Re: [Declude.JunkMail] testing mailserver

2005-11-04 Thread Bonno Bloksma



H David,

What you saw in the message below was all there is, 
that was the entire message body after my test.
First line was the Received: line, last line was 
the X-IMail-ThreadID: line.

As to how to reproduce it, do as I did, I describe 
exactly what I did.
Groetjes,

Bonno Bloksma

  - Original Message - 
  From: 
  David 
  Franco-Rocha [ Declude ] 
  To: Declude.JunkMail@declude.com 
  
  Sent: Thursday, November 03, 2005 8:24 
  PM
  Subject: Re: [Declude.JunkMail] testing 
  mailserver
  
  Bonno,
  
  The text actually did appear as the body of the 
  email. The problem was that the headers were added after the body, which has 
  been an ongoing problem. Declude was not able to determine where the headers 
  actually ended and the body began, so it only *looks* like the text is not in 
  the body.
  
  Please send the actual message file as an 
  attachment to [EMAIL PROTECTED] so 
  that we can look at the raw data format of the message.
  
  With regard to these broken emails where headers 
  are placed in the wrong location, we are still doing some testing and expect 
  to have a solution very shortly.
  
  David Franco-Rocha
  Declude Technical / Engineering
  
  
- Original Message - 
From: 
Bonno Bloksma 

To: Declude.JunkMail@declude.com 

Sent: Wednesday, November 02, 2005 6:31 
AM
Subject: [Declude.JunkMail] testing 
mailserver

Hi,

I was testing our mailserver by setting up a 
telnet session on port 25 and then entering the commands. I must have done 
something realy wrong as my tekst appears in the headers in a way not even 
Outlook Express can see. ;-0 It will show a blank message.

This is wat was delivered to me:

Received: from TEST [194.109.165.42] by 
tio.nl (SMTPD-8.21) id AE3902D0; Wed, 02 Nov 2005 12:08:41 
+0100dit is een testX-RBL-Warning: BADHEADERS: This E-mail was sent 
from a broken mail client [8c200041].X-Declude-Sender: [EMAIL PROTECTED] 
[194.109.165.42]X-Declude-Spoolname: 
D9DFC01B0059C.SMDX-Declude-Note: Scanned at tio.nl by Declude 2.0.6 
(http://www.declude.com/x-note.htm) 
for spam.X-Declude-Scan: Score [8] at 12:09:30 on 02 Nov 
2005X-Declude-Tests: BADHEADERSX-Country-Chain: 
NETHERLANDS-destination---[E-mail scanned at tio.nl for viruses 
by Declude Virus]From: [EMAIL PROTECTED]Date: Wed, 2 
Nov 2005 12:09:30 +0100X-RCPT-TO: [EMAIL PROTECTED]Status: 
UX-UIDL: 383765952X-IMail-ThreadID: 9dfc01b0059c

See the "dit is een test" below the received 
from line? This is what I did:

Start (Windows) telnetset 
LOCAL_ECHOopen mail.tio.nl 25HELO TESTMAIL FROM:[EMAIL PROTECTED]RCPT TO:[EMAIL PROTECTED]DATAdit is 
een test.QUIT
Did I make a BIG mistake? I know I should have 
added a msgid somewhere and a date line to have a proper valid message but 
is that nessecary in order to have the text after the DATA command appear as 
the body part of a mail?

I'm using Declude 2.0.6



Met vriendelijke 
groet,
Bonno 
Bloksma
hoofd 
systeembeheer

tio hogeschool toerisme 
en hospitality
julianalaan 9 / 7553 ab 
hengelo
t 074 255 06 10 / f 074 
255 06 16
[EMAIL PROTECTED] / www.tio.nl


[Declude.JunkMail] Interesting thought on some tests when a front end gateway is involved.

2005-11-04 Thread John T \(Lists\)
I sent an e-mail to a software vendor requesting answers to some questions.
That message was rejected based on a SPF Fail. Yes, I have SPF records setup
for my domains. So how did it fail, bad configuration on the recipient side.
By reviewing the heads and the rejection notice, I found that my server
handed the message of to the MX record for the recipient server as expected.
However, the server listed in the MX then forwarded to a different e-mail
address on a different server, mail13.atl.registeredsite.com. In this case,
the MX record is a Imail 6.06 server. It appears that the Imail 6.06 server
recorded its own IP address as being mine during the handshake. (Is this a
known bug in Imail 6.06?) It appears that mail13.atl.registeredsite.com then
tried to hand the message to mx03.csee.siteprotect.com, but that server ran
a SPF query, found my record, saw that the connecting IP was 216.247.37.27
which is the IP for mail13.atl.registeredsite.com and correctly saw a SPF
Fail. The problem is, it should not be looking at that IP since it was a
forwarded message. Duh. The problem is why are they looking at the wrong IP?

