Re: [Declude.JunkMail] Default Junkmail settings

[Matt]

Joe,

It's the natural place to start, and for those that want to get deeper
into things, there's plenty of potential for improvement.  Keep
tinkering, that's the best way to learn as there is no single best
formula on how to configure Declude.

Matt



Joe Raykiewicz wrote:

  
  
  
  Is the $default.junkmail and
global.cfg files that come with Junkmail the recommended settings?  Is
this what I should use for my installation?  I have it setup and have
been playing with all the settings, basically tinkering to learn.
   
  Thanks,
  Joe


-- 
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=

Re: [Declude.JunkMail] Question about these headers....

[Matt]

The first message's source is well listed and should have been tagged 
better if your tests were in the default configuration, and many would 
probably have thrown every more at it.

   http://www.dnsstuff.com/tools/ip4r.ch?ip=205.138.96.41

The second E-mail looks to be severely munged and has no Declude 
headers.  Check your IMail and JunkMail logs for this message and post 
what you find.  I'm guessing that IMail didn't pass this to Declude, and 
this might have occurred while rebooting the machine or restarting the 
SMTP service (a known bug in IMail).

It does really help knowing more than just what's on the surface, 
especially if you are going to give someone good advise, so take what I 
have said with a grain of salt.

Matt



Bennie wrote:

Hello all,

I just received an email with the following headers...

Received: from mx1.myoffer2u.com [205.138.96.41] by mail.pepperlink.net with
ESMTP
 (SMTPD32-8.05) id A8B120AA00BA; Tue, 09 Mar 2004 17:44:01 -0500
Received: from centramedia.net (205.138.96.41) by mx1.myoffer2u.com
(PowerMTA(TM) v1.5); Tue, 9 Mar 2004 14:51:09 -0800 (envelope-from
<[EMAIL PROTECTED]>)
From: terry  <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: hey  bgc No Dor's Appointment Needed  3/9/2004 14:51:09
Reply-To: terry <[EMAIL PROTECTED]>
Date: 09 Mar 2004 14:51:09 -0800
Message-ID: <[EMAIL PROTECTED]>
MTA: YmdjQHBlcHBlcmxpbmsubmV0
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 205.138.96.41
with no reverse DNS entry.
X-RBL-Warning: WEIGHT10: Weight of 11 reaches or exceeds the limit of 10.
X-Declude-Sender: [EMAIL PROTECTED] [205.138.96.41]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
spam.
X-Spam-Tests-Failed: AHBL, REVDNS, WEIGHT10 [11]
X-Note: QueInControl: D48b120aa00ba47ae.SMD (1)
X-Spam-Tests-Failed: AHBL, REVDNS, WEIGHT10 [11]
X-Note: RDNS Real Origin: [No Reverse DNS][205.138.96.41]
X-Note: SMTP Real From: [EMAIL PROTECTED]
X-Note: SMTP Real To: [EMAIL PROTECTED]
X-Note: This E-mail was sent from [No Reverse DNS] ([205.138.96.41]).
X-RBL-Warning: Total spam weight of this E-mail is 11.
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 378703842
Right after this I received an email that had no to and no from and here is
the total email with headers
From:
Date: Tue,  9 Mar 2004 17:44:02 -0500
X-RCPT-TO: perlink.net>
Status: U
X-UIDL: 378703843
IMA44c48b2.404e/mail.pepperlink.net
Content-Type: text/plain; charset=us-ascii
Message delivered successfully to [EMAIL PROTECTED]

IMA44c48b2.404e/mail.pepperlink.net
Content-Type: message/delivery-status
Reporting-MTA: mail.pepperlink.net
Final-Recipient: rfc8222;[EMAIL PROTECTED]
Action: delivered
Status: 2.0.0
IMA44c48b2.404e/mail.pepperlink.net
Content-Type: message/rfc822
Received: from mx1.myoffer2u.com [205.138.96.41] by mail.pepperlink.net with
ESMTP
 (SMTPD32-8.05) id A8B120AA00BA; Tue, 09 Mar 2004 17:44:01 -0500
Received: from centramedia.net (205.138.96.41) by mx1.myoffer2u.com
(PowerMTA(TM) v1.5); Tue, 9 Mar 2004 14:51:09 -0800 (envelope-from
<[EMAIL PROTECTED]>)
From: terry  <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: hey  bgc No Dor's Appointment Needed  3/9/2004 14:51:09
Reply-To: terry <[EMAIL PROTECTED]>
Date: 09 Mar 2004 14:51:09 -0800
Message-ID: <[EMAIL PROTECTED]>
MTA: YmdjQHBlcHBlcmxpbmsubmV0
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 205.138.96.41
with no reverse DNS entry.
IMA44c48b2.404e/mail.pepperlink.net--
Could someone let me know what is going on here.. and could I add
myoffer2u.com to my kill list and catch these...
Bennie



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
 

--
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Question about these headers....

[Bennie]

Hello all,

I just received an email with the following headers...

