[Declude.JunkMail] New directives
Hi; I could not find in the manual the details on how to set the following- I finally found it in the sample Global.cfg: STOPPROCESSINGONFIRSTDELETE ONCOPYFILEACTIONWITHHEADERS ONADJUSTFORLOAD ON But I can't find anything on how to set the following and it is not in the sample global.cfg. CONCATENATELOGSTHRESHOLD should there be a number in front of this? CONCATENATELOGSTHRESHOLD 10 I think it will be a good feature if you provide an example after each description on how to use the feature. A single example can go a long way. Regards, -Kami
Re: [Declude.JunkMail] Declude 2.0.6
On 11 Apr 2005 at 20:44, Barry Simpson wrote: > Declude Version 2.0.6 was posted to www.declude.com earlier today. > Updated Release Notes and Documentation are also available. How is the ProcessCounter invoked? I see it in the docs but that is it - Is any kind of logical processing avail or planned? For example in the global.cfg/a filter file statements like: IF %WEIGHT% = 36 DELETE ENDIF Thanks -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] New directives
On 12 Apr 2005 at 4:23, Kami Razvan wrote: Hi Kami > STOPPROCESSINGONFIRSTDELETE ON > COPYFILEACTIONWITHHEADERS ON > ADJUSTFORLOADON CONCATENATELOGSTHRESHOLD Some of these explanations are at the bottom of the junkmail manual. [To find the manual I did a google site search for manual.. ] > I think it will be a good feature if you provide an example after each > description on how to use the feature. A single example can go a long > way. Agreed - Excellent idea! -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude 2.0.6
You can use weightrange to define your own test/action to delete on an exact weight of 36. Darin. - Original Message - From: "Nick" <[EMAIL PROTECTED]> To: Sent: Tuesday, April 12, 2005 8:57 AM Subject: Re: [Declude.JunkMail] Declude 2.0.6 On 11 Apr 2005 at 20:44, Barry Simpson wrote: > Declude Version 2.0.6 was posted to www.declude.com earlier today. > Updated Release Notes and Documentation are also available. How is the ProcessCounter invoked? I see it in the docs but that is it - Is any kind of logical processing avail or planned? For example in the global.cfg/a filter file statements like: IF %WEIGHT% = 36 DELETE ENDIF Thanks -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] New directives
Kami, If you follow the link to the "JunkMail Manual" from the "Tech Support" page on the Declude site, you will find documentation for these features. I suppose that it is possible that they didn't update the old manual.htm redirects, but going through the site in this way does work. They are now also naming the manual by the version instead of having it in an ASP page so I assume that the manuals will live on in different versions instead of the old one size fits all method. Matt Kami Razvan wrote: Hi; I could not find in the manual the details on how to set the following- I finally found it in the sample Global.cfg: STOPPROCESSINGONFIRSTDELETE ON COPYFILEACTIONWITHHEADERS ON ADJUSTFORLOAD ON But I can't find anything on how to set the following and it is not in the sample global.cfg. CONCATENATELOGSTHRESHOLD should there be a number in front of this? CONCATENATELOGSTHRESHOLD 10 I think it will be a good feature if you provide an example after each description on how to use the feature. A single example can go a long way. Regards, -Kami -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
Re: [Declude.JunkMail] Declude 2.0.6
On 12 Apr 2005 at 10:51, Darin Cox wrote: Hi Darin - > You can use weightrange to define your own test/action to delete on an > exact weight of 36. Understood. Thanks for the reply But I was just using the DELETE action as an example. I am looking for IF - ELSE CASE functionality - -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude 2.0.6
Gotcha. I don't believe that currently exists, but many have found workarounds by defining a test and checking for it in a filter file (Pro version required). Darin. - Original Message - From: "Nick" <[EMAIL PROTECTED]> To: Sent: Tuesday, April 12, 2005 11:10 AM Subject: Re: [Declude.JunkMail] Declude 2.0.6 On 12 Apr 2005 at 10:51, Darin Cox wrote: Hi Darin - > You can use weightrange to define your own test/action to delete on an > exact weight of 36. Understood. Thanks for the reply But I was just using the DELETE action as an example. I am looking for IF - ELSE CASE functionality - -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DLAnalyzer 4.1.0 Released
WOW, Declude 4.0.6. I must have overslept a bit. ;) John T eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) > Sent: Tuesday, April 12, 2005 8:07 AM > To: Declude.JunkMail@declude.com > Cc: Declude.Virus@declude.com > Subject: [Declude.JunkMail] DLAnalyzer 4.1.0 Released > > DLAnalyzer 4.1.0 has been released. Version 4.1.0 is compatible with the > enhanced logging changes introduced with Declude version 4.0.6. > > DLAnalyzer is a comprehensive reporting tool that integrates both Junkmail > and Virus statistics into one report. Some of the features require the > Enterprise or Standard version, but we also have a FREE LITE version > available. > > Release Notes: http://www.invariantsystems.com/download/current/readme.txt > > Download: http://www.invariantsystems.com/dlanalyzer/download.asp > > We encourage all users of DLAnalyzer to upgrade to 4.1.0 as previous > versions of DLAnalyzer will not work correctly with the new logging format > of Declude 2.0.6. > > Any questions let me know, > Darrell > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] DLAnalyzer 4.1.0 Released
Good catch :) Where were you the moment before I sent the message :) Darrell John Tolmachoff (Lists) writes: WOW, Declude 4.0.6. I must have overslept a bit. ;) John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, April 12, 2005 8:07 AM To: Declude.JunkMail@declude.com Cc: Declude.Virus@declude.com Subject: [Declude.JunkMail] DLAnalyzer 4.1.0 Released DLAnalyzer 4.1.0 has been released. Version 4.1.0 is compatible with the enhanced logging changes introduced with Declude version 4.0.6. DLAnalyzer is a comprehensive reporting tool that integrates both Junkmail and Virus statistics into one report. Some of the features require the Enterprise or Standard version, but we also have a FREE LITE version available. Release Notes: http://www.invariantsystems.com/download/current/readme.txt Download: http://www.invariantsystems.com/dlanalyzer/download.asp We encourage all users of DLAnalyzer to upgrade to 4.1.0 as previous versions of DLAnalyzer will not work correctly with the new logging format of Declude 2.0.6. Any questions let me know, Darrell --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Running declude from another program
To be more specific. I call declude and windows runs it with NTDVM and the message isn't processed. After awhile, I stop the SMTP server and all the messages are processed but still leaves the NTDVM that was created behind. What I'm doing is reading in the command line argument and then when I'm done, call declude with that argument. The reason that I'm creating this is because I have some users that want mail from a certain address to be placed in a temporary dircetory and not processed by declude. When was the DAISYCHAIN added? David - Original Message - From: John Tolmachoff (Lists) To: Declude.JunkMail@declude.com Sent: Monday, April 11, 2005 8:27 PM Subject: RE: [Declude.JunkMail] Running declude from another program It is a command line. declude filenameofmessagetobescanned John T eServices For You -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Hayes-MoatsSent: Monday, April 11, 2005 2:16 PMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] Running declude from another program Does anybody know if you have to do something special to call declude from another program? I need to run a program before declude is run. David
Re: [Declude.JunkMail] New directives
CONCATENATELOGSTHRESHOLD should there be a number in front of this? CONCATENATELOGSTHRESHOLD 10 I think it will be a good feature if you provide an example after each description on how to use the feature. A single example can go a long Those directives go in the declude.cfg file as they apply to both Virus and Junkmail. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] DLAnalyzer 4.1.0 Released
DLAnalyzer 4.1.0 has been released. Version 4.1.0 is compatible with the enhanced logging changes introduced with Declude version 4.0.6. DLAnalyzer is a comprehensive reporting tool that integrates both Junkmail and Virus statistics into one report. Some of the features require the Enterprise or Standard version, but we also have a FREE LITE version available. Release Notes: http://www.invariantsystems.com/download/current/readme.txt Download: http://www.invariantsystems.com/dlanalyzer/download.asp We encourage all users of DLAnalyzer to upgrade to 4.1.0 as previous versions of DLAnalyzer will not work correctly with the new logging format of Declude 2.0.6. Any questions let me know, Darrell --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] New directives
Title: Message Comment on STOPPROCESSINGONFIRSTDELETE ON It does what it says. We installed the upgrade last night and found this little gem has reduced our cpu load dramatically since we use the delete action extensively. Nice work Barry and the Declude team! Michael JaworskiPuget Sound Network, Inc.
