RE: [Declude.JunkMail] Quick Stats for Declude's kill list:
The following is a quick report from an application we are working on. Hopefully this will tell us how effective our kill list is and what addresses can be removed after X amount of time. It should be obvious as to what addresses are not being used. We will post an update once more time goes by. Regards, Tom Image`fx Report ID Version 1.00b Detailed Report for: 08/02/2002 03:54:39 Log file examined: N:\IMAIL\spool\dec0802.log Unique Message Count: 401 Unique Identifier Count: 43 ID-07292002-002 failed: 1 ID-07262002-052 failed: 4 ID-07262002-014 failed: 13 ID-07262002-030 failed: 17 ID-07262002-018 failed: 5 ID-07262002-004 failed: 3 ID-07262002-050 failed: 1 ID-07282002-049 failed: 2 ID-07262002-040 failed: 1 ID-07262002-038 failed: 1 ID-07282002-043 failed: 5 ID-07262002-039 failed: 6 ID-07282002-030 failed: 2 ID-07262002-010 failed: 4 ID-07282002-032 failed: 1 ID-07262002-049 failed: 2 ID-07282002-034 failed: 1 ID-07312002-003 failed: 2 ID-07292002-028 failed: 1 ID-07262002-022 failed: 3 ID-07312002-027 failed: 1 ID-07262002-017 failed: 5 ID-07292002-034 failed: 2 ID-07312002-010 failed: 1 ID-07262002-019 failed: 2 ID-07262002-031 failed: 3 ID-07312002-008 failed: 1 ID-07282002-036 failed: 1 ID-07282002-001 failed: 1 ID-07282002-040 failed: 3 ID-07262002-006 failed: 1 ID-07302002-022 failed: 1 ID-07262002-034 failed: 1 ID-07262002-003 failed: 12 ID-08012002-023 failed: 2 ID-07262002-005 failed: 4 ID-07262002-025 failed: 1 ID-08012002-000 failed: 1 ID-07302002-021 failed: 1 ID-08012002-010 failed: 1 ID-07292002-025 failed: 1 ID-07312002-015 failed: 1 ID-07292002-023 failed: 1 Total failure of all Identifiers: 123 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Quick Stats for Declude's kill list:
This will be great! Thanks Tom, for your great work. Eddie Cornejo, Sys Admin Tom Rowe Associates 956-412-6600 Ext.10 Toll Free USA 888-866-7693 Toll Free Canada 877-866-7693 http://www.tomrowe.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Tom Sent: Friday, August 02, 2002 3:07 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Quick Stats for Declude's kill list: The following is a quick report from an application we are working on. Hopefully this will tell us how effective our kill list is and what addresses can be removed after X amount of time. It should be obvious as to what addresses are not being used. We will post an update once more time goes by. Regards, Tom Image`fx Report ID Version 1.00b Detailed Report for: 08/02/2002 03:54:39 Log file examined: N:\IMAIL\spool\dec0802.log Unique Message Count: 401 Unique Identifier Count: 43 ID-07292002-002 failed: 1 ID-07262002-052 failed: 4 ID-07262002-014 failed: 13 ID-07262002-030 failed: 17 ID-07262002-018 failed: 5 ID-07262002-004 failed: 3 ID-07262002-050 failed: 1 ID-07282002-049 failed: 2 ID-07262002-040 failed: 1 ID-07262002-038 failed: 1 ID-07282002-043 failed: 5 ID-07262002-039 failed: 6 ID-07282002-030 failed: 2 ID-07262002-010 failed: 4 ID-07282002-032 failed: 1 ID-07262002-049 failed: 2 ID-07282002-034 failed: 1 ID-07312002-003 failed: 2 ID-07292002-028 failed: 1 ID-07262002-022 failed: 3 ID-07312002-027 failed: 1 ID-07262002-017 failed: 5 ID-07292002-034 failed: 2 ID-07312002-010 failed: 1 ID-07262002-019 failed: 2 ID-07262002-031 failed: 3 ID-07312002-008 failed: 1 ID-07282002-036 failed: 1 ID-07282002-001 failed: 1 ID-07282002-040 failed: 3 ID-07262002-006 failed: 1 ID-07302002-022 failed: 1 ID-07262002-034 failed: 1 ID-07262002-003 failed: 12 ID-08012002-023 failed: 2 ID-07262002-005 failed: 4 ID-07262002-025 failed: 1 ID-08012002-000 failed: 1 ID-07302002-021 failed: 1 ID-08012002-010 failed: 1 ID-07292002-025 failed: 1 ID-07312002-015 failed: 1 ID-07292002-023 failed: 1 Total failure of all Identifiers: 123 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] HOLD AND ALERT Not Working For Me
WEIGHTA10 ALERT WEIGHT10HOLD I want to alert and hold the message, but it does not seem that this combination of actions works together. I know the alert portion is working, because I can trigger it with rsp set off WEIGHTA10 Any thoughts on how I can accomplish what I want? You can't use both the HOLD and ALERT actions together. The ALERT action is designed to both send a pseudo-bounce and deliver the E-mail, while the HOLD action is designed to quarantine the E-mail. Unfortunately, you can do one without breaking the other (if you quarantine it, it won't get delivered; if you deliver it, it won't get quarantined), so the actions can't be used together. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] What Action Do you take?
