RE: [Declude.JunkMail] Feature request: COMBO tests
I for one am quite happy with the workaround for TESTSFAILED/END. I can't speak to which versions should support it, but with Matt's guidance and the permutation builder I posted here yesterday: http://www.subterrane.com/permgen.shtml I've found remarkable precision and dexterity. Just be sure to uncheck Fill empty strings Dan From: Markus Gufler [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Wed, 19 May 2004 23:39:58 +0200 To: [EMAIL PROTECTED] Subject: SPAM: RE: [Declude.JunkMail] Feature request: COMBO tests Gotcha. Did not know of the standard ver limits Beside the limitation for pro users (who knows if future COMBO test - if they become true - will be available in the standard version?) I consider the TESTSFAILED/END solution a little bit inflexible and inefficient and so as Matt (who has discovered this possibility) said it's nothing else then a workaround Real AND/OR/NOT functionality for a new group of COMBO tests that are processed after all other tests should allow us to assign extra points for certain suspicious combinations of tests. Ass explained several times this would allow to set up a great set of filter files for bogus virus warnings comming from other dumb av filters. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Feature request: COMBO tests
Dan, While it certainly works, it does require extra filters because the AND kludge only works when the tests appear in a certain order. It would be nice if that issue was solved, but for now, with a bit of extra work, it's certainly an improvement and brings important new capabilities to the table. Matt Dan Patnode wrote: I for one am quite happy with the "workaround" for TESTSFAILED/END. I can't speak to which versions should support it, but with Matt's guidance and the permutation builder I posted here yesterday: http://www.subterrane.com/permgen.shtml I've found remarkable precision and dexterity. Just be sure to uncheck "Fill empty strings" Dan From: "Markus Gufler" [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Wed, 19 May 2004 23:39:58 +0200 To: [EMAIL PROTECTED] Subject: SPAM: RE: [Declude.JunkMail] Feature request: COMBO tests Gotcha. Did not know of the standard ver limits Beside the limitation for pro users (who knows if future COMBO test - if they become true - will be available in the standard version?) I consider the TESTSFAILED/END "solution" a little bit inflexible and inefficient and so as Matt (who has discovered this possibility) said it's nothing else then a "workaround" Real AND/OR/NOT functionality for a new group of COMBO tests that are processed after all other tests should allow us to assign extra points for certain suspicious combinations of tests. Ass explained several times this would allow to set up a great set of filter files for bogus virus warnings comming from other dumb av filters. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
[Declude.JunkMail] FTC to crack down on porn spam
What a bunch of idgets http://money.cnn.com/2004/05/19/technology/ftc_spam/index.htm -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] FTC to crack down on porn spam
I have a better idea. Make the spammers put the word SPAM at the beginning of the subject line (regardless of content) then it would make it really easy for filters.. All I have to say is this is going to be very usefulNOT Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Matt Sent: Thursday, May 20, 2004 9:53 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] FTC to crack down on porn spam What a bunch of idgets http://money.cnn.com/2004/05/19/technology/ftc_spam/index.htm -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Are tests executed?
OK if I have a test defined in the GLOBAL.CFG and I have per-domain configs and if I only add the line TESTNAME WARN (or whatever) In only one domain's $default$.junkmail file 1) Will the test be executed for each e-mail for every domain or only the tests listed in that domains .junkmail file? 2) If the test is executed for all domains then will the score of the test be added to e-mails for all domains? 3) If 2 is true then do I have to add TESTNAME IGNORE to all other domain's config files to not count the score? Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] DNSstuff Website
I know I saw something about this a few days ago but am not sure what the answer was. Is the www.dnsstuff.com website down for good? Is there a new link to it? Thanks Sam --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] FTC to crack down on porn spam
I always though it would be much easier to track down spammers if the ISPs would stop terminating the service of the known spammers that they have on their networks and instead allow them to continue to keep the same IP addresses. That way the list of IP addresses of known spammers would not be ever changing. So the ISPs would continue to take money from them for Internet service, draining their pocketbooks on one end, and we would block the IPs of the spammers, blocking their source of income, and in turn their pocket books, on the other end. - Original Message - From: Goran Jovanovic [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, May 20, 2004 1:30 PM Subject: RE: [Declude.JunkMail] FTC to crack down on porn spam I have a better idea. Make the spammers put the word SPAM at the beginning of the subject line (regardless of content) then it would make it really easy for filters.. All I have to say is this is going to be very usefulNOT Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Matt Sent: Thursday, May 20, 2004 9:53 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] FTC to crack down on porn spam What a bunch of idgets http://money.cnn.com/2004/05/19/technology/ftc_spam/index.htm -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- Sign up for virus-free and spam-free e-mail with Nexus Technology Group http://www.nexustechgroup.com/mailscan --- Sign up for virus-free and spam-free e-mail with Nexus Technology Group http://www.nexustechgroup.com/mailscan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DNSstuff Website