[Declude.JunkMail] DYNHELO Test
Is anyone using the DYNHELO test in Declude - if so do you have any information on it? What specifically is it looking for? False positive rate?I found it in the new global.cfg file, but did not see any references to it in the manual. Also, for the BCC test any thoughts on what the sweet spot tends to be - by default it comes at 10. Has anyone tweaked this? Darrell -- Try invURIBL - an advanced URI filtering test that will block more than 85% of all SPAM with the default configuration? Try it for free http://www.invariantsystems.com/invuribl/default.htm --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DYNHELO Test
Any feedback on these tests and performance will be appreciated here is some info on these tests. BCC bcc 10 x 5 0 This test type, checks to see if there are more than X known BCC:'s for this E-mail (where X is the first test-type-specific piece of information set to 10 in this example). It simply goes through each recipient, and checks to see if the E-mail contains the E-mail address of the recipient. The first piece of test-type-specific information is the minimum number of BCC:'s required in order for the E-mail to fail the test. DYNHELO dynhelo x x 5 0 This test type, attempts to detect dynamic IPs in HELO/EHLO hostnames. This test should be quite effective, since mailservers on IPs that have dynamic-like reverse DNS entries will *not* normally send an HELO/EHLO that looks dynamic. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, April 12, 2005 1:12 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] DYNHELO Test Is anyone using the DYNHELO test in Declude - if so do you have any information on it? What specifically is it looking for? False positive rate?I found it in the new global.cfg file, but did not see any references to it in the manual. Also, for the BCC test any thoughts on what the sweet spot tends to be - by default it comes at 10. Has anyone tweaked this? Darrell -- Try invURIBL - an advanced URI filtering test that will block more than 85% of all SPAM with the default configuration? Try it for free http://www.invariantsystems.com/invuribl/default.htm --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. __ NOD32 1.1058 (20050412) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude
Alright, I've run a few tests, and much of it seems to be working. However, when I look at the headers, it says "X-Note: This E-mail was scanned by Declude JunkMail for spam." but I'm not seeing "X-Spam-Tests-Failed" or any of the other headers. I do have a directory set up in the declude directory with a $default$.junkmail file, but I'm fairly certain that Declude is not using that file at all, and is likely defaulting to the global.cfg settings. -- A. Clausen --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DYNHELO Test
On 12 Apr 2005 at 13:16, David Barker wrote: Hi David, > BCC bcc 10 x 5 0 > This test type, checks to see if there are more than X known BCC:'s I think Darrell's question was related to optimum setting rather than functionality. -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude
Is this for a local domain or a store and forward domain. If its for a store and forward domain did you create the domain folder for it under Declude? Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. A. Clausen writes: Alright, I've run a few tests, and much of it seems to be working. However, when I look at the headers, it says "X-Note: This E-mail was scanned by Declude JunkMail for spam." but I'm not seeing "X-Spam-Tests-Failed" or any of the other headers. I do have a directory set up in the declude directory with a $default$.junkmail file, but I'm fairly certain that Declude is not using that file at all, and is likely defaulting to the global.cfg settings. -- A. Clausen --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude
Darrell ([EMAIL PROTECTED]) wrote: Is this for a local domain or a store and forward domain. If its for a store and forward domain did you create the domain folder for it under Declude? Darrell It's a store-and-forward domain, and I did create a domain folder under the Declude directory. So far as I can tell, Declude is not using that directory to scan the incoming mail. -- A. Clausen --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DYNHELO Test
Darrell.. The BCC test to me is scary if used by itself- I can see it being used as a combo test but alone with any weight is not something I would use. We have clients that use their outlook and send 50+ people in a single BCC .. Emails to boards and volunteer groups in nonprofits and political groups are quite typical with large BCC. Just my 2 cents.. Regards, - Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, April 12, 2005 1:12 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] DYNHELO Test Is anyone using the DYNHELO test in Declude - if so do you have any information on it? What specifically is it looking for? False positive rate?I found it in the new global.cfg file, but did not see any references to it in the manual. Also, for the BCC test any thoughts on what the sweet spot tends to be - by default it comes at 10. Has anyone tweaked this? Darrell -- Try invURIBL - an advanced URI filtering test that will block more than 85% of all SPAM with the default configuration? Try it for free http://www.invariantsystems.com/invuribl/default.htm --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude
If you are forwarding mail to another server in other words using Declude for OUTBOUND scanning the Actions are defined in the global.cfg also consider it will be using the xoutheaders in your global.cfg. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of A. Clausen Sent: Tuesday, April 12, 2005 1:15 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude Alright, I've run a few tests, and much of it seems to be working. However, when I look at the headers, it says "X-Note: This E-mail was scanned by Declude JunkMail for spam." but I'm not seeing "X-Spam-Tests-Failed" or any of the other headers. I do have a directory set up in the declude directory with a $default$.junkmail file, but I'm fairly certain that Declude is not using that file at all, and is likely defaulting to the global.cfg settings. -- A. Clausen --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. __ NOD32 1.1058 (20050412) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DYNHELO Test
Yes, I agree, I thought I would post it anyway as he had said he could not find any info of these tests in the manual. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Sent: Tuesday, April 12, 2005 1:22 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test On 12 Apr 2005 at 13:16, David Barker wrote: Hi David, > BCC bcc 10 x 5 0 > This test type, checks to see if there are more than X known BCC:'s I think Darrell's question was related to optimum setting rather than functionality. -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. ______ NOD32 1.1058 (20050412) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] BCC Test
Hi: I hold at 10: BCC4bcc 4 x 2 0 BCC6bcc 6 x 2 0 BCC8bcc 8 x 2 0 I whitelist SMTP AUTH. So - based on this, I'm really only effecting INCOMING emails where an outside is sending email to 4 or more people at the same company AND is NOT doing it openly (using CC:), but doing it "hidden" (using BCC). Contrary to other comments, I have yet to encounter a complaint about a held or deleted email where BCC was the culprit. As far as effectiveness - very low. As far as false-positives - very low as well. Virtually all messages ended up being held or deleted. Of total messages: BCC4...1.55% BCC6...0.80% BCC8...0.41% Messages that were HELD/DELETED and failed BCC (% of total messages): BCC4...1.51% BCC6...0.79% BCC8...0.41% Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, April 12, 2005 01:12 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] DYNHELO Test Is anyone using the DYNHELO test in Declude - if so do you have any information on it? What specifically is it looking for? False positive rate?I found it in the new global.cfg file, but did not see any references to it in the manual. Also, for the BCC test any thoughts on what the sweet spot tends to be - by default it comes at 10. Has anyone tweaked this? Darrell -- Try invURIBL - an advanced URI filtering test that will block more than 85% of all SPAM with the default configuration? Try it for free http://www.invariantsystems.com/invuribl/default.htm --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude
David Barker wrote: If you are forwarding mail to another server in other words using Declude for OUTBOUND scanning the Actions are defined in the global.cfg also consider it will be using the xoutheaders in your global.cfg. Okay, I'm a little confused here, but if what you say is right, then it makes sense. We're not scanning outbound mail, except for antivirus, which explains why the message has a header saying "Scanned by declude". The question then is how do I set things up so that Declude Junkmail scans this message? -- A. Clausen --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude
Quick follow-up did you put a $default$.junkmail file under that domain. if you could bump your logs up to HIGH and post a snippet of that to the list for us to see. Darrell A. Clausen writes: Darrell ([EMAIL PROTECTED]) wrote: Is this for a local domain or a store and forward domain. If its for a store and forward domain did you create the domain folder for it under Declude? Darrell It's a store-and-forward domain, and I did create a domain folder under the Declude directory. So far as I can tell, Declude is not using that directory to scan the incoming mail. -- A. Clausen --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] DYNHELO Test
Kami, Excellent point - what would you combo this with? Darrell Kami Razvan writes: Darrell.. The BCC test to me is scary if used by itself- I can see it being used as a combo test but alone with any weight is not something I would use. We have clients that use their outlook and send 50+ people in a single BCC .. Emails to boards and volunteer groups in nonprofits and political groups are quite typical with large BCC. Just my 2 cents.. Regards, - Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, April 12, 2005 1:12 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] DYNHELO Test Is anyone using the DYNHELO test in Declude - if so do you have any information on it? What specifically is it looking for? False positive rate?I found it in the new global.cfg file, but did not see any references to it in the manual. Also, for the BCC test any thoughts on what the sweet spot tends to be - by default it comes at 10. Has anyone tweaked this? Darrell -- Try invURIBL - an advanced URI filtering test that will block more than 85% of all SPAM with the default configuration? Try it for free http://www.invariantsystems.com/invuribl/default.htm --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude
A. Clausen wrote: David Barker wrote: If you are forwarding mail to another server in other words using Declude for OUTBOUND scanning the Actions are defined in the global.cfg also consider it will be using the xoutheaders in your global.cfg. Okay, I'm a little confused here, but if what you say is right, then it makes sense. We're not scanning outbound mail, except for antivirus, which explains why the message has a header saying "Scanned by declude". The question then is how do I set things up so that Declude Junkmail scans this message? I should make myself clearer. We're only doing antivirus scanning on the outbound, and no junkmail scanning. However, it's pretty clear that we're going to have to turn it on, and I was wondering if this could be done on a domain-specific basis. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude
For the domains we store and forward for all we did is the following. 1.) Create a folder for the domain under the declude folder. example: domain.com 2.) Drop in a $default$.junkmail file. In the logs you will see this (under log level high). 04/12/2005 01:22:59 Q5AEE30FF023260B2 Using [incoming] CFG file e:\IMail\Declude\domain.com\$default$.junkmail. Darrell A. Clausen writes: David Barker wrote: If you are forwarding mail to another server in other words using Declude for OUTBOUND scanning the Actions are defined in the global.cfg also consider it will be using the xoutheaders in your global.cfg. Okay, I'm a little confused here, but if what you say is right, then it makes sense. We're not scanning outbound mail, except for antivirus, which explains why the message has a header saying "Scanned by declude". The question then is how do I set things up so that Declude Junkmail scans this message? -- A. Clausen --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DYNHELO Test
Hi Darrell: I have a number tests like the following: == TESTSFAILED END CONTAINS [MULTIPLE.COMBO. MINWEIGHTTOFAIL 4 MAXWEIGHT4 TESTSFAILED 1 CONTAINS [COMBO.AHBL] TESTSFAILED 1 CONTAINS [COMBO.RFC-IGNORANT] TESTSFAILED 1 CONTAINS [COMBO.DNSBL] TESTSFAILED 1 CONTAINS [COMBO.DSBL] TESTSFAILED 1 CONTAINS [COMBO.BLITZED] TESTSFAILED 1 CONTAINS [COMBO.ABUSEAT] TESTSFAILED 1 CONTAINS [COMBO.FIVETEN] TESTSFAILED 1 CONTAINS [COMBO.MAILPOLICE.rhsbl] TESTSFAILED 1 CONTAINS [COMBO.MAILPOLICE.dnsbl.DYNA] TESTSFAILED 1 CONTAINS [COMBO.NJABL] TESTSFAILED 1 CONTAINS [COMBO.SPAMHAUS] TESTSFAILED 1 CONTAINS [COMBO.SORBS] TESTSFAILED 1 CONTAINS [COMBO.MPBL] TESTSFAILED 1 CONTAINS [COMBO.SPAMCOP] TESTSFAILED 1 CONTAINS [COMBO.XBL] TESTSFAILED 1 CONTAINS [COMBO.MAILPOLICE] == This is Multiple_Combo_4 I have this as th first test- then I have _3, _2, and _1 This tells me how many of these groups a test has failed. My test names are based following an OO model. So thes tests are called: [MULTIPLE.COMBO.1.2.3.4] [MULTIPLE.COMBO.1.2.3] [MULTIPLE.COMBO.1.2] [MULTIPLE.COMBO.1] Then I have combo filters that for example have: TESTSFAILED 0 CONTAINS[MULTIPLE.COMBO.1.2. That tells me if at least 2 groups have failed. The above will fail for 2, 3, or 4 groups So having said all the above- I have elevation tests that are based on various factors and the above combination. So in this case I think a logical step would be: - has more than 2 tests failed - does the email have more than 5 BCC's - etc. I have not played with BCC yet but if I were to do it I would definitely test it with failure with at least 2 other ip4r groups and perhaps REVDNS and HOLO_IP test. Hope that helps. Regards, - Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, April 12, 2005 2:07 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] DYNHELO Test Kami, Excellent point - what would you combo this with? Darrell Kami Razvan writes: > Darrell.. > > The BCC test to me is scary if used by itself- I can see it being used > as a combo test but alone with any weight is not something I would > use. We have clients that use their outlook and send 50+ people in a single BCC .. > > Emails to boards and volunteer groups in nonprofits and political > groups are quite typical with large BCC. > > Just my 2 cents.. > > Regards, > - Kami > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Darrell > ([EMAIL PROTECTED]) > Sent: Tuesday, April 12, 2005 1:12 PM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] DYNHELO Test > > Is anyone using the DYNHELO test in Declude - if so do you have any > information on it? What specifically is it looking for? False positive > rate?I found it in the new global.cfg file, but did not see any > references to it in the manual. > > Also, for the BCC test any thoughts on what the sweet spot tends to be > - by default it comes at 10. Has anyone tweaked this? > > Darrell > > -- > Try invURIBL - an advanced URI filtering test that will block > more than 85% of all SPAM with the default configuration? Try it for > free http://www.invariantsystems.com/invuribl/default.htm > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SpamCop blacklist "Misdirected bounces"
I just found out that our mail server has been blacklisted by spamcop, apparently for "Misdirected bounces" which seems to be nothing more than bouncing a message after first accepting it (I pasted Spamcop's explanation below). I'm running Imail v8.05 with declude v1.82, and I'm not sure how to fix this to Spamcop's satisfaction. Has anyone else had this issue before, and if so, what can be done to fix it? Thanks much, Tom Wright Problem: Misdirected bounces Description: When a mail server accepts a message and later decides that it can't deliver the message, it is required to send back a bounce email to the sender of the original message. These bounce emails are often misdirected. Solution: Upgrade and/or configure your mail server software so that this situation is never encountered. Configure your software to either reject messages during delivery or accept them permanently. Do not let your software make choices about delivery after it has accepted a message. If you must accept delivery before you know the status of a message, then file it internally - do not send, forward or bounce it outside your organization. The errant message can be placed in a special folder or routed to your postmaster
RE: [Declude.JunkMail] DYNHELO Test