I am sure most people use the weighting system. For the most part you have certain weights were you know that 99% of the mail triggering that weight is spam. Do you BOUNCE, HOLD, Or DELETE? Right now I am using HOLD, but was considering switching that to BOUNCE. There are defiantly some pro's and con's to both. Any thoughts. Darrell --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HOLD AND ALERT Not Working For Me
Hopefully, in the future you might be able to build in something along the lines of that. My thought was to quarantine the suspected spam and send an alert back to the user. If by some chance it was legitimate mail then I would be able to add it back to the queue. We have had requests for a BOUNCE and HOLD action, which I believe is what you are looking for. That is something that we will be considering for a future release. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] What Action Do you take?
If you are 99% certain that an E-mail is spam, the BOUNCE action usually has a major con: 99% of spammers use a fake return address, so you will be doing a huge amount of work (re-trying tons of bounce messages, and sending lots of bounces to innocent people) for a small benefit (alerting those 1% that their mail was blocked). And I am about to move WEIGHT15 to Delete instead of BOUNCE because of the flood of bounce messages. The ones that come back with: 553 sorry, that domain isn't in my list of allowed rcpthosts or just Connection refused I am blacklisting completely. But the hundreds of postmaster messages from bad domains is getting real old real fast... Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude's Kill list update 08/02/02
Here is an update for the kill list for 08/02/02 - Even though each address is checked, we strongly suggest you use it at your own risk. The entire list can be downloaded from the following URL: http://www.imagefxonline.net/apps/delog/fromfile.txt Regards, Tom Image`fx --- .bluerockdove.com ID-08022002-000 .ireaye.com ID-08022002-001 .rapid-e.netID-08022002-002 .iwon.com ID-08022002-003 .tigeronline.comID-08022002-004 @netflipmail.comID-08022002-005 .wdfm.com ID-08022002-006 @newfunpages.comID-08022002-007 @deepdiscountcd.com ID-08022002-008 @GetResponse.comID-08022002-009 @inhauser.com ID-08022002-010 .clickz.com ID-08022002-011 .dealdelivery.com ID-08022002-012 .ipo.comID-08022002-013 --- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
DORKZTL:RE: [Declude.JunkMail] What Action Do you take?
