[Declude.JunkMail] SPAMDOMAIN and IPBYPASS

2005-07-11 Thread John Tolmachoff \(Lists\)
Does SPAMDOMAIN check the PTR of the previous IP if the servers your Imail
server receives from are all configured as IPBYPASS, meaning you have front
end servers doing the receiving for the Imail server?

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Spamcop catching gmail

2005-07-11 Thread Richard Farris
I am finding several legitimate emails held by spamcop...why would they list 
gmail..


Richard Farris
Ethixs Online
1.270.247. Office
1.800.548.3877 Tech Support
Crossroads to a Cleaner Internet

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Spamcop catching gmail

2005-07-11 Thread Darrell \([EMAIL PROTECTED])
Richard, 

This is a common complaint of a lot of people about Spamcop including 
myself.  They have no issues listing AOL, Hotmail, etc.  It's just the way 
their system works.  It takes in really no consideration that yes they may 
leak some spam - but all in all they are legit servers. 


Darrell
-
DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus.
http://www.invariantsystems.com 

Richard Farris writes: 

I am finding several legitimate emails held by spamcop...why would they 
list gmail.. 


Richard Farris
Ethixs Online
1.270.247. Office
1.800.548.3877 Tech Support
Crossroads to a Cleaner Internet 


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Spamcop catching gmail

2005-07-11 Thread Colbeck, Andrew
Do you have an example, Richard?
 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Richard Farris
Sent: Monday, July 11, 2005 9:48 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Spamcop catching gmail

I am finding several legitimate emails held by spamcop...why would they
list gmail..

Richard Farris
Ethixs Online
1.270.247. Office
1.800.548.3877 Tech Support
Crossroads to a Cleaner Internet

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Spamcop catching gmail

2005-07-11 Thread Richard Farris
Also, all of a sudden I am catching a lot of  seemingly lagitimate mail from 
yahoo with ..

Subject
To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding;

Headers
Received: from spamwall.apid.com [63.238.52.89] by ethixs.com with ESMTP
 (SMTPD32-7.11) id A86D12EA0280; Fri, 08 Jul 2005 19:12:45 -0400
Received: by spamwall.apid.com (Postfix, from userid 777)
id 1212646B31; Fri,  8 Jul 2005 18:15:04 -0500 (CDT)
Received: from web30006.mail.mud.yahoo.com (web30006.mail.mud.yahoo.com 
[68.142.200.69])

by spamwall.apid.com (Postfix) with SMTP id 9A1FF46B24
for [EMAIL PROTECTED]; Fri,  8 Jul 2005 18:15:01 -0500 (CDT)
Received: (qmail 83119 invoked by uid 60001); 8 Jul 2005 23:14:56 -
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
 s=s1024; d=yahoo.com;
 
h=Message-ID:Received:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding;
 b=OxuY1eFj1ERm0jX9xrPSfNJnZL/Ir0gnXAo6+OngyuFtf0eX6mf8SEX6Metj8cd6h5LooW+IgNfA5bGOeAjLmTM0Ss0FpyYBuAS2sbvSuOrxTmca5HexiuNObp3eDhSREJ3P6O6kogLO+r20oHW/DZUvDDRqgeNyPn3zOMx/p7s= 
;

Message-ID: [EMAIL PROTECTED]
Received: from [12.220.65.198] by web30006.mail.mud.yahoo.com via HTTP; Fri, 
08 Jul 2005 16:14:56 PDT

Date: Fri, 8 Jul 2005 16:14:56 -0700 (PDT)
From: Payton Harris [EMAIL PROTECTED]
Subject: Re: Jaclyn
To: Courtney Carter [EMAIL PROTECTED]
In-Reply-To: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=0-83948726-1120864496=:81139
Content-Transfer-Encoding: 8bit
X-Filtered-By: SublimeMail (http://sublimemail.com)
X-Declude-Sender: [EMAIL PROTECTED] [68.142.200.69]
X-Declude-Spoolname: D086d12ea0280ee76.SMD
X-Note: Total Spam Weight Of This Email Is 23.

Any Ideas whyit started about a month ago..

Richard Farris
Ethixs Online
1.270.247. Office
1.800.548.3877 Tech Support
Crossroads to a Cleaner Internet

- Original Message - 
From: Richard Farris [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Monday, July 11, 2005 11:48 AM
Subject: [Declude.JunkMail] Spamcop catching gmail


I am finding several legitimate emails held by spamcop...why would they 
list gmail..


Richard Farris
Ethixs Online
1.270.247. Office
1.800.548.3877 Tech Support
Crossroads to a Cleaner Internet

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Spamcop catching gmail

2005-07-11 Thread Richard Farris
I will send one next time I get one...I guess I could lower the spamcop to a 
weight of 8 which is just under my hold @ 9...but spamcop does catch a lot 
of junk sometimes..


Richard Farris
Ethixs Online
1.270.247. Office
1.800.548.3877 Tech Support
Crossroads to a Cleaner Internet

- Original Message - 
From: Colbeck, Andrew [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Monday, July 11, 2005 11:58 AM
Subject: RE: [Declude.JunkMail] Spamcop catching gmail


Do you have an example, Richard?


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Richard Farris
Sent: Monday, July 11, 2005 9:48 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Spamcop catching gmail

I am finding several legitimate emails held by spamcop...why would they
list gmail..

Richard Farris
Ethixs Online
1.270.247. Office
1.800.548.3877 Tech Support
Crossroads to a Cleaner Internet

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Bounced viruses or e-mail I'm confused...

