I have been sending SPFFAIL false positives to declude for a few weeks now. I even had a SPFFAIL on a null sender email. It was a bounce of an undeliverable email.
I think the false positives are coming from unhandled situations and DNS timeouts so declude just fails the message instead of returning the unknown response or a TEMPORARYERROR. I hope they get this fixed soon and add the additional SPF test responses to Declude. Kevin Bilbee > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Guhl, Markus > (LDS) > Sent: Thursday, November 03, 2005 7:46 AM > To: [email protected] > Subject: AW: [Declude.JunkMail] SPFFAIL? Under 3.0 > > > hi scott, > > are you sure that all mails with spffail fails spf? we have here > some strange > things happen with 3.0.5.12. i am not sure if all tests that are > listed to be > triggered by a mail really trigger those tests. also we have > mails that seems to > trigger actions (i.e. HOLD-actions wich are tied to a single test) without > triggering the connected test. we reported this to declude, but > up to now there > is no response. > > I am not sure, but is it possible, that a single > TESTSFAILED-Variable is used by > all(?) threats. > > mfg > i.a. > gez. markus guhl > *********************************** > lds nrw > ref. 241 > tel.: 0211 9449 6947 > fax.: 0211 9449 8344 > mailto:[EMAIL PROTECTED] > *********************************** > > > -----Ursprüngliche Nachricht----- > Von: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Im Auftrag von Scott Fisher > Gesendet: Donnerstag, 3. November 2005 16:15 > An: [email protected] > Betreff: Re: [Declude.JunkMail] SPFFAIL? Under 3.0 > > My last 4 months: > > SPFFAIL 7/1/2005 2551 spam 99 ham > SPFFAIL 8/1/2005 2576 spam 72 ham > SPFFAIL 9/1/2005 2876 spam 86 ham > SPFFAIL 10/1/2005 3143 spam 414 ham > > > ----- Original Message ----- > From: "Darrell ([EMAIL PROTECTED])" <[EMAIL PROTECTED]> > To: <[email protected]> > Sent: Thursday, November 03, 2005 8:36 AM > Subject: [Declude.JunkMail] SPFFAIL? Under 3.0 > > > > Has anyone seen any hits on "SPFFAIL" under any of the 3.x versions? > > Darrell > > ------------------------------------------------------------------------ > > Check out http://www.invariantsystems.com for utilities for Declude And > > Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, > > MRTG Integration, and Log Parsers. > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] > > > --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