One of the neat things about Declude is it doesn't let the idiot on the other end know you deleted his spam. If he did, there are those who sit up until the wee hours trying to get around a program just cuz he can. I personally have a huge myfilter.txt file (over 1800 entries) and I have anything set to 35 or higher is lost in the cyber world. Anything over 25 but less than 34 is set to WARN and anything less is sent without recourse. Because of the file I have, I get some Weight values over 100! And I have yet to see one of them over forty that doesn't look like spam. I am sure I am losing a few but I know I am stopping a bunch. The numbers a few minutes ago were 33010 emails and 24783 spam. This is not a large amount of emails seeing as how I have not reset for 8 days. If anyone wants a copy of the myfilter.txt that I use, I would be glad to share. I would warn all first though...there are things I look for that may not be prudent for your clients. The myfilter.txt file has to be set for each individual server. I have found that it is a lot easier removing things that are not germane that gong through tons of spam and trying to find things that are. My file has been compiled from several other's list. Oh yes, it also makes my dec.log bigger. I run around a 2.5 to 3 meg file a day. After reading every post for a month I have tried to incorporate other's ideas into my global.cfg and myfilter.txt. Hope this helps and doe not confuse. Jim Rooth Klotron, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Darrell L. Sent: Friday, August 02, 2002 2:51 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] What Action Do you take? I am sure most people use the weighting system. For the most part you have certain weights were you know that 99% of the mail triggering that weight is spam. Do you BOUNCE, HOLD, Or DELETE? Right now I am using HOLD, but was considering switching that to BOUNCE. There are defiantly some pro's and con's to both. Any thoughts. Darrell --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.380 / Virus Database: 213 - Release Date: 7/24/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.380 / Virus Database: 213 - Release Date: 7/24/2002 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Newbie
Hi All, New to this list, Imail and Declude. I purchased the Pro version, and aside from entering my code, I left config files as-is. What is the recommended strategy to start using the product effectively? Thanks, George --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Newbie
Welcome to the list, George! Wow, that really is an open-ended question. It really depends on how aggressive you want to be with your spam filtering. After reading over the manual that is maintained on the Declude download site, if you can give us an idea of what you would like to accomplish we would be happy to try and assist. Regards, Bill -Original Message- From: ITG Lists [mailto:[EMAIL PROTECTED]] Sent: Friday, August 02, 2002 2:03 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Newbie Hi All, New to this list, Imail and Declude. I purchased the Pro version, and aside from entering my code, I left config files as-is. What is the recommended strategy to start using the product effectively? Thanks, George --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This e-mail was scanned for viruses by Pointshare's Virus Scanning Service] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] What Action Do you take?
I used bounce but got so many return bounces due to the poor bouncing option Imail offer Declude. We block a good 3-5k messages each day out of 8-10k total. So many spammers use fake addresses or get their service disconnected/discontinued or simply get their mailboxes full that there will be a LOT of bounces for your postmaster acct. Depending on your total mail volume and volume of spam out of it it might or might not be ok for you. Can only say test and see but if you have a LOT of mail getting delivered be ready to switch from bounce to hold very quickly. / Eje Friday, August 2, 2002, 2:50:56 PM, you wrote: DL I am sure most people use the weighting system. For the most part you DL have certain weights were you know that 99% of the mail triggering that DL weight is spam. DL Do you BOUNCE, HOLD, Or DELETE? Right now I am using HOLD, but was DL considering switching that to BOUNCE. There are defiantly some pro's DL and con's to both. DL Any thoughts. DL Darrell DL --- DL [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] DL --- DL This E-mail came from the Declude.JunkMail mailing list. To DL unsubscribe, just send an E-mail to [EMAIL PROTECTED], and DL type unsubscribe Declude.JunkMail. The archives can be found DL at http://www.mail-archive.com. DL --- DL [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 eBay UserID : macahan - Your Full Time Professionals - --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Newbie
