Hello all. I was asked some time ago to add a domail to my kill list.. I added it. But the customer is still recieving spam from this domail. They sent me the headers (I have them listed below) and I see the domail in the headers. but I never see where it failed the KillList.
Headers------------------------------- Received: from mail.ramthehole.com [66.110.74.50] by mail.pepperlink.net (SMTPD32-8.05) id A398669F0140; Mon, 09 Feb 2004 23:52:40 -0500 Date: Mon, 09 Feb 2004 23:57:24 -0500 Subject: Exclusive XXXXX-Soaked Model Photos From: Budapest Bukkake <[EMAIL PROTECTED]> To: Return-Path: [EMAIL PROTECTED] X-Sender: [EMAIL PROTECTED] X-Mailer: Mailer Software (rev. 01/15/2004) Message-Id: <[EMAIL PROTECTED]> MIME-version: 1.0 Content-type: multipart/alternative; boundary="iqxhhbldriaiwihk" X-RBL-Warning: SBL: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL12919 X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 66.110.74.50 with no reverse DNS entry. X-RBL-Warning: WEIGHT10: Weight of 12 reaches or exceeds the limit of 10. X-Declude-Sender: [EMAIL PROTECTED] [66.110.74.50] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SBL, SORBS-SPAM, NOLEGITCONTENT, REVDNS, WEIGHT10 [12] X-Note: QueInControl: D6398669f014033a3.SMD (1) X-Spam-Tests-Failed: SBL, SORBS-SPAM, NOLEGITCONTENT, REVDNS, WEIGHT10 [12] X-Note: RDNS Real Origin: [No Reverse DNS][66.110.74.50] X-Note: SMTP Real From: [EMAIL PROTECTED] X-Note: SMTP Real To: X-Note: This E-mail was sent from [No Reverse DNS] ([66.110.74.50]). X-RBL-Warning: Total spam weight of this E-mail is 12. X-RCPT-TO: Status: U X-UIDL: 374908735 Here is the entry in my killl list file .ramthehole.com ID-20040204-pep007 here is the line from my GLOBAL.CFG KFROM fromfile e:\imail\declude\fromfile.txt x 15 0 KFrom WARN Line from $DEFAULT$.JUNKMAIL KFROM WARN X-RBL-Warning: This E-mail failed the KILL File test Thanks Bennie --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