I have been using the backup.dnsstuff.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bridges, Samantha Sent: Thursday, May 20, 2004 11:07 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] DNSstuff Website I know I saw something about this a few days ago but am not sure what the answer was. Is the www.dnsstuff.com website down for good? Is there a new link to it? Thanks Sam --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail]
Scott or anyone who can help - Below is the headers from a spam message. The Declude headers say that it failed the Weight 10 test. I have a HOLD on Weight 10 in my $default$.junkmail file. If I have a HOLD on the weight 10 then why did it get through. Thanks, Samantha Microsoft Mail Internet Headers Version 2.0 Received: from apollo.misd.net ([64.88.0.98]) by xmail1.macombisd.org with Microsoft SMTPSVC(5.0.2195.6713); Thu, 20 May 2004 14:36:06 -0400 Received: from SMTP32-FWD by apollo.misd.net (SMTP32) id AFB0C00F1017A9453; Thu, 20 May 2004 14:38:14 Received: from icc.rbo01.com [64.156.223.22] by apollo.misd.net with ESMTP (SMTPD32-8.11) id AB0CF1017A; Thu, 20 May 2004 14:38:04 -0400 Received: from ABCMS04 (192.168.5.14) by icc.rbo01.com (PowerMTA(TM) v2.0r1) id hljt8m046p4b; Thu, 20 May 2004 14:35:53 -0400 (envelope-from [EMAIL PROTECTED]) Date: 20 May 2004 18:35:50 GMT From: Holiday-Cheer[EMAIL PROTECTED] To: [EMAIL PROTECTED] REPLY-TO: [EMAIL PROTECTED] ERROR-TO: [EMAIL PROTECTED] Subject: Albert Pays Mime-Version: 1.0 Content-Type: text/html; charset=ISO-8859-1 Message-Id: [EMAIL PROTECTED] X-RBL-Warning: AHBL: 1079220623 bruns - Spam Source - 64.156.222.0/23 - rbo01.com, and others [2-2-1000] X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [4000120e]. [2-33-10800] X-Declude-Sender: [EMAIL PROTECTED] [64.156.223.22] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: AHBL, SPAMHEADERS [9] X-Country-Chain: X-Note: This E-mail was sent from icc.rbo01.com ([64.156.223.22]). X-RBL-Warning: AHBL: 1079220623 bruns - Spam Source - 64.156.222.0/23 - rbo01.com, and others [1-2-1000] X-RBL-Warning: SBL: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL7279; [1-7-3800] X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [4000100e]. [1-33-10800] X-RBL-Warning: WEIGHT10: Weight of 16 reaches or exceeds the limit of 10. [1-34-11000] X-Declude-Sender: [EMAIL PROTECTED] [64.156.223.22] X-Spam-Tests-Failed: AHBL, SBL, SPAMHEADERS, WEIGHT10 [16] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 20 May 2004 18:36:06.0995 (UTC) FILETIME=[50378230:01C43E99] $default$.junkmail Description: $default$.junkmail
RE: [Declude.JunkMail] DNSstuff Website
THANKS! -Original Message- From: Rick Baranowski [mailto:[EMAIL PROTECTED] Sent: Thursday, May 20, 2004 2:36 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] DNSstuff Website I have been using the backup.dnsstuff.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bridges, Samantha Sent: Thursday, May 20, 2004 11:07 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] DNSstuff Website I know I saw something about this a few days ago but am not sure what the answer was. Is the www.dnsstuff.com website down for good? Is there a new link to it? Thanks Sam --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DNSstuff Website
I have been using the backup.dnsstuff.com But is it gone and they just forgot to whack the backup? dnsreport.com was (is?) the best dns report on the planet. -- --- Matt Robertson, [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DNSstuff Website
I used it today and it worked just fine. Remember Scott is not available to answer these kinds of questions this week. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Rick Baranowski Sent: Thursday, May 20, 2004 11:36 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] DNSstuff Website I have been using the backup.dnsstuff.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bridges, Samantha Sent: Thursday, May 20, 2004 11:07 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] DNSstuff Website I know I saw something about this a few days ago but am not sure what the answer was. Is the www.dnsstuff.com website down for good? Is there a new link to it? Thanks Sam --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DNSstuff Website
My best guess is - Chuck Berry - whoever now own Declude can't fix it. Scott is on a cruise. No internet. No phone. When Scott returns he will reboot the box - for now we just have to make do.. -Nick Hayer On 20 May 2004 at 11:45, Matt Robertson wrote: I have been using the backup.dnsstuff.com But is it gone and they just forgot to whack the backup? dnsreport.com was (is?) the best dns report on the planet. -- --- Matt Robertson, [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Are tests executed?
On 20 May 2004 at 14:46, Goran Jovanovic GJovanovic wrote: Goran, Since this has not been answered someone lower on the food chain [me] will give it a try On 20 May 2004 at 13:57, Goran Jovanovic wrote: OK if I have a test defined in the GLOBAL.CFG and I have per-domain configs and if I only add the line TESTNAME WARN (or whatever) In only one domain's $default$.junkmail file 1) Will the test be executed for each e-mail for every domain or only the tests listed in that domains .junkmail file? The test will always execute - it is defined in the global.cfg. The ACTIONS of the test will execute are defines in that domains .junkmail file 2) If the test is executed for all domains then will the score of the test be added to e-mails for all domains? Nope. the ACTION of the test - WARN, etc execution is controlled by the .junkmail where the test is listed. 3) If 2 is true then doI have to add TESTNAME IGNORE to all other domain's config files to not count the score? nope. Hope this confused ya... Bottom line the way I see it - tests are executed in the global.cfg. IF that test is defined in a particular .junkmail file that junkmail file will define the action to take. Cheers - -Nick Hayer Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DNSstuff Website
Nick wrote: Scott is on a cruise. No internet. No phone. Ugh. Don't say that. I'm going to Cabo for two weeks next month - first vacation in years - and I am absolutely *praying* that the place we're going is wired up, in case of exactly this kind of scenario. I have a Plan B (int'l cellular modem) but to use it would cost more than the whole vacation if I dare. -- --- Matt Robertson, [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DNSstuff Website
Thanks everyone! Scott really really deserves that cruise...but I miss him. Does anyone know what happened to www.dnsreport.com? I tried backup.dnsreport.comnothin'. Thanks Sam -Original Message- From: Nick Hayer [mailto:[EMAIL PROTECTED] Sent: Thursday, May 20, 2004 2:53 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] DNSstuff Website My best guess is - Chuck Berry - whoever now own Declude can't fix it. Scott is on a cruise. No internet. No phone. When Scott returns he will reboot the box - for now we just have to make do.. -Nick Hayer On 20 May 2004 at 11:45, Matt Robertson wrote: I have been using the backup.dnsstuff.com But is it gone and they just forgot to whack the backup? dnsreport.com was (is?) the best dns report on the planet. -- --- Matt Robertson, [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DNSstuff Website
My plan B in those situations is another tech who's still on site :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Robertson Sent: Thursday, May 20, 2004 3:10 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] DNSstuff Website Nick wrote: Scott is on a cruise. No internet. No phone. Ugh. Don't say that. I'm going to Cabo for two weeks next month - first vacation in years - and I am absolutely *praying* that the place we're going is wired up, in case of exactly this kind of scenario. I have a Plan B (int'l cellular modem) but to use it would cost more than the whole vacation if I dare. -- --- Matt Robertson, [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OFF TOPIC
Hey group! Is anyone exerimenting with a lot of bounced email from MSN and Hotmail? If so can some one shead some light as to why alot of this mail is getting returned? In general terms. Kevin ShimwellLink Brokers Group, LLC ( Support )1600 Hwy 17 SouthNorth Myrtle Beach, SC 29582Phone: 843-663-1004Fax: 843-663-1007Email: [EMAIL PROTECTED]24/7 Support http://www.linkbrokers.com/support_ticket.cfmSupport M-F 1-888-546-5631
RE: [Declude.JunkMail] OFF TOPIC
There has been a lot of talk on the Imail list about problems sending to Hotmail the last 2 weeks. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Shimwell Sent: Thursday, May 20, 2004 12:30 PM To: Declude Junk Mail Subject: [Declude.JunkMail] OFF TOPIC Hey group! Is anyone exerimenting with a lot of bounced email from MSN and Hotmail? If so can some one shead some light as to why alot of this mail is getting returned? In general terms. Kevin Shimwell Link Brokers Group, LLC ( Support ) 1600 Hwy 17 South North Myrtle Beach, SC 29582 Phone: 843-663-1004 Fax: 843-663-1007 Email: [EMAIL PROTECTED] 24/7 Support http://www.linkbrokers.com/support_ticket.cfm Support M-F 1-888-546-5631
[Declude.JunkMail] Are these Forged?
Started getting these lately and needed to find out if they are forged and if Declude site is setup to handle them as forged. Exploit-ObjectData trojan Downloader-IU!zip trojan Thanks, Mike --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Are these Forged?
Exploit-ObjectData trojan As I can see yes. Downloader-IU!zip trojan Don't know. Haven't seen any jet. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Are tests executed?
Nick and Goran, I thought that I would clarify one thing that I think is more to the point on one of the questions regarding scoring. When a test produces a score, that score always applies to the total weight regardless of if an action is defined in the JunkMail file. With custom filters you can disable the filter and therefore the scoring for a particular user or domain using END statements so that it doesn't produce any score, but you need to have JunkMail Pro to do that, and you should be running at least the 1.79 beta. If you want to be more specific, I'm sure that someone around here will help you get something running the way you want it to. Matt Nick Hayer wrote: On 20 May 2004 at 14:46, "Goran Jovanovic" GJovanovic wrote: Goran, Since this has not been answered someone lower on the food chain [me] will give it a try On 20 May 2004 at 13:57, Goran Jovanovic wrote: OK if I have a test defined in the GLOBAL.CFG and I have per-domain configs and if I only add the line TESTNAME WARN (or whatever) In only one domain's $default$.junkmail file 1) Will the test be executed for each e-mail for every domain or only the tests listed in that domains .junkmail file? The test will always execute - it is defined in the global.cfg. The ACTIONS of the test will execute are defines in "that domains .junkmail file" 2) If the test is executed for all domains then will the score of the test be added to e-mails for all domains? Nope. the ACTION of the test - WARN, etc execution is controlled by the ".junkmail where the test is listed. 3) If 2 is true then doI have to add TESTNAME IGNORE to all other domain's config files to not count the score? nope. Hope this confused ya... Bottom line the way I see it - tests are executed in the global.cfg. "IF" that test is defined in a particular .junkmail file that junkmail file will define the action to take. Cheers - -Nick Hayer Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
RE: [Declude.JunkMail] Are these Forged?