Received: from mx1.myoffer2u.com [205.138.96.41] by mail.pepperlink.net with
ESMTP
  (SMTPD32-8.05) id A8B120AA00BA; Tue, 09 Mar 2004 17:44:01 -0500
Received: from centramedia.net (205.138.96.41) by mx1.myoffer2u.com
(PowerMTA(TM) v1.5); Tue, 9 Mar 2004 14:51:09 -0800 (envelope-from
<[EMAIL PROTECTED]>)
From: terry  <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: hey  bgc No Dor's Appointment Needed  3/9/2004 14:51:09
Reply-To: terry <[EMAIL PROTECTED]>
Date: 09 Mar 2004 14:51:09 -0800
Message-ID: <[EMAIL PROTECTED]>
MTA: YmdjQHBlcHBlcmxpbmsubmV0
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 205.138.96.41
with no reverse DNS entry.
X-RBL-Warning: WEIGHT10: Weight of 11 reaches or exceeds the limit of 10.
X-Declude-Sender: [EMAIL PROTECTED] [205.138.96.41]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
spam.
X-Spam-Tests-Failed: AHBL, REVDNS, WEIGHT10 [11]
X-Note: QueInControl: D48b120aa00ba47ae.SMD (1)
X-Spam-Tests-Failed: AHBL, REVDNS, WEIGHT10 [11]
X-Note: RDNS Real Origin: [No Reverse DNS][205.138.96.41]
X-Note: SMTP Real From: [EMAIL PROTECTED]
X-Note: SMTP Real To: [EMAIL PROTECTED]
X-Note: This E-mail was sent from [No Reverse DNS] ([205.138.96.41]).
X-RBL-Warning: Total spam weight of this E-mail is 11.
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 378703842

Right after this I received an email that had no to and no from and here is
the total email with headers

From:
Date: Tue,  9 Mar 2004 17:44:02 -0500
X-RCPT-TO: perlink.net>
Status: U
X-UIDL: 378703843

IMA44c48b2.404e/mail.pepperlink.net
Content-Type: text/plain; charset=us-ascii

Message delivered successfully to [EMAIL PROTECTED]

IMA44c48b2.404e/mail.pepperlink.net
Content-Type: message/delivery-status

Reporting-MTA: mail.pepperlink.net
Final-Recipient: rfc8222;[EMAIL PROTECTED]
Action: delivered
Status: 2.0.0

IMA44c48b2.404e/mail.pepperlink.net
Content-Type: message/rfc822

Received: from mx1.myoffer2u.com [205.138.96.41] by mail.pepperlink.net with
ESMTP
  (SMTPD32-8.05) id A8B120AA00BA; Tue, 09 Mar 2004 17:44:01 -0500
Received: from centramedia.net (205.138.96.41) by mx1.myoffer2u.com
(PowerMTA(TM) v1.5); Tue, 9 Mar 2004 14:51:09 -0800 (envelope-from
<[EMAIL PROTECTED]>)
From: terry  <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: hey  bgc No Dor's Appointment Needed  3/9/2004 14:51:09
Reply-To: terry <[EMAIL PROTECTED]>
Date: 09 Mar 2004 14:51:09 -0800
Message-ID: <[EMAIL PROTECTED]>
MTA: YmdjQHBlcHBlcmxpbmsubmV0
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 205.138.96.41
with no reverse DNS entry.
IMA44c48b2.404e/mail.pepperlink.net--


Could someone let me know what is going on here.. and could I add
myoffer2u.com to my kill list and catch these...

Bennie




---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Default Junkmail settings

[Joe Raykiewicz]

Is the $default.junkmail and global.cfg files that 
come with Junkmail the recommended settings?  Is this what I should use for 
my installation?  I have it setup and have been playing with all the 
settings, basically tinkering to learn.
 
Thanks,
Joe

Re: [Declude.JunkMail] Bonded senders

[Dan Geiser]

Paul,
Here's what Cyan said about a month ago...

-
From: "Cyan Callihan" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Date: Sun, 18 Jan 2004 13:19:07 -0800
Subject: Re: [Declude.JunkMail] BONDEDSENDER, spam hit on Virtumundo

Please send all of your complaints...to [EMAIL PROTECTED]

I will investigate.

Cyan
-

Take Care,
Dan Geiser
[EMAIL PROTECTED]

- Original Message - 
From: "Paul Fuhrmeister" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, February 20, 2004 9:19 AM
Subject: [Declude.JunkMail] Bonded senders


> Looking on the bondedsender.com web site, I see no where to report things
> like this:
>
> Received: from adsl-68-78-114-74.dsl.emhril.ameritech.net
> (adsl-68-78-114-74.dsl.emhril.ameritech.net [68.78.114.74])
> Received: from ebay.com (data.ebay.com [66.135.195.180])
> From: eBay Service <[EMAIL PROTECTED]>
> Subject: Ebay Account Update
> X-RAV-AntiVirus: This message has been scanned for viruses on
> adsl-68-78-114-74.dsl.emhril.ameritech.net
> X-RBL-Warning: DSBL: http://dsbl.org/listing?ip=68.78.114.74
> X-RBL-Warning: SORBS-DUHL: Dynamic IP Address See:
> http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=68.78.114.74
> X-RBL-Warning: SPAMCOP: Blocked - see
> http://www.spamcop.net/bl.shtml?68.78.114.74
> X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED]
> X-RBL-Warning: BONDEDSENDER: IronPort Bonded Sender -
> http://www.bondedsender.com
> X-RBL-Warning: SPAM-DOMAINS: Spamdomain '@ebay.com' found: Address of
> [EMAIL PROTECTED] sent from invalid
> adsl-68-78-114-74.dsl.emhril.ameritech.net.
> X-Declude-Sender: [EMAIL PROTECTED] [68.78.114.74]
>
>
>
> [EMAIL PROTECTED]
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> ---
> Sign up for virus-free and spam-free e-mail with Nexus Technology Group
> http://www.nexustechgroup.com/mailscan
>
>

