David,
It should have. Do you also have an entry in the $default$.junkmail
file as well? I would bump your logs up to debug for a quick couple of
seconds to verify indeed the test is being called.
The other thing is if 66.135.209.210 did not resolve on your system you
would not get a hit on that line.
Darrell
----------------------------------
Check out http://www.invariantsystems.com for utilities for Declude,
Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring,
SURBL/URI integration, MRTG Integration, and Log Parsers.
David Dodell wrote:
Ebay notifications with the header:
Content-Type: multipart/mixed; boundary="SomeRandomStuffGoesHere"
X-Rbl-Warning: HELOBOGUS: Domain mx28.smf.ebay.com has no MX or
A records [0301].
X-Rbl-Warning: BADHEADERS: This E-mail was sent from a broken
mail client [8010000e].
X-Rbl-Warning: SPFPASS: SPF returned PASS for this E-mail.
X-Declude-Sender: [EMAIL PROTECTED] [66.135.209.210]
X-Declude-Refid:
X-Spam-Tests-Failed: HELOBOGUS, BADHEADERS, SPFPASS, WEIGHT10 [10]
X-Country-Chain: UNITED STATES->destination
X-Note: [RemoteDNS: mxsmfpool13.ebay.com] [Remote IP:
66.135.209.210] [RemoteHost: ebay.com]
X-Hello: mx28.smf.ebay.com
X-Rcpt-To: <[EMAIL PROTECTED]>
Status:
X-Imail-Rule: <Spam>S~You have spam:spam Data- YOU HAVE SPAM
X-Uidl: 464312848
X-Imail-Threadid: ca6101d700006329
Are being caught as spam ... I have in file I call REVDNSFILE
REVDNS -99 ENDSWITH .ebay.com
Thinking that would validate this as non-spam ... am I missing something
why that test isn't positive?
David
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
--
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