Was wondering what the attachment names have been? I received on earlier (I think) and the name of the zip file was support.zip (had a PIF file within). -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Wiegers Sent: Thursday, May 20, 2004 2:34 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: [Declude.JunkMail] Are these Forged? Started getting these lately and needed to find out if they are forged and if Declude site is setup to handle them as forged. Exploit-ObjectData trojan Downloader-IU!zip trojan Thanks, Mike --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail]
Samantha, It would help tremendously if you could find the Declude log lines that correspond to this message and share them with the list. It's likely that the answer is in there. Matt Bridges, Samantha wrote: Scott or anyone who can help - Below is the headers from a spam message. The Declude headers say that it failed the Weight 10 test. I have a HOLD on Weight 10 in my $default$.junkmail file. If I have a HOLD on the weight 10 then why did it get through. Thanks, Samantha Microsoft Mail Internet Headers Version 2.0 Received: from apollo.misd.net ([64.88.0.98]) by xmail1.macombisd.org with Microsoft SMTPSVC(5.0.2195.6713); Thu, 20 May 2004 14:36:06 -0400 Received: from SMTP32-FWD by apollo.misd.net (SMTP32) id AFB0C00F1017A9453; Thu, 20 May 2004 14:38:14 Received: from icc.rbo01.com [64.156.223.22] by apollo.misd.net with ESMTP (SMTPD32-8.11) id AB0CF1017A; Thu, 20 May 2004 14:38:04 -0400 Received: from ABCMS04 (192.168.5.14) by icc.rbo01.com (PowerMTA(TM) v2.0r1) id hljt8m046p4b; Thu, 20 May 2004 14:35:53 -0400 (envelope-from [EMAIL PROTECTED]) Date: 20 May 2004 18:35:50 GMT From: Holiday-Cheer[EMAIL PROTECTED] To: [EMAIL PROTECTED] REPLY-TO: [EMAIL PROTECTED] ERROR-TO: [EMAIL PROTECTED] Subject: Albert Pays Mime-Version: 1.0 Content-Type: text/html; charset=ISO-8859-1 Message-Id: [EMAIL PROTECTED] X-RBL-Warning: AHBL: 1079220623 bruns - Spam Source - 64.156.222.0/23 - rbo01.com, and others [2-2-1000] X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [4000120e]. [2-33-10800] X-Declude-Sender: [EMAIL PROTECTED] [64.156.223.22] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: AHBL, SPAMHEADERS [9] X-Country-Chain: X-Note: This E-mail was sent from icc.rbo01.com ([64.156.223.22]). X-RBL-Warning: AHBL: 1079220623 bruns - Spam Source - 64.156.222.0/23 - rbo01.com, and others [1-2-1000] X-RBL-Warning: SBL: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL7279; [1-7-3800] X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [4000100e]. [1-33-10800] X-RBL-Warning: WEIGHT10: Weight of 16 reaches or exceeds the limit of 10. [1-34-11000] X-Declude-Sender: [EMAIL PROTECTED] [64.156.223.22] X-Spam-Tests-Failed: AHBL, SBL, SPAMHEADERS, WEIGHT10 [16] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 20 May 2004 18:36:06.0995 (UTC) FILETIME=[50378230:01C43E99] -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] FTC to crack down on porn spam
I never complain when I find a new block of IP's for this very reason. The only time that I ever send any such messages is when they are using shared resources, although I have found that complaining to bulk mailers to be useless because it's all auto-response crap, so I stick with ISP's. You also identified one of the reasons why I prefer that port 25 be left open. Broadband ISP's are like honey pots for spam, and I prefer that they are kept on those networks rather than finding business IP's to hijack or worse yet, relay through legitimate servers as a way of circumvention. Matt Dan Geiser wrote: I always though it would be much easier to track down spammers if the ISPs would stop terminating the service of the known spammers that they have on their networks and instead allow them to continue to keep the same IP addresses. That way the list of IP addresses of known spammers would not be ever changing. So the ISPs would continue to take money from them for Internet service, draining their pocketbooks on one end, and we would block the IPs of the spammers, blocking their source of income, and in turn their pocket books, on the other end. - Original Message - From: "Goran Jovanovic" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, May 20, 2004 1:30 PM Subject: RE: [Declude.JunkMail] FTC to crack down on porn spam I have a better idea. Make the spammers put the word SPAM at the beginning of the subject line (regardless of content) then it would make it really easy for filters.. All I have to say is this is going to be very usefulNOT Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED]] On Behalf Of Matt Sent: Thursday, May 20, 2004 9:53 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] FTC to crack down on porn spam What a bunch of idgets http://money.cnn.com/2004/05/19/technology/ftc_spam/index.htm -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- Sign up for virus-free and spam-free e-mail with Nexus Technology Group http://www.nexustechgroup.com/mailscan --- Sign up for virus-free and spam-free e-mail with Nexus Technology Group http://www.nexustechgroup.com/mailscan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
RE: [Declude.JunkMail] Are tests executed?
OK Let me recap TESTNAME filter Is defined in global.cfg Every e-mail what goes through the system will have this test executed against it. Assuming no END statements the test will run to conclusion. If the e-mail fails something in the test that gives it a score of 10 then (here we have a difference of opinion) John says that the 10 will be added to the score for that e-mail regardless of the per domain configs Nick says that the 10 will not be added to the score of the e-mail unless the TESTNAME is defined in the per domain config The actions that can be taken in the per domain config TESTNAME IGNORE this will add the score to the e-mail but nothing will be added to the headers TESTNAME WARN this will add the score to the e-mail and a warning in the headers What I am really trying to understand is: I want to try out a new test. I put it in global.cfg. It is a filter test that is going to add scores of 5 to 50 depending on what it does. I only want the test to apply to one domain so that I can test it out. How do I do this? Can I do this? Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Thursday, May 20, 2004 3:48 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Are tests executed? Nick and Goran, I thought that I would clarify one thing that I think is more to the point on one of the questions regarding scoring. When a test produces a score, that score always applies to the total weight regardless of if an action is defined in the JunkMail file. With custom filters you can disable the filter and therefore the scoring for a particular user or domain using END statements so that it doesn't produce any score, but you need to have JunkMail Pro to do that, and you should be running at least the 1.79 beta. If you want to be more specific, I'm sure that someone around here will help you get something running the way you want it to. Matt Nick Hayer wrote: On 20 May 2004 at 14:46, Goran Jovanovic GJovanovic wrote:Goran,Since this has not been answered someone lower on the food chain [me]will give it a tryOn 20 May 2004 at 13:57, Goran Jovanovic wrote: OK if I have a test defined in the GLOBAL.CFG and I have per-domainconfigs and if I only add the line TESTNAME WARN (or whatever) In only one domain's $default$.junkmail file1) Will the test be executed for each e-mail for every domain oronly the tests listed in that domains .junkmail file? The test will always execute - it is defined in the global.cfg. TheACTIONS of the test will execute are defines in that domains.junkmail file 2) If the test is executed for all domains then will the score of the test be added to e-mails for all domains? Nope. the ACTION of the test - WARN, etc execution is controlled bythe .junkmail where the test is listed. 3) If 2 is true then doI have to add TESTNAME IGNORE to all other domain's config files to not count the score?nope.Hope this confused ya...Bottom line the way I see it - tests are executed in the global.cfg.IF that test is defined in a particular .junkmail file that junkmail file will define the action to take.Cheers - -Nick Hayer Thanx Goran Jovanovic The LAN Shoppe---[This E-mail was scanned for viruses by Declude Virus(http://www.declude.com)]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be found athttp://www.mail-archive.com. ---[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be foundat http://www.mail-archive.com. -- =MailPure custom filters for Declude JunkMail Pro.http://www.mailpure.com/software/= image001.gif
Re: [Declude.JunkMail] Are these Forged?
At 02:34 PM 5/20/2004, Mike Wiegers wrote: Started getting these lately and needed to find out if they are forged and if Declude site is setup to handle them as forged. Exploit-ObjectData trojan Yep...and Downloader-IU!zip trojan Yep... -Russ --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DNSstuff Website
My plan B in those situations is another tech who's still on site :) want a new job? (just kidding :) I'm a 1-man shop. Works great so long as you never take a vacation or get hit by a bus. -- --- Matt Robertson, [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Are tests executed?
2) If the test is executed for all domains then will the score of the test be added to e-mails for all domains? Nope. the ACTION of the test - WARN, etc execution is controlled by the .junkmail where the test is listed. Incorrect. While it is true of the action, the weight will still be added. John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DNSstuff Website
I am in the same boat. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Matt Robertson Sent: Thursday, May 20, 2004 1:29 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] DNSstuff Website My plan B in those situations is another tech who's still on site :) want a new job? (just kidding :) I'm a 1-man shop. Works great so long as you never take a vacation or get hit by a bus. -- --- Matt Robertson, [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Are tests executed?
I just posted a reply to Nicks post that I should have done earlier. The weight will be applied no matter what, assuming no END statements and such. Since it is a filter test, I would put a line at the top something like this: ALLRECIPS END NOTENDSWITH domaintobeusedfortestthisrule That way, unless the recipient is in the domain you list, the test will end. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Thursday, May 20, 2004 1:11 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Are tests executed? OK Let me recap TESTNAME filter Is defined in global.cfg Every e-mail what goes through the system will have this test executed against it. Assuming no END statements the test will run to conclusion. If the e-mail fails something in the test that gives it a score of 10 then (here we have a difference of opinion) John says that the 10 will be added to the score for that e-mail regardless of the per domain configs Nick says that the 10 will not be added to the score of the e-mail unless the TESTNAME is defined in the per domain config The actions that can be taken in the per domain config TESTNAME IGNORE this will add the score to the e-mail but nothing will be added to the headers TESTNAME WARN this will add the score to the e-mail and a warning in the headers What I am really trying to understand is: I want to try out a new test. I put it in global.cfg. It is a filter test that is going to add scores of 5 to 50 depending on what it does. I only want the test to apply to one domain so that I can test it out. How do I do this? Can I do this? Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Thursday, May 20, 2004 3:48 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Are tests executed? Nick and Goran, I thought that I would clarify one thing that I think is more to the point on one of the questions regarding scoring. When a test produces a score, that score always applies to the total weight regardless of if an action is defined in the JunkMail file. With custom filters you can disable the filter and therefore the scoring for a particular user or domain using END statements so that it doesn't produce any score, but you need to have JunkMail Pro to do that, and you should be running at least the 1.79 beta. If you want to be more specific, I'm sure that someone around here will help you get something running the way you want it to. Matt Nick Hayer wrote: On 20 May 2004 at 14:46, Goran Jovanovic GJovanovic wrote:Goran,Since this has not been answered someone lower on the food chain [me]will give it a tryOn 20 May 2004 at 13:57, Goran Jovanovic wrote: OK if I have a test defined in the GLOBAL.CFG and I have per-domainconfigs and if I only add the line TESTNAME WARN (or whatever) In only one domain's $default$.junkmail file1) Will the test be executed for each e-mail for every domain oronly the tests listed in that domains .junkmail file? The test will always execute - it is defined in the global.cfg. TheACTIONS of the test will execute are defines in that domains.junkmail file 2) If the test is executed for all domains then will the score of the test be added to e-mails for all domains? Nope. the ACTION of the test - WARN, etc execution is controlled bythe .junkmail where the test is listed. 3) If 2 is true then doI have to add TESTNAME IGNORE to all other domain's config files to not count the score?nope.Hope this confused ya...Bottom line the way I see it - tests are executed in the global.cfg.IF that test is defined in a particular .junkmail file that junkmail file will define the action to take.Cheers - -Nick Hayer Thanx Goran Jovanovic The LAN Shoppe---[This E-mail was scanned for viruses by Declude Virus(http://www.declude.com)]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be found athttp://www.mail-archive.com. ---[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be foundat http://www.mail-archive.com. -- =MailPure custom filters for Declude JunkMail Pro.http://www.mailpure.com/software/= image001.gif
RE: [Declude.JunkMail] DNSstuff Website
Vacation? What's that Same here Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Matt Robertson Sent: Thursday, May 20, 2004 1:29 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] DNSstuff Website My plan B in those situations is another tech who's still on site :) want a new job? (just kidding :) I'm a 1-man shop. Works great so long as you never take a vacation or get hit by a bus. -- --- Matt Robertson, [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail]
