Right, we only see it from Outlook and Outlook Express clients that send directly to our mail servers. Our users have WHITELIST AUTH, so this detects mailers that don't send through another mail server, but connect to us directly.
This tends to be mostly spam, but we do have a special whitelist for the CMDSPACE test only that we use to counter the weight for that test for certain sending domains or addresses. Darin. ----- Original Message ----- From: "Darrell ([EMAIL PROTECTED])" <[EMAIL PROTECTED]> To: <Declude.JunkMail@declude.com> Sent: Wednesday, August 24, 2005 1:00 PM Subject: Re: [Declude.JunkMail] CMDSPACE Generally in regards to this test poorly written spam software and some non compliant clients fail this test - but legit mail servers often do not. Up to this point I have not seen a false positive from a legit mail server. Have others? Usually folks sending mail to you will push it through their own mail servers which tends to fix the end client issues before the mail gets to you. Darrell ------------------------------------------------------------------------ Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Kevin Rogers writes: > By the way, I do use WHITELIST AUTH for my own users, but the CMDSPACE > test flags emails sent from other people to our users. So I guess I don't > understand how WHITELIST AUTH would help in that situation. > > > Darrell ([EMAIL PROTECTED]) wrote: > >>> My users get a lot of legit emails that get flagged with both these and >>> then end up with a weight of 12 and get put in their bulk folder. I >>> mean a lot. Just regular emails sent from Aetna.com, Principal.com, >>> other big insurance carriers. Should I reduce the weight of them? Are >>> they working like they should? Anyone else see this a lot? >> >> >> If you find on your system that the ratio of legit/non-legit messages for >> a particular test is more in favor of legit you should absolutly lower >> the weight of those tests. For my system the CMDSPACE is a very >> effective test since I can do WHITELIST AUTH / WHITELIST my ip blocks of >> clients. Outlook is a nasty example of a client that will fail the >> CMDSPACE test. In regards to comments I have not run across any issues >> with many false positives with that test. However, I did tweak the # of >> comments to a higher value than the default so that may help. >> Darrell >> ------------------------------------------------ >> DLAnalyzer - Comprehensive reporting utility for Declude Junkmail and >> Virus. Download it today - http://www.invariantsystems.com >> --- >> This E-mail came from the Declude.JunkMail mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.JunkMail". The archives can be found >> at http://www.mail-archive.com. >> --- >> [This E-mail was scanned for viruses.] >> >> >> > --- > [This E-mail was scanned for viruses.] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
