Re: [Declude.JunkMail] v1.47 (beta) released
What is the syntax for the WHITELIST IP feature? Is it "WHITELIST IP 192.168.1.0/24" ? Thanks, Jim - Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, April 22, 2002 8:46 AM Subject: [Declude.JunkMail] v1.47 (beta) released > We have just released Declude JunkMail v1.47 ( > http://www.declude.com/junkmail/manual.htm ), a beta version. The > noticeable changes include: > > o CIDR ranges can be used in WHITELIST IP entries and ipfile test types > o WHITELIST TODOMAIN and WHITELIST TO (for the Pro version) allow easy > "opt-out" for domains/users > o New ATTACH action > > I'd love to hear what people think about the new (unique) ATTACH > action. It requires downloading a file from > http://www.declude.com/release/147/spamattach.eml , that goes in your > \IMail\Delude\ directory (which can be modified to suit your needs), and > then using "ATTACH" as the action (IE "WEIGHT20 ATTACH"). > > What this does is it delivers the spam, but in a much less obtrusive > way. Instead of a misleading subject of "Hi" or "Here's the information > you requested" or an annoying subject of "MAKE $$$MONEY$$$ NOW", you'll see > a subject of "You have spam" for all spams. By default, the body of the > E-mail will show the real subject of the E-mail, the sender's E-mail > address, and a list of the tests that failed. If you want to view the > spam, you just click a link (depending on your mail client, you may just > see the text of the original E-mail body in Notepad, or the original E-mail > in its original form). > > With this, spam becomes extremely easy to identify, easy to filter, less > annoying, and false positives are much less of a problem. > -Scott > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Declude v1.48 (beta) released
>Where can I read about the Attach Action? .. I do not see it in the >sample cfg files or the online manual? .. That's often the care with beta features. You can read about it at http://www.mail-archive.com/declude.junkmail%40declude.com/msg02039.html . -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Declude v1.48 (beta) released
Scott, Where can I read about the Attach Action? .. I do not see it in the sample cfg files or the online manual? .. Brian R. Watters Senior Director of Information Technologies Totlcom BroadBand Services [EMAIL PROTECTED] Wireless EMail: [EMAIL PROTECTED] http://www.totlcombroadband.com 559-420-0205 559-291-1895 fax Totlcom Broad Band Services LLP This message and any attachments are solely for the use of intended recipients. They may contain privileged and/or confidential information, attorney work product or other information protected from disclosure. If you are not an intended recipient, you are hereby notified that you received this email in error, and that any review, dissemination, distribution or copying of this email and any attachment is strictly prohibited. If you have received this email in error, please contact the sender and delete the message and any attachment from your system. Thank you for your cooperation. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Tuesday, April 23, 2002 10:50 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Declude v1.48 (beta) released We have just released Declude JunkMail v1.48 ( http://www.declude.com/junkmail/manual.htm ), a beta version. The noticeable changes include: o Fixed the problem with the ATTACH action and message bodies greater than 8K. o .LST files will no longer get scanned. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail scanned for viruses by Security Scan Operations Center] BEGIN:VCARD VERSION:2.1 N:Watters;Brian;R. FN:Brian Watters ([EMAIL PROTECTED]) ORG:Totlcom Broad Band Services LLP TITLE:Senior Director of IS TEL;WORK;VOICE:(559) 297-5000 TEL;CELL;VOICE:(559) 351-2603 TEL;WORK;FAX:(559) 454-7634 ADR;WORK:;;5718 East Shields Avenue;Fresno;CA.;93727;USA LABEL;WORK;ENCODING=QUOTED-PRINTABLE:5718 East Shields Avenue=0D=0AFresno, CA. 93727=0D=0AUSA URL;WORK:http://www.totlcombroadband.com EMAIL;PREF;INTERNET:[EMAIL PROTECTED] REV:2006T014223Z END:VCARD
Re: [Declude.JunkMail] Spam filter suggestion
>We've been getting a lot of spam that is sent from the same address as >the recipient. > >From: @vonl.com >To: @vonl.com > >Is there any way for Declude to catch this and say, because >67.105.169.234 is not mail.vonl.com, but the from address is an >@vonl.com address this message is spam. No, that is not possible. The first problem is that Declude only looks at the "real" to/from (from the SMTP envelope), which may be different. And, trying to figure out if the IP address is associated with your domain is tricky (but, very few people send mail to themselves, so that might not be required). However, I checked our spamtrap, and less than 1% of the spam in it had the recipient's E-mail address in the "From:" header. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Declude v1.48 (beta) released
We have just released Declude JunkMail v1.48 ( http://www.declude.com/junkmail/manual.htm ), a beta version. The noticeable changes include: o Fixed the problem with the ATTACH action and message bodies greater than 8K. o .LST files will no longer get scanned. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] v1.47 (beta) released
