|
Lately we are getting SPAM mail past the filters due to Keyword Whitelist. I have two domains in the Keyword Whitelist (added from a previous issue). There are now messages that show they are passed to the receipient as "Keyword Whitelist". I find NOTHING in these messages that even closely matches the two items in the Whitelist, how can I figure out why they are passing?
Thanks
Randy
Edited these headers to tidy up the REAL info.
Microsoft Mail Internet Headers Version 2.0
Received: from XXXXexch1 ([127.0.0.1]) by XXXX.iwatsu.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 9 Nov 2010 10:38:56 -0600
Received: from 66.207.162.202 by (LogSat Software SMTP Server); Tue, 9 Nov 2010 10:38:56 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=default; d=adighedemove.net;
h=To:Message-ID:Date:Mime-Version:Subject:From:Content-type; mailto:i=info@adighedemove.net - i=info@adighedemove.net ;
bh=1koPN7z07mUtbZJ1mAeszMaENo8=;
b=CXJbxhH4KbCtN+Z1nQyVL4wdAOu8Y2rE5j9BHXDP5S/LChR80EnDs0HU97+y9oNyyvLKeDhFNYoF
2H0sLobFetRNozsPKyAV3WD0k5DADPGWEE00J4xaHZKUhgSW5+7CcmXQqoFvKvWa3w47h6udiJ1m
CjHLX4xYiiw2z0UFGGU=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=default; d=adighedemove.net;
b=MJRNG53kgYHZuoQRiX79asIOQFCl/LkilzkddVnTxTUfFS9hnS6LYw9dCYkxHNHkW7Klba0AKMkI
0FHoHtAjkH1pQ7xILx+hUNmSn9/duGcDunAWwsI+eaRcbAnwUvgkoucEE+jcehxAXXSs8CAT4kue
CZOhh6RE1Akf6/E0EfE=;
To: <XXX mailto:XXX@iwatsu.com - @iwatsu.com >
Message-ID: < mailto:12753691507079543821475@sfa202.adighedemove.net - 12753691507079543821475@sfa202.adighedemove.net >
Date: Tue, 9 Nov 2010 11:36:55 -0500
Mime-Version: 1.0
Subject: Blue Cross Blue Shield is offering Affordable Health Insurance
From: "Affordable Health-Rates" < mailto:info@adighedemove.net - info@adighedemove.net >
Content-type: multipart/alternative; boundary="_NextPart_MDIxMjY3NTY3NDcyMTQ3NWE4ZWFhMDA5YTk3YzhiNWI_"
X-Server: LogSat Software SMTP Server
X-SF-RX-Return-Path: < mailto:info@adighedemove.net - info@adighedemove.net >
X-SF-HELO-Domain: sfa202.adighedemove.net
X-SF-Originating-IP: 66.207.162.202
X-SF-WhiteListedReason: keyword whitelist match
Return-Path: mailto:info@adighedemove.net - info@adighedemove.net
X-OriginalArrivalTime: 09 Nov 2010 16:38:56.0382 (UTC) FILETIME=[9A2E19E0:01CB802C]
--_NextPart_MDIxMjY3NTY3NDcyMTQ3NWE4ZWFhMDA5YTk3YzhiNWI_
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Content-Disposition: inline
--_NextPart_MDIxMjY3NTY3NDcyMTQ3NWE4ZWFhMDA5YTk3YzhiNWI_
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 8bit
Content-Disposition: inline
|