/2003 15:20:15.553 Q56ec00f1016e71bc Found root NS record in A record lookup -> VERISCAM 09/19/2003 15:20:15.553 Q56ec00f1016e71bc There were no MX/A records. 09/19/2003 15:20:15.553 Q56ec00f1016e71bc DNS Report: [ex=1 rcode=0 ancnt=1 suc=1]. 09/19/2003 15:20:15.553 Q56ec00f1016e71bc Done with MX or A record 09/19/2003 15:20:15.553 Q56ec00f1016e71bc HELO: BOGUS 09/19/2003 15:20:15.553 Q56ec00f1016e71bc Invalid HELO text of mail.matchevents.com. 09/19/2003 15:20:15.553 Q56ec00f1016e71bc Finished Final Test #21: HELOBOGUS [helovalid] 09/19/2003 15:20:15.553 Q56ec00f1016e71bc Test #22: IPNOTINMX [ipnotinmx] - may skip 09/19/2003 15:20:15.553 Q56ec00f1016e71bc Test #23: REVDNS [revdnsexists] - may skip 09/19/2003 15:20:15.553 Q56ec00f1016e71bc Finished Final Test #23: REVDNS [revdnsexists] 09/19/2003 15:20:15.553 Q56ec00f1016e71bc Test #24: SPAMROUTING [spamrouting] - may skip 09/19/2003 15:20:15.553 Q56ec00f1016e71bc Test #25: SPAMHEADERS [spamheaders] - may skip 09/19/2003 15:20:15.553 Q56ec00f1016e71bc Test #26: NOLEGITCONTENT [nolegitcontent] - may skip 09/19/2003 15:20:15.553 Q56ec00f1016e71bc No content unique to legitimate E-mail detected. 09/19/2003 15:20:15.553 Q56ec00f1016e71bc Finished Final Test #26: NOLEGITCONTENT [nolegitcontent] 09/19/2003 15:20:15.553 Q56ec00f1016e71bc Test #27: COMMENTS [comments] - may skip 09/19/2003 15:20:15.553 Q56ec00f1016e71bc Finished Final Test #27: COMMENTS [comments] 09/19/2003 15:20:15.569 Q56ec00f1016e71bc Test #28: HEUR10 [heuristics] - may skip 09/19/2003 15:20:15.569 Q56ec00f1016e71bc TEST: 10 heur=0.000041 t[]domain=10 09/19/2003 15:20:15.569 Q56ec00f1016e71bc Finished Final Test #28: HEUR10 [heuristics] 09/19/2003 15:20:15.569 Q56ec00f1016e71bc Test #29: HEUR9 [heuristics] - may skip 09/19/2003 15:20:15.569 Q56ec00f1016e71bc TEST: 9 heur=0.000041 t[]domain=9 09/19/2003 15:20:15.569 Q56ec00f1016e71bc Finished Final Test #29: HEUR9 [heuristics] 09/19/2003 15:20:15.569 Q56ec00f1016e71bc Test #30: HEUR8 [heuristics] - may skip 09/19/2003 15:20:15.569 Q56ec00f1016e71bc TEST: 8 heur=0.000041 t[]domain=8 09/19/2003 15:20:15.569 Q56ec00f1016e71bc Finished Final Test #30: HEUR8 [heuristics] 09/19/2003 15:20:15.569 Q56ec00f1016e71bc Test #31: SPAMDOMAINS [spamdomains] - may skip 09/19/2003 15:20:15.584 Q56ec00f1016e71bc Finished Final Test #31: SPAMDOMAINS [spamdomains] 09/19/2003 15:20:15.584 Q56ec00f1016e71bc Test #32: WEIGHTFILTER [filter] - may skip 09/19/2003 15:20:15.584 Q56ec00f1016e71bc Test #33: WEIGHTKILL [weight] - may skip 09/19/2003 15:20:15.584 Q56ec00f1016e71bc Test #34: WEIGHTREPORT [weightrange] - may skip 09/19/2003 15:20:15.584 Q56ec00f1016e71bc Test #35: WEIGHT10 [weightrange] - may skip 09/19/2003 15:20:15.584 Q56ec00f1016e71bc Test #36: WEIGHT8 [weightrange] - may skip 09/19/2003 15:20:15.584 Q56ec00f1016e71bc Test #37: WEIGHTHDR [weightrange] - may skip 09/19/2003 15:20:15.584 Q56ec00f1016e71bc JunkMailBase64 Start 09/19/2003 15:20:15.584 Q56ec00f1016e71bc DeHTML Start 09/19/2003 15:20:15.584 Q56ec00f1016e71bc DeHTML End: 2381:4991 ratio=0.677021 09/19/2003 15:20:15.584 Q56ec00f1016e71bc Doing filter file D:\IMail\Declude\WeightFilter.txt. 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries US [209.122.0.0/15]. 