I wish you guys were writing the business managment software we use. Point out a significant rounding error on estimates and invoices and they promise to get it done by the next release this summer. Rob Hopkins Hopkins Mailing Services, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Chris Bone Sent: Tuesday, April 23, 2002 11:03 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] v1.47 (beta) released thanks ! I am so happy being on the cutting edge when we get fixes the same day ;) Chris Bone Web Engineer Chartway Federal Credit Union http://www.chartway.com This message contains information from Chartway Federal Credit Union which may be confidential and privileged. If you are not an intended recipient, please refrain from any disclosure, copying, distribution or use of this information and note that such actions are prohibited. If you have received this transmission in error, please notify by e-mail [EMAIL PROTECTED] >>> [EMAIL PROTECTED] 04/23/02 11:14AM >>> >The problem is that I'm seeing too many of this messages in my Declude >JunkMail log files: > >Couldn't move/copy ATTACH data file [183] >Couldn't move/copy data file [32]. Priority back to 32. This problem has been confirmed. You were correct about the size being the problem. If the ATTACH action is used on an E-mail where the body is larger the 8K, the two messages above will appear in the logs, the original E-mail will be delivered without the Declude headers, and a stray .SM$ file will appear in the spool directory. Since the E-mail gets delivered, it is safe to delete those stray .SM$ files. We should have 1.48 ready later today that will fix this problem. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] v1.47 (beta) released
thanks ! I am so happy being on the cutting edge when we get fixes the same day ;) Chris Bone Web Engineer Chartway Federal Credit Union http://www.chartway.com This message contains information from Chartway Federal Credit Union which may be confidential and privileged. If you are not an intended recipient, please refrain from any disclosure, copying, distribution or use of this information and note that such actions are prohibited. If you have received this transmission in error, please notify by e-mail [EMAIL PROTECTED] >>> [EMAIL PROTECTED] 04/23/02 11:14AM >>> >The problem is that I'm seeing too many of this messages in my Declude >JunkMail log files: > >Couldn't move/copy ATTACH data file [183] >Couldn't move/copy data file [32]. Priority back to 32. This problem has been confirmed. You were correct about the size being the problem. If the ATTACH action is used on an E-mail where the body is larger the 8K, the two messages above will appear in the logs, the original E-mail will be delivered without the Declude headers, and a stray .SM$ file will appear in the spool directory. Since the E-mail gets delivered, it is safe to delete those stray .SM$ files. We should have 1.48 ready later today that will fix this problem. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] v1.47 (beta) released
>The problem is that I'm seeing too many of this messages in my Declude >JunkMail log files: > >Couldn't move/copy ATTACH data file [183] >Couldn't move/copy data file [32]. Priority back to 32. This problem has been confirmed. You were correct about the size being the problem. If the ATTACH action is used on an E-mail where the body is larger the 8K, the two messages above will appear in the logs, the original E-mail will be delivered without the Declude headers, and a stray .SM$ file will appear in the spool directory. Since the E-mail gets delivered, it is safe to delete those stray .SM$ files. We should have 1.48 ready later today that will fix this problem. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Will this ever be possible?
The problem is, neither Declude nor Imail supports per user black lists, but Imail filters can be set per user to send mail from a domain or email address to . They don't need some fancy program to manage it though, they can always use the filter manager in Webmail. Chuck Frloick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Greg Foulks Sent: Tuesday, April 23, 2002 9:02 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Will this ever be possible? A, but make the black list based on a per user environment. So that if [EMAIL PROTECTED] no longer want mail from yahoo.com it won't bother anyone else on the mail server. If they want it changed then they will have come through the network admin. Greg Foulks, MCP NewFound Technologies, Inc. http://www.nfti.com Email: [EMAIL PROTECTED] Voice: 614.318.5036 Fax: 614.318.5005 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Tuesday, April 23, 2002 9:53 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Will this ever be possible? >Sounds like you want a program that is like SpamCop for your server, sounds >cool actually. It could integrate with Imail's black lists or Declude's. You >could use a program alias in Imail to dump to the parser. Wish I had the >time to write it. Although, it would not work if you have malicious (or clueless) users. For example, someone signs up for eBay, and starts getting marketing messages from them. "Spam!" they say, and bam! Nobody who uses eBay can use it anymore. Of course, that assumes an ISP-type environment; a business would likely have fewer issues. Then, there's the question of whether to blacklist based on the return address "makemoney$$$NOW$$$@yahoo.com", the domain "@yahoo.com", or the IP it comes from (likely the best option). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Will this ever be possible?