Kami, the BCC test will probably be a good marriage with any DYNA or DUL tests. In general, I think that the BCC test will be of most use to people who run a gateway scenario, where they don't have envelope rejection of addresses. Since I have that configuration, I can offer the observation that directory-attack-lite is very common with BCCs to common prefixed names at my domain, e.g. alice@, bob@, smith@, jones@ etc. When you have envelope rejection, whether because the mailboxes are local, or because you're using Sandy's alias scripts (see his email signature for the links), any BCCs that are bogus are weeded out before IMail saves the envelope file and passes it and the message to Declude. When you have a gateway or a [EMAIL PROTECTED] then all email addresses are accepted, and your server sees an inflated number of TO: and CC: and BCC: entries as the bad guys guess common names at your organization. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan Sent: Tuesday, April 12, 2005 11:21 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test Hi Darrell: I have a number tests like the following: == TESTSFAILED END CONTAINS [MULTIPLE.COMBO. MINWEIGHTTOFAIL 4 MAXWEIGHT4 TESTSFAILED 1 CONTAINS [COMBO.AHBL] TESTSFAILED 1 CONTAINS [COMBO.RFC-IGNORANT] TESTSFAILED 1 CONTAINS [COMBO.DNSBL] TESTSFAILED 1 CONTAINS [COMBO.DSBL] TESTSFAILED 1 CONTAINS [COMBO.BLITZED] TESTSFAILED 1 CONTAINS [COMBO.ABUSEAT] TESTSFAILED 1 CONTAINS [COMBO.FIVETEN] TESTSFAILED 1 CONTAINS [COMBO.MAILPOLICE.rhsbl] TESTSFAILED 1 CONTAINS [COMBO.MAILPOLICE.dnsbl.DYNA] TESTSFAILED 1 CONTAINS [COMBO.NJABL] TESTSFAILED 1 CONTAINS [COMBO.SPAMHAUS] TESTSFAILED 1 CONTAINS [COMBO.SORBS] TESTSFAILED 1 CONTAINS [COMBO.MPBL] TESTSFAILED 1 CONTAINS [COMBO.SPAMCOP] TESTSFAILED 1 CONTAINS [COMBO.XBL] TESTSFAILED 1 CONTAINS [COMBO.MAILPOLICE] == This is Multiple_Combo_4 I have this as th first test- then I have _3, _2, and _1 This tells me how many of these groups a test has failed. My test names are based following an OO model. So thes tests are called: [MULTIPLE.COMBO.1.2.3.4] [MULTIPLE.COMBO.1.2.3] [MULTIPLE.COMBO.1.2] [MULTIPLE.COMBO.1] Then I have combo filters that for example have: TESTSFAILED 0 CONTAINS[MULTIPLE.COMBO.1.2. That tells me if at least 2 groups have failed. The above will fail for 2, 3, or 4 groups So having said all the above- I have elevation tests that are based on various factors and the above combination. So in this case I think a logical step would be: - has more than 2 tests failed - does the email have more than 5 BCC's - etc. I have not played with BCC yet but if I were to do it I would definitely test it with failure with at least 2 other ip4r groups and perhaps REVDNS and HOLO_IP test. Hope that helps. Regards, - Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, April 12, 2005 2:07 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] DYNHELO Test Kami, Excellent point - what would you combo this with? Darrell Kami Razvan writes: > Darrell.. > > The BCC test to me is scary if used by itself- I can see it being used > as a combo test but alone with any weight is not something I would > use. We have clients that use their outlook and send 50+ people in a single BCC .. > > Emails to boards and volunteer groups in nonprofits and political > groups are quite typical with large BCC. > > Just my 2 cents.. > > Regards, > - Kami > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Darrell > ([EMAIL PROTECTED]) > Sent: Tuesday, April 12, 2005 1:12 PM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] DYNHELO Test > > Is anyone using the DYNHELO test in Declude - if so do you have any > information on it? What specifically is it looking for? False positive > rate?I found it in the new global.cfg file, but did not see any > references to it in the manual. > > Also, for the BCC test any thoughts on what the sweet spot tends to be > - by default it comes at 10. Has anyone tweaked this? > > Darrell > > -- > Try invURIBL - an advanced URI filtering test that will block > more than 85% of all SPAM with the default configuration? Try it for > free http://www.invariantsystems.com/invuribl/default.htm > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http:/
RE: [Declude.JunkMail] DYNHELO Test
I've found the new DYNHELO test to be quite useful and I've subsequently stopped using Bud's free external tool (HELOisIP from http://bud.thedurlands.com/ ). I found it just as effective as HELOisIP, and HELOisIPx wasn't worth running the few extra hits I was getting, plus, the hits I was getting with HELOisIPx were already getting scored quite high, so I've stopped using that too. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, April 12, 2005 10:17 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test Any feedback on these tests and performance will be appreciated here is some info on these tests. BCC bcc 10 x 5 0 This test type, checks to see if there are more than X known BCC:'s for this E-mail (where X is the first test-type-specific piece of information set to 10 in this example). It simply goes through each recipient, and checks to see if the E-mail contains the E-mail address of the recipient. The first piece of test-type-specific information is the minimum number of BCC:'s required in order for the E-mail to fail the test. DYNHELO dynhelo x x 5 0 This test type, attempts to detect dynamic IPs in HELO/EHLO hostnames. This test should be quite effective, since mailservers on IPs that have dynamic-like reverse DNS entries will *not* normally send an HELO/EHLO that looks dynamic. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, April 12, 2005 1:12 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] DYNHELO Test Is anyone using the DYNHELO test in Declude - if so do you have any information on it? What specifically is it looking for? False positive rate?I found it in the new global.cfg file, but did not see any references to it in the manual. Also, for the BCC test any thoughts on what the sweet spot tends to be - by default it comes at 10. Has anyone tweaked this? Darrell -- Try invURIBL - an advanced URI filtering test that will block more than 85% of all SPAM with the default configuration? Try it for free http://www.invariantsystems.com/invuribl/default.htm --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. __ NOD32 1.1058 (20050412) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] DYNHELO Test
I use these settings fior BCC: BCC-5 bcc 5 x 15 0 BCC-10 bcc 10 x 10 0 subject tag at 100, hold at 200, delete at 300. March (BCC5 7177 spam, 268 ham) March (BCC5 2418 spam, 87 ham) Since the overwhelming majority of my foreign BCC's are spam (this April 2219/2200 are spam), I also have a filter: COMBO-BADCOUNTRY-BCC filter D:\IMail\Declude\FPFilters\COMBO-BADCOUNTRY-BCC.txt x 0 0 COUNTRY END IS US TESTSFAILED 10 CONTAINS BCC-5 TESTSFAILED 15 CONTAINS BCC-10 So worse case a foreign with >10 of BCC would get the mail half of the way to the subject tag weight - Original Message - From: "Kami Razvan" <[EMAIL PROTECTED]> To: Sent: Tuesday, April 12, 2005 12:33 PM Subject: RE: [Declude.JunkMail] DYNHELO Test Darrell.. The BCC test to me is scary if used by itself- I can see it being used as a combo test but alone with any weight is not something I would use. We have clients that use their outlook and send 50+ people in a single BCC .. Emails to boards and volunteer groups in nonprofits and political groups are quite typical with large BCC. Just my 2 cents.. Regards, - Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, April 12, 2005 1:12 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] DYNHELO Test Is anyone using the DYNHELO test in Declude - if so do you have any information on it? What specifically is it looking for? False positive rate?I found it in the new global.cfg file, but did not see any references to it in the manual. Also, for the BCC test any thoughts on what the sweet spot tends to be - by default it comes at 10. Has anyone tweaked this? Darrell -- Try invURIBL - an advanced URI filtering test that will block more than 85% of all SPAM with the default configuration? Try it for free http://www.invariantsystems.com/invuribl/default.htm --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DYNHELO Test
On 12 Apr 2005 at 11:38, Colbeck, Andrew wrote: > I've found the new DYNHELO test to be quite useful and I've > subsequently stopped using Bud's free external tool (HELOisIP from > http://bud.thedurlands.com/ ). Thanks Andrew - [sorry Bud} I will follow your lead and do the same - -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude
Darrell ([EMAIL PROTECTED]) wrote: For the domains we store and forward for all we did is the following. 1.) Create a folder for the domain under the declude folder. example: domain.com 2.) Drop in a $default$.junkmail file. In the logs you will see this (under log level high). 04/12/2005 01:22:59 Q5AEE30FF023260B2 Using [incoming] CFG file e:\IMail\Declude\domain.com\$default$.junkmail. Are you scanning outgoing mail as well? -- A. Clausen --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SpamCop blacklist "Misdirected bounces"