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries: US . 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries US [209.122.0.0/15]. 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries: US . 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries US [209.122.0.0/15]. 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries: US . 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries US [209.122.0.0/15]. 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries: US . 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries US [209.122.0.0/15]. 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries: US . 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries US [209.122.0.0/15]. 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries: US . 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries US [209.122.0.0/15]. 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries: US . 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries US [209.122.0.0/15]. 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries: US . 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries US [209.122.0.0/15]. 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries: US . 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries US [209.122.0.0/15]. 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries: US . 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries US [209.122.0.0/15]. 09/19/2003 15:20:15.600 Q56ec00f1016e71bc Checking countries: US . 09/19/2003 15:20:15 Q56ec00f1016e71bc HELOBOGUS:3 nIPNOTINMX:-2 . Total weight = 1 09/19/2003 15:20:15.616 Q56ec00f1016e71bc Testing whitelist #0 10 15:20:15.616 Q56ec00f1016e71bc Testing whitelist #2 2 63.107.174. 209.123.232.152 not in whitelist (63.107.174. ) 09/19/2003 15:20:15.616 Q56ec00f1016e71bc Testing whitelist #3 2 65.119.204. not in whitelist (65.119.204. ) 09/19/2003 15:20:15.616 Q56ec00f1016e71bc Testing whitelist #4 2 195.127.133.0/25 . 09/19/2003 15:20:15.616 Q56ec00f1016e71bc IP 209.123.232.152 not in whitelist (195.127.133.0/25 ) 09/19/2003 15:20:15.616 Q56ec00f1016e71bc Testing whitelist #5 1 t-online.de . 09/19/2003 15:20:15.616 Q56ec00f1016e71bc Testing whitelist #6 1 networksolutions.com. 09/19/2003 15:20:15.616 Q56ec00f1016e71bc Testing whitelist #7 1 verisign.net . 09/19/2003 15:20:15.616 Q56ec00f1016e71bc Testing whitelist #8 1 netsol.com . 09/19/2003 15:20:15.616 Q56ec00f1016e71bc Testing whitelist #9 1 nytimes.com . 09/19/2003 15:20:15.616 Q56ec00f1016e71bc Testing whitelist #10 1 lists.cnn.com . 09/19/2003 15:20:15.616 Q56ec00f1016e71bc Testing whitelist #11 1 timeinc.com . 09/19/2003 15:20:15.616 Q56ec00f1016e71bc Testing whitelist #12 1 deepmetrix.com . 09/19/2003 15:20:15.616 Q56ec00f1016e71bc Testing whitelist #13 1 uni.de . 09/19/2003 15:20:15.616 Q56ec00f1016e71bc Testing whitelist #14 2 206.242.213.5 . 09/19/2003 15:20:15.616 Q56ec00f1016e71bc IP 209.123.232.152 not in whitelist (206.242.213.5 ) 09/19/2003 15:20:15.616 Q56ec00f1016e71bc Testing whitelist #15 2 206.64.5.31 . 09/19/2003 15:20:15.616 Q56ec00f1016e71bc IP 209.123.232.152 not in whitelist (206.64.5.31 ) 09/19/2003 15:20:15.616 Q56ec00f1016e71bc Testing whitelist #16 3 [EMAIL PROTECTED] . 09/19/2003 15:20:15.631 Q56ec00f1016e71bc Testing whitelist #17 3 [EMAIL PROTECTED] . 