[Declude.JunkMail] getting the headers from forwards?
Is there anyway that a techno-phobic person can easily forward me the headers from the spam they get so I can more easily adjust my blacklist? Or is there a way in outlook 2000 for me to look more deeply into the e-mail forwards to see the source? Thanks - Marc --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] spam gang e-mails
Below is a second mailing that I received from these people, I posted the first one to the IMAIL forum. They claim someone is "Joe-jobing" them, but I do notice that on their explanation page they are still advertising their services. That makes me suspicious.I've included the header and the message below in case anyone has the where-with-all to figure out if they are victims or BS artists. Also below is a link to their explaination. What do you guys think? http://www.pair.com/pair/support/notices/spam.html Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] Received: (qmail 31103 invoked from network); 30 Sep 2002 20:58:35 - Received: from unknown (HELO mx2.fcc.net) (63.250.0.149) by 0 with SMTP; 30 Sep 2002 20:58:35 - Received: (qmail 3304 invoked by uid 505); 30 Sep 2002 20:59:36 - Received: from unknown (HELO nzwindows2.netzinx.com) (208.10.29.20) by 0 with SMTP; 30 Sep 2002 20:59:36 - Received: from mx4.mail.yahoo.com [65.82.182.235] by nzwindows2.netzinx.com with ESMTP (SMTPD32-6.04) id A91C11018E; Wed, 25 Sep 2002 12:06:04 -0700 Message-ID: <51e00d25$23be$[EMAIL PROTECTED]> To: From: [EMAIL PROTECTED] Subject: The Spam Gang Is Back, Don't Delay Spam TodayQFQV Date: Wed, 25 Sep 2002 15:14:09 -1800 MIME-Version: 1.0 Content-Type: text/html;charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Thursday, September 26, 2002 05:14 AM To: Undisclosed Recipients Subject: The Spam Gang Is Back, Don't Delay Spam TodayQFQV Does your business need spamware programmed? Do you have existing mailers? Our mailer can email over 5 Million people per hour per server! We can help you promote your business today! Call 1-615-243-2473 [ Home | What We Do | Why Choose Us | FAQ | Pricing | About Us | Samples | Contact Us ] ÿA9 Copyright 1998-2002 Great Bird Enterprises Designed and Programmed by Banai at Great Bird Enterprises ... If you don't want to receive our email check out our partner site: www.spamcop.net .. www.spamhaus.orgOur Partnership with these two sites will guarantee you will never get shutdown for spamming because they allow us to have access to their databases to remove all anti-spammers from your mailing lists. Because we also mail their casinos and various other products for them. ##random## --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Blacklist not working as expected
I have one user who is getting absolutely hammered by spam. Last night I went through her mailbox and added many of the domains that she was getting spam from to my blacklist.txt file. The action have configured for that test is delete. It currently works as I can scan through the log and find e-mails that have failed the blacklist test and do get deleted.Now I checked her mailbox this morning and some of the domains that were listed were still able to send her mail. What am I doing wrong or missing? I am using Declude 1.62 beta and I have no per Domain\users settings. Thanks - Marc --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Blacklist not working as expected
Scott, After reprinting the Junkmail manual I see why am only having partial success. I have been using the "from" domains in the format @emailoffers.com (occasionally using the format deals-central.com - to catch 10.dealscentral as well as 20.dealscentral). So I suppose since the "from" and or "reply to" addresses are often going to be different than the X-declude sender (which I don't see in the e-mail headers? I'd have to dig through the I-mail logs to find this?) I'm really only "blacklisting" those that happen to be the same. I have since added most of the e-mail address that were in the blacklist file to the SMTP KILL list in IMAIL, which says that it checks the from address. Lets see if that helps. Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Tuesday, November 19, 2002 12:39 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Blacklist not working as expected >I have one user who is getting absolutely hammered by spam. Last night I >went through her mailbox and added many of the domains that she was getting >spam from to my blacklist.txt file. What domains did you add? Domains from the "From:" address (which Declude JunkMail doesn't check), the "Reply-To:" address (which Declude JunkMail doesn't check), the HELO/EHLO text (which Declude JunkMail checks in filters), or the return address (from the "X-Declude-Sender:" header or the IMail log file) which a Declude JunkMail "sender blacklist" will catch? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Blacklist not working as expected
Patrick, Thanks. I found where that was #XSENDER OFF, took out the pound sign and changed it to ON. Now if I can get the people who get spam to copy and forward me the header info... Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Patrick Childers Sent: Tuesday, November 19, 2002 02:44 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Blacklist not working as expected > So I suppose since the "from" > and or "reply to" addresses are often going to be different than the > X-declude sender (which I don't see in the e-mail headers? I'd have to dig > through the I-mail logs to find this?) >From the Declude Junkmail Manual: "If you want to record the name of the sender (according to the SMTP Envelope) in the E-mail headers, you can use the XSENDER configuration option. To do this, add a line to the \IMail\Declude\global.cfg file that says "XSENDER ON"." -Patrick --- [This E-mail scanned for viruses by Declude/McAfee] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Blacklist not working as expected