---
Sign up for virus-free and spam-free e-mail with Nexus Technology Group 
http://www.nexustechgroup.com/mailscan

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] BONDEDSENDER

[Scott Fisher]

I haven't received many False positives (false negatives in this case?) on the test. 
It seems to help lower the scores on some of the legitimate optin mail that falls into 
the grey area (travelocity, cnn, about.com, dowjones.com, ebay, fedex, Motley Fool, 
Southwest, United, VH1) that may be failing other tests (the travel sites always get 
hit with Message Sniffer in my case).
I've read it is recommended to only search one hop on it, so it should be named 
BONDEDSENDER-DYNA

Scott Fisher
Director of IT
Farm Progress Companies

>>> [EMAIL PROTECTED] 03/09/04 04:06PM >>>
Does anyone have any recent thoughts (Pros and Cons) toward BONDEDSENDER.

Fred
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] BONDEDSENDER

[Frederick Samarelli]

Does anyone have any recent thoughts (Pros and Cons) toward BONDEDSENDER.

Fred
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: Re[2]: [Declude.JunkMail] Per User Whitelisting Options

[Kornitz, David]

KD> I have written an external test that at the domain level allows
KD> the administrator decide whether the "domain" or "user" level 
KD> has priority when whitelisting or blacklisting.

What's your logic in that?

The idea is the following:

A specific company has certain organization that it deals with on a 
daily basis and therefore at the company (Domain) level there are 
certain defaults that should take place.   Some of the companies we
work with take the position that this is the way it is and allows no
deviations.  Other companies look at these lists a general guideline
and as such individual (or groups of) users should be allowed to 
override these defaults.  An example would be an architectural firm 
and information from the American Institute of Architects should be 
allowed in for all users (Whitelisted), but an engineering group 
within the firm may not want the same email and therefore the same
list may be blacklisted. 

The approach we took we the C++ routine was written was to add an 
option "COMPANY" that when enabled does not allow a user (or group)
setting to override the company settings.  And when the same option
is disabled, the preference goes to the user (or group).

...

We wrote C++ that parses every message from /spam and moves it to a use specific
folder, then give users access to folder through web GUI and
auto-delete after 10 days old.

BEWARE...NTFS doesn't like lots of
nodes in one root.  Right now we have about 3 million files and have
broken them down by drive:/Spam//Domain.ext//username/Q and
D files.  Sure there are better ways, but breaking down by A-Z was
easiest.  Holding spam with a file structure spam/domain/user took WAY
too long on disk access.  Also, you should format your drive with a
smaller cluster size than DEFAULT.  Remember 1/2 of all your files on
that drive will be less than 1k.  And...if you're using RAID
controller, disable Read-Ahead caching.



We've already run into this issue and are in the process of writing
a similar routine.  Our goal is to allow at the company level to
specify the number of days and if they want to hold more than the 
default number of days we are going to charge them additional fee.
The same idea applies to store and forward messages.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] How can I catch this with Declude?

[John Carter]

Just was looking a drug spam that came through with a weight of 12
(failing SORBS-DUHL and CMDSPACE).  I know many of you have seen this
(which is why I asking for help.) It had the standard random gibberish
of correctly spelled words, but making no sense -- I guess to throw
phrase analysis.  Ex.: cloakroom transmute denotation mph decomposable
(etc. etc.)

None the drug words were spelled out but use the &#(number) sequence and
every two or three "letters" were interspaced with http links with no
content. Ex: http://www.brook.com";> -- I guess to further
throw off analysis.

Virtually all of the graphic links were to different sites, repeating
only one or two. No "

Re[2]: [Declude.JunkMail] Per User Whitelisting Options

[David Sullivan]

Hello David,

Tuesday, March 9, 2004, 1:06:42 PM, you wrote:


KD>a.   Using %ALLRECIPS% can cause problems when there is a larger
KD>   number of recipients.  Some of the parameters may not be passed
KD> or may be are stripped off due to limitations of the length of a
KD> command line.  (Not sure of the exact length)

Oooh, yea.  Didn't consider that.


KD>b.   A better solutions is to open and process the Imail envelope
KD>   header.  The file is in the same location as the Email and the
KD> first character of the file is changed to a "Q".  For example,

Duh.  I guess I can get all the envelope info out of the Q file.
Wonder what Imail does though if it's a Store and Forward?

KD> 2.  You also have to consider what happens when there is a conflict.
KD> You can be receiving a message for multiple domains (or even 
KD> users within the same domain) and one user could whitelist the 
KD> entry and another could blacklist it or have no preference.

That's the hardest issue.  Right now we've just decided to use the
most lenient setting. If any "to" wants it, they all get it.

KD> I have written an external test that at the domain level allows
KD> the administrator decide whether the "domain" or "user" level 
KD> has priority when whitelisting or blacklisting.

What's your logic in that?

KD> I still have the issue when multiple domains are being processed
KD> in the same message.  I have checked and some of the larger 
KD> companies that process for spam and viruses and each of them 
KD> has a method for processing the message for individual recipients
KD> something that Declude is missing.

Yep.

KD> 3.  You also want to look at how matches are being processed.  (i.e.
KD> is it an exact match, partial match, does it start with or end
KD> with the string being compared.)

We're going to keep it simple at first only allowing:
[EMAIL PROTECTED]
@example.com

KD> 4.  The other request that has been made by a number of people is a
KD> way to move the messages marked as spam to a specific folder on
KD> the server.  Scott mentioned that they were looking into this
KD> but to the best of my knowledge there is no way to do this at the
KD> present time.