You have WEIGHT10HOLD WEIGHT20HOLD In your .junkmail file. Could it be that the WEIGHT20 is nullifying the WEIGHT10? You certainly could remove the WEIGHT20 line as the WEIGHT10 will handle it. Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Bridges, Samantha Sent: Thursday, May 20, 2004 2:42 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Scott or anyone who can help - Below is the headers from a spam message. The Declude headers say that it failed the Weight 10 test. I have a HOLD on Weight 10 in my $default$.junkmail file. If I have a HOLD on the weight 10 then why did it get through. Thanks, Samantha Microsoft Mail Internet Headers Version 2.0 Received: from apollo.misd.net ([64.88.0.98]) by xmail1.macombisd.org with Microsoft SMTPSVC(5.0.2195.6713); Thu, 20 May 2004 14:36:06 -0400 Received: from SMTP32-FWD by apollo.misd.net (SMTP32) id AFB0C00F1017A9453; Thu, 20 May 2004 14:38:14 Received: from icc.rbo01.com [64.156.223.22] by apollo.misd.net with ESMTP (SMTPD32-8.11) id AB0CF1017A; Thu, 20 May 2004 14:38:04 -0400 Received: from ABCMS04 (192.168.5.14) by icc.rbo01.com (PowerMTA(TM) v2.0r1) id hljt8m046p4b; Thu, 20 May 2004 14:35:53 -0400 (envelope-from [EMAIL PROTECTED]) Date: 20 May 2004 18:35:50 GMT From: Holiday-Cheer[EMAIL PROTECTED] To: [EMAIL PROTECTED] REPLY-TO: [EMAIL PROTECTED] ERROR-TO: [EMAIL PROTECTED] Subject: Albert Pays Mime-Version: 1.0 Content-Type: text/html; charset=ISO-8859-1 Message-Id: [EMAIL PROTECTED] X-RBL-Warning: AHBL: 1079220623 bruns - Spam Source - 64.156.222.0/23 - rbo01.com, and others [2-2-1000] X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [4000120e]. [2-33-10800] X-Declude-Sender: [EMAIL PROTECTED] [64.156.223.22] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: AHBL, SPAMHEADERS [9] X-Country-Chain: X-Note: This E-mail was sent from icc.rbo01.com ([64.156.223.22]). X-RBL-Warning: AHBL: 1079220623 bruns - Spam Source - 64.156.222.0/23 - rbo01.com, and others [1-2-1000] X-RBL-Warning: SBL: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL7279; [1-7-3800] X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [4000100e]. [1-33-10800] X-RBL-Warning: WEIGHT10: Weight of 16 reaches or exceeds the limit of 10. [1-34-11000] X-Declude-Sender: [EMAIL PROTECTED] [64.156.223.22] X-Spam-Tests-Failed: AHBL, SBL, SPAMHEADERS, WEIGHT10 [16] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 20 May 2004 18:36:06.0995 (UTC) FILETIME=[50378230:01C43E99] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Are tests executed?
On 20 May 2004 at 13:34, John Tolmachoff (Lists) wrote: Incorrect. While it is true of the action, the weight will still be added. Yup - I was thinking about 0 [zero] scoring and taking an action in the applicable junkmail file. Sorry about the misinformation.. -Nick Hayer . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Are tests executed?
Goran, Not a difference of opinion, a difference in description, but they were all accurate. Test actions have no effect on the score (weight) applied by tests. Setting a test action to IGNORE will not affect the score applied by that test. What you are looking to do would be best done with a filter that began with the line: ALLRECIPS END NOTCONTAINS @mytestdomain.com ...yadda, yadda, yadda To do this, you must download the most recent interim release, 1.79i6, otherwise the ALLRECIPS might be broken, and NOTCONTAINS was just introduced in this version (alleluia). Matt Goran Jovanovic wrote: OK Let me recap TESTNAME filter Is defined in global.cfg Every e-mail what goes through the system will have this test executed against it. Assuming no END statements the test will run to conclusion. If the e-mail fails something in the test that gives it a score of 10 then (here we have a difference of opinion) John says that the 10 will be added to the score for that e-mail regardless of the per domain configs Nick says that the 10 will not be added to the score of the e-mail unless the TESTNAME is defined in the per domain config The actions that can be taken in the per domain config TESTNAME IGNORE this will add the score to the e-mail but nothing will be added to the headers TESTNAME WARN this will add the score to the e-mail and a warning in the headers What I am really trying to understand is: I want to try out a new test. I put it in global.cfg. It is a filter test that is going to add scores of 5 to 50 depending on what it does. I only want the test to apply to one domain so that I can test it out. How do I do this? Can I do this? Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Thursday, May 20, 2004 3:48 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Are tests executed? Nick and Goran, I thought that I would clarify one thing that I think is more to the point on one of the questions regarding scoring. When a test produces a score, that score always applies to the total weight regardless of if an action is defined in the JunkMail file. With custom filters you can disable the filter and therefore the scoring for a particular user or domain using END statements so that it doesn't produce any score, but you need to have JunkMail Pro to do that, and you should be running at least the 1.79 beta. If you want to be more specific, I'm sure that someone around here will help you get something running the way you want it to. Matt Nick Hayer wrote: On 20 May 2004 at 14:46, "Goran Jovanovic" GJovanovic wrote: Goran, Since this has not been answered someone lower on the food chain [me] will give it a try On 20 May 2004 at 13:57, Goran Jovanovic wrote: OK if I have a test defined in the GLOBAL.CFG and I have per-domain configs and if I only add the line TESTNAME WARN (or whatever) In only one domain's $default$.junkmail file 1) Will the test be executed for each e-mail for every domain or only the tests listed in that domains .junkmail file? The test will always execute - it is defined in the global.cfg. The ACTIONS of the test will execute are defines in "that domains .junkmail file" 2) If the test is executed for all domains then will the score of the test be added to e-mails for all domains? Nope. the ACTION of the test - WARN, etc execution is controlled by the ".junkmail where the test is listed. 3) If 2 is true then doI have to add TESTNAME IGNORE to all other domain's config files to not count the score? nope. Hope this confused ya... Bottom line the way I see it - tests are executed in the global.cfg. "IF" that test is defined in a particular .junkmail file that junkmail file will define the action to take. Cheers - -Nick Hayer Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at
Re: [Declude.JunkMail] Are tests executed?