flailing a deceased equine... Crap. Running through the Imail log analyzer I found some of the host names I was looking for preceded by "mail1" or some other name. I added these to the kill list in the hopes that this is actually the "MAIL FROM in the SMTP envelope" that is being reported. I also found a few of the spammers, like Top-brands.com, mailservers were named "something".bluerockdove.com so I put "bluerockdove.com" in the blacklist. I also found that they were coming from an several IPs 205.205.236.245(228,243) so I created a bannedip.txt file added 205.205.236.0/24, created a "bannedip" test in the declude files and then set the action to "delete" to hopefully block anything from them in the future. Another prolific spammer was mb00.net also using several other names in the mailfrom. They seemed to be originating from 216.39.115.66 (81,68,55) so I also added 216.39.115.0/24 to bannedip.txt. Would this work just as well, better or faster if I put these IPs in the SMTP control access list? Though I didn't see an easy way to block an entire class C. Thanks for all the help and quick Reponses. Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Tuesday, November 19, 2002 02:41 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Blacklist not working as expected >After reprinting the Junkmail manual I see why am only having partial >success. I have been using the "from" domains in the format >@emailoffers.com (occasionally using the format deals-central.com - to catch >10.dealscentral as well as 20.dealscentral). So I suppose since the "from" >and or "reply to" addresses are often going to be different than the >X-declude sender (which I don't see in the e-mail headers? I'd have to dig >through the I-mail logs to find this?) I'm really only "blacklisting" those >that happen to be the same. Correct. You can use the "XSENDER ON" option (in the \IMail\Declude\global.cfg file) to get Declude JunkMail to record the return address in the headers. >I have since added most of the e-mail address that were in the blacklist >file to the SMTP KILL list in IMAIL, which says that it checks the from >address. Lets see if that helps. Sorry -- it, too, checks the return address (also called "MAIL FROM" or "From address in the SMTP envelope"). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Blacklist not working as expected
What am I doing wrong here? This is the E-mail header: Message-Id: <[EMAIL PROTECTED]> X-RBL-Warning: OSSOFT: http://spamhaus.org/SBL/sbl.lasso?query=SBL5031 X-RBL-Warning: SPAMCOP: Blocked - see http://spamcop.net/bl.shtml?64.49.243.105 X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [420e]. X-Declude-Sender: [EMAIL PROTECTED] [64.49.243.105] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. This is one entry in a file bannedips.txt located on the root of the D: drive 64.49.243.0/24 This is from my Global.cfg IPBLACKLIST fromfile D:\bannedips.txt x 5 0 This is from my $default$.junkmail IPBLACKLIST DELETE Shouldn't 64.49.243.0/24 get anything in this range, such as 64.49.243.105? Should I make the text file less than 8 characters long? If there is no HOLD reason after the IP does it fail? I only have 4 domains whitelisted so that shouldn't be an issue. Thanks - Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Tuesday, November 19, 2002 04:25 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Blacklist not working as expected >They seemed to be originating from 216.39.115.66 >(81,68,55) so I also added 216.39.115.0/24 to bannedip.txt. Would this work >just as well, better or faster if I put these IPs in the SMTP control access >list? Though I didn't see an easy way to block an entire class C. The 216.39.115.0/24 is the best way to handle the IP ranges (which in the case of a /24 is a class C range). It's slightly faster than multiple entries, and a lot easier to read. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Blacklist not working as expected
Changed it to ipfile - lets see if that does it. I knew I was missing something Thanks - Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff Sent: Tuesday, November 19, 2002 9:11 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Blacklist not working as expected >IPBLACKLISTfromfile D:\bannedips.txt x 5 0 I think it needs to be ipfile instead of fromfile. IPBLACKLIST ipfile D:\bannedips.txtx 5 0 John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] [NoX ADULT] Spamaway on Optimum online:
c:\imail\blockedmail.txt --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] [NoX ADULT] Spamaway on Optimum online:
Why was I filtered? I was trying to post a message that was "copied and pasted" from an e-mail that I received from a friend who is on optimum online. It didn't contain any adult words... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Marc Catuogno Sent: Monday, November 25, 2002 05:49 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] [NoX ADULT] Spamaway on Optimum online: c:\imail\blockedmail.txt --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Getting held mail delivered?