We wrote C++ that parses every message from /spam and moves it to a use specific
folder, then give users access to folder through web GUI and
auto-delete after 10 days old.

BEWARE...NTFS doesn't like lots of
nodes in one root.  Right now we have about 3 million files and have
broken them down by drive:/Spam//Domain.ext//username/Q and
D files.  Sure there are better ways, but breaking down by A-Z was
easiest.  Holding spam with a file structure spam/domain/user took WAY
too long on disk access.  Also, you should format your drive with a
smaller cluster size than DEFAULT.  Remember 1/2 of all your files on
that drive will be less than 1k.  And...if you're using RAID
controller, disable Read-Ahead caching.



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] Why did this get through?

[Adrian Titei]

I am not absolutely sure, but I think that it is in the default file. To
find out more about HABEAS, go to www.habeas.com. It's supposed to be
some kind of certificate for non-spam mail. It is supposed to work, but
obviously there are some who abuse it and they're  being sued... 

Cheers,
Adrian


Timothy Bohen wrote:
> 
> Yep that’s there. I don't ever remember putting it in though. Does it come with a 
> default global.cfg file?
> 
> What is it?
> 
> Thanks
> 
> -- Original Message --
> From: Adrian Titei <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> Date:  Tue, 09 Mar 2004 13:14:51 -0500
> 
> >You must have a line like "WHITELIST HABEAS" in your global.cfg. That's
> >responsible for letting it through.
> >
> >Adrian
> >
> >Timothy Bohen wrote:
> >>
> >> Any help on why this got through? I see the line about being whitelisted but I 
> >> cannot find this ip or domain in my whitelist?
> >> Thanks
> >>
> >> Received: from dynamic-ip-cr20011851123.cable.net.co [200.118.51.123] by 
> >> mail1.cmsinter.net
> >>   (SMTPD32-8.05) id A5B951D700C0; Tue, 09 Mar 2004 11:50:01 -0500
> >> Received: from 0.39.24.190 by 200.118.51.123; Tue, 09 Mar 2004 08:52:46 -0500
> >> Message-ID: <[EMAIL PROTECTED]>
> >> X-Habeas-SWE-1: winter into spring
> >> X-Habeas-SWE-2: brightly anticipated
> >> X-Habeas-SWE-3: like Habeas SWE (tm)
> >> X-Habeas-SWE-4: Copyright 2002 Habeas (tm)
> >> X-Habeas-SWE-5: Sender Warranted Email (SWE) (tm). The sender of this
> >> X-Habeas-SWE-6: email in exchange for a license for this Habeas
> >> X-Habeas-SWE-7: warrant mark warrants that this is a Habeas Compliant
> >> X-Habeas-SWE-8: Message (HCM) and not spam. Please report use of this
> >> X-Habeas-SWE-9: mark in spam to .
> >> From: "gita maynard" <[EMAIL PROTECTED]>
> >> Reply-To: "gita maynard" <[EMAIL PROTECTED]>
> >> To: [EMAIL PROTECTED]
> >> Cc: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], 
> >> [EMAIL PROTECTED]
> >> Subject: Fwd: V|cod|.n _ [EMAIL PROTECTED] < xana_x_ , V.a.lium .Pntermin. ' 
> >> Som.a.  ccvhdqyxnsvl
> >> Date: Tue, 09 Mar 2004 08:55:46 -0500
> >> MIME-Version: 1.0
> >> Content-Type: multipart/mixed;
> >> boundary="--6998711866179180"
> >> X-Mailer: mh-e 6.1; nmh 1.1-RC1; Emacs 21.2
> >> X-Priority: 5
> >> X-IP: 216.128.128.48
> >> X-Declude-Sender: [EMAIL PROTECTED] [200.118.51.123]
> >> X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
> >> X-Spam-Tests-Failed: Whitelisted [0]
> >> X-RCPT-TO: <[EMAIL PROTECTED]>
> >> Status: R
> >> X-UIDL: 378846870
> >>
> >>
> >> 
> >> Sent via the CMSInter.Net WebMail system at mail1.cmsinter.net
> >>
> >>
> >>
> >> ---
> >> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
> >>
> >> ---
> >> This E-mail came from the Declude.JunkMail mailing list.  To
> >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> >> type "unsubscribe Declude.JunkMail".  The archives can be found
> >> at http://www.mail-archive.com.
> >> ---
> >> [This E-mail scanned for viruses by Declude Virus]
> >
> >--
> >Regards,
> >Adrian Titei
> >Director of IT
> >Jumbo Entertainment Inc.
> >
> >p: 905-634-4244 x 232
> >f: 905-632-2964
> >e: [EMAIL PROTECTED]
> >
> >===> Confidentiality Notice: <
> >This e-mail message and any attachment to same  contains confidential
> >information intended only for the person(s) to whom the said e-mail is
> >intended to be sent.  Any review, retransmission, dissemination or other
> >use of or the taking of any action and reliance upon this information by
> >persons or entities other than the intended recipient violates
> >confidentiality and is prohibited.  If you have received this e-mail
> >message in error, please notify the sender immediately and delete the
> >e-mail message from your computer.
> >---
> >[This E-mail scanned for viruses by Declude Virus]
> >
> >---
> >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
> >
> >---
> >This E-mail came from the Declude.JunkMail mailing list.  To
> >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> >type "unsubscribe Declude.JunkMail".  The archives can be found
> >at http://www.mail-archive.com.
> >
> 
> 
> 
> Sent via the CMSInter.Net WebMail system at mail1.cmsinter.net
> 
> 
> 
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> ---
> [This E-mail scanned for viruses by Declude Virus]

-- 
Regards,
Adrian Titei
Director of IT
Jumbo Entertainment Inc.

p: 905-634-4244 x 232
f: 905-632-2964
e: [EMAI

Re: [Declude.JunkMail] Why did this get through?