2005-07-11 Thread Marc Catuogno


Please bear with me.  I've been getting bounces that I don't understand, and
I do feel stupid.  If any one has the time or patience to clear help me this
up it would be appreciated:

If a virus forges my e-mail address as the from and attempts to send it to a
non-existent user on my domain - wouldn't the bounce message simply be
coming from my domain?  It looks like other servers are answering for
prudentialrand.com - am I nuts? Highly confused? Screwed?

I see lines like the following in non deliverable messages:

Received: from prudentialrand.com (cpe-68-174-20-197.si.res.rr.com
[68.174.20.197])
by ms-smtp-03.rdc-nyc.rr.com (8.12.10/8.12.7) with ESMTP id
j6BMlhGi015287
for [EMAIL PROTECTED]; Mon, 11 Jul 2005 18:47:44 -0400 (EDT)
Message-Id: [EMAIL PROTECTED]
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]


Received: from prudentialrand.com (ipn36373-b01578.cidr.lightship.net
[216.204.209.74])
by spirit.lightshipmail.net (Postfix) with ESMTP id DD5571D5A6D
for [EMAIL PROTECTED]; Mon, 11 Jul 2005 20:58:09 -0400 (EDT)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]

FULL HEADERS BELOW:

MESSAGE 1:

Received: from spirit.lightshipmail.net [216.204.0.205] by
mail.prudentialrand.com with ESMTP
  (SMTPD32-8.05) id A70D12200C6; Mon, 11 Jul 2005 21:04:13 -0400
Received: by spirit.lightshipmail.net (Postfix)
id 0B4BE1D5BBC; Mon, 11 Jul 2005 20:58:12 -0400 (EDT)
Date: Mon, 11 Jul 2005 20:58:12 -0400 (EDT)
From: [EMAIL PROTECTED] (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary=DD5571D5A6D.1121129892/spirit.lightshipmail.net
Message-Id: [EMAIL PROTECTED]
X-IMAIL-SPAM-VALFROM: (19005638)
X-Declude-Sender:  [216.204.0.205]
X-Declude-Spoolname: D170d012200c613e1.SMD
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
spam.
X-Spam-Tests-Failed: None [0]
X-Country-Chain: 
X-Note: This E-mail was sent from  ([216.204.0.205]).

This is a MIME-encapsulated message.

--DD5571D5A6D.1121129892/spirit.lightshipmail.net
Content-Description: Notification
Content-Type: text/plain

This is the Postfix program at host spirit.lightshipmail.net.

I'm sorry to have to inform you that your message could not be
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

The Postfix program

[EMAIL PROTECTED]: host mail.prudentialrand.com[64.63.165.172] said:
550 unknown user [EMAIL PROTECTED] (in reply to RCPT TO command)

--DD5571D5A6D.1121129892/spirit.lightshipmail.net
Content-Description: Delivery report
Content-Type: message/delivery-status

Reporting-MTA: dns; spirit.lightshipmail.net
X-Postfix-Queue-ID: DD5571D5A6D
X-Postfix-Sender: rfc822; [EMAIL PROTECTED]
Arrival-Date: Mon, 11 Jul 2005 20:58:09 -0400 (EDT)

Final-Recipient: rfc822; [EMAIL PROTECTED]
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host mail.prudentialrand.com[64.63.165.172]
said:
550 unknown user [EMAIL PROTECTED] (in reply to RCPT TO command)

--DD5571D5A6D.1121129892/spirit.lightshipmail.net
Content-Description: Undelivered Message
Content-Type: message/rfc822

Received: from prudentialrand.com (ipn36373-b01578.cidr.lightship.net
[216.204.209.74])
by spirit.lightshipmail.net (Postfix) with ESMTP id DD5571D5A6D
for [EMAIL PROTECTED]; Mon, 11 Jul 2005 20:58:09 -0400 (EDT)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: lnsuh
Date: Mon, 11 Jul 2005 20:58:37 -0400
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary==_NextPart_000_0001_F70A1BAE.73E16A2C
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: [EMAIL PROTECTED]


MESSAGE 2:
Headers:
Received: from SMTP32-FWD by mail.prudentialrand.com
  (SMTP32) id A047001F2; Mon, 11 Jul 2005 18:57:02 -0400
Received: from ms-smtp-03.rdc-nyc.rr.com [24.29.109.7] by
mail.prudentialrand.com with ESMTP
  (SMTPD32-8.05) id A7E973D0088; Mon, 11 Jul 2005 18:51:21 -0400
Received: from localhost (localhost)
by ms-smtp-03.rdc-nyc.rr.com (8.12.10/8.12.7) id j6BMlmGi015336;
Mon, 11 Jul 2005 18:47:48 -0400 (EDT)
Date: Mon, 11 Jul 2005 18:47:48 -0400 (EDT)
From: Mail Delivery Subsystem [EMAIL PROTECTED]
Message-Id: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary=j6BMlmGi015336.1121122068/ms-smtp-03.rdc-nyc.rr.com
Subject: [OVER DELETE]Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)
X-IMAIL-SPAM-VALFROM: (121438344)
X-RBL-Warning: ANTI-AV: Message failed ANTI-AV test (line 167, weight 7)
X-RBL-Warning: GIBBERISH: Message failed GIBBERISH test (line 153, weight 4)
X-RBL-Warning: ANTI-GIBBERISH: Message failed ANTI-GIBBERISH test (line 127,
weight -4)