Looking for a tool that works with Outlook/Exchange.. I'd like to be able to pull all the header info out of any messages in a particular folder.. like last-hop IP, domain name, that kind of stuff. Once a week, I copy all messages sent/rev'd in the past few days into a sort folder, and then manually check them all, deleting legit emails, to see what got through my filters. What I'm left with is 100% SPAM that made it into my Exchange box. I'd like a quick way to pull out the header info from all these messages and parse it for reverse DNS, sending domains, etc...
Anyone know of something out there before I write my own ? Karl Drugge -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Asaro Sent: Tuesday, January 09, 2007 5:13 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] all_list.dat ? It has been requested of Engineering that a new all_list.dat be build ASAP. You should have this in your hands soon. Chris A. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, January 09, 2007 4:30 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] all_list.dat ? David (or any Declude people that may be reading), Any chance of seeing a new all_list.dat any time soon, considering the current one has a date of 6 Jul 06, and considering the additional input from this recent thread? I'm starting to see false positives caused by weights I previously gave to "IANA Reserved" and "RIPE Unlisted". Gary -------- Original Message -------- > From: "Jay Sudowski - Handy Networks LLC" <[EMAIL PROTECTED]> > Sent: Thursday, January 04, 2007 5:57 PM > To: declude.junkmail@declude.com > Subject: RE: [Declude.JunkMail] [IANA Reserved] ? > > Indeed. When we obtained our own IP space from ARIN, it was from 72/8, > which had been released only about 6 months prior to it being assigned > to us. You wouldn't believe the number of networks that were running > with 72/8 in their bogons list and were entirely blocking traffic from > our network... > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Darrell ([EMAIL PROTECTED]) > Sent: Thursday, January 04, 2007 3:47 PM > To: declude.junkmail@declude.com > Subject: Re: [Declude.JunkMail] [IANA Reserved] ? > > > I would be very careful with this. IANA just released (I believe in > October) 96/8, 97/8, 98/8, 99/8. With the all_list.dat not being > updated > frequently I would tred very lightly in this area. Part of 96/8 has > been > handed out. > > Darrell > ------------------------------------------------------------------------ > Check out http://www.invariantsystems.com for utilities for Declude And > Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, > MRTG > Integration, and Log Parsers. > > ----- Original Message ----- > From: "S.J.Stanaitis" <[EMAIL PROTECTED]> > To: <declude.junkmail@declude.com> > Sent: Thursday, January 04, 2007 3:29 PM > Subject: RE: [Declude.JunkMail] [IANA Reserved] ? > > > Nice. > > Thanks, > Sam > > SJ.Stanaitis - Network Administrator > Decorative Product Source E-commerce Network > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Scott > Fisher > Sent: Thursday, January 04, 2007 3:16 PM > To: declude.junkmail@declude.com > Subject: Re: [Declude.JunkMail] [IANA Reserved] ? > > sending hop only: COUNTRY 0 IS *R > > or > > all hops: COUNTRIES 0 CONTAINS *R > > ----- Original Message ----- > From: "S.J.Stanaitis" <[EMAIL PROTECTED]> > To: <declude.junkmail@declude.com> > Sent: Thursday, January 04, 2007 1:55 PM > Subject: RE: [Declude.JunkMail] [IANA Reserved] ? > > > > Holy [EMAIL PROTECTED], that answers one question! > > > > Any idea how to incorporate the "IANA Reserved" thing into Declude? > > > > Thanks, > > Sam > > > > SJ.Stanaitis - Network Administrator > > Decorative Product Source E-commerce Network > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Scott > > Fisher > > Sent: Thursday, January 04, 2007 2:37 PM > > To: declude.junkmail@declude.com > > Subject: Re: [Declude.JunkMail] [IANA Reserved] ? > > > > Here are my december totals for the odd-balls (COUNTRY IS test) > > > > Country Name CountOfMessageID DEL SPAM HELD SPAM Poss SPAM OK > > APNIC Unlisted 97 97 0 0 0 > > ARIN Unlisted 1426 1395 12 1 18 > > Central/South America 89 89 0 0 0 > > European Union 1804 1674 8 1 121 > > IANA Reserved 11677 11428 91 118 39 > > Multi-Regional 23 19 1 1 2 > > RIPE Unlisted 1332 1330 1 1 0 > > Unknown 4018 3938 13 3 64 > > > > > > # > > # Special Codes > > # > > #*1 Multi-Regional > > #*2 Europe > > #*3 North America > > #*4 Central/South America > > #*5 Pacific Rim > > #*A ARIN Unlisted (North America/South Africa) > > #*B Public Data Network > > #*E RIPE Unlisted (Europe, North Africa, Middle East) > > #*I Private IP > > #*L Loopback > > #*M Multicast > > #*P APNIC Unlisted (Asia Pacific) > > #*R IANA Reserved > > #*U Unknown > > > > > > ----- Original Message ----- > > From: "S.J.Stanaitis" <[EMAIL PROTECTED]> > > To: <declude.junkmail@declude.com> > > Sent: Thursday, January 04, 2007 1:02 PM > > Subject: [Declude.JunkMail] [IANA Reserved] ? > > > > > >>I currently tag each incoming email from a country other than the US > (with > >> few exceptions) with a weight of 10. Some emails come in with [IANA > >> Reserved] in the X-Country-Chain header and as such these emails > >> (originating in places like Amsterdam, etc) aren't affected by the > >> FILTER-COUNTRY filter. Any way to add a weight to those IP's too? > Do > >> American IP's show up as IANA Reserved ever? > >> > >> Thanks, > >> Sam > >> > >> SJ.Stanaitis - Network Administrator > >> Decorative Product Source E-commerce Network > >> > >> > >> > >> > >> --- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
