Susan,

Things are being double scanned and that should be looked into, but your DNS might well be the culprit.

The server that Declude is using for lookups must have all of the records for your domain.  This means not just the MX records, but also the A records that the MX records correspond to.  If ute-sei.org is defined in that DNS server, it won't look to the external one for records that it doesn't contain.  It just assumes that it is authoritative for one and all.

Normally you shouldn't have a DNS server that acts as a non-authoritative/out of sync server from which you do queries (primarily because of situations like this one).

To get your log file entries, look in the Declude JunkMail log for the spool name values, but replace the starting D with a Q or just simply leave it off.

Matt



Susan Duncan wrote:

Matt,

 

Because of firewall settings, I’m running DNS on the IMAIL server pointing to internal IP addresses while a third party does DNS for the rest of the world to see.  The only thing missing on the internal version was the MX information which I’ve added.  It should have found it based on the external DNS though as it is there.  I’m including the full headers of one of the messages:

 

X-Declude-Sender: [EMAIL PROTECTED] [127.0.0.1]
X-Declude-Spoolname: D5E87000005DC5A1F.GSC
X-Declude-Note: Scanned by Declude 2.0.6 (http://www.declude.com/x-note.htm) for spam.
X-Declude-Scan: Score [0] at 21:19:04 on 01 Jun 2005
X-Declude-Tests: Whitelisted
X-Country-Chain:
X-RBL-Warning: MXRATE-BLOCK: "http://www.mxrate.com/lookup/refused.asp?ipaddress=32.97.166.48"
X-RBL-Warning: MAILFROM: Domain ute-sei.org has no MX or A records [0001].
X-RBL-Warning: SUBJECTCHARS: Subject with at least 50 characters found.
X-Declude-Sender: [EMAIL PROTECTED] [32.97.166.48]
X-Declude-Spoolname: D5EF114F40118D5BC.SMD
X-Declude-Note: Scanned by Declude 2.0.6 (http://www.declude.com/x-note.htm) for spam.
X-Declude-Scan: Score [18] at 21:20:52 on 01 Jun 2005
X-Declude-Tests: MXRATE-BLOCK, MAILFROM, SUBJECTCHARS, WEIGHT10, WEIGHT14
X-Country-Chain: CANADA->UNITED STATES->destination

 

I started looking at the log files, but got a little confused as it seems that there are two spoolnames with the message.  I can forward the entire logfile if you think it will help. I’ve changed the subject of this message as it covers both the problems I’m seeing.  You’ll notice that the message is also whitelisted. 

 

Susan Duncan
Web/Communications Officer / Agent des Communications/web
Union of Taxation Employees / Syndicat des employées de l'Impôt
Tel: 613-235-6704 ext 240
Fax: 613-234-7290
e-mail:
[EMAIL PROTECTED]
http://www.ute-sei.org/

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt
Sent: June 6, 2005 2:00 PM
To: [email protected]
Subject: Re: [Declude.JunkMail] X-RBL-Warning??

 

The MAILFROM test will only fail if Declude fails to find an A or MX record for the domain in question.  Since it exists, I would assume that it is the result of something involving DNS.  You should check your DNS and make sure that your server is resolving properly, and that it is the same DNS data that the rest of the world sees.

If you find nothing there, then you might want to share the full headers of one such message along with the log file entries that correspond to it.

Matt



Susan Duncan wrote:

 

I’m resending this as I didn’t get any replies.  Anyone??

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Susan Duncan
Sent: May 31, 2005 9:35 AM
To: [email protected]
Subject: [Declude.JunkMail] X-RBL-Warning??

 

Our own domain is getting caught with an X-RBL-Warning:

X-RBL-Warning: MAILFROM: Domain ute-sei.org has no MX or A records [0001].

 

I checked the documentation for this and found:

Each line determines the action to take for a specific test; for example, "ORBZ WARN" lets Declude JunkMail know to add a standard "X-RBL-Warning:" header for E-mail that fails the ORBZ test.

 

I can’t find how to check the ORBZ test.  Everything I look up tells me that this domain doesn’t exist anymore.  Any other checks I make on our domain points to the MX record being defined properly.  What should I be checking or changing?

 

Susan Duncan
Web/Communications Officer / Agent des Communications/web
Union of Taxation Employees / Syndicat des employées de l'Impôt
Tel: 613-235-6704 ext 240
Fax: 613-234-7290
e-mail:
[EMAIL PROTECTED]
http://www.ute-sei.org/

 



-- 
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================

-- 
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================


Reply via email to