[R. Scott Perry]

Yep that's there. I don't ever remember putting it in though. Does it come 
with a default global.cfg file?
Yes, WHITELIST HABEAS came with the default global.cfg file for quite some 
time.  Since a spammer decided to risk getting sued by infringing on the 
Habeas legal rights, we are recommending that people do not whitelist 
E-mails based on the Habeas headers until everything gets straightened out.

See http://www.habeas.com for further details.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] Why did this get through?

[Timothy Bohen]

Yep that’s there. I don't ever remember putting it in though. Does it come with a 
default global.cfg file?

What is it?

Thanks


-- Original Message --
From: Adrian Titei <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date:  Tue, 09 Mar 2004 13:14:51 -0500

>You must have a line like "WHITELIST HABEAS" in your global.cfg. That's
>responsible for letting it through.
>
>Adrian
>
>Timothy Bohen wrote:
>>
>> Any help on why this got through? I see the line about being whitelisted but I 
>> cannot find this ip or domain in my whitelist?
>> Thanks
>>
>> Received: from dynamic-ip-cr20011851123.cable.net.co [200.118.51.123] by 
>> mail1.cmsinter.net
>>   (SMTPD32-8.05) id A5B951D700C0; Tue, 09 Mar 2004 11:50:01 -0500
>> Received: from 0.39.24.190 by 200.118.51.123; Tue, 09 Mar 2004 08:52:46 -0500
>> Message-ID: <[EMAIL PROTECTED]>
>> X-Habeas-SWE-1: winter into spring
>> X-Habeas-SWE-2: brightly anticipated
>> X-Habeas-SWE-3: like Habeas SWE (tm)
>> X-Habeas-SWE-4: Copyright 2002 Habeas (tm)
>> X-Habeas-SWE-5: Sender Warranted Email (SWE) (tm). The sender of this
>> X-Habeas-SWE-6: email in exchange for a license for this Habeas
>> X-Habeas-SWE-7: warrant mark warrants that this is a Habeas Compliant
>> X-Habeas-SWE-8: Message (HCM) and not spam. Please report use of this
>> X-Habeas-SWE-9: mark in spam to .
>> From: "gita maynard" <[EMAIL PROTECTED]>
>> Reply-To: "gita maynard" <[EMAIL PROTECTED]>
>> To: [EMAIL PROTECTED]
>> Cc: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], 
>> [EMAIL PROTECTED]
>> Subject: Fwd: V|cod|.n _ [EMAIL PROTECTED] < xana_x_ , V.a.lium .Pntermin. ' Som.a. 
>>  ccvhdqyxnsvl
>> Date: Tue, 09 Mar 2004 08:55:46 -0500
>> MIME-Version: 1.0
>> Content-Type: multipart/mixed;
>> boundary="--6998711866179180"
>> X-Mailer: mh-e 6.1; nmh 1.1-RC1; Emacs 21.2
>> X-Priority: 5
>> X-IP: 216.128.128.48
>> X-Declude-Sender: [EMAIL PROTECTED] [200.118.51.123]
>> X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
>> X-Spam-Tests-Failed: Whitelisted [0]
>> X-RCPT-TO: <[EMAIL PROTECTED]>
>> Status: R
>> X-UIDL: 378846870
>>
>>
>> 
>> Sent via the CMSInter.Net WebMail system at mail1.cmsinter.net
>>
>>
>>
>> ---
>> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
>>
>> ---
>> This E-mail came from the Declude.JunkMail mailing list.  To
>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>> type "unsubscribe Declude.JunkMail".  The archives can be found
>> at http://www.mail-archive.com.
>> ---
>> [This E-mail scanned for viruses by Declude Virus]
>
>--
>Regards,
>Adrian Titei
>Director of IT
>Jumbo Entertainment Inc.
>
>p: 905-634-4244 x 232
>f: 905-632-2964
>e: [EMAIL PROTECTED]
>
>===> Confidentiality Notice: <
>This e-mail message and any attachment to same  contains confidential
>information intended only for the person(s) to whom the said e-mail is
>intended to be sent.  Any review, retransmission, dissemination or other
>use of or the taking of any action and reliance upon this information by
>persons or entities other than the intended recipient violates
>confidentiality and is prohibited.  If you have received this e-mail
>message in error, please notify the sender immediately and delete the
>e-mail message from your computer.
>---
>[This E-mail scanned for viruses by Declude Virus]
>
>---
>[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
>
>---
>This E-mail came from the Declude.JunkMail mailing list.  To
>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>type "unsubscribe Declude.JunkMail".  The archives can be found
>at http://www.mail-archive.com.
>






Sent via the CMSInter.Net WebMail system at mail1.cmsinter.net





---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] Why did this get through?

[Adrian Titei]

You must have a line like "WHITELIST HABEAS" in your global.cfg. That's
responsible for letting it through.

Adrian

Timothy Bohen wrote:
> 
> Any help on why this got through? I see the line about being whitelisted but I 
> cannot find this ip or domain in my whitelist?
> Thanks
> 
> Received: from dynamic-ip-cr20011851123.cable.net.co [200.118.51.123] by 
> mail1.cmsinter.net
>   (SMTPD32-8.05) id A5B951D700C0; Tue, 09 Mar 2004 11:50:01 -0500
> Received: from 0.39.24.190 by 200.118.51.123; Tue, 09 Mar 2004 08:52:46 -0500
> Message-ID: <[EMAIL PROTECTED]>
> X-Habeas-SWE-1: winter into spring
> X-Habeas-SWE-2: brightly anticipated
> X-Habeas-SWE-3: like Habeas SWE (tm)
> X-Habeas-SWE-4: Copyright 2002 Habeas (tm)
> X-Habeas-SWE-5: Sender Warranted Email (SWE) (tm). The sender of this
> X-Habeas-SWE-6: email in exchange for a license for this Habeas
> X-Habeas-SWE-7: warrant mark warrants that this is a Habeas Compliant
> X-Habeas-SWE-8: Message (HCM) and not spam. Please report use of this
> X-Habeas-SWE-9: mark in spam to .
> From: "gita maynard" <[EMAIL PROTECTED]>
> Reply-To: "gita maynard" <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], 
> [EMAIL PROTECTED]
> Subject: Fwd: V|cod|.n _ [EMAIL PROTECTED] < xana_x_ , V.a.lium .Pntermin. ' Som.a.  
> ccvhdqyxnsvl
> Date: Tue, 09 Mar 2004 08:55:46 -0500
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
> boundary="--6998711866179180"
> X-Mailer: mh-e 6.1; nmh 1.1-RC1; Emacs 21.2
> X-Priority: 5
> X-IP: 216.128.128.48
> X-Declude-Sender: [EMAIL PROTECTED] [200.118.51.123]
> X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
> X-Spam-Tests-Failed: Whitelisted [0]
> X-RCPT-TO: <[EMAIL PROTECTED]>
> Status: R
> X-UIDL: 378846870
> 
> 
> 
> Sent via the CMSInter.Net WebMail system at mail1.cmsinter.net
> 
> 
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> ---
> [This E-mail scanned for viruses by Declude Virus]

-- 
Regards,
Adrian Titei
Director of IT
Jumbo Entertainment Inc.

p: 905-634-4244 x 232
f: 905-632-2964
e: [EMAIL PROTECTED]

===> Confidentiality Notice: <
This e-mail message and any attachment to same  contains confidential
information intended only for the person(s) to whom the said e-mail is
intended to be sent.  Any review, retransmission, dissemination or other
use of or the taking of any action and reliance upon this information by
persons or entities other than the intended recipient violates
confidentiality and is prohibited.  If you have received this e-mail
message in error, please notify the sender immediately and delete the
e-mail message from your computer.
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Per User Whitelisting Options

[Kornitz, David]

Here's the problems I have run into setting up an External Plus Test:

1.  Declude only uses tests the external plus test 1 time for each 
message.
   a.   Using %ALLRECIPS% can cause problems when there is a larger
  number of recipients.  Some of the parameters may not be passed
or may be are stripped off due to limitations of the length of a
command line.  (Not sure of the exact length)
   b.   A better solutions is to open and process the Imail envelope 
  header.  The file is in the same location as the Email and the 
first character of the file is changed to a "Q".  For example,
Da1a145c700a0da2c.SMD is the message and Qa1a145c700a0da2c.SMD
is the envelope header.  This file contains a list of recipients
specific to your server.  Scott mentioned that they are 
considering change how external plus test are being processed.

2.  You also have to consider what happens when there is a conflict.
You can be receiving a message for multiple domains (or even 
users within the same domain) and one user could whitelist the 
entry and another could blacklist it or have no preference.  

I have written an external test that at the domain level allows
the administrator decide whether the "domain" or "user" level 
has priority when whitelisting or blacklisting.

I still have the issue when multiple domains are being processed
in the same message.  I have checked and some of the larger 
companies that process for spam and viruses and each of them 
has a method for processing the message for individual recipients
something that Declude is missing.

3.  You also want to look at how matches are being processed.  (i.e.
is it an exact match, partial match, does it start with or end
with the string being compared.)

4.  The other request that has been made by a number of people is a 
way to move the messages marked as spam to a specific folder on
the server.  Scott mentioned that they were looking into this
but to the best of my knowledge there is no way to do this at the
present time.  

We are in the process of writing a front-end for Declude and at
this time we are probably going to write procedure to process all
of the "held" spam and move it to specific folders.  This will 
allow us to offer web based spam processing for our customers 
that have their own mail servers.


David Kornitz
Cornerstone Computer Solutions, Inc.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of David Sullivan
Sent: Tuesday, March 09, 2004 11:30 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Per User Whitelisting Options



I'm working on a white list solution to allow per user white listing
based on the sender/sending domain.  My setup is primarily as Store
and Forward for another server.  I have about 500 domains with about
20,000 users doing 300k msgs per day.

"Redirect"ing looks like a nice option but I'm a bit confused on it.
Basically, I would put the Redirect commands in .junkmail and point to a .cfg file.  
Then, I would modify
the actions (that are normally used for outgoing mail in global.cfg)in
that new .cfg file based on what I wanted to happen for the domain,
correct?  Could I then use an additional Redirect in the domain .cfg
file to point to user specific files if needed?

Adding the folders/subfolders looks like it would work nicely, but, I
have two concerns... 1)Folder/File structure under /Declude would
cause performance issues. Does anyone have experience with
putting that kind of folder/file structure with 100's of folders off
the /Declude node and 1,000s of file off the /domain node? 2) How well does the folder
structure system work with Store and Forward domains? 3) When Declude
uses "WHITELIST FROM" does it use the "from" in the email message or
the envelope sender?

I'm trying to compare these two options but don't have enough info.
Hoping someone can help me here.

Secondly, I'm looking at just
using an external test.  Based on what I'm reading, I could use
external-plus, BUT... I would need Declude to pass the envelope
sender, I see %SENDERHOST% but don't see sender anywhere, is this a
possibility?  Also, what happens if a user is bcc'd on a message? Will
that address show up in the %ALLRECIPS% parameter?  And...would
settings in a per domain file override settings in a per user file?

Thanks for any help.  I'm really trying to understand how all these
variables work together.

-David




---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scan

[Declude.JunkMail] Why did this get through?

[Timothy Bohen]

Any help on why this got through? I see the line about being whitelisted but I cannot 
find this ip or domain in my whitelist?
Thanks

Received: from dynamic-ip-cr20011851123.cable.net.co [200.118.51.123] by 
mail1.cmsinter.net
  (SMTPD32-8.05) id A5B951D700C0; Tue, 09 Mar 2004 11:50:01 -0500
Received: from 0.39.24.190 by 200.118.51.123; Tue, 09 Mar 2004 08:52:46 -0500
Message-ID: <[EMAIL PROTECTED]>
X-Habeas-SWE-1: winter into spring
X-Habeas-SWE-2: brightly anticipated
X-Habeas-SWE-3: like Habeas SWE (tm)
X-Habeas-SWE-4: Copyright 2002 Habeas (tm)
X-Habeas-SWE-5: Sender Warranted Email (SWE) (tm). The sender of this
X-Habeas-SWE-6: email in exchange for a license for this Habeas
X-Habeas-SWE-7: warrant mark warrants that this is a Habeas Compliant
X-Habeas-SWE-8: Message (HCM) and not spam. Please report use of this
X-Habeas-SWE-9: mark in spam to .
From: "gita maynard" <[EMAIL PROTECTED]>
Reply-To: "gita maynard" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL 
PROTECTED]
Subject: Fwd: V|cod|.n _ [EMAIL PROTECTED] < xana_x_ , V.a.lium .Pntermin. ' Som.a.  
ccvhdqyxnsvl
Date: Tue, 09 Mar 2004 08:55:46 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--6998711866179180"
X-Mailer: mh-e 6.1; nmh 1.1-RC1; Emacs 21.2
X-Priority: 5
X-IP: 216.128.128.48
X-Declude-Sender: [EMAIL PROTECTED] [200.118.51.123]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
X-Spam-Tests-Failed: Whitelisted [0]
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: R
X-UIDL: 378846870
 





Sent via the CMSInter.Net WebMail system at mail1.cmsinter.net


 
   
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Per User Whitelisting Options

[David Sullivan]

I'm working on a white list solution to allow per user white listing
based on the sender/sending domain.  My setup is primarily as Store
and Forward for another server.  I have about 500 domains with about
20,000 users doing 300k msgs per day.

"Redirect"ing looks like a nice option but I'm a bit confused on it.
Basically, I would put the Redirect commands in .junkmail and point to a .cfg file.  
Then, I would modify
the actions (that are normally used for outgoing mail in global.cfg)in
that new .cfg file based on what I wanted to happen for the domain,
correct?  Could I then use an additional Redirect in the domain .cfg
file to point to user specific files if needed?

Adding the folders/subfolders looks like it would work nicely, but, I
have two concerns... 1)Folder/File structure under /Declude would
cause performance issues. Does anyone have experience with
putting that kind of folder/file structure with 100's of folders off
the /Declude node and 1,000s of file off the /domain node? 2) How well does the folder
structure system work with Store and Forward domains? 3) When Declude
uses "WHITELIST FROM" does it use the "from" in the email message or
the envelope sender?

I'm trying to compare these two options but don't have enough info.
Hoping someone can help me here.

Secondly, I'm looking at just
using an external test.  Based on what I'm reading, I could use
external-plus, BUT... I would need Declude to pass the envelope
sender, I see %SENDERHOST% but don't see sender anywhere, is this a
possibility?  Also, what happens if a user is bcc'd on a message? Will
that address show up in the %ALLRECIPS% parameter?  And...would
settings in a per domain file override settings in a per user file?

Thanks for any help.  I'm really trying to understand how all these
variables work together.

-David




---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] Message routing question

[Dave Doherty]

I think so, yes. Thanks!

-Dave


- Original Message - 
From: "Lyndon Eaton" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 09, 2004 11:20 AM
Subject: RE: [Declude.JunkMail] Message routing question


Its the OE Rule you need to re-write.

With the later versions of OE you have a condition that's is 'Where the
message is from the specified account'.

So in Tools>Accounts>Mail you'd have one profile/account to download
from the main mailbox, and another for downloading from the spam
mailbox.

Instead of setting up a rule the looks at the To: field, get the rule to
perform the action based on 'Where the message is from the specified
account'.

Hope that makes sence?

Regards,
Lyndon.



-Original Message-
From: Dave Doherty [mailto:[EMAIL PROTECTED]
Sent: 09 March 2004 16:13
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Message routing question


Hi,

I need to find a way to route email to a spam folder in a client's
Outlook Express setup.

I had him set up two POP boxes, [EMAIL PROTECTED] and [EMAIL PROTECTED]
(which OE combines into one folder set) and a message rule so that
anything addressed to [EMAIL PROTECTED]  is routed into a spam
folder. This works fine, as I can send mail to user or user-spam and the
message winds up in the right place.

I divert his messages at WEIGHT20. I tried WEIGHT20 MAILBOX SPAM, and
the message goes into the user-spam folder on the server, but the "to"
address is not changed, so it winds up in his main mailbox in OE. I
tried WEIGHT20 ROUTETO [EMAIL PROTECTED], figuring that would force a
rewrite of the to address, but I got the same result - it came in still
addressed to [EMAIL PROTECTED]

Ideas, anyone?

-Dave Doherty
 Skywaves, Inc.


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



Email checked by UKsubnet anti-virus service
To prevent email abuse & block spam
contact [EMAIL PROTECTED]
Tel: +44(0)8712360301 Web: www.uksubnet.net
Fax: +44(0)8712360300

Powered by UKsubnet Internet Service Provider
Business to Business Internet (ISP)





Email checked by UKsubnet anti-virus service
To prevent email abuse & block spam
contact [EMAIL PROTECTED]
Tel: +44(0)8712360301 Web: www.uksubnet.net
Fax: +44(0)8712360300

Powered by UKsubnet Internet Service Provider
Business to Business Internet (ISP)


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Message routing question

[Nathan Fouarge]

I believe that by default Imail puts [EMAIL PROTECTED] to folder
anything in the mailbox of [EMAIL PROTECTED]  I know you can change this
behaviour, but I do not know where of hand.

Nate

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty
Sent: Tuesday, March 09, 2004 10:13 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Message routing question


Hi,

I need to find a way to route email to a spam folder in a client's
Outlook Express setup.

I had him set up two POP boxes, [EMAIL PROTECTED] and [EMAIL PROTECTED]
(which OE combines into one folder set) and a message rule so that
anything addressed to [EMAIL PROTECTED]  is routed into a spam
folder. This works fine, as I can send mail to user or user-spam and the
message winds up in the right place.

I divert his messages at WEIGHT20. I tried WEIGHT20 MAILBOX SPAM, and
the message goes into the user-spam folder on the server, but the "to"
address is not changed, so it winds up in his main mailbox in OE. I
tried WEIGHT20 ROUTETO [EMAIL PROTECTED], figuring that would force a
rewrite of the to address, but I got the same result - it came in still
addressed to [EMAIL PROTECTED]

Ideas, anyone?

-Dave Doherty
 Skywaves, Inc.


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Message routing question

[Lyndon Eaton]

Its the OE Rule you need to re-write.

With the later versions of OE you have a condition that's is 'Where the
message is from the specified account'.

So in Tools>Accounts>Mail you'd have one profile/account to download
from the main mailbox, and another for downloading from the spam
mailbox.

Instead of setting up a rule the looks at the To: field, get the rule to
perform the action based on 'Where the message is from the specified
account'. 

Hope that makes sence?

Regards,
Lyndon.



-Original Message-
From: Dave Doherty [mailto:[EMAIL PROTECTED] 
Sent: 09 March 2004 16:13
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Message routing question


Hi,

I need to find a way to route email to a spam folder in a client's
Outlook Express setup.

I had him set up two POP boxes, [EMAIL PROTECTED] and [EMAIL PROTECTED]
(which OE combines into one folder set) and a message rule so that
anything addressed to [EMAIL PROTECTED]  is routed into a spam
folder. This works fine, as I can send mail to user or user-spam and the
message winds up in the right place.

I divert his messages at WEIGHT20. I tried WEIGHT20 MAILBOX SPAM, and
the message goes into the user-spam folder on the server, but the "to"
address is not changed, so it winds up in his main mailbox in OE. I
tried WEIGHT20 ROUTETO [EMAIL PROTECTED], figuring that would force a
rewrite of the to address, but I got the same result - it came in still
addressed to [EMAIL PROTECTED]

Ideas, anyone?

-Dave Doherty
 Skywaves, Inc.


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



Email checked by UKsubnet anti-virus service  
To prevent email abuse & block spam   
contact [EMAIL PROTECTED]
Tel: +44(0)8712360301 Web: www.uksubnet.net
Fax: +44(0)8712360300 

Powered by UKsubnet Internet Service Provider
Business to Business Internet (ISP)





Email checked by UKsubnet anti-virus service
To prevent email abuse & block spam
contact [EMAIL PROTECTED]
Tel: +44(0)8712360301 Web: www.uksubnet.net
Fax: +44(0)8712360300

Powered by UKsubnet Internet Service Provider
Business to Business Internet (ISP)


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Message routing question

[Dave Doherty]

Hi,

I need to find a way to route email to a spam folder in a client's Outlook
Express setup.

I had him set up two POP boxes, [EMAIL PROTECTED] and [EMAIL PROTECTED]
(which OE combines into one folder set) and a message rule so that anything
addressed to [EMAIL PROTECTED]  is routed into a spam folder. This works
fine, as I can send mail to user or user-spam and the message winds up in
the right place.

I divert his messages at WEIGHT20. I tried WEIGHT20 MAILBOX SPAM, and the
message goes into the user-spam folder on the server, but the "to" address
is not changed, so it winds up in his main mailbox in OE. I tried WEIGHT20
ROUTETO [EMAIL PROTECTED], figuring that would force a rewrite of the to
address, but I got the same result - it came in still addressed to
[EMAIL PROTECTED]

Ideas, anyone?

-Dave Doherty
 Skywaves, Inc.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.