xwall on exchange 2003 allows messages with blocked text strings?

petepalomo
petepalomo used Ask the Experts™
on
I've got viagra blocked on the subject, headers, text fields but it looks like it's still getting by, my log below.

any advise is very much appreciated!
pete

10-02-01 00:24:13 0007: Hdr: X-Originating-IP: [78.41.5.90]
10-02-01 00:24:13 0007: Hdr: X-Originating-Email: [emailus@communityfirstfcu.com]
10-02-01 00:24:13 0007: Hdr: X-Sender: emailus@communityfirstfcu.com
10-02-01 00:24:13 0007: Hdr: Return-Path: emailus@communityfirstfcu.com
10-02-01 00:24:13 0007: Hdr: To: <emailus@communityfirstfcu.com>
10-02-01 00:24:13 0007: Hdr: Subject: RE: DISCOUNT ID92601 79% 0FF on Pfizer !
10-02-01 00:24:13 0007: Hdr: From: "VIAGRA ® Official Site" <emailus@communityfirstfcu.com>
10-02-01 00:24:13 0007: Hdr: MIME-Version: 1.0
10-02-01 00:24:13 0007: Hdr: Importance: High
10-02-01 00:24:13 0007: Hdr: Content-Type: text/html; charset="ISO-8859-1"
10-02-01 00:24:13 0007: Hdr: Content-Transfer-Encoding: 7bit


10-02-01 01:34:34 0006: Processing inbound message from a173-169.adsl.paltel.net [213.6.173.169] (84p8jf-MSG0mhdc)
10-02-01 01:34:34 0006: From: zokuvo3319@paltel.net
10-02-01 01:34:34 0006: To: jleonguerrero@communityfirstfcu.com
10-02-01 01:34:34 0006: Subj: jleonguerrero Sale Day, save 80%!
10-02-01 01:34:34 0006: Type: HTML
10-02-01 01:34:34 0006: Size: 2 K
10-02-01 01:34:34 0006: SPF: analyzing domain paltel.net
10-02-01 01:34:34 0006: SPF: result from cache
10-02-01 01:34:34 0006: Hdr: Received: from a173-169.adsl.paltel.net [213.6.173.169] by communityfirstfcu.com with XWall v3.44 ; Mon, 1 Feb 2010 01:34:34 +1000
10-02-01 01:34:34 0006: Hdr: Received: from [213.6.173.169] by [202.151.77.165] with ESMTP; Sun, 31 Jan 2010 15:34:46 +0000
10-02-01 01:34:34 0006: Hdr: From: VIAGRA (c) Brand Dealer <zokuvo3319@paltel.net>
10-02-01 01:34:34 0006: Hdr: To: jleonguerrero@communityfirstfcu.com
10-02-01 01:34:34 0006: Hdr: Subject: jleonguerrero Sale Day, save 80%!
10-02-01 01:34:34 0006: Hdr: MIME-Version: 1.0
10-02-01 01:34:34 0006: Hdr: Content-Type: text/html; charset="ISO-8859-1"
10-02-01 01:34:34 0006: Hdr: Content-Transfer-Encoding: 7bit
10-02-01 01:34:34 0006: Hist: C:\Documents and Settings\ppalomo\My Documents\xwalltemp\HIST-IN\2010\02\01\MSG0mhdc.TXT
10-02-01 01:34:34 0006: Excl: global-spf
10-02-01 01:34:34 0006: Virus: Scanning attachments...
10-02-01 01:34:34 0006: Executing C:\clamav-devel\bin\clamdscan.exe C:\XWall\TEMP\$TE0mhdd --no-summary
10-02-01 01:34:34 0006: clamdscan.exe returned no error
10-02-01 01:34:34 0006: Executing C:\clamav-devel\bin\clamdscan.exe C:\XWall\TEMP\$TE0mhde --no-summary
10-02-01 01:34:34 0006: clamdscan.exe returned no error
10-02-01 01:34:34 0006: Bayes: 63
10-02-01 01:34:34 0006: SPF: pass (domain of zokuvo3319@paltel.net designates 213.6.173.169 as permitted sender)
10-02-01 01:34:34 0006: Processing of inbound message ended
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Check your exceptions and whitelist entries in the gateway...

10-02-01 01:34:34 0006: SPF: pass (domain of zokuvo3319@paltel.net designates 213.6.173.169 as permitted sender)

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial