Print Page | Close Window

Blacklisted MAilTO Delivered

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=4427
Printed Date: 03 June 2025 at 6:55am


Topic: Blacklisted MAilTO Delivered
Posted By: Guests
Subject: Blacklisted MAilTO Delivered
Date Posted: 14 October 2004 at 10:39am

I have come across this issue, it may have been present before, but, it has just been brought to my attention.

A user sent me an email which was delivered, even though the person it was sent to is in my MailTo Blacklist. The SPAMforISP log for the transaction is below, as well as the delivery failure from my exchange server...

The Domain was changed, and the IP address removed to protect the innocent....

10/14/04 07:30:11:843 -- (304) Resolving XXX.XXX.XXX.XX - XXX.XXX.XXX.XX.brutele.be
10/14/04 07:30:11:843 -- (304) - EmailTO is in local blacklist file...
10/14/04 07:30:11:843 -- (304) XXX.XXX.XXX.XX - Mail from: mailto:jwyzc@SPAMDomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - jwyzc@SPAMDomain.com To: mailto:arsenaultd@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - arsenaultd@somedomain.com will be rejected
10/14/04 07:30:15:062 -- (304) Mail from: mailto:jwyzc@SPAMDomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - jwyzc@SPAMDomain.com
10/14/04 07:30:15:062 -- (304) XXX.XXX.XXX.XX - Mail from: mailto:jwyzc@SPAMDomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - jwyzc@SPAMDomain.com To: mailto:bielbym@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - bielbym@somedomain.com will be rejected
10/14/04 07:30:18:281 -- (304) Mail from: mailto:jwyzc@SPAMDomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - jwyzc@SPAMDomain.com
10/14/04 07:30:18:281 -- (304) RCPT TO: mailto:barber@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - barber@somedomain.com accepted
10/14/04 07:30:20:781 -- (304) Mail from: mailto:jwyzc@SPAMDomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - jwyzc@SPAMDomain.com
10/14/04 07:30:20:781 -- (304) RCPT TO: mailto:castro@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - castro@somedomain.com accepted
10/14/04 07:30:22:687 -- (304) Mail from: mailto:jwyzc@SPAMDomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - jwyzc@SPAMDomain.com
10/14/04 07:30:22:687 -- (304) RCPT TO: mailto:blair@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - blair@somedomain.com accepted
10/14/04 07:30:25:375 -- (304) Mail from: mailto:jwyzc@SPAMDomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - jwyzc@SPAMDomain.com
10/14/04 07:30:25:375 -- (304) RCPT TO: mailto:cannon@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - cannon@somedomain.com accepted
10/14/04 07:30:25:656 -- Starting to process queue directory...
10/14/04 07:30:27:515 -- (304) Mail from: mailto:jwyzc@SPAMDomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - jwyzc@SPAMDomain.com
10/14/04 07:30:27:515 -- (304) RCPT TO: mailto:banks@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - banks@somedomain.com accepted
10/14/04 07:30:34:250 -- (304) EMail from mailto:jwyzc@SPAMDomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - jwyzc@SPAMDomain.com to mailto:arsenaultd@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - arsenaultd@somedomain.com , mailto:bielbym@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - bielbym@somedomain.com , mailto:barber@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - barber@somedomain.com , mailto:castro@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - castro@somedomain.com , mailto:blair@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - blair@somedomain.com , mailto:cannon@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - cannon@somedomain.com , mailto:banks@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - banks@somedomain.com passes Bayesian filter - 0% spam  (16ms)
10/14/04 07:30:34:265 -- (304) EMail from mailto:jwyzc@SPAMDomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - jwyzc@SPAMDomain.com to mailto:arsenaultd@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - arsenaultd@somedomain.com , mailto:bielbym@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - bielbym@somedomain.com , mailto:barber@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - barber@somedomain.com , mailto:castro@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - castro@somedomain.com , mailto:blair@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - blair@somedomain.com , mailto:cannon@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - cannon@somedomain.com , mailto:banks@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - banks@somedomain.com was queued. Size: 2 KB, 2048 bytes
10/14/04 07:30:36:421 -- (304) Disconnect

The following recipients did not receive the attached mail. Reasons are listed with each recipient:

<arsenaultd@somedomain.com> mailto:arsenaultd@somedomain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - arsenaultd@somedomain.com

MSEXCH:IMS:Some Domain Corporation:somedomain:MAIL 0 (000C05A6) Unknown Recipient

The message that caused this notification was:

 


Replies:
Posted By: LogSat
Date Posted: 14 October 2004 at 6:19pm
Dave,

We were recently informed of a bug that, under certain conditions, caused the spam to be delivered even if a recipient was blacklisted. This was fixed in the latest pre-release build that is available (which will be officially released within the next 1-3 days):

// New to VersionNumber = '2.1.1.385'; {TODO -cNew : Add label to indicate "Bayesian Probability results show up in Corpus Database tab"} {TODO -cFix : if more than 3 RCPT TO's were specfied, spam emails may have not been filtered}

Roberto F. LogSat Software


Print Page | Close Window