I have a user that was getting spamed to death. Thanks to Declude and some help from this list, I have been monitoring her e-mails and blocking a few more X-declude sender" and a few IP's everyday. Her account went from getting 80-125 spams a day to about 3-6 spams a day. I had also been using the spamcop hold action. In a over week, today is the first time legitimate e-mails were held. I copied both D4a4405430076c191.SMD and Q4a4405430076c191.SMD back to the spool directory and they have been sitting there for an hour. I found the Imail "send one" and "send all" commands and the messages were delivered. Would these ever get sent with out manual intervention? An hour seems a bit long... Marc
[Declude.JunkMail] Optonline to fight spam/viri
I just thought this might be of interest to the group: Dear Optimum Online Subscriber, In just a few days you'll notice something very different about your Optimum Online Inbox - where's the spam? That's right. The annoying clutter of unsolicited e-mail will just about vanish from your inbox, thanks to Optimum Online's new feature, SpamAway. And it's yours at no extra charge. SpamAway automatically identifies incoming spam and diverts it to a separate folder known as a "Bulk Mail" folder, available through Optimum Online Webmail. You'll have seven (7) days to look through your Bulk Mail folder and choose whichever e-mail you want to read or keep. After seven (7) days, e-mails in the Bulk Mail folder will automatically be deleted. For more information about SpamAway and Webmail, visit http://www.optonline.net/security. If you do not want your e-mails filtered for spam, you can opt out of SpamAway at any time by going to https://memberservices.optonline.net/acctms/index.html. Additionally, Optimum Online has been evaluating system-wide solutions to provide protection against e-mail-borne viruses. On Nov. 26th, we'll begin providing e-mail virus protection service at no additional cost or effort to you. You'll be notified if someone sends you an e-mail message or attachment that contains a virus. To protect the Optimum Online network and your computer, any messages containing viruses that cannot be disinfected will be deleted. When possible, messages containing viruses will be disinfected and delivered. We'll notify you via e-mail of either event. While this added feature does protect against viruses sent via e-mail, it does not protect you from viruses you may download from the Internet. For more information about how the e-mail virus protection feature works, visit http://www.optonline.net, click on "Online Security," and scroll down to the question "How does Optimum Online E-mail Virus Protection work?" We're constantly working to make PC Magazine's #1 rated* high-speed Internet service even better - so look forward to Optimum Online with SpamAway starting Nov. 26th, 2002! Sincerely, Your friends at Optimum Online A service of Cablevision --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Should postmaster or abuse accept all e-mail?
I've been using the delete action on a blacklist test for Junkmail. I also have a few ip ranges blocked. I was thinking that if anyone with any brains figured out that they were blocked that maybe they would e-mail postmaster or abuse. Should I have a separate junkmail file for one or both of these address that allows all mail through? This way there is an appeal process. Is there an RFC for this? Thanks - Marc
[Declude.JunkMail] All my list e-mail is marked as [SPAM]
I just think this is funny - I increased helobogus, mailfrom and revdns to a weight of 7 and I have a message subject marked as [SPAM] when it hits a weight of 20... guess I should lower two of them Any suggestions? Maybe I'll lower REVDNS by 2. -RBL-Warning: HELOBOGUS: Domain declude.com has no MX or A records.X-RBL-Warning: MAILFROM: Domain declude.com has no MX or A records.X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 66.189.58.123 with no reverse DNS entry.X-Declude-Sender: [EMAIL PROTECTED] [66.189.58.123]X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.X-Spam-Tests-Failed: HELOBOGUS, MAILFROM, REVDNS, WEIGHT10, WEIGHT20, Sender: [EMAIL PROTECTED]Reply-To: [EMAIL PROTECTED]X-RBL-Warning: HELOBOGUS: Domain list.ipswitch.com has no MX or A records.X-RBL-Warning: MAILFROM: Domain list.ipswitch.com has no MX or A records.X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 156.21.1.21 with no reverse DNS entry.X-Declude-Sender: [EMAIL PROTECTED] [156.21.1.21]X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.X-Spam-Tests-Failed: HELOBOGUS, MAILFROM, REVDNS, WEIGHT10, WEIGHT20,
[Declude.JunkMail] Wild card filters?