I agree, it should definately not be a simple 'if they submit it, add it' program, it needs to have a database involved with some form of statistics, it's not a simple project, and it would need some way of controlling false or bad reports. It would have to be a single site version of the SpamCop system, and to be fair you'd need to process the Imail logs to produce better statistics of complaints to reciepts from a remote server or address. Of course ther is always the simple but time consuming, user reports spam, admin reads it, and determines whether to manually black list it or not. May be able to make a SpamReview like program to help process reports. Lot of work even with a program. Chuck Frolick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Tuesday, April 23, 2002 8:53 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Will this ever be possible? >Sounds like you want a program that is like SpamCop for your server, sounds >cool actually. It could integrate with Imail's black lists or Declude's. You >could use a program alias in Imail to dump to the parser. Wish I had the >time to write it. Although, it would not work if you have malicious (or clueless) users. For example, someone signs up for eBay, and starts getting marketing messages from them. "Spam!" they say, and bam! Nobody who uses eBay can use it anymore. Of course, that assumes an ISP-type environment; a business would likely have fewer issues. Then, there's the question of whether to blacklist based on the return address "makemoney$$$NOW$$$@yahoo.com", the domain "@yahoo.com", or the IP it comes from (likely the best option). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Will this ever be possible?
A, but make the black list based on a per user environment. So that if [EMAIL PROTECTED] no longer want mail from yahoo.com it won't bother anyone else on the mail server. If they want it changed then they will have come through the network admin. Greg Foulks, MCP NewFound Technologies, Inc. http://www.nfti.com Email: [EMAIL PROTECTED] Voice: 614.318.5036 Fax: 614.318.5005 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Tuesday, April 23, 2002 9:53 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Will this ever be possible? >Sounds like you want a program that is like SpamCop for your server, sounds >cool actually. It could integrate with Imail's black lists or Declude's. You >could use a program alias in Imail to dump to the parser. Wish I had the >time to write it. Although, it would not work if you have malicious (or clueless) users. For example, someone signs up for eBay, and starts getting marketing messages from them. "Spam!" they say, and bam! Nobody who uses eBay can use it anymore. Of course, that assumes an ISP-type environment; a business would likely have fewer issues. Then, there's the question of whether to blacklist based on the return address "makemoney$$$NOW$$$@yahoo.com", the domain "@yahoo.com", or the IP it comes from (likely the best option). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Will this ever be possible?
>Sounds like you want a program that is like SpamCop for your server, sounds >cool actually. It could integrate with Imail's black lists or Declude's. You >could use a program alias in Imail to dump to the parser. Wish I had the >time to write it. Although, it would not work if you have malicious (or clueless) users. For example, someone signs up for eBay, and starts getting marketing messages from them. "Spam!" they say, and bam! Nobody who uses eBay can use it anymore. Of course, that assumes an ISP-type environment; a business would likely have fewer issues. Then, there's the question of whether to blacklist based on the return address "makemoney$$$NOW$$$@yahoo.com", the domain "@yahoo.com", or the IP it comes from (likely the best option). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Will this ever be possible?
Sounds like you want a program that is like SpamCop for your server, sounds cool actually. It could integrate with Imail's black lists or Declude's. You could use a program alias in Imail to dump to the parser. Wish I had the time to write it. Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Greg Foulks Sent: Tuesday, April 23, 2002 8:19 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Will this ever be possible? It would be really cool if let's say a user gets a message and it's SPAM. They could forward the message to a IMAL mailbox and declude would intercept the message scan the headers of the message and add it's self to the blacklist. Greg --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Will this ever be possible?
It would be really cool if let's say a user gets a message and it's SPAM. They could forward the message to a IMAL mailbox and declude would intercept the message scan the headers of the message and add it's self to the blacklist. Greg --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] v1.47 (beta) released
>The problem is that I'm seeing too many of this messages in my Declude >JunkMail log files: > >Couldn't move/copy ATTACH data file [183] >Couldn't move/copy data file [32]. Priority back to 32. This looks like it is a problem with the 1.47 beta -- I'll post more later as I find out more about it. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] v1.47 (beta) released
I went live with the ATTACH feature last night I love it ! Awesome ! Thanks Scott ! Chris Bone Web Engineer Chartway Federal Credit Union http://www.chartway.com This message contains information from Chartway Federal Credit Union which may be confidential and privileged. If you are not an intended recipient, please refrain from any disclosure, copying, distribution or use of this information and note that such actions are prohibited. If you have received this transmission in error, please notify by e-mail [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