Let me guess, you are using the evil BOUNCEIFYOUMUST action in Declude JM? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Technical Support Sent: Tuesday, April 12, 2005 11:34 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] SpamCop blacklist "Misdirected bounces" I just found out that our mail server has been blacklisted by spamcop, apparently for "Misdirected bounces" which seems to be nothing more than bouncing a message after first accepting it (I pasted Spamcop's explanation below). I'm running Imail v8.05 with declude v1.82, and I'm not sure how to fix this to Spamcop's satisfaction. Has anyone else had this issue before, and if so, what can be done to fix it? Thanks much, Tom Wright Problem: Misdirected bounces Description: When a mail server accepts a message and later decides that it can't deliver the message, it is required to send back a bounce email to the sender of the original message. These bounce emails are often misdirected. Solution: Upgrade and/or configure your mail server software so that this situation is never encountered. Configure your software to either reject messages during delivery or accept them permanently. Do not let your software make choices about delivery after it has accepted a message. If you must accept delivery before you know the status of a message, then file it internally - do not send, forward or bounce it outside your organization. The errant message can be placed in a special folder or routed to your postmaster
Re: [Declude.JunkMail] SpamCop blacklist "Misdirected bounces"
on 4/12/05 2:33 PM, Technical Support wrote: > Has anyone else had this issue before, > and if so, what can be done to fix it? Yes, one of my servers is listed somewhere (sorbs I think). Setup an outbound rule in IMail, any message from [EMAIL PROTECTED] with a subject of "undeliverable mail" gets deleted. Greg --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude
For the domains that I store and forward I only scan their mail when it comes into the server. The way it works is that even though the mail is coming into your server it is treated as "outgoing" unless you setup the per domain configuration (like you did creating the folder). Once you set the domain up like you did it is than treated like the domain is local. This configuration also virus scans the messages. In terms of scanning outgoing mail - the domains that I store and forward do not send thier outbound mail through us. We only take their inbound mail and clean it and send it on to them. What is the exact setup your trying to accomplish? Darrell A. Clausen writes: Darrell ([EMAIL PROTECTED]) wrote: For the domains we store and forward for all we did is the following. 1.) Create a folder for the domain under the declude folder. example: domain.com 2.) Drop in a $default$.junkmail file. In the logs you will see this (under log level high). 04/12/2005 01:22:59 Q5AEE30FF023260B2 Using [incoming] CFG file e:\IMail\Declude\domain.com\$default$.junkmail. Are you scanning outgoing mail as well? -- A. Clausen --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] SpamCop blacklist "Misdirected bounces"
This can also come about through use of a mail gateway. I used a Symantec SMTP virus gateway for a while. I stopped using it because I couldn't turn off the bounce messages. When I asked Symantec how to stop the bounces, they said they never even considered making that possible because it would violate the RFCs. They told me that the RFCs required that receiving mail server notify the sender that it can't deliver, either with a 550 at envelope time or with a bounce message. Of course, if that's true, we are all violating the RFCs every day. -Dave Doherty Skywaves, Inc. - Original Message - From: John Tolmachoff (Lists) To: Declude.JunkMail@declude.com Sent: Tuesday, April 12, 2005 2:58 PM Subject: RE: [Declude.JunkMail] SpamCop blacklist "Misdirected bounces" Let me guess, you are using the evil BOUNCEIFYOUMUST action in Declude JM? John T eServices For You -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Technical SupportSent: Tuesday, April 12, 2005 11:34 AMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] SpamCop blacklist "Misdirected bounces" I just found out that our mail server has been blacklisted by spamcop, apparently for "Misdirected bounces" which seems to be nothing more than bouncing a message after first accepting it (I pasted Spamcop's explanation below). I'm running Imail v8.05 with declude v1.82, and I'm not sure how to fix this to Spamcop's satisfaction. Has anyone else had this issue before, and if so, what can be done to fix it? Thanks much, Tom Wright Problem: Misdirected bounces Description: When a mail server accepts a message and later decides that it can't deliver the message, it is required to send back a bounce email to the sender of the original message. These bounce emails are often misdirected. Solution: Upgrade and/or configure your mail server software so that this situation is never encountered. Configure your software to either reject messages during delivery or accept them permanently. Do not let your software make choices about delivery after it has accepted a message. If you must accept delivery before you know the status of a message, then file it internally - do not send, forward or bounce it outside your organization. The errant message can be placed in a special folder or routed to your postmaster
RE: [Declude.JunkMail] DYNHELO Test
Hm - I looked at http://www.declude.com/Version/Manuals/2.0.6.asp - but don't find any DYNHELO? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, April 12, 2005 01:12 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] DYNHELO Test Is anyone using the DYNHELO test in Declude - if so do you have any information on it? What specifically is it looking for? False positive rate?I found it in the new global.cfg file, but did not see any references to it in the manual. Also, for the BCC test any thoughts on what the sweet spot tends to be - by default it comes at 10. Has anyone tweaked this? Darrell -- Try invURIBL - an advanced URI filtering test that will block more than 85% of all SPAM with the default configuration? Try it for free http://www.invariantsystems.com/invuribl/default.htm --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] DYNHELO Test
I noted in in the global.cfg file for 2.06. I believe these tests to be new: DYNHELO dynhelo x x 7 0 ENCODEDURL encodedurl x x 1 0 IPURL ipurl x x 2 0 - Original Message - From: "Andy Schmidt" <[EMAIL PROTECTED]> To: Sent: Tuesday, April 12, 2005 2:35 PM Subject: RE: [Declude.JunkMail] DYNHELO Test Hm - I looked at http://www.declude.com/Version/Manuals/2.0.6.asp - but don't find any DYNHELO? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, April 12, 2005 01:12 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] DYNHELO Test Is anyone using the DYNHELO test in Declude - if so do you have any information on it? What specifically is it looking for? False positive rate?I found it in the new global.cfg file, but did not see any references to it in the manual. Also, for the BCC test any thoughts on what the sweet spot tends to be - by default it comes at 10. Has anyone tweaked this? Darrell -- Try invURIBL - an advanced URI filtering test that will block more than 85% of all SPAM with the default configuration? Try it for free http://www.invariantsystems.com/invuribl/default.htm --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] ProcessCounter missing from manual install
Title: Message Hi, I downloaded 2.06, ran the manual install - but ProcessCounter.exe is not included!? Refer to: http://www.declude.com/Articles.asp?ID=122 Best RegardsAndy SchmidtPhone: +1 201 934-3414 x20 (Business)Fax: +1 201 934-9206
Re: [Declude.JunkMail] ProcessCounter missing from manual install
Title: Message We discovered that omission this morning and it has been corrected. - Original Message - From: Andy Schmidt To: Declude.JunkMail@declude.com Sent: Tuesday, April 12, 2005 4:00 PM Subject: [Declude.JunkMail] ProcessCounter missing from manual install Hi, I downloaded 2.06, ran the manual install - but ProcessCounter.exe is not included!? Refer to: http://www.declude.com/Articles.asp?ID=122 Best RegardsAndy SchmidtPhone: +1 201 934-3414 x20 (Business)Fax: +1 201 934-9206
RE: [Declude.JunkMail] DYNHELO Test
I'm surprised the encodedURL is ranked to low? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Tuesday, April 12, 2005 04:01 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] DYNHELO Test I noted in in the global.cfg file for 2.06. I believe these tests to be new: DYNHELO dynhelo x x 7 0 ENCODEDURL encodedurl x x 1 0 IPURL ipurl x x 2 0 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DYNHELO Test
