Can't see the difference

[Stephe Campbell]

Could someone possibly explain how these two messages differ, one is
blacklisted as I expected, the other passed. This account is receiving
multiple virus attachments. The log is as follows:

Aug  6 10:40:52 kanawha sendmail[18822]: h76EeqG18822:
from=<admin at dailymail.com>, size=995, class=0, nrcpts=1,
msgid=<200308061440.h76EeqG18822 at kanawha.cnpapers.net>, proto=SMTP,
daemon=Daemon0, relay=mailgw2.cnpapers.net [216.30.205.19]
Aug  6 10:40:52 kanawha sendmail[18822]: h76EeqG18822:
to=<dmnews at dailymail.com>, delay=00:00:00, mailer=virtual, pri=30995,
stat=queued
Aug  6 10:40:54 kanawha MailScanner[8083]: Message h76EeqG18822 from
216.30.205.19 (admin at dailymail.com) to dailymail.com is spam (blacklisted)


Aug  6 10:40:56 kanawha sendmail[18839]: h76Eet918839:
from=admin at dailymail.com, size=1532, class=0, nrcpts=1,
msgid=<200308061440.h76EeqG18822 at kanawha.cnpapers.net>, relay=root at localhost
Aug  6 10:40:56 kanawha sendmail[18843]: h76Eeue18843:
from=admin at dailymail.com, size=1532, class=0, nrcpts=1,
msgid=<200308061440.h76EeqG18822 at kanawha.cnpapers.net>, relay=root at localhost
Aug  6 10:40:56 kanawha sendmail[18834]: h76EeqG18822:
to=<dmnews at dailymail.com>, delay=00:00:04, xdelay=00:00:01, mailer=virtual,
pri=120995, relay=dailymail.com, dsn=2.0.0, stat=Sent
Aug  6 10:40:56 kanawha sendmail[18839]: h76Eet918839:
from=admin at dailymail.com, size=1532, class=0, nrcpts=1,
msgid=<200308061440.h76EeqG18822 at kanawha.cnpapers.net>, relay=root at localhost
Aug  6 10:40:56 kanawha sendmail[18842]: h76Eet918839:
to=chrisd at dailymail.com, ctladdr=admin at dailymail.com (0/0), delay=00:00:01,
xdelay=00:00:00, mailer=virtual, pri=31532, relay=dailymail.com, dsn=2.0.0,
stat=Sent

FromOrTo:    admin at dailymail.com    yes

in my blacklist file. Anyone see what the difference is?


Thanks for any help.
Steve Campbell
campbell at cnpapers.com
Charleston Newspapers