Print Page | Close Window

Unfiltered Email still getting filtered

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6068
Printed Date: 22 February 2025 at 5:38pm


Topic: Unfiltered Email still getting filtered
Posted By: IKILLSPAM1
Subject: Unfiltered Email still getting filtered
Date Posted: 15 May 2007 at 9:01pm
I added an email address to the Unfiltered Email tab. a DNS blacklist blocked an email for that account. Whats up?



Replies:
Posted By: IKILLSPAM1
Date Posted: 16 May 2007 at 12:35pm
It appears its not only DNSBLs. I really need help with this. We have a customer whos gonna flip if I cant remove him from all filtering


Posted By: LogSat
Date Posted: 16 May 2007 at 1:57pm
Can you post (or email us) the section of SpamFilter's activity file that shows the incoming email, so we can see what is happening form the logs?

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: IKILLSPAM1
Date Posted: 16 May 2007 at 2:58pm

05/16/07 13:03:49:328 -- (5696) Connection from: 63.251.135.74 - Originating country : United States
05/16/07 13:03:49:468 -- (5696) Resolving 63.251.135.74 - ccm01.constantcontact.com
05/16/07 13:03:49:562 -- (5696) Mail from:
mailto:ESC1101648128490_1100650110356_11070@in.constantcontact.com - ESC1101648128490_1100650110356_11070@in.constantcontact.com
05/16/07 13:03:54:343 -- (5696) - MAPS search done... 521 The IP 63.251.135.74 is Blacklisted. Please contact via phone. Sorry 63.251.135.74 is Level 2 listed at UCEPROTECT-NETWORK. See http://www.uceprotect.net/rblcheck.php?ipr=63.251.135.74 - http://www.uceprotect.net/rblcheck.php?ipr=63.251.135.74 --
05/16/07 13:03:54:359 -- (5696) 63.251.135.74 - Mail from:
mailto:ESC1101648128490_1100650110356_11070@in.constantcontact.com - ESC1101648128490_1100650110356_11070@in.constantcontact.com To: mailto:localuser@localdomain.com - localuser@localdomain.com will be rejected
05/16/07 13:03:55:046 -- (5696) EMail from
mailto:ESC1101648128490_1100650110356_11070@in.constantcontact.com - ESC1101648128490_1100650110356_11070@in.constantcontact.com to mailto:localuser@localdomain.com - localuser@localdomain.com was queued. Size: 2 KB, 2048 bytes
05/16/07 13:03:55:062 -- (5696) Created thread (5804) to add email to quarantine
05/16/07 13:03:55:359 -- (5696) Disconnect

This has a different thread number but appears to be part of the same transaction.

05/16/07 13:03:55:062 -- (1796) Sending email from mailto:ESC1101648128490_1100650110356_11070@in.constantcontact.com - ESC1101648128490_1100650110356_11070@in.constantcontact.com to mailto:localuser@localdomain.com - localuser@localdomain.com --
05/16/07 13:03:56:203 -- (1796) EMail from
mailto:ESC1101648128490_1100650110356_11070@in.constantcontact.com - ESC1101648128490_1100650110356_11070@in.constantcontact.com to mailto:localuser@localdomain.com - localuser@localdomain.com -- was forwarded to 192.168.1.67:25

 

Is it rejecting it initially, landing it in quarantine but then actually sending it? So when I went in and saw it in quarantine and resent it, he then got another copy?



Posted By: LogSat
Date Posted: 16 May 2007 at 4:08pm
Mistery solved. The bad news is that it's a bug. The good news is that it's already fixed
In a separate post you stated you're using v3.5.3.662.
Please see the release notes for the newer build that was released a few weeks ago. I've highlighted the fix that applies to the issue you've seen:

// New to VersionNumber = '3.5.3.665';
{TODO -cFix : If a recipient is in the WhiteListedTO list, and, during the same SMTP session, the sender remains connected and sends further emails to other recipients, they were also incorrectly whitelisted}
{TODO -cFix : In SFE, using MySQL, if the connection to the DB was terminated (timeouts and/or MySQL going down), the SFE Domain List could be blank and require a restart to be visible again}
{TODO -cNew : SpamFilter performs stricter checking on MAPS RBL results to ensure a valid positive only if the response address via DNS is in the 127.0.x.x network}
{TODO -cFix : In SFE, the "Custom Domain Filters" tab should have been hidden}
{TODO -cFix : Occasional "freezes" of SpamFilter's GUI that would also halt the processing of incoming messages}
{TODO -cFix : Emails in the "Unfiltered Email" list would be delivered correctly, but the email was also being stored, by mistake, in the quarantine database}
{TODO -cFix : The event of an email whitelisted because of the "Unfiltered Email" list was not logged in the logfile}



-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: IKILLSPAM1
Date Posted: 16 May 2007 at 4:23pm

Haha. good deal Roberto thanks!

How painless is applying new releases with this software?



Posted By: LogSat
Date Posted: 16 May 2007 at 4:28pm
No hospitalization required. If you don't want to use the installation program, simply:

  • stop SpamFilter
  • unzip the distribution file to a temp directory
  • from the \Win32 directory in the above zip, copy the SpamFilter.exe and SpamFilterSvc.exe files into the SpamFilter directory, overwiting the existing ones.
  • start SpamFilter.
Usually we make available just these two executables in a separate download for registered users (although we did not do it for this release...).


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: IKILLSPAM1
Date Posted: 16 May 2007 at 4:47pm
Excellent. Thanks for your help.



Print Page | Close Window