http://www.declude.com/Articles.asp?ID=151 Regards, - Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Tuesday, April 12, 2005 3:35 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test Hm - I looked at http://www.declude.com/Version/Manuals/2.0.6.asp - but don't find any DYNHELO? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, April 12, 2005 01:12 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] DYNHELO Test Is anyone using the DYNHELO test in Declude - if so do you have any information on it? What specifically is it looking for? False positive rate?I found it in the new global.cfg file, but did not see any references to it in the manual. Also, for the BCC test any thoughts on what the sweet spot tends to be - by default it comes at 10. Has anyone tweaked this? Darrell -- Try invURIBL - an advanced URI filtering test that will block more than 85% of all SPAM with the default configuration? Try it for free http://www.invariantsystems.com/invuribl/default.htm --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] ProcessCounter
What is the v2.0.6 ProcessCounter application? On a manual install, the only applications expanded are: deccon.exe 10/01/2004 Declude for IMail.exe 04/11/2005 Declude for SmarterMail.exe 04/11/2005 Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Tuesday, April 12, 2005 11:43 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] DYNHELO Test I use these settings fior BCC: BCC-5 bcc 5 x 15 0 BCC-10 bcc 10 x 10 0 subject tag at 100, hold at 200, delete at 300. March (BCC5 7177 spam, 268 ham) March (BCC5 2418 spam, 87 ham) Since the overwhelming majority of my foreign BCC's are spam (this April 2219/2200 are spam), I also have a filter: COMBO-BADCOUNTRY-BCC filter D:\IMail\Declude\FPFilters\COMBO-BADCOUNTRY-BCC.txt x 0 0 COUNTRY END IS US TESTSFAILED 10 CONTAINS BCC-5 TESTSFAILED 15 CONTAINS BCC-10 So worse case a foreign with >10 of BCC would get the mail half of the way to the subject tag weight - Original Message - From: "Kami Razvan" <[EMAIL PROTECTED]> To: Sent: Tuesday, April 12, 2005 12:33 PM Subject: RE: [Declude.JunkMail] DYNHELO Test > Darrell.. > > The BCC test to me is scary if used by itself- I can see it being used > as > a > combo test but alone with any weight is not something I would use. We > have > clients that use their outlook and send 50+ people in a single BCC .. > > Emails to boards and volunteer groups in nonprofits and political > groups > are > quite typical with large BCC. > > Just my 2 cents.. > > Regards, > - Kami > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Darrell > ([EMAIL PROTECTED]) > Sent: Tuesday, April 12, 2005 1:12 PM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] DYNHELO Test > > Is anyone using the DYNHELO test in Declude - if so do you have any > information on it? What specifically is it looking for? False positive > rate?I found it in the new global.cfg file, but did not see any > references to it in the manual. > > Also, for the BCC test any thoughts on what the sweet spot tends to be > - > by > default it comes at 10. Has anyone tweaked this? > > Darrell > -- > > Try invURIBL - an advanced URI filtering test that will block more than > 85% > of all SPAM with the default configuration? Try it for free > http://www.invariantsystems.com/invuribl/default.htm > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] ProcessCounter missing from manual install
Title: Message Hm, I only downloaded minutes ago - and if it was corrected, it has NOT been updated on your SERVER. Best RegardsAndy SchmidtPhone: +1 201 934-3414 x20 (Business)Fax: +1 201 934-9206 -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Franco-RochaSent: Tuesday, April 12, 2005 04:10 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] ProcessCounter missing from manual install We discovered that omission this morning and it has been corrected. - Original Message - From: Andy Schmidt To: Declude.JunkMail@declude.com Sent: Tuesday, April 12, 2005 4:00 PM Subject: [Declude.JunkMail] ProcessCounter missing from manual install Hi, I downloaded 2.06, ran the manual install - but ProcessCounter.exe is not included!? Refer to: http://www.declude.com/Articles.asp?ID=122 Best RegardsAndy SchmidtPhone: +1 201 934-3414 x20 (Business)Fax: +1 201 934-9206
Re: [Declude.JunkMail] ProcessCounter missing from manual install
On 12 Apr 2005 at 16:09, David Franco-Rocha wrote: > We discovered that omission this morning and it has been corrected. > - Original Message - > From: Andy Schmidt I'll tell ya. they like you Andy. I get no respect :) I told them this am this was missing and never heard a peep... -Nick > To: Declude.JunkMail@declude.com > Sent: Tuesday, April 12, 2005 4:00 PM > Subject: [Declude.JunkMail] ProcessCounter missing from manual > install > > Hi, > > I downloaded 2.06, ran the manual install - but ProcessCounter.exe is > not included!? > > Refer to: > http://www.declude.com/Articles.asp?ID=122 > > Best Regards > Andy Schmidt > > Phone: +1 201 934-3414 x20 (Business) > Fax: +1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] ProcessCounter missing from manual install
Title: Message I think that's an area where when an omission/problem/etc. is discovered it would be nice if it were posted to the list. That way we don't waste downloading and asking about it. Same applies to updates. Posting to the list when an issue is found, and when it's been corrected, will save a lot of time and effort all around. Darin. - Original Message - From: Andy Schmidt To: Declude.JunkMail@declude.com Sent: Tuesday, April 12, 2005 4:19 PM Subject: RE: [Declude.JunkMail] ProcessCounter missing from manual install Hm, I only downloaded minutes ago - and if it was corrected, it has NOT been updated on your SERVER. Best RegardsAndy SchmidtPhone: +1 201 934-3414 x20 (Business)Fax: +1 201 934-9206 -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Franco-RochaSent: Tuesday, April 12, 2005 04:10 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] ProcessCounter missing from manual install We discovered that omission this morning and it has been corrected. - Original Message - From: Andy Schmidt To: Declude.JunkMail@declude.com Sent: Tuesday, April 12, 2005 4:00 PM Subject: [Declude.JunkMail] ProcessCounter missing from manual install Hi, I downloaded 2.06, ran the manual install - but ProcessCounter.exe is not included!? Refer to: http://www.declude.com/Articles.asp?ID=122 Best RegardsAndy SchmidtPhone: +1 201 934-3414 x20 (Business)Fax: +1 201 934-9206
Re: [Declude.JunkMail] ProcessCounter
On 12 Apr 2005 at 13:14, Colbeck, Andrew wrote: I just went through the wizard manual install again.. and the processCounter app is no where to be found.. -Nick > What is the v2.0.6 ProcessCounter application? On a manual install, > the only applications expanded are: > > deccon.exe 10/01/2004 > Declude for IMail.exe 04/11/2005 > Declude for SmarterMail.exe 04/11/2005 > > Andrew 8) > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher > Sent: Tuesday, April 12, 2005 11:43 AM To: > Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] DYNHELO > Test > > > I use these settings fior BCC: > BCC-5 bcc 5 x 15 0 > BCC-10 bcc 10 x 10 0 > > subject tag at 100, hold at 200, delete at 300. > > March (BCC5 7177 spam, 268 ham) > March (BCC5 2418 spam, 87 ham) > > Since the overwhelming majority of my foreign BCC's are spam (this > April > > 2219/2200 are spam), I also have a filter: > COMBO-BADCOUNTRY-BCC filter > D:\IMail\Declude\FPFilters\COMBO-BADCOUNTRY-BCC.txt x 0 0 > > COUNTRY END IS US > > TESTSFAILED 10 CONTAINS BCC-5 > TESTSFAILED 15 CONTAINS BCC-10 > > So worse case a foreign with >10 of BCC would get the mail half of the > way to the subject tag weight > > - Original Message - > From: "Kami Razvan" <[EMAIL PROTECTED]> > To: > Sent: Tuesday, April 12, 2005 12:33 PM > Subject: RE: [Declude.JunkMail] DYNHELO Test > > > > Darrell.. > > > > The BCC test to me is scary if used by itself- I can see it being > > used > > > as > > a > > combo test but alone with any weight is not something I would use. > > We > > > have > > clients that use their outlook and send 50+ people in a single BCC > > .. > > > > Emails to boards and volunteer groups in nonprofits and political > > groups are quite typical with large BCC. > > > > Just my 2 cents.. > > > > Regards, > > - Kami > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Darrell > > ([EMAIL PROTECTED]) Sent: Tuesday, April 12, 2005 1:12 PM > > To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] DYNHELO > > Test > > > > Is anyone using the DYNHELO test in Declude - if so do you have any > > information on it? What specifically is it looking for? False > positive > > rate?I found it in the new global.cfg file, but did not see any > > references to it in the manual. > > > > Also, for the BCC test any thoughts on what the sweet spot tends to > > be > > > - > > by > > default it comes at 10. Has anyone tweaked this? > > > > Darrell > > > > -- Try invURIBL - an advanced URI filtering test that will > > block more > than > > 85% > > of all SPAM with the default configuration? Try it for free > > http://www.invariantsystems.com/invuribl/default.htm > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > > "unsubscribe Declude.JunkMail". The archives can be found at > > http://www.mail-archive.com. > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > > "unsubscribe Declude.JunkMail". The archives can be found at > > http://www.mail-archive.com. > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. --- This E-mail came from the > Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to > [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The > archives can be found at http://www.mail-archive.com. > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] ProcessCounter location