I'm pretty sure NOTCONTAINS requires 1.79i7 Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 05/20/04 04:05PM Goran, Not a difference of opinion, a difference in description, but they were all accurate. Test actions have no effect on the score (weight) applied by tests. Setting a test action to IGNORE will not affect the score applied by that test. What you are looking to do would be best done with a filter that began with the line: ALLRECIPS END NOTCONTAINS @mytestdomain.com ...yadda, yadda, yadda To do this, you must download the most recent interim release, 1.79i6, otherwise the ALLRECIPS might be broken, and NOTCONTAINS was just introduced in this version (alleluia). Matt Goran Jovanovic wrote: OK Let me recap TESTNAME filter .. Is defined in global.cfg Every e-mail what goes through the system will have this test executed against it. Assuming no END statements the test will run to conclusion. If the e-mail fails something in the test that gives it a score of 10 then (here we have a difference of opinion) John says that the 10 will be added to the score for that e-mail regardless of the per domain configs Nick says that the 10 will not be added to the score of the e-mail unless the TESTNAME is defined in the per domain config The actions that can be taken in the per domain config TESTNAME IGNOREthis will add the score to the e-mail but nothing will be added to the headers TESTNAME WARN this will add the score to the e-mail and a warning in the headers What I am really trying to understand is: I want to try out a new test. I put it in global.cfg. It is a filter test that is going to add scores of 5 to 50 depending on what it does. I only want the test to apply to one domain so that I can test it out. How do I do this? Can I do this? Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Thursday, May 20, 2004 3:48 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Are tests executed? Nick and Goran, I thought that I would clarify one thing that I think is more to the point on one of the questions regarding scoring. When a test produces a score, that score always applies to the total weight regardless of if an action is defined in the JunkMail file. With custom filters you can disable the filter and therefore the scoring for a particular user or domain using END statements so that it doesn't produce any score, but you need to have JunkMail Pro to do that, and you should be running at least the 1.79 beta. If you want to be more specific, I'm sure that someone around here will help you get something running the way you want it to. Matt Nick Hayer wrote: On 20 May 2004 at 14:46, Goran Jovanovic GJovanovic wrote: Goran, Since this has not been answered someone lower on the food chain [me] will give it a try On 20 May 2004 at 13:57, Goran Jovanovic wrote: OK if I have a test defined in the GLOBAL.CFG and I have per-domain configs and if I only add the line TESTNAME WARN (or whatever) In only one domain's $default$.junkmail file 1) Will the test be executed for each e-mail for every domain or only the tests listed in that domains .junkmail file? The test will always execute - it is defined in the global.cfg. The ACTIONS of the test will execute are defines in that domains .junkmail file 2) If the test is executed for all domains then will the score of the test be added to e-mails for all domains? Nope. the ACTION of the test - WARN, etc execution is controlled by the .junkmail where the test is listed. 3) If 2 is true then doI have to add TESTNAME IGNORE to all other domain's config files to not count the score? nope. Hope this confused ya... Bottom line the way I see it - tests are executed in the global.cfg. IF that test is defined in a particular .junkmail file that junkmail file will define the action to take. Cheers - -Nick Hayer Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED] mailto:[EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came
Re: [Declude.JunkMail] Are tests executed?
