Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Filtering Issue
  FAQ FAQ  Forum Search   Register Register  Login Login

Filtering Issue

 Post Reply Post Reply
Author
Trinidad View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Trinidad Quote  Post ReplyReply Direct Link To This Post Topic: Filtering Issue
    Posted: 23 June 2004 at 2:08pm

I have one user that needs to receive emails from Schwab.com. Ive added the address and domain to all of the white lists but i am unable to receive the message, it doesnt even make it to the quarantine. Its like its not even being sent. The only way that he can receive this email is if i add his email address to the unfiltered list. Whats weird about that is when he does receive the email I look through the log to see how it connects and i only see the two lines below, no connection from, no disconnect, nothing else, very strange, anyone seen this before

06/23/04 13:00:24:109 -- (2452) Sending email from SchwabAlerts.MarketUpdates@schwab.com to user@user.com

06/23/04 13:00:24:453 -- (2452) EMail from SchwabAlerts.MarketUpdates@schwab.com to user@user.com  was forwarded to "my IMC"

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4106
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 24 June 2004 at 12:55am

Trinidad,

Can you please zip and email us at support@logsat.com a copy of your logfile, including the email address of your user, so we can take a look?

Roberto F.
LogSat Software

Back to Top
Trinidad View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Trinidad Quote  Post ReplyReply Direct Link To This Post Posted: 24 June 2004 at 9:16am

Ive sent it over

Thanks

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4106
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 24 June 2004 at 10:02pm

Mistery solved. Schwabs is using different email addresses in the MAIL FROM command and the "From:" email header. Take a closer look at the relevant log entries below. SpamFilter reports the "1000240d9b50300018501b@bounce.quris.net" address at first since that is what was specified in the MAIL FROM command. The email headers and body is not received yet at this point, so that's all that SpamFilter can log. When the email contents is actually sent, SpamFilter is now able to read the "From:" header, and that one contains "SchwabAlerts.MarketUpdates@schwab.com". This new address is thus used from now on in the logs, thus the confusion.

Roberto F.
LogSat Software

06/23/04 13:00:23:296 -- (2780) Connection from: 66.179.26.105  -  Originating country : United States
06/23/04 13:00:23:687 -- (2780) Resolving 66.179.26.105 - email09.quris.netemail09a.quris.net
06/23/04 13:00:23:687 -- (2780) Bypassed all rules for:
user@user.com from 1000240d9b50300018501b@bounce.quris.net
06/23/04 13:00:24:078 -- (2780) EMail from 1000240d9b50300018501b@bounce.quris.net to user@user.com was queued. Size: 33 KB
06/23/04 13:00:24:109 -- (2452) Sending email from
SchwabAlerts.MarketUpdates@schwab.com to user@user.com
06/23/04 13:00:24:453 -- (2452) EMail from
SchwabAlerts.MarketUpdates@schwab.com to user@user.com  was forwarded to 10.40.8.128:26

06/23/04 14:46:11:890 -- (2248) Connection from: 66.179.26.98  -  Originating country : United States
06/23/04 14:46:12:296 -- (2248) Resolving 66.179.26.98 - email02.quris.net
06/23/04 14:46:12:296 -- (2248) Bypassed all rules for:
user@user.com from 1007040d9a04700045103b@bounce.quris.net
06/23/04 14:46:12:578 -- (2248) EMail from 1007040d9a04700045103b@bounce.quris.net to user@user.com was queued. Size: 33 KB
06/23/04 14:46:12:593 -- (2508) Sending email from
SchwabAlerts.MutualFunds@Schwab.com to user@user.com
06/23/04 14:46:12:640 -- (2248) Disconnect
06/23/04 14:46:12:765 -- (2508) EMail from
SchwabAlerts.MutualFunds@Schwab.com to user@user.com  was forwarded to 10.40.8.128:26

06/23/04 19:15:08:828 -- (2340) Connection from: 66.179.26.106  -  Originating country : United States
06/23/04 19:15:09:171 -- (2340) Resolving 66.179.26.106 - email10a.quris.netemail10.quris.net
06/23/04 19:15:09:171 -- (2340) Bypassed all rules for:
user@user.com from 1006240da076200086328b@bounce.quris.net
06/23/04 19:15:09:500 -- (2340) EMail from 1006240da076200086328b@bounce.quris.net to user@user.com was queued. Size: 26 KB
06/23/04 19:15:09:531 -- (2876) Sending email from
SchwabAlerts.MyPortfolio@Schwab.com to user@user.com
06/23/04 19:15:09:640 -- (2340) Disconnect
06/23/04 19:15:09:703 -- (2876) EMail from
SchwabAlerts.MyPortfolio@Schwab.com to user@user.com  was forwarded to 10.40.8.128:26

Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 1.023 seconds.