Spam Filter ISP Support - Filtering Issue

Print Page | Close Window

Filtering Issue

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=3835
Printed Date: 16 November 2025 at 10:42am

Topic: Filtering Issue

Posted By: Guests
Subject: Filtering Issue
Date Posted: 23 June 2004 at 2:08pm

I have one user that needs to receive emails from Schwab.com. Ive added the address and domain to all of the white lists but i am unable to receive the message, it doesnt even make it to the quarantine. Its like its not even being sent. The only way that he can receive this email is if i add his email address to the unfiltered list. Whats weird about that is when he does receive the email I look through the log to see how it connects and i only see the two lines below, no connection from, no disconnect, nothing else, very strange, anyone seen this before

06/23/04 13:00:24:109 -- (2452) Sending email from mailto:SchwabAlerts.MarketUpdates@schwab.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - SchwabAlerts.MarketUpdates@schwab.com to mailto:user@user.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - user@user.com

06/23/04 13:00:24:453 -- (2452) EMail from mailto:SchwabAlerts.MarketUpdates@schwab.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - SchwabAlerts.MarketUpdates@schwab.com to mailto:user@user.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - user@user.com was forwarded to "my IMC"

Replies:

Posted By: LogSat
Date Posted: 24 June 2004 at 12:55am

Trinidad,

Can you please zip and email us at mailto:support@logsat.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - support@logsat.com a copy of your logfile, including the email address of your user, so we can take a look?

Roberto F.
LogSat Software

Posted By: Guests
Date Posted: 24 June 2004 at 9:16am

Ive sent it over

Thanks

Posted By: LogSat
Date Posted: 24 June 2004 at 10:02pm

Mistery solved. Schwabs is using different email addresses in the MAIL FROM command and the "From:" email header. Take a closer look at the relevant log entries below. SpamFilter reports the " mailto:1000240d9b50300018501b@bounce.quris.net" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - 1000240d9b50300018501b@bounce.quris.net " address at first since that is what was specified in the MAIL FROM command. The email headers and body is not received yet at this point, so that's all that SpamFilter can log. When the email contents is actually sent, SpamFilter is now able to read the "From:" header, and that one contains " mailto:SchwabAlerts.MarketUpdates@schwab.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - SchwabAlerts.MarketUpdates@schwab.com ". This new address is thus used from now on in the logs, thus the confusion.

Roberto F.
LogSat Software

06/23/04 13:00:23:296 -- (2780) Connection from: 66.179.26.105 - Originating country : United States
06/23/04 13:00:23:687 -- (2780) Resolving 66.179.26.105 - email09.quris.netemail09a.quris.net
06/23/04 13:00:23:687 -- (2780) Bypassed all rules for: mailto:user@user.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - user@user.com from mailto:1000240d9b50300018501b@bounce.quris.net" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - 1000240d9b50300018501b@bounce.quris.net
06/23/04 13:00:24:078 -- (2780) EMail from mailto:1000240d9b50300018501b@bounce.quris.net" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - 1000240d9b50300018501b@bounce.quris.net to mailto:user@user.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - user@user.com was queued. Size: 33 KB
06/23/04 13:00:24:109 -- (2452) Sending email from mailto:SchwabAlerts.MarketUpdates@schwab.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - SchwabAlerts.MarketUpdates@schwab.com to mailto:user@user.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - user@user.com
06/23/04 13:00:24:453 -- (2452) EMail from mailto:SchwabAlerts.MarketUpdates@schwab.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - SchwabAlerts.MarketUpdates@schwab.com to mailto:user@user.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - user@user.com was forwarded to 10.40.8.128:26

06/23/04 14:46:11:890 -- (2248) Connection from: 66.179.26.98 - Originating country : United States
06/23/04 14:46:12:296 -- (2248) Resolving 66.179.26.98 - email02.quris.net
06/23/04 14:46:12:296 -- (2248) Bypassed all rules for: mailto:user@user.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - user@user.com from mailto:1007040d9a04700045103b@bounce.quris.net" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - 1007040d9a04700045103b@bounce.quris.net
06/23/04 14:46:12:578 -- (2248) EMail from mailto:1007040d9a04700045103b@bounce.quris.net" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - 1007040d9a04700045103b@bounce.quris.net to mailto:user@user.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - user@user.com was queued. Size: 33 KB
06/23/04 14:46:12:593 -- (2508) Sending email from mailto:SchwabAlerts.MutualFunds@Schwab.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - SchwabAlerts.MutualFunds@Schwab.com to mailto:user@user.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - user@user.com
06/23/04 14:46:12:640 -- (2248) Disconnect
06/23/04 14:46:12:765 -- (2508) EMail from mailto:SchwabAlerts.MutualFunds@Schwab.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - SchwabAlerts.MutualFunds@Schwab.com to mailto:user@user.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - user@user.com was forwarded to 10.40.8.128:26

06/23/04 19:15:08:828 -- (2340) Connection from: 66.179.26.106 - Originating country : United States
06/23/04 19:15:09:171 -- (2340) Resolving 66.179.26.106 - email10a.quris.netemail10.quris.net
06/23/04 19:15:09:171 -- (2340) Bypassed all rules for: mailto:user@user.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - user@user.com from mailto:1006240da076200086328b@bounce.quris.net" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - 1006240da076200086328b@bounce.quris.net
06/23/04 19:15:09:500 -- (2340) EMail from mailto:1006240da076200086328b@bounce.quris.net" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - 1006240da076200086328b@bounce.quris.net to mailto:user@user.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - user@user.com was queued. Size: 26 KB
06/23/04 19:15:09:531 -- (2876) Sending email from mailto:SchwabAlerts.MyPortfolio@Schwab.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - SchwabAlerts.MyPortfolio@Schwab.com to mailto:user@user.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - user@user.com
06/23/04 19:15:09:640 -- (2340) Disconnect
06/23/04 19:15:09:703 -- (2876) EMail from mailto:SchwabAlerts.MyPortfolio@Schwab.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - SchwabAlerts.MyPortfolio@Schwab.com to mailto:user@user.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - user@user.com was forwarded to 10.40.8.128:26

Print Page | Close Window