Sorry about that. You are of course correct. Matt Scott Fisher wrote: I'm pretty sure NOTCONTAINS requires 1.79i7 Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 05/20/04 04:05PM Goran, Not a difference of opinion, a difference in description, but they were all accurate. Test actions have no effect on the score (weight) applied by tests. Setting a test action to IGNORE will not affect the score applied by that test. What you are looking to do would be best done with a filter that began with the line: ALLRECIPS END NOTCONTAINS @mytestdomain.com ...yadda, yadda, yadda To do this, you must download the most recent interim release, 1.79i6, otherwise the ALLRECIPS might be broken, and NOTCONTAINS was just introduced in this version (alleluia). Matt Goran Jovanovic wrote: OK Let me recap TESTNAME filter .. Is defined in global.cfg Every e-mail what goes through the system will have this test executed against it. Assuming no END statements the test will run to conclusion. If the e-mail fails something in the test that gives it a score of 10 then (here we have a difference of opinion) John says that the 10 will be added to the score for that e-mail regardless of the per domain configs Nick says that the 10 will not be added to the score of the e-mail unless the TESTNAME is defined in the per domain config The actions that can be taken in the per domain config TESTNAME IGNOREthis will add the score to the e-mail but nothing will be added to the headers TESTNAME WARN this will add the score to the e-mail and a warning in the headers What I am really trying to understand is: I want to try out a new test. I put it in global.cfg. It is a filter test that is going to add scores of 5 to 50 depending on what it does. I only want the test to apply to one domain so that I can test it out. How do I do this? Can I do this? Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Thursday, May 20, 2004 3:48 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Are tests executed? Nick and Goran, I thought that I would clarify one thing that I think is more to the point on one of the questions regarding scoring. When a test produces a score, that score always applies to the total weight regardless of if an action is defined in the JunkMail file. With custom filters you can disable the filter and therefore the scoring for a particular user or domain using END statements so that it doesn't produce any score, but you need to have JunkMail Pro to do that, and you should be running at least the 1.79 beta. If you want to be more specific, I'm sure that someone around here will help you get something running the way you want it to. Matt Nick Hayer wrote: On 20 May 2004 at 14:46, "Goran Jovanovic" GJovanovic wrote: Goran, Since this has not been answered someone lower on the food chain [me] will give it a try On 20 May 2004 at 13:57, Goran Jovanovic wrote: OK if I have a test defined in the GLOBAL.CFG and I have per-domain configs and if I only add the line TESTNAME WARN (or whatever) In only one domain's $default$.junkmail file 1) Will the test be executed for each e-mail for every domain or only the tests listed in that domains .junkmail file? The test will always execute - it is defined in the global.cfg. The ACTIONS of the test will execute are defines in "that domains .junkmail file" 2) If the test is executed for all domains then will the score of the test be added to e-mails for all domains? Nope. the ACTION of the test - WARN, etc execution is controlled by the ".junkmail where the test is listed. 3) If 2 is true then doI have to add TESTNAME IGNORE to all other domain's config files to not count the score? nope. Hope this confused ya... Bottom line the way I see it - tests are executed in the global.cfg. "IF" that test is defined in a particular .junkmail file that junkmail file will define the action to take. Cheers - -Nick Hayer Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED] mailto:[EMAIL PROTECTED], and type
RE: [Declude.JunkMail] Are tests executed?
OK this is what I really wanted to know. Guess I should have asked that in the first place. I will go and get the latest interim and then check it out J Thanx Goran Jovanovic The LAN Shoppe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Thursday, May 20, 2004 5:05 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Are tests executed? Goran, Not a difference of opinion, a difference in description, but they were all accurate. Test actions have no effect on the score (weight) applied by tests. Setting a test action to IGNORE will not affect the score applied by that test. What you are looking to do would be best done with a filter that began with the line: ALLRECIPS END NOTCONTAINS @mytestdomain.com ...yadda, yadda, yadda To do this, you must download the most recent interim release, 1.79i6, otherwise the ALLRECIPS might be broken, and NOTCONTAINS was just introduced in this version (alleluia). Matt Goran Jovanovic wrote: OK Let me recap TESTNAME filter Is defined in global.cfg Every e-mail what goes through the system will have this test executed against it. Assuming no END statements the test will run to conclusion. If the e-mail fails something in the test that gives it a score of 10 then (here we have a difference of opinion) John says that the 10 will be added to the score for that e-mail regardless of the per domain configs Nick says that the 10 will not be added to the score of the e-mail unless the TESTNAME is defined in the per domain config The actions that can be taken in the per domain config TESTNAME IGNORE this will add the score to the e-mail but nothing will be added to the headers TESTNAME WARN this will add the score to the e-mail and a warning in the headers What I am really trying to understand is: I want to try out a new test. I put it in global.cfg. It is a filter test that is going to add scores of 5 to 50 depending on what it does. I only want the test to apply to one domain so that I can test it out. How do I do this? Can I do this? Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Thursday, May 20, 2004 3:48 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Are tests executed? Nick and Goran, I thought that I would clarify one thing that I think is more to the point on one of the questions regarding scoring. When a test produces a score, that score always applies to the total weight regardless of if an action is defined in the JunkMail file. With custom filters you can disable the filter and therefore the scoring for a particular user or domain using END statements so that it doesn't produce any score, but you need to have JunkMail Pro to do that, and you should be running at least the 1.79 beta. If you want to be more specific, I'm sure that someone around here will help you get something running the way you want it to. Matt Nick Hayer wrote: On 20 May 2004 at 14:46, Goran Jovanovic GJovanovic wrote:Goran,Since this has not been answered someone lower on the food chain [me]will give it a tryOn 20 May 2004 at 13:57, Goran Jovanovic wrote: OK if I have a test defined in the GLOBAL.CFG and I have per-domainconfigs and if I only add the line TESTNAME WARN (or whatever) In only one domain's $default$.junkmail file1) Will the test be executed for each e-mail for every domain oronly the tests listed in that domains .junkmail file? The test will always execute - it is defined in the global.cfg. TheACTIONS of the test will execute are defines in that domains.junkmail file 2) If the test is executed for all domains then will the score of the test be added to e-mails for all domains? Nope. the ACTION of the test - WARN, etc execution is controlled bythe .junkmail where the test is listed. 3) If 2 is true then doI have to add TESTNAME IGNORE to all other domain's config files to not count the score?nope.Hope this confused ya...Bottom line the way I see it - tests are executed in the global.cfg.IF that test is defined in a particular .junkmail file that junkmail file will define the action to take.Cheers - -Nick Hayer Thanx Goran Jovanovic The LAN Shoppe---[This E-mail was scanned for viruses by Declude Virus(http://www.declude.com)]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be found athttp://www.mail-archive.com. ---[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be foundat