09/19/2003 15:20:15.631 Q56ec00f1016e71bc Testing whitelist #18 2 64.119.137. . 09/19/2003 15:20:15.631 Q56ec00f1016e71bc IP 209.123.232.152 not in whitelist (64.119.137. ) 09/19/2003 15:20:15.631 Q56ec00f1016e71bc Testing whitelist #19 2 65.199.179.232/29 . 09/19/2003 15:20:15.631 Q56ec00f1016e71bc IP 209.123.232.152 not in whitelist (65.199.179.232/29 ) 09/19/2003 15:20:15.631 Q56ec00f1016e71bc Testing whitelist #20 1 stellenmarkt.de . 09/19/2003 15:20:15.631 Q56ec00f1016e71bc Testing whitelist #21 1 PASSPORT.COM . 09/19/2003 15:20:15.631 Q56ec00f1016e71bc Past whitelisting 09/19/2003 15:20:15.631 Q56ec00f1016e71bc Looping... 09/19/2003 15:20:15.631 Q56ec00f1016e71bc [EMAIL PROTECTED] [EMAIL PROTECTED]@optonline.net] *local* 09/19/2003 15:20:15.631 Q56ec00f1016e71bc Opening HKEY_LOCAL_MACHINE\software\Ipswitch\IMail\Domains 09/19/2003 15:20:15.631 Q56ec00f1016e71bc Domain name = pianoartist.com, User name = Scott. 09/19/2003 15:20:15 Q56ec00f1016e71bc Using [incoming] CFG file D:\IMAIL\Declude\$default$.junkmail. 09/19/2003 15:20:15.631 Q56ec00f1016e71bc .................X...X....X........... 09/19/2003 15:20:15.631 Q56ec00f1016e71bc Test #17 [MAILFROM weight=0] triggered; action = 15 [Domain mail.matchevents.com has no MX or A records.] 09/19/2003 15:20:15 Q56ec00f1016e71bc Msg failed MAILFROM (Domain mail.matchevents.com has no MX or A records.). Action=HOLD. 09/19/2003 15:20:15.631 Q56ec00f1016e71bc Test #21 [HELOBOGUS weight=3] triggered; action = 5 [Domain mail.matchevents.com has no MX or A records.] 09/19/2003 15:20:15 Q56ec00f1016e71bc Msg failed HELOBOGUS (Domain mail.matchevents.com has no MX or A records.). Action=WARN. 09/19/2003 15:20:15.631 Q56ec00f1016e71bc X-Declude-Note: Domain mail.matchevents.com has no MX or A records. 09/19/2003 15:20:15.631 Q56ec00f1016e71bc Test #26 [NOLEGITCONTENT weight=0] triggered; action = 0 [No content unique to legitimate E-mail detected.] 09/19/2003 15:20:15 Q56ec00f1016e71bc Subject: Upcoming Nyack Party 09/19/2003 15:20:15 Q56ec00f1016e71bc From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 209.123.232.152 ID: 09/19/2003 15:20:15.647 Q56ec00f1016e71bc Done Looping 09/19/2003 15:20:15.647 Q56ec00f1016e71bc AlterRecip( 5, (null), (null)); 09/19/2003 15:20:15.647 Q56ec00f1016e71bc AlterRecip: Saving queuefile 09/19/2003 15:20:15 Q56ec00f1016e71bc Last action = HOLD. 09/19/2003 15:20:15.647 Q56ec00f1016e71bc X-Declude: Version 1.76; D56ec00f1016e71bc.SMD from mail.matchevents.com [209.123.232.152] X-Declude: Triggered MAILFROM, HELOBOGUS, NOLEGITCONTENT [1] X-Countries: UNITED STATES->destination Return-Path: <[EMAIL PROTECTED]> 09/19/2003 15:20:15.647 Q56ec00f1016e71bc AlterMessage 09/19/2003 15:20:15.647 Q56ec00f1016e71bc Set process priority back to 32. 09/19/2003 15:20:15.647 Q56ec00f1016e71bc Adding warning 09/19/2003 15:20:15.662 Q56ec00f1016e71bc Last Action=HOLD. 09/19/2003 15:20:15.662 Q56ec00f1016e71bc Unlocked D:\IMAIL\spool\Q56ec00f1016e71bc.SMD. 09/19/2003 15:20:15.662 Q56ec00f1016e71bc Moving file to spam hold directory 09/19/2003 15:20:15.662 Q56ec00f1016e71bc Total Time: 1595ms Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax: +1 201 934-9206 http://www.HM-Software.com/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
