Oops sorry you are right. I was thinking
REVDNS REVDNSEXISTS x x 10 0 Now I remember. I did comment out all the 3rd party mailer entries in GOOD_REVDNS.txt because frankly as soon as this was put in place for me (by Linda attempting to help me at the end of October), things got worse. Despite what you might think, much of what comes from these 3rd party mailers is considered spam by my customers. Complaints about too much spam slowed down after I edited GOOD_REVDNS. I guess you'd be right in telling me that if I want your help with this issue I shouldn't be messing with it but I was desperate. Don't get me wrong. Things are working fairly well after this kind of tuning. Except for this issue of FROM not being FROM and whitelisting not 'working'. Most of the problem here is that I've allowed certain IT-knowledgeable customers to configure their own WHITELISTFILE and they are now complaining that it doesn't work. It doesn't work because of 3rd party mailers and Declude-Sender being accurate but unhelpful. It's a pain. But based on what you are telling me, I will just continue to put in manual entries when problems are encountered. Thanks. Carl J. Carl Wagar EntreNet Communications Inc <http://www.entrenet.com> www.entrenet.com <http://www.thehostingservice.com> www.thehostingservice.com 24 Swain Ave, Ottawa, ON, K1G 4T1, Canada Email: <mailto:jcwa...@entrenet.com> jcwa...@entrenet.com, skype: jcwagar Tel: +1 613-737-7327, Fax: +1 613-737-5801 Cel: +1 613-818-8898 From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of David Barker Sent: Saturday, January 3, 2015 10:55 PM To: community@mailsbestfriend.com Subject: [MBF] Re: whitelist FROM address Not sure what you mean by lower the weight of GOOD-REVDNS ?? The GOOD-REVDNS provides credit for good senders, I am not sure I understand how people would be losing their email because of it. If anything it should allow good senders to get to the users inbox. The other option you have is to add the domain/email address to the trusted sender list (or online address book) in SM. Anything located there will be whitelisted by Declude. David On 1/3/2015 10:04 PM, Carl Wagar wrote: Ok thanks. Excellent. Will look into my own filter with the PCRE (?im:From:.+@example.com) Yes, I have GOOD-REVDNS on, but had to lower its weight because people were losing mail. People freak out more if they are losing mail than if they are getting phishing (but only because they haven't succumbed yet). I am naturally just a freaked but spoofing of all kinds. It's a balance. It's not like this would be done for many addresses. I would only add FROM addresses that were false-positives (but were not whitelistable with Declude-Sender because they are using a darn 3rd party mailer) and that aren't yet being spoofed yet (until they become a problem). People are more immediate in their freak-out if they lose a car rental agreement or purchase of any kind. I agree it's harder to do for banks - that seem targeted by spoofing. If spoofing then happens then I can say 'I told you so' to the customer. I'm wanting to apply this on a per domain basis if I can, same as I can with the existing whitelist file. 3rd party mailers are sending spam if it's perceived as spam. One man's desired informational email is another man's terrible terrible spam. It's a problem for me because I have many multiple domains on one server. Will have to see if this customer is saavy enough to send me the header. Will get back to you. Thanks. Carl J. Carl Wagar EntreNet Communications Inc www.entrenet.com <http://www.entrenet.com> www.thehostingservice.com <http://www.thehostingservice.com> 24 Swain Ave, Ottawa, ON, K1G 4T1, Canada Email: jcwa...@entrenet.com <mailto:jcwa...@entrenet.com> , skype: jcwagar Tel: +1 613-737-7327, Fax: +1 613-737-5801 Cel: +1 613-818-8898 From: community@mailsbestfriend.com <mailto:community@mailsbestfriend.com> [mailto:community@mailsbestfriend.com] On Behalf Of David Barker Sent: Saturday, January 3, 2015 9:32 PM To: community@mailsbestfriend.com <mailto:community@mailsbestfriend.com> Subject: [MBF] Re: whitelist FROM address Are you using the GOOD-REVDNS filter ? I would disagree with your statement "yes it can be spoofed but no one cares about that" this in fact would cause a huge influx of spam. How many of your customers whitelist paypal.com or amazon.com or even their own domains ? You would be opening the door to spammers.. You could create your own filter if you really are adamant about it, that would whitelist the from address here is how to do it: HEADERS WHITELIST PCRE (?im:From:.