Well, first, I see that the log file is supposed to be in spool folder. I have been running since 9 AM this morning, and I don't see the log file. I did install properly. The first thing to check is that the LOGFILE line in the \IMail\Declude\global.cfg file wasn't changed to point to an invalid drive/path (the default spool\dec.log is fine). The next thing would be to type \IMail\Declude -diag from a command prompt, to see if it says invalid activation code, which would prevent Declude JunkMail from working (if so, let me know, and I'll take care of it for you). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Newbie
Thanks Scott, The -diag did the trick. I found my files had _ instead of . in the names. So back to my question - is the stock config too aggressive - should I turn off any tests to start? Thanks! -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Friday, August 02, 2002 2:23 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Newbie Well, first, I see that the log file is supposed to be in spool folder. I have been running since 9 AM this morning, and I don't see the log file. I did install properly. The first thing to check is that the LOGFILE line in the \IMail\Declude\global.cfg file wasn't changed to point to an invalid drive/path (the default spool\dec.log is fine). The next thing would be to type \IMail\Declude -diag from a command prompt, to see if it says invalid activation code, which would prevent Declude JunkMail from working (if so, let me know, and I'll take care of it for you). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Quick Stats for Declude's kill list:08/02/01
Here is the latest report as promised, take a look at the ID's that caught the most. Please don't rely on these ID's yet because we are still trying different variations to figure out what would be the best way to implement the usage of them without having to do any major coding. All ideas and comments are welcome. (send them to us privately please, and try not to overwhelm the Declude List ;) Regards, Tom Image`fx Report ID Version 1.00b Detailed Report for: 08/02/2002 17:12:41 Log file examined: N:\IMAIL\spool\dec0802.log Unique Message Count: 1937 Unique Identifier Count: 100 ID-07292002-002 failed: 3 ID-07262002-052 failed: 12 this is .top-special-offers.com ID-07262002-014 failed: 50 this is .etracks.com ID-07262002-030 failed: 75 this is .topica.com ID-07262002-018 failed: 33 this is .mb00.net ID-07262002-004 failed: 6 this is .EASYWINNING.COM ID-07262002-050 failed: 2 ID-07282002-049 failed: 7 this is .emailfactory.com ID-07262002-040 failed: 1 ID-07262002-038 failed: 2 ID-07282002-043 failed: 11 this is .homesavingsplace.com ID-07262002-039 failed: 20 this is @link2buy.com ID-07282002-030 failed: 12 this is .bbwgroup.com ID-07262002-010 failed: 10 this is .edirectnetwork.net ID-07282002-032 failed: 4 ID-07262002-049 failed: 2 ID-07282002-034 failed: 2 ID-07312002-003 failed: 9 this is .VALOFFERS.COM ID-07292002-028 failed: 5 this is .sandbox.com ID-07262002-022 failed: 15 this is .naviantnetwork.net ID-07312002-027 failed: 1 ID-07262002-017 failed: 19 this is .mailstamp.com ID-07292002-034 failed: 7 this is .offermarket.us ID-07312002-010 failed: 7 this is .funsleuthmail.com ID-07262002-019 failed: 5 ID-07262002-031 failed: 3 ID-07312002-008 failed: 1 ID-07282002-036 failed: 10 this is .currentmail.com ID-07282002-001 failed: 4 ID-07282002-040 failed: 7 ID-07262002-006 failed: 8 this is .bb02.net ID-07302002-022 failed: 1 ID-07262002-034 failed: 1 ID-07262002-003 failed: 12 this is .DailyDealDepot.com ID-08012002-023 failed: 6 ID-07262002-005 failed: 17 this is .azoogle.com ID-07262002-025 failed: 5 ID-08012002-000 failed: 2 ID-07302002-021 failed: 1 ID-08012002-010 failed: 3 ID-07292002-025 failed: 1 ID-07312002-015 failed: 3 ID-07292002-023 failed: 15 this is .offerbymail.com ID-07262002-011 failed: 1 ID-07262002-028 failed: 13 this is .sendoutmail.com ID-07292002-036 failed: 4 ID-07262002-007 failed: 4 ID-07292002-031 failed: 3 ID-07262002-037 failed: 1 ID-08012002-006 failed: 3 ID-07262002-016 failed: 1 ID-07312002-020 failed: 4 ID-07282002-035 failed: 5 ID-07312002-000 failed: 2 ID-07262002-048 failed: 4 ID-07282002-026 failed: 2 ID-07282002-048 failed: 2 ID-07262002-044 failed: 8 this is @savingsgang.com ID-07302002-024 failed: 2 ID-07262002-002 failed: 10 this is .CYNERGEN.NET ID-07302002-010 failed: 1 ID-07262002-026 failed: 4 ID-07282002-013 failed: 4 ID-07262002-029 failed: 2 ID-07292002-019 failed: 8 this is .dailydeals4you.com ID-07312002-031 failed: 2 ID-07302002-028 failed: 2 ID-07282002-053 failed: 3 ID-07302002-027 failed: 1 ID-07292002-032 failed: 9 ID-07302002-020 failed: 1 ID-08012002-030 failed: 2 ID-07292002-022 failed: 13 this is .firstratedeals.com ID-07282002-006 failed: 2 ID-07302002-013 failed: 2 ID-07282002-039 failed: 2 ID-07292002-018 failed: 6 ID-07262002-043 failed: 1 ID-07262002-036 failed: 7 ID-07262002-023 failed: 2 ID-07302002-019 failed: 1 ID-08012002-021 failed: 1 ID-07282002-038 failed: 7 ID-07292002-017 failed: 1 ID-07312002-009 failed: 4 ID-07262002-013 failed: 1 ID-07282002-022 failed: 15 this is @jsi.co.il ID-07262002-033 failed: 6 ID-07302002-006 failed: 1 ID-07292002-030 failed: 1 ID-07262002-001 failed: 1 ID-07292002-016 failed: 1 ID-07292002-014 failed: 8 this is @xmr3.com ID-07262002-012 failed: 1 ID-07262002-041 failed: 3 ID-07282002-017 failed: 1 ID-08012002-008 failed: 2 ID-08022002-012 failed: 1 ID-07282002-047 failed: 1 ID-08022002-001 failed: 2 Total failure of all Identifiers: 622 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] What Action Do you take?
I used bounce but got so many return bounces due to the poor bouncing option Imail offer Declude. FWIW, the reason that the double bounces occur isn't because of a poor bouncing option -- it's because the bounce can't occur during the SMTP transaction (IMail doesn't allow programs to intercept the SMTP transaction). If that were possible, IMail wouldn't actually generate a bounce; the remote server would. Therefore, the bounce would never be seen on the IMail server. The remote server would try delivering it, and if it could not, would send the double bounce to the local postmaster. Note that this is exactly the same thing that would happen if you ran a gateway in front of IMail (it would accept all mail, not knowing whether it should bounce or not, and then when IMail bounced the E-mail, the gateway would have to deal with double bounces). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] What Action Do you take?
Hi Scott: FWIW, the reason that the double bounces occur isn't because of a poor bouncing option well - the ONE pending enhancement is that we can use a BETTER mailer than imail1.exe that would permit us to send from - as it should be. THEN we would not SEE any bounces. IMail doesn't allow programs to intercept the SMTP transaction Unless you add a pass through proxy that PREpends the Imail SMTP. It would monitor port 25, pass through any traffic to Imail on an alternate port - but do the DNS based lookups on the mailfrom and the helo BEFORE Imail gets control. The other option would be to hack into the Virus Gateway interface that they are using to call the Symantec AV DLLs. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Quick Stats for Declude's kill list:08/02/01
Hi Tom, Newbie question - this kill list is used in Imail program - not Declude? -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED]] On Behalf Of Tom Sent: Friday, August 02, 2002 3:00 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Quick Stats for Declude's kill list:08/02/01 Here is the latest report as promised, take a look at the ID's that caught the most. Please don't rely on these ID's yet because we are still trying different variations to figure out what would be the best way to implement the usage of them without having to do any major coding. All ideas and comments are welcome. (send them to us privately please, and try not to overwhelm the Declude List ;) Regards, Tom Image`fx Report ID Version 1.00b Detailed Report for: 08/02/2002 17:12:41 Log file examined: N:\IMAIL\spool\dec0802.log Unique Message Count: 1937 Unique Identifier Count: 100 ID-07292002-002 failed: 3 ID-07262002-052 failed: 12 this is .top-special-offers.com ID-07262002-014 failed: 50 this is .etracks.com ID-07262002-030 failed: 75 this is .topica.com ID-07262002-018 failed: 33 this is .mb00.net ID-07262002-004 failed: 6this is .EASYWINNING.COM ID-07262002-050 failed: 2 ID-07282002-049 failed: 7this is .emailfactory.com ID-07262002-040 failed: 1 ID-07262002-038 failed: 2 ID-07282002-043 failed: 11 this is .homesavingsplace.com ID-07262002-039 failed: 20 this is @link2buy.com ID-07282002-030 failed: 12 this is .bbwgroup.com ID-07262002-010 failed: 10 this is .edirectnetwork.net ID-07282002-032 failed: 4 ID-07262002-049 failed: 2 ID-07282002-034 failed: 2 ID-07312002-003 failed: 9this is .VALOFFERS.COM ID-07292002-028 failed: 5this is .sandbox.com ID-07262002-022 failed: 15 this is .naviantnetwork.net ID-07312002-027 failed: 1 ID-07262002-017 failed: 19 this is .mailstamp.com ID-07292002-034 failed: 7this is .offermarket.us ID-07312002-010 failed: 7this is .funsleuthmail.com ID-07262002-019 failed: 5 ID-07262002-031 failed: 3 ID-07312002-008 failed: 1 ID-07282002-036 failed: 10 this is .currentmail.com ID-07282002-001 failed: 4 ID-07282002-040 failed: 7 ID-07262002-006 failed: 8this is .bb02.net ID-07302002-022 failed: 1 ID-07262002-034 failed: 1 ID-07262002-003 failed: 12 this is .DailyDealDepot.com ID-08012002-023 failed: 6 ID-07262002-005 failed: 17 this is .azoogle.com ID-07262002-025 failed: 5 ID-08012002-000 failed: 2 ID-07302002-021 failed: 1 ID-08012002-010 failed: 3 ID-07292002-025 failed: 1 ID-07312002-015 failed: 3 ID-07292002-023 failed: 15 this is .offerbymail.com ID-07262002-011 failed: 1 ID-07262002-028 failed: 13 this is .sendoutmail.com ID-07292002-036 failed: 4 ID-07262002-007 failed: 4 ID-07292002-031 failed: 3 ID-07262002-037 failed: 1 ID-08012002-006 failed: 3 ID-07262002-016 failed: 1 ID-07312002-020 failed: 4 ID-07282002-035 failed: 5 ID-07312002-000 failed: 2 ID-07262002-048 failed: 4 ID-07282002-026 failed: 2 ID-07282002-048 failed: 2 ID-07262002-044 failed: 8this is @savingsgang.com ID-07302002-024 failed: 2 ID-07262002-002 failed: 10 this is .CYNERGEN.NET ID-07302002-010 failed: 1 ID-07262002-026 failed: 4 ID-07282002-013 failed: 4 ID-07262002-029 failed: 2 ID-07292002-019 failed: 8this is .dailydeals4you.com ID-07312002-031 failed: 2 ID-07302002-028 failed: 2 ID-07282002-053 failed: 3 ID-07302002-027 failed: 1 ID-07292002-032 failed: 9 ID-07302002-020 failed: 1 ID-08012002-030 failed: 2 ID-07292002-022 failed: 13 this is .firstratedeals.com ID-07282002-006 failed: 2 ID-07302002-013 failed: 2 ID-07282002-039 failed: 2 ID-07292002-018 failed: 6 ID-07262002-043 failed: 1 ID-07262002-036 failed: 7 ID-07262002-023 failed: 2 ID-07302002-019 failed: 1 ID-08012002-021 failed: 1 ID-07282002-038 failed: 7 ID-07292002-017 failed: 1 ID-07312002-009 failed: 4 ID-07262002-013 failed: 1 ID-07282002-022 failed: 15 this is @jsi.co.il ID-07262002-033 failed: 6 ID-07302002-006 failed: 1 ID-07292002-030 failed: 1 ID-07262002-001 failed: 1 ID-07292002-016 failed: 1 ID-07292002-014 failed: 8this is @xmr3.com ID-07262002-012 failed: 1 ID-07262002-041 failed: 3 ID-07282002-017 failed: 1 ID-08012002-008 failed: 2 ID-08022002-012 failed: 1 ID-07282002-047 failed: 1 ID-08022002-001 failed: 2 Total failure of all Identifiers: 622 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at
RE: [Declude.JunkMail] Newbie
Welcome. John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of ITG Lists Sent: Friday, August 02, 2002 2:03 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Newbie Hi All, New to this list, Imail and Declude. I purchased the Pro version, and aside from entering my code, I left config files as-is. What is the recommended strategy to start using the product effectively? Thanks, George --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Newbie Question about the Kill list posted here
Newbie question - this kill list is used in Imail program - not Declude? No this kill list is for Declude specifically, however, with proper manipulation it can be used with Imail's kill list. Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] What Action Do you take?