Our domain got hit over several days with different e-mails from addresses like [EMAIL PROTECTED], or some variant like [EMAIL PROTECTED] these addresses are from the Xdeclude sender field in the headers. Is there a way (or will there be) a way to add an address like this to a black list in the format kara*@hotmail.com so all variants of this will be caught? I understand that a legitimate user may have a hotmail address that begins with kara, but I'm willing to chance that. I can't think of any other way to stop these - the body of the e-mail didn't have anything I could really filter on. Thanks - Marc
[Declude.JunkMail] Error in declude log
12/28/2002 00:58:39 Q3d8f050e00781ce7 Couldn't open software\Ipswitch\IMail\Domains\rand1 [2-2] I just recently added the domain rand1 to my IMAIL. I just noticed this entry showing up repeatedly in my delcude log, even though the domain has no users I think the dns for RAND1 could be screwed somewhere. Any Ideas? Marc
RE: [Declude.JunkMail] Error in declude log
I think I answered my own question. The domain was set up as a virtual host and it was set as rand1.com. I deleted it and re-created it as mail.rand1.com. It looks as is that took care of it. If someone can tell me why sometime, that would be cool… Thanks - Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Marc Catuogno Sent: Sunday, December 29, 2002 2:25 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Error in declude log 12/28/2002 00:58:39 Q3d8f050e00781ce7 Couldn't open software\Ipswitch\IMail\Domains\rand1 [2-2] I just recently added the domain rand1 to my IMAIL. I just noticed this entry showing up repeatedly in my delcude log, even though the domain has no users I think the dns for RAND1 could be screwed somewhere. Any Ideas? Marc
RE: Re[2]: [Declude.JunkMail] Error in declude log
The Domain rand1.com was functioning and able to send and receive mail. I had one test user set up so deleting it and recreating it was no big deal. Once I set it up as mail.rand.com and put the host alias rand1.com the error disappeared. I'm glad it is working but it is always nice to know why. Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Sanford Whiteman Sent: Tuesday, December 31, 2002 12:28 AM To: R. Scott Perry Subject: Re[2]: [Declude.JunkMail] Error in declude log > I believe what happens in this case is that if IMail detects an > invalid Internet domain (such as "rand1" instead of "rand1.com" or > "mail.rand1.com"), it allows the domain to exist, but never actually > sets it up. IMail does not have any problems with unqualified host names that I know of; I often use them for testing on our lab machines. -Sandy --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Completely off topic
I also only have TS access. But I had the host company put the I386 directory on separate partition so I can add and remove components. Your host company should be able to do that, thereby allowing you to remove and re-install windows components when needed. Good luck~ Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of David Lewis-Waller Sent: Sunday, January 05, 2003 12:05 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Completely off topic Terry, I was hoping you weren't going to say that. I only has TS access the server is 280 miles away. Cheers anway David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Smart Business Lists Sent: 05 January 2003 16:50 To: David Lewis-Waller Subject: Re: [Declude.JunkMail] Completely off topic David, Sunday, January 5, 2003 you wrote: DLW> Does anyone know how to get this service (World Wide Web Publishing DLW> Service) back? 1st Try net start "world wide web publishing service" If that doesn't work I think you probably will have to reinstall - Start->Settings->Control Panel->Add/Remove Programs->Window Components Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Feeling vindictive against spammers. Revenge?