+@example.com) Rather than add lines to the PRE-TESTED filter, can you send me a header of the message that failed so I can make the appropriate changes? David On 1/3/2015 8:57 PM, Carl Wagar wrote: All I know is that the PRE-TESTED filter thinks a Thrifty is a spammer coming from this 3rd party mailer. I am concerned, any firm that uses a 3rd party mailer deserves unreliability. But my customers have no clue. It would still be nice if some kind of whitelisting was available based on stated FROM address. (yes it can be spoofed but no one cares about that). They just want to whitelist based on the address it is showing in their mailbox! I need some sort of 'WHITELIST FROMHEADERS @thrifty.com' option that uses the FROM address in the header. and WHITELISTFROMHEADERSFILE ' to have a file of these. In the meantime I have to add something the following to the pre-tested filter: HEADERS -200 PCRE (?:Thrifty Car Rental) HEADERS -200 PCRE (?:thrifty.com) My life is a constant noise of responding to these anomalies. I can forsee that within a year or two I will have to abandon all this and move everyone to godaddy, google-apps, Microsoft-exchange-online or whatever. Everyone assumes they are perfect. Better yet, I would like someone to go back in time and have a chat with SpamFord Wallace http://en.wikipedia.org/wiki/Sanford_Wallace Carl J. Carl Wagar EntreNet Communications Inc www.entrenet.com <http://www.entrenet.com> www.thehostingservice.com <http://www.thehostingservice.com> 24 Swain Ave, Ottawa, ON, K1G 4T1, Canada Email: jcwa...@entrenet.com <mailto:jcwa...@entrenet.com> , skype: jcwagar Tel: +1 613-737-7327, Fax: +1 613-737-5801 Cel: +1 613-818-8898 From: community@mailsbestfriend.com <mailto:community@mailsbestfriend.com> [mailto:community@mailsbestfriend.com] On Behalf Of David Barker Sent: Saturday, January 3, 2015 8:36 PM To: community@mailsbestfriend.com <mailto:community@mailsbestfriend.com> Subject: [MBF] Re: whitelist FROM address Hi Carl, The sender is easily forged, this is why Declude specifically looks at the sender in the envelope and not the FROM line, this is by design. The PRE-TESTED filter was/is a temporary fix for the pre-tested spam, if you are using it in conjunction with the GOOD-REVDNS you would not be facing these issues as the PRE-TESTED filter would end on legitimate 3rd party mailers (The 3rd party mailers like constant contact are legitimate email senders they are not spam, also their unsubscribe links do work.) Another option you have is to use the gauntlet http://mailsbestfriend.com/downloads/docs/Gauntlet_2.0_Instructions.pdf A third option, as you are in Canada you may want to look at Opt Out From Online Behavioural Advertising http://youradchoices.ca/choices Hope this starts you in the right direction. This is an issue that can be resolved. Let us know if you need further help. David Barker Mail's Best Friend Email : david.bar...@mailsbestfriend.com <mailto:david.bar...@mailsbestfriend.com> Web : www.mailsbestfriend.com <http://www.mailsbestfriend.com> Office : 866.919.2075 On 1/3/2015 6:48 PM, Carl Wagar wrote: Hi. I have an ongoing problem. Declude-Sender screws up whitelisting. Is there any way we can have the whitelists use the FROM address and NOT just the Declude-Sender? Whitelisting doesn't work much of the time because increasingly, firms are using mailing list services instead of their own mail servers. Everyone thinks it's a great idea to use constant-contact, mailchimp etc, to send their 'legitimate' broadcasts. The same services used to send mail people don't want. For example. Why on earth Declude-Sender be @envfrm.rsys2.com for Thrifty Rental Car reservations when they could use their own servers @thrifty.com. Stupid idea. As a result, the PRE-TESTED filter was filtering out people's rental-car reservations! The fact that everyone now wants to send marketing to everyone but never wants to get marketing from anyone, except the marketing they do want to get but but which no one else wants to get: is driving me insane. Comments? Carl J. Carl Wagar EntreNet Communications Inc www.entrenet.com <http://www.entrenet.com> www.thehostingservice.com <http://www.thehostingservice.com> 24 Swain Ave, Ottawa, ON, K1G 4T1, Canada Email: jcwa...@entrenet.com <mailto:jcwa...@entrenet.com> , skype: jcwagar Tel: +1 613-737-7327, Fax: +1 613-737-5801 Cel: +1 613-818-8898 -- David Barker Mail's Best Friend Email : david.bar...@mailsbestfriend.com <mailto:david.bar...@mailsbestfriend.com> Web : www.mailsbestfriend.com <http://www.mailsbestfriend.com> Office : 866.919.2075 Mobile : 978.518.6461 -- David Barker Mail's Best Friend Email : david.bar...@mailsbestfriend.com <mailto:david.bar...@mailsbestfriend.com> Web : www.mailsbestfriend.com <http://www.mailsbestfriend.com> Office : 866.919.2075 Mobile : 978.518.6461 -- David Barker Mail's Best Friend Email : david.bar...@mailsbestfriend.com <mailto:david.bar...@mailsbestfriend.com> Web : www.mailsbestfriend.com <http://www.mailsbestfriend.com> Office : 866.919.2075 Mobile : 978.518.6461