It is in C:\Program Files\Computerized Horizons\Declude Ralph -- -Original Message- -- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- -- [EMAIL PROTECTED] On Behalf Of Nick -- Sent: Tuesday, April 12, 2005 4:25 PM -- To: Declude.JunkMail@declude.com -- Subject: Re: [Declude.JunkMail] ProcessCounter -- -- On 12 Apr 2005 at 13:14, Colbeck, Andrew wrote: -- I just went through the wizard manual install again.. and the -- processCounter app is no where to be found.. -- -Nick -- -- > What is the v2.0.6 ProcessCounter application? On a manual install, -- > the only applications expanded are: -- > -- > deccon.exe 10/01/2004 -- > Declude for IMail.exe 04/11/2005 -- > Declude for SmarterMail.exe 04/11/2005 -- > -- > Andrew 8) -- > -- > -Original Message- -- > From: [EMAIL PROTECTED] -- > [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher -- > Sent: Tuesday, April 12, 2005 11:43 AM To: -- > Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] DYNHELO -- > Test -- > -- > -- > I use these settings fior BCC: -- > BCC-5 bcc 5 x 15 0 -- > BCC-10 bcc 10 x 10 0 -- > -- > subject tag at 100, hold at 200, delete at 300. -- > -- > March (BCC5 7177 spam, 268 ham) -- > March (BCC5 2418 spam, 87 ham) -- > -- > Since the overwhelming majority of my foreign BCC's are spam (this -- > April -- > -- > 2219/2200 are spam), I also have a filter: -- > COMBO-BADCOUNTRY-BCC filter -- > D:\IMail\Declude\FPFilters\COMBO-BADCOUNTRY-BCC.txt x 0 0 -- > -- > COUNTRY END IS US -- > -- > TESTSFAILED 10 CONTAINS BCC-5 -- > TESTSFAILED 15 CONTAINS BCC-10 -- > -- > So worse case a foreign with >10 of BCC would get the mail half of the -- > way to the subject tag weight -- > -- > - Original Message - -- > From: "Kami Razvan" <[EMAIL PROTECTED]> -- > To: -- > Sent: Tuesday, April 12, 2005 12:33 PM -- > Subject: RE: [Declude.JunkMail] DYNHELO Test -- > -- > -- > > Darrell.. -- > > -- > > The BCC test to me is scary if used by itself- I can see it being -- > > used -- > -- > > as -- > > a -- > > combo test but alone with any weight is not something I would use. -- > > We -- > -- > > have -- > > clients that use their outlook and send 50+ people in a single BCC -- > > .. -- > > -- > > Emails to boards and volunteer groups in nonprofits and political -- > > groups are quite typical with large BCC. -- > > -- > > Just my 2 cents.. -- > > -- > > Regards, -- > > - Kami -- > > -- > > -Original Message- -- > > From: [EMAIL PROTECTED] -- > > [mailto:[EMAIL PROTECTED] On Behalf Of Darrell -- > > ([EMAIL PROTECTED]) Sent: Tuesday, April 12, 2005 1:12 PM -- > > To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] DYNHELO -- > > Test -- > > -- > > Is anyone using the DYNHELO test in Declude - if so do you have any -- > > information on it? What specifically is it looking for? False -- > positive -- > > rate?I found it in the new global.cfg file, but did not see any -- > > references to it in the manual. -- > > -- > > Also, for the BCC test any thoughts on what the sweet spot tends to -- > > be -- > -- > > - -- > > by -- > > default it comes at 10. Has anyone tweaked this? -- > > -- > > Darrell -- > > -- > > -- Try invURIBL - an advanced URI filtering test that will -- > > block more -- > than -- > > 85% -- > > of all SPAM with the default configuration? Try it for free -- > > http://www.invariantsystems.com/invuribl/default.htm -- > > -- > > --- -- > > This E-mail came from the Declude.JunkMail mailing list. To -- > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type -- > > "unsubscribe Declude.JunkMail". The archives can be found at -- > > http://www.mail-archive.com. -- > > -- > > --- -- > > This E-mail came from the Declude.JunkMail mailing list. To -- > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type -- > > "unsubscribe Declude.JunkMail". The archives can be found at -- > > http://www.mail-archive.com. -- > > -- > > -- > -- > --- -- > This E-mail came from the Declude.JunkMail mailing list. To -- > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type -- > "unsubscribe Declude.JunkMail". The archives can be found at -- > http://www.mail-archive.com. --- This E-mail came from the -- > Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to -- > [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The -- > archives can be found at http://www.mail-archive.com. -- > -- -- -- --- -- This E-mail came from the Declude.JunkMail mailing list. To -- unsubscribe, just send an E-mail to [EMAIL PROTECTED], and -- type "unsubscribe Declude.JunkMail". The archives can be found -- at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DYNHELO Test
Why is IPURL listed as "Currently N/A" ? Not Applicable? To what? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan Sent: Tuesday, April 12, 2005 4:14 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test http://www.declude.com/Articles.asp?ID=151 Regards, - Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Tuesday, April 12, 2005 3:35 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test Hm - I looked at http://www.declude.com/Version/Manuals/2.0.6.asp - but don't find any DYNHELO? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, April 12, 2005 01:12 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] DYNHELO Test Is anyone using the DYNHELO test in Declude - if so do you have any information on it? What specifically is it looking for? False positive rate?I found it in the new global.cfg file, but did not see any references to it in the manual. Also, for the BCC test any thoughts on what the sweet spot tends to be - by default it comes at 10. Has anyone tweaked this? Darrell -- Try invURIBL - an advanced URI filtering test that will block more than 85% of all SPAM with the default configuration? Try it for free http://www.invariantsystems.com/invuribl/default.htm --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DYNHELO Test
Probably meant "not available" (at the time). Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Tuesday, April 12, 2005 05:09 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test Why is IPURL listed as "Currently N/A" ? Not Applicable? To what? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DYNHELO Test
Is it available now? Is it working in 2.0.6? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Tuesday, April 12, 2005 5:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test Probably meant "not available" (at the time). Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Tuesday, April 12, 2005 05:09 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test Why is IPURL listed as "Currently N/A" ? Not Applicable? To what? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DYNHELO Test
>From my own experimentation, I'd say that as of today in v2.0.6 DYNHELO is definitely working. IPURL and ENCODEDURL are definitely not working. The two URL based tests only show up in Debug mode as *not* being triggered. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Tuesday, April 12, 2005 2:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test Is it available now? Is it working in 2.0.6? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Tuesday, April 12, 2005 5:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test Probably meant "not available" (at the time). Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Tuesday, April 12, 2005 05:09 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test Why is IPURL listed as "Currently N/A" ? Not Applicable? To what? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Running Declude 2.0.5
My spam volume went up quite a bit today. The first message that I pulled up was marked like this. It looks like the total weight should have been at least 5. Why did it end up as [0]? Thanks, Evans Martin Message-Id: <[EMAIL PROTECTED]> X-RBL-Warning: SPFUNKNOWN: SPF returned UNKNOWN for this E-mail. X-RBL-Warning: FOREIGN: Message failed FOREIGN test (line 1346, weight 5) X-RBL-Warning: Y!DIRECTED: Message failed Y!DIRECTED test (line 229, weight 11) X-RBL-Warning: ANTI-Y!DIRECTED: Message failed ANTI-Y!DIRECTED test (line 60, weight -11) X-Declude-Sender: [EMAIL PROTECTED] [213.217.63.246] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SPFUNKNOWN, FOREIGN, Y!DIRECTED, ANTI-Y!DIRECTED [0] X-Note: This E-mail was sent from (timeout) ([213.217.63.246]).