Let me first say that I'm a big fan of the Declude products and how they have significantly reduced the amount of spam my end users receive. Let me also qualify my next statement by saying that I'm not as knowledgeable as I'd like to be about all the nuances of e-mail, DNS etc. Sometimes I'm sketchy on the basics. That being said, I think that many spam battling methods seem to be passive. The e-mail and IP blacklists in Declude essentially accept the mail then delete it. What I'd like to see is a method of getting that mail destined for deletion and move it off to another mail server that would generate rejection messages (maybe on ratio of 10 or 100 to 1) to the X-Declude sender maybe even using the IP that the spam originated from. This mail server would not accept senders, it's sole purpose would be to reflect some of time and cost back to that spammers or the open relays that let spam pass. As long as spam is easy and profitable it will keep getting worse. If spammers find that it seems most of their mail is getting bounced (100's or 1000's of rejections) and if the open relays find themselves flooded with traffic they may close up (or fix it if it accidental). I'd love to be on the moral high ground and just delete or hold the mail, but I spend a couple of hours each day reviewing held mail and adding IP's and domains to black lists. It has to become more difficult and more expensive for them to do. There must me more aggressive methods... Sorry for the rant Marc --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Latest global.cfg and $default$.JunkMail files with upgrade?
Scott, I’m feeling a bit ignorant so I’m hoping that you can help. I usually try to keep up on the list and usually upgrade declude.exe within 24 hours of its release. I see discussion of some of the new features, the autowhitelist on, the comments test etc. I’ve had declude pro junkmail and virus for almost a year and have been very happy. But today I downloaded new global.cfg and default.junkmail files and saw a few lines in each that I pasted into my existing files (for example I didn’t have the BASE64 test in my file). Is there anyway I can be sure that I’m up to date? I’m interested in using the comments test and the autowhitelist, but I don’t see either of these defined in the files, nor do I see any mention of how to set up and use them in the manual. Also do I need to add any lines to the virus.cfg file to get the catches for the latest vulnerabilities? I know you are ALWAYS working, but I’m just wondering if those additions will be made to the manual so that I can take advantage of all the features. As always any help is appreciated. Thanks - Marc
RE: [Declude.JunkMail] Latest global.cfg and $default$.JunkMail files with upgrade?
Thanks. I'll back track through the list to make sure I am getting able to set up the features that I'm looking for. Peace - Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Tuesday, February 04, 2003 11:59 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Latest global.cfg and $default$.JunkMail files with upgrade? >I m feeling a bit ignorant so I m hoping that you can help. I usually try >to keep up on the list and usually upgrade declude.exe within 24 hours of >its release. I see discussion of some of the new features, the >autowhitelist on, the comments test etc. I ve had declude pro junkmail >and virus for almost a year and have been very happy. But today I >downloaded new global.cfg and default.junkmail files and saw a few lines >in each that I pasted into my existing files (for example I didn t have >the BASE64 test in my file). Is there anyway I can be sure that I m up to >date? It can be a bit tricky, as you can't simply use the latest config files (if you use them, you will wipe out any changes you have made to your config files). One option is to read this list for new features that are added. Another would be to occasionally check the new config files and see what differences there are between your version and the latest one. >I m interested in using the comments test and the autowhitelist, but I don >t see either of these defined in the files, nor do I see any mention of >how to set up and use them in the manual. That's what happens with beta features -- often, they aren't listed in the config files, and they shouldn't be listed in the manual. For new beta features, you usually need to read the posts here to see what to do to set them up. >Also do I need to add any lines to the virus.cfg file to get the catches >for the latest vulnerabilities? No. As new vulnerabilities are added, they will get detected automatically (unless you turn off the vulnerability detection completely with the "BANCRVIRUSES OFF" setting). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Error in Declude log file
This is what I’m getting in my Declude log: 02/07/2003 02:00:05 Warning: misconfiguration in following line in global.cfg file (ip4r is not an ACTION) 02/07/2003 02:00:05 DSBL ip4r list.dsbl.org * 6 0 This is the line in my global.cfg file that I copied and pasted from the latest available global.cfg file on the declude site DSBL ip4r list.dsbl.org * 6 0 MONKEYFORMMAIL ip4r formmail.relays.monkeys.com * 7 0 I have since commented it out with the # sign. Any ideas on what is wrong with that line? Thanks - Marc
RE: [Declude.JunkMail] Error in Declude log file
Thanks Scott, In my zeal to get my global file updated I copied that line from the latest global file. It appears that further down the file the same test was defined. I missed it because it was grouped with most of the tests that are commented out with a #. Thanks again - Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Friday, February 07, 2003 8:07 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Error in Declude log file >This is what I m getting in my Declude log: > >02/07/2003 02:00:05 Warning: misconfiguration in following line in >global.cfg file (ip4r is not an ACTION) >02/07/2003 >02:00:05 DSBLip4r list.dsbl.org > * 6 0 The problem is that the Declude JunkMail file can have tests with any name, so when Declude JunkMail sees a line starting with a name it doesn't recognize, it assumes that you are defining the test (like the line shown above). However, when it sees the test name again, it recognizes it as a valid test name, and assumes you are defining the outgoing action. In this case, the problem is that you have the line in there twice, something like: DSBLip4r list.dsbl.org * 6 0 DSBLip4r list.dsbl.org * 6 0 DSBLWARN In this case, if you remove the duplicate entry, the warning will go away. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Can someone help me get this blocked?
These of e-mails have been flooding my hold folder. I’m running Declude pro. I have a delete weight of 40 and a hold weight of 30. All this spam has been right between. Is there something I can add to either bump up this weight by about 7 or is there something unique in here that I can filter upon that I don’t see? It has been coming from random IPs and the sender has been “salestoday(random crap)@lycos”. I was thinking of bouncing anything from @lycos but this will result in many bounced messages that won’t get delivered. And I’m not sure I just want to delete anything from lycos. Any suggestions would be greatly appreciated. Marc Received: from lycos.com [200.131.216.16] by mail.prudentialrand.com (SMTPD32-7.13) id AD41C450058; Sat, 22 Feb 2003 16:36:01 -0500 Received: from 169.142.51.247 ([169.142.51.247]) by n1.groups.yahoo.com with QMQP; Sat, 22 Feb 2003 05:45:22 - Message-ID: <[EMAIL PROTECTED]> From: "This information will help." <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: [SPAM]ADV:Need help with Marketing your Web Site? Date: Sat, 22 Feb 2003 01:49:54 +0800 MiME-Version: 1.0 Content-Type: multipart/mixed; boundary="=_NextPart_000_00V8_70Y81A1B.C1122G33" X-Mailer: Microsoft Outlook, Build 10.0.2627 Importance: Normal X-RBL-Warning: SPAMCOP: Blocked - see http://spamcop.net/bl.shtml?200.131.216.16 X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client [a040010f]. X-RBL-Warning: BASE64: A binary encoded text or HTML section was found in this E-mail. X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 200.131.216.16 with no reverse DNS entry. X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner consistent with spam [a040010f]. X-RBL-Warning: WEIGHT25: Weight of 33 reaches or exceeds the limit of 25. X-Declude-Sender: [EMAIL PROTECTED] [200.131.216.16] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SPAMCOP, NOPOSTMASTER, BADHEADERS, BASE64, IPNOTINMX, REVDNS, ROUTING, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25, WEIGHT30 --=_NextPart_000_00V8_70Y81A1B.C1122G33
RE: [Declude.JunkMail] Can someone help me get this blocked?
Title: Message Kami, Thanks. The e-mail was already being held and I’ve upped the weight of the base 64 from 4 to 8. I’ve also added a filter file with some of the test you have suggested. I think you have saved me from having to review about 100 e-mails a day from this jerk. Thanks for this solution and your quick reply on a Sunday! Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan Sent: Sunday, February 23, 2003 12:04 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Can someone help me get this blocked? Hi again... I just realized that I forgot to mention: MAILFROM 20 CONTAINSsalestoday in your filter file will also add a weight to the email. Regards, Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno Sent: Sunday, February 23, 2003 11:26 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Can someone help me get this blocked? These of e-mails have been flooding my hold folder. I’m running Declude pro. I have a delete weight of 40 and a hold weight of 30. All this spam has been right between. Is there something I can add to either bump up this weight by about 7 or is there something unique in here that I can filter upon that I don’t see? It has been coming from random IPs and the sender has been “salestoday(random crap)@lycos”. I was thinking of bouncing anything from @lycos but this will result in many bounced messages that won’t get delivered. And I’m not sure I just want to delete anything from lycos. Any suggestions would be greatly appreciated. Marc Received: from lycos.com [200.131.216.16] by mail.prudentialrand.com (SMTPD32-7.13) id AD41C450058; Sat, 22 Feb 2003 16:36:01 -0500 Received: from 169.142.51.247 ([169.142.51.247]) by n1.groups.yahoo.com with QMQP; Sat, 22 Feb 2003 05:45:22 - Message-ID: <[EMAIL PROTECTED]> From: "This information will help." <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: [SPAM]ADV:Need help with Marketing your Web Site? Date: Sat, 22 Feb 2003 01:49:54 +0800 MiME-Version: 1.0 Content-Type: multipart/mixed; boundary="=_NextPart_000_00V8_70Y81A1B.C1122G33" X-Mailer: Microsoft Outlook, Build 10.0.2627 Importance: Normal X-RBL-Warning: SPAMCOP: Blocked - see http://spamcop.net/bl.shtml?200.131.216.16 X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client [a040010f]. X-RBL-Warning: BASE64: A binary encoded text or HTML section was found in this E-mail. X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 200.131.216.16 with no reverse DNS entry. X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner consistent with spam [a040010f]. X-RBL-Warning: WEIGHT25: Weight of 33 reaches or exceeds the limit of 25. X-Declude-Sender: [EMAIL PROTECTED] [200.131.216.16] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SPAMCOP, NOPOSTMASTER, BADHEADERS, BASE64, IPNOTINMX, REVDNS, ROUTING, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25, WEIGHT30 --=_NextPart_000_00V8_70Y81A1B.C1122G33
[Declude.JunkMail] filter file not working?
Title: Message Am I doing something wrong here? I sent an e-mail from my AOL account to test the filters suggested by Kami, it contained the following in the body: To unsubscribe, click here unsubscribe me opt-in UNSUBSCRIBE in the subject line This is what is in my filter file located in the root directory of the D drive: HEADERS 10 CONTAINS salestoday MAILFROM 20 CONTAINS salestoday BODY 3 CONTAINS To unsubscribe, click here HEADERS 4 CONTAINS OPTIN BODY 4 CONTAINS unsubscribe me BODY 4 CONTAINS opt-in BODY 4 CONTAINS UNSUBSCRIBE in the subject line This is the entry in the global.cfg file: FILTER fromfile D:\filter.txt x 4 0 This is the entry in the junkmail file: FILTER WARN This is what came through in the header of the e-mail: From: [EMAIL PROTECTED] To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: spam test MIME-Version: 1.0 Message-ID: <[EMAIL PROTECTED]> X-Mailer: Atlas Mailer 2.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] X-Declude-Sender: [EMAIL PROTECTED] [205.188.157.36] X-Declude-Spoolname: D1adb0e8200581f2a.SMD X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: NOPOSTMASTER, IPNOTINMX X-Note: This E-mail was sent from imo-d04.mx.aol.com ([205.188.157.36]). X-RCPT-TO: <[EMAIL PROTECTED]> Status: U X-UIDL: 330400571
RE: [Declude.JunkMail] filter file not working?
Scott, Thanks for the level of support you provide. I'm part of the way there, it fails the test - but I don't think it is getting the weight it should. It got the weight of 4 for failing the filter test and the weight of 3 from the first line in the filter file but not the weights from the rest of the tests: HEADERS10 CONTAINS salestoday MAILFROM 20 CONTAINSsalestoday BODY 3 CONTAINS To unsubscribe, click here HEADERS4 CONTAINS OPTIN BODY 4 CONTAINS unsubscribe me BODY 4 CONTAINS opt-in BODY 4 CONTAINS UNSUBSCRIBE in the subject line Shouldn't it have a weight of 19 and not 7 if the body of the e-mail was: To unsubscribe, click here unsubscribe me opt-in UNSUBSCRIBE in the subject line Headers from the test mail: From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: [SPAM]one mo time MIME-Version: 1.0 Message-ID: <[EMAIL PROTECTED]> X-Mailer: Atlas Mailer 2.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] X-RBL-Warning: FILTER: Message failed FILTER test (7) X-Declude-Sender: [EMAIL PROTECTED] [64.12.136.8] X-Declude-Spoolname: D249f07f600b44279.SMD X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: NOPOSTMASTER, IPNOTINMX, FILTER, -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Sunday, February 23, 2003 2:22 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] filter file not working? >This is what is in my filter file located in the root directory of the D >drive: > > > >HEADERS10 CONTAINS salestoday >... > >This is the entry in the global.cfg file: > >FILTER fromfile D:\filter.txt x 4 0 If you change this line to: FILTER filter D:\filter.txt x 4 0 then it should work. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Individual junkmail file suggestion/question?
Scott, I don’t know if it is feasible (or maybe it is already in place) to have separate junk mail files in the Imail\Declude directory like $low$.junkmail, $mid$.junkmail, $high$.junkmail so that separate filtering levels could be set for different individuals more easily. A blank text file named random.user_low.junkmail could be put in to the declude\domain subdirectory so when changes to the hold or delete weights could be made more quickly. If just low.junkmail could be put right in the users subfolder in the Imail directory that would be great. I’m sure I didn’t consider all the really difficult programming this would involve. I’ve just been adding more filter tests to increase weights and every time I do I have to make sure to up my hold weights both in the default and then also in each individual junkmail file. Marc
[Declude.JunkMail] mail held despite whitelist?
his in the entry in my GLOBAL.CFG file: WHITELIST FROM @info.weightwatchers.com This is a snippet from the e-mail that was held. I have a hold weight of 20. X-Declude-Sender: [EMAIL PROTECTED] [216.73.90.161] X-Declude-Spoolname: D51ea12ef00562fee.SMD X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: OSSRC, WIREHUB-DNSBL, IPNOTINMX, FILTER, WEIGHT10, WEIGHT20, WEIGHT15 X-Note: This E-mail was sent from out16smtp1.ddc.dartmail.net ([216.73.90.161]). Shouldn't this have been whitelisted? Marc --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] mail held despite whitelist?
It appears there WAS a damn space after the whitelist entry. Duh - Thanks Scott. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Monday, March 03, 2003 01:54 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] mail held despite whitelist? >his in the entry in my GLOBAL.CFG file: > >WHITELIST FROM @info.weightwatchers.com > >This is a snippet from the e-mail that was held. I have a hold weight of 20. > >X-Declude-Sender: [EMAIL PROTECTED] [216.73.90.161] >X-Declude-Spoolname: D51ea12ef00562fee.SMD >X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for >spam. >X-Spam-Tests-Failed: OSSRC, WIREHUB-DNSBL, IPNOTINMX, FILTER, WEIGHT10, >WEIGHT20, WEIGHT15 >X-Note: This E-mail was sent from out16smtp1.ddc.dartmail.net >([216.73.90.161]). > >Shouldn't this have been whitelisted? Yes, it looks like it should have been whitelisted. Could there be any spaces/tabs after the "WHITELIST FROM @info.weightwatchers.com"? Has other E-mail from @info.weightwatchers.com been whitelisted? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] By passing a whitelist entry?
I would like to use Junkmail to add something to the subject of any e-mail sent to one e-mail address on my domain. Unfortunately I have my own domain whitelisted so unless I remove that entry there doesn't seem to be a way to have declude add a something to the subject, the whitelist seems to take precedence. Even if I set up a different default junkmail file for this address. Is there any other way to add something to the subject of any e-mail sent to one address? Thanks- Marc --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] By passing a whitelist entry?
I know it has been said before but, "Scott you da man!" Thank you, that works exactly as I need it to. Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Tuesday, May 27, 2003 06:52 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] By passing a whitelist entry? >I would like to use Junkmail to add something to the subject of any e-mail >sent to one e-mail address on my domain. Unfortunately I have my own domain >whitelisted so unless I remove that entry there doesn't seem to be a way to >have declude add a something to the subject, the whitelist seems to take >precedence. Even if I set up a different default junkmail file for this >address. >Is there any other way to add something to the subject of any e-mail sent to >one address? The one exception to whitelisting is that whitelisted E-mails will still fail the CATCHALLMAILS test. So if you have "CATCHALLMAILS SUBJECT [SOMETHING]" (this could go in a per-user or per-domain configuration file if you want), then "[SOMETHING]" will appear in the subject, even if the E-mail is whitelisted. For tests other than the CATCHALLMAILS test (such as a filter), I can't think of any way around the whitelist. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