FWIW, the reason that the double bounces occur isn't because of a poor bouncing option well - the ONE pending enhancement is that we can use a BETTER mailer than imail1.exe that would permit us to send from - as it should be. THEN we would not SEE any bounces. Good point, I hadn't taken that into account. That would work better (although still send bounces to innocent victims, in the case of spam that used a forged return address). IMail doesn't allow programs to intercept the SMTP transaction Unless you add a pass through proxy that PREpends the Imail SMTP. It would monitor port 25, pass through any traffic to Imail on an alternate port - but do the DNS based lookups on the mailfrom and the helo BEFORE Imail gets control. True. That's something that we have given some though to (especially so that we can have Declude work with other mailservers). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Stock Configuration
Sorry for the newbie questions, I will read the manual again tonight ;-) Is the stock configuration too aggressive - should I turn off any tests to start? I am seeing a lot of REVERSE DNS errors and wonder how many legitimate messages would be blocked? Thanks! --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Stock Configuration
It really depends on what action you are taking on flagged messages. I think the default is hold, if I remember correctly. With that, you can simply review the held messages to see if there are any legitimate messages, and if so, you can move them back into the IMail spool for delivery. To help review and process the held messages, I would strong suggest that you download and install a really cool tool that Tom Schwarz developed called Spam Review, that he has made available for download via his web site at http://www.slsoft.com/spamreview.htm. Make sure that you run Check for updates from the File drop-down menu once you have it installed, as that will upgrade you to the latest version, 1.0.45. Also, if you what to be able to see the subject field in Spam Review, then after you do the upgrade, select Settings drop-down and check the Show subject in list check box. While you are reviewing the manual, pay attention to the weighting system, using it will give you a great deal of control and flexibility of how you trap spam messages. Look also at the filter feature. I rely on this feather very heavily as part of my weighting system. I would also suggest that you spend some time at the JunkMail archive site, which can be found at http://www.mail-archive.com. Do some searching there for how to use some of the newer features, since there have already been some discussions recently on how to implement and use them. If you have questions after your review of the manual and the archive site, post them here and we'll try to help you out. I think you will be thoroughly impressed with the product once you become a bit more familiar with it. Regards, Bill -Original Message- From: ITG Lists [mailto:[EMAIL PROTECTED]] Sent: Friday, August 02, 2002 5:13 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Stock Configuration Sorry for the newbie questions, I will read the manual again tonight ;-) Is the stock configuration too aggressive - should I turn off any tests to start? I am seeing a lot of REVERSE DNS errors and wonder how many legitimate messages would be blocked? Thanks! --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This e-mail was scanned for viruses by Pointshare's Virus Scanning Service] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Stock Configuration
Until I or others have time to give a detailed response, you should not b bounce or delete for now. John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of ITG Lists Sent: Friday, August 02, 2002 5:13 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Stock Configuration Sorry for the newbie questions, I will read the manual again tonight ;-) Is the stock configuration too aggressive - should I turn off any tests to start? I am seeing a lot of REVERSE DNS errors and wonder how many legitimate messages would be blocked? Thanks! --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Stock Configuration
Oh, and I forgot to mention another cool tool that another Tom has made available to the Declude JunkMail user community (those Tom's are great to have on distribution list, aren't they) called Delog, which will parse your JunkMail logs and generate a nicely formatted report of how each of your spam tests are doing. You can download Delog from http://www.imagefxonline.net/apps/delog. Bill -Original Message- From: ITG Lists [mailto:[EMAIL PROTECTED]] Sent: Friday, August 02, 2002 5:13 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Stock Configuration Sorry for the newbie questions, I will read the manual again tonight ;-) Is the stock configuration too aggressive - should I turn off any tests to start? I am seeing a lot of REVERSE DNS errors and wonder how many legitimate messages would be blocked? Thanks! --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This e-mail was scanned for viruses by Pointshare's Virus Scanning Service] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