RE: [Declude.JunkMail] ProcessCounter location
Since I did a manual install do I need this directory? > C:\Program Files\Computerized Horizons\Declude Assuming I copy the processcounter out of it? Goran Jovanovic The LAN Shoppe > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Ralph Krausse > Sent: Tuesday, April 12, 2005 5:01 PM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] ProcessCounter location > > It is in > > C:\Program Files\Computerized Horizons\Declude > > > > Ralph > > -- -Original Message- > -- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > -- [EMAIL PROTECTED] On Behalf Of Nick > -- Sent: Tuesday, April 12, 2005 4:25 PM > -- To: Declude.JunkMail@declude.com > -- Subject: Re: [Declude.JunkMail] ProcessCounter > -- > -- On 12 Apr 2005 at 13:14, Colbeck, Andrew wrote: > -- I just went through the wizard manual install again.. and the > -- processCounter app is no where to be found.. > -- -Nick > -- > -- > What is the v2.0.6 ProcessCounter application? On a manual install, > -- > the only applications expanded are: > -- > > -- > deccon.exe 10/01/2004 > -- > Declude for IMail.exe 04/11/2005 > -- > Declude for SmarterMail.exe 04/11/2005 > -- > > -- > Andrew 8) > -- > > -- > -Original Message- > -- > From: [EMAIL PROTECTED] > -- > [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher > -- > Sent: Tuesday, April 12, 2005 11:43 AM To: > -- > Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] DYNHELO > -- > Test > -- > > -- > > -- > I use these settings fior BCC: > -- > BCC-5 bcc 5 x 15 0 > -- > BCC-10 bcc 10 x 10 0 > -- > > -- > subject tag at 100, hold at 200, delete at 300. > -- > > -- > March (BCC5 7177 spam, 268 ham) > -- > March (BCC5 2418 spam, 87 ham) > -- > > -- > Since the overwhelming majority of my foreign BCC's are spam (this > -- > April > -- > > -- > 2219/2200 are spam), I also have a filter: > -- > COMBO-BADCOUNTRY-BCC filter > -- > D:\IMail\Declude\FPFilters\COMBO-BADCOUNTRY-BCC.txt x 0 0 > -- > > -- > COUNTRY END IS US > -- > > -- > TESTSFAILED 10 CONTAINS BCC-5 > -- > TESTSFAILED 15 CONTAINS BCC-10 > -- > > -- > So worse case a foreign with >10 of BCC would get the mail half of > the > -- > way to the subject tag weight > -- > > -- > - Original Message - > -- > From: "Kami Razvan" <[EMAIL PROTECTED]> > -- > To: > -- > Sent: Tuesday, April 12, 2005 12:33 PM > -- > Subject: RE: [Declude.JunkMail] DYNHELO Test > -- > > -- > > -- > > Darrell.. > -- > > > -- > > The BCC test to me is scary if used by itself- I can see it being > -- > > used > -- > > -- > > as > -- > > a > -- > > combo test but alone with any weight is not something I would use. > -- > > We > -- > > -- > > have > -- > > clients that use their outlook and send 50+ people in a single BCC > -- > > .. > -- > > > -- > > Emails to boards and volunteer groups in nonprofits and political > -- > > groups are quite typical with large BCC. > -- > > > -- > > Just my 2 cents.. > -- > > > -- > > Regards, > -- > > - Kami > -- > > > -- > > -Original Message- > -- > > From: [EMAIL PROTECTED] > -- > > [mailto:[EMAIL PROTECTED] On Behalf Of Darrell > -- > > ([EMAIL PROTECTED]) Sent: Tuesday, April 12, 2005 1:12 > PM > -- > > To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] > DYNHELO > -- > > Test > -- > > > -- > > Is anyone using the DYNHELO test in Declude - if so do you have any > -- > > information on it? What specifically is it looking for? False > -- > positive > -- > > rate?I found it in the new global.cfg file, but did not see any > -- > > references to it in the manual. > -- > > > -- > > Also, for the BCC test any thoughts on what the sweet spot tends to > -- > > be > -- > > -- > > - > -- > > by > -- > > default it comes at 10. Has anyone tweaked this? > -- > > > -- > > Darrell > -- > > --- > - > -- > > -- Try invURIBL - an advanced URI filtering test that will > -- > > block more > -- > than > -- > > 85% > -- > > of all SPAM with the default configuration? Try it for free > -- > > http://www.invariantsystems.com/invuribl/default.htm > -- > > > -- > > --- > -- > > This E-mail came from the Declude.JunkMail mailing list. To > -- > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > -- > > "unsubscribe Declude.JunkMail". The archives can be found at > -- > > http://www.mail-archive.com. > -- > > > -- > > --- > -- > > This E-mail came from the Declude.JunkMail mailing list. To > -- > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > -- > > "unsubscribe Declude.JunkMail". The archives can be found at > -- > > http://www.mail-archive.com. > -- > > > -- > > > -- > > -- > --- > -- > This E-mail came from the Declude.JunkMail mailing list. To > -- > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > -- > "unsubscribe Declude.JunkMail". The archives can be found at > -- > http://www.mail-
Re: [Declude.JunkMail] Running Declude 2.0.5
On the surface it appears as if it should be 5. However, you will need to pull the logs to check this one. Darrell ---Try invURIBL - an advanced URI filtering test that will block more than 85% of all SPAM with the default configuration? Try it for free http://www.invariantsystems.com/invuribl/default.htm - Original Message - From: Evans Martin To: Declude.JunkMail@declude.com Sent: Tuesday, April 12, 2005 6:38 PM Subject: [Declude.JunkMail] Running Declude 2.0.5 My spam volume went up quite a bit today. The first message that I pulled up was marked like this. It looks like the total weight should have been at least 5. Why did it end up as [0]? Thanks, Evans Martin Message-Id: <[EMAIL PROTECTED]> X-RBL-Warning: SPFUNKNOWN: SPF returned UNKNOWN for this E-mail. X-RBL-Warning: FOREIGN: Message failed FOREIGN test (line 1346, weight 5) X-RBL-Warning: Y!DIRECTED: Message failed Y!DIRECTED test (line 229, weight 11) X-RBL-Warning: ANTI-Y!DIRECTED: Message failed ANTI-Y!DIRECTED test (line 60, weight -11) X-Declude-Sender: [EMAIL PROTECTED] [213.217.63.246] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SPFUNKNOWN, FOREIGN, Y!DIRECTED, ANTI-Y!DIRECTED [0] X-Note: This E-mail was sent from (timeout) ([213.217.63.246]).
Re: [Declude.JunkMail] DYNHELO Test
That is correct, these two tests were among several tests added to the global.cfg file, as they were documented by Scott, however they are not available in the current declude.exe as we move forward with adding additional tests these will very likely be activated in future releases. David B www.declude.com - Original Message - From: "Colbeck, Andrew" <[EMAIL PROTECTED]> To: Sent: Tuesday, April 12, 2005 5:50 PM Subject: RE: [Declude.JunkMail] DYNHELO Test From my own experimentation, I'd say that as of today in v2.0.6 DYNHELO is definitely working. IPURL and ENCODEDURL are definitely not working. The two URL based tests only show up in Debug mode as *not* being triggered. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Tuesday, April 12, 2005 2:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test Is it available now? Is it working in 2.0.6? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Tuesday, April 12, 2005 5:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test Probably meant "not available" (at the time). Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Tuesday, April 12, 2005 05:09 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test Why is IPURL listed as "Currently N/A" ? Not Applicable? To what? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Running Declude 2.0.5
It could be the line: HIDETESTS CATCHALLMAILS IPNOTINMX NOLEGITCONTENT which hides these tests which normally carry a negative weight. Also Matt @ Mailpure has newer filters. I believe the anti-y!directed is pretty old and isn't used anymore. - Original Message - From: Evans Martin To: Declude.JunkMail@declude.com Sent: Tuesday, April 12, 2005 5:38 PM Subject: [Declude.JunkMail] Running Declude 2.0.5 My spam volume went up quite a bit today. The first message that I pulled up was marked like this. It looks like the total weight should have been at least 5. Why did it end up as [0]? Thanks, Evans Martin Message-Id: <[EMAIL PROTECTED]> X-RBL-Warning: SPFUNKNOWN: SPF returned UNKNOWN for this E-mail. X-RBL-Warning: FOREIGN: Message failed FOREIGN test (line 1346, weight 5) X-RBL-Warning: Y!DIRECTED: Message failed Y!DIRECTED test (line 229, weight 11) X-RBL-Warning: ANTI-Y!DIRECTED: Message failed ANTI-Y!DIRECTED test (line 60, weight -11) X-Declude-Sender: [EMAIL PROTECTED] [213.217.63.246] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SPFUNKNOWN, FOREIGN, Y!DIRECTED, ANTI-Y!DIRECTED [0] X-Note: This E-mail was sent from (timeout) ([213.217.63.246]).
[Declude.JunkMail] Something new with v 2.0.6
Since I upgraded to v 2.0.6 from 2.0.5 I am getting the below header info included in the body of emails that are being forwarded. Any ideas. X-Spam-Tests-Failed Weight: SNIFFERZERO [0], FILTER-MAILFROM [5]X-Spam-Time:00:00:12X-Note: Total spam weight of this E-mail is 5X-Note: This E-mail was scanned & filtered by Declude [2.0.6] for SPAM & virusX-Spam-Tests-Failed: SNIFFERZERO, FILTER-MAILFROMX-Weight: 5X-Mailfrom: <>X-Note: Sent from: <>X-Note: Sent from Reverse DNS: (Private IP) ([127.0.0.1])X-Hello: X-Note: Recipient(s): [EMAIL PROTECTED]X-Country-Chain:
