What is the Sniffer ?
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Ken IMail Sent: Sunday, February 17, 2002 10:35 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Declude great at telling problems Thanks this is what I was looking for... a direction. Ken -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Madscientist Sent: Saturday, February 16, 2002 5:48 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Declude great at telling problems We're using the following config with great results (98% Spam Free, < 0.013% False +) Note that our config is way behind what Declude is capable of... it could be much better. Important Parts of Global.cfg: SNIFFER external nonzero "d:\sniffer\sniffer.exe authentication" RBL ip4r rbl.maps.vix.com 127.0.0.2 DUL ip4r dialups.mail-abuse.org 127.0.0.3 RSS ip4r relays.mail-abuse.org 127.0.0.2 OSRELAY ip4r relays.osirusoft.com 127.0.0.2 OSDUL ip4r relays.osirusoft.com 127.0.0.3 OSSRC ip4r relays.osirusoft.com 127.0.0.4 OSSMART ip4r relays.osirusoft.com 127.0.0.5 OSSOFT ip4r relays.osirusoft.com 127.0.0.6 MAILFROM envfrom Important Parts of $default$.junkmail: SNIFFER HOLD RBL FOOTER [SPAM ALERT RBL - SENDER FOUND IN RBL DATABASE] DUL FOOTER [SPAM ALERT DUL - SENDER FOUND IN DUL DATABASE] RSS FOOTER [SPAM ALERT RSS - SENDER FOUND IN RSS DATABASE] OSRELAY FOOTER [SPAM ALERT OSRELAY - SENDER FOUND IN OSRELAY DATABASE] OSDUL FOOTER [SPAM ALERT OSDUL - SENDER FOUND IN OSDUL DATABASE] OSSRC FOOTER [SPAM ALERT OSSRC - SENDER FOUND IN OSSRC DATABASE] OSSMART FOOTER [SPAM ALERT OSSMART - SENDER FOUND IN OSSMART DATABASE] OSSOFT FOOTER [SPAM ALERT OSSOFT - SENDER FOUND IN OSSOFT DATABASE] MAILFROM HOLD SPAMROUTING HOLD BADHEADERS HOLD Hope this helps, _M | -----Original Message----- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]]On Behalf Of Tom | Sent: Saturday, February 16, 2002 2:19 AM | To: [EMAIL PROTECTED] | Subject: RE: [IMail Forum] Declude great at telling problems | | | | > I purchased Declude under the assumption that I could eliminate spam | > with it. So far all it has been good for is to notify me about spam.. | > Get a lot of those. | | | | This has been proven to be safe to me so far. | You may want to eventually add your own list of e-mail to check for. | | Part of Declude's config file: | --------------------------------------------------------------- | OSSRC ip4r relays.osirusoft.com 127.0.0.4 5 0 | OSSMART ip4r relays.osirusoft.com 127.0.0.5 5 0 | SPAMCOP ip4r bl.spamcop.net 127.0.0.2 10 0 | | MAILFROM envfrom x x 12 0 | BADHEADERS badheaders x x 8 0 | SPAMHEADERS spamheaders x x 5 0 | --------------------------------------------------------------- | | The "$default$.junkmail" file: | --------------------------------------------------------------- | OSSRC HOLD | OSSOFT HOLD | SPAMCOP HOLD | | MAILFROM HOLD | BADHEADERS ALERT | SPAMHEADERS BOUNCE or ALERT depending on your findings | PERCENT BOUNCE or DELETE | --------------------------------------------------------------- | | | You can also try DELOG to analyze what tests fail Declude's | anti-spam filter the most. The beta version can be downloaded | from the following link http://www.imagefxonline.net/apps/delog | | | Regards, | Tom | Image`fx | | | Please visit http://www.ipswitch.com/support/mailing-lists.html | to be removed from this list. | | An Archive of this list is available at: | http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ | | Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