Now, my thought on Declude tests such as SPF, REVDNS, HELOBOGUS. If my
server which is running those tests is sitting behind other servers of mine
which are the front door gateway and MX records, and if I have SKIPIP and
listing the IP of my gateway servers, does that effectively make those types
of tests useless?

SMTP (3090095d44d9) processing F:\Spool\q3090095d44d9.smd
SMTP (3090095d44d9) [x] looking up recipientdomain.moc in HOSTS and MX
SMTP (3090095d44d9) Trying recipientdomain.moc (0)
SMTP (3090095d44d9) [x] Connecting socket to service SMTP on host
recipientdomain.moc using protocol tcp
SMTP (3090095d44d9) [x] using source IP for mail.eservicesforyou.net
[67.94.227.39]
SMTP (3090095d44d9) Connect recipientdomain.moc [216.25.47.197:25] (1)
SMTP (3090095d44d9) 220 X1 NT-ESMTP Server mail.recipientdomain.moc
(IMail 6.06 8010-10)
SMTP (3090095d44d9) EHLO mail.eservicesforyou.net
SMTP (3090095d44d9) 250-mail.recipientdomain.moc says hello
SMTP (3090095d44d9) 250-SIZE 0
SMTP (3090095d44d9) 250-8BITMIME
SMTP (3090095d44d9) 250-DSN
SMTP (3090095d44d9) 250-ETRN
SMTP (3090095d44d9) 250 EXPN

Received: from mail.recipientdomain.moc (mail.recipientdomain.moc
[216.25.47.197])
by mail13.atl.registeredsite.com (8.12.11/8.12.11) with ESMTP id
jA49vpJ2009604
for [EMAIL PROTECTED]; Fri, 4 Nov 2005 04:57:51
-0500
Received: from SMTP32-FWD by mail.recipientdomain.moc
  (SMTP32) id A03AC; Fri,  4 Nov 2005 04:57:50 -0500
Received: from mail.eservicesforyou.net [216.25.47.197] by
mail.recipientdomain.moc with ESMTP
  (SMTPD32-6.06) id A09D5D1300B8; Fri, 04 Nov 2005 04:57:49 -0500
Received: from wks1 [192.168.16.11] by mail.eservicesforyou.net with ESMTP
  (SMTPD-8.20) id A09006A0; Fri, 04 Nov 2005 01:57:36 -0800

John T
eServices For You



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Address Not Whitelisted?

2005-11-04 Thread Travis Sullivan
Exactly, counterweight works so much better.  Whitelist at the last possible 
option.


I counterweight everything and don't have a single whitelist entry.

Travis

- Original Message - 
From: Darin Cox [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Thursday, November 03, 2005 7:24 PM
Subject: Re: [Declude.JunkMail] Address Not Whitelisted?


We've found that to be too general...  You might try a regex or 
phrase-based

whitelist that looks for unique text in the newsletter to whitelist it (or
rather counterweight it).

Darin.


- Original Message - 
From: Tyler Jensen [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Thursday, November 03, 2005 7:01 PM
Subject: RE: [Declude.JunkMail] Address Not Whitelisted?


Try

Whitelist from @returns.bulk.yahoo.com

Or

Whitelist from @yahoo-inc.com

I have one of these to allow fantasy football and baseball emails through 
to

my franchisees. I have not seen any spam whitelisted because of this setup
and I have been using it for at least a year. It may not be the best way 
but

it has worked for me.

Tyler



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of mail-lists
Sent: Thursday, November 03, 2005 6:36 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Address Not Whitelisted?


 I'm at my wits end.. These Yahoo news alerts are legitimate messages, but
I can't seem to whitelist them.

 So far in my global.cf I've added WHITELIST FROM settings to the 
following
addresses, but they still don't get to the recipient! 
[EMAIL PROTECTED],
[EMAIL PROTECTED], and [EMAIL PROTECTED]  Anybody 
know

what else I can do to allow these e-mails in?

 Thanks!

 Cavell

Received: from n10.bulk.scd.yahoo.com [66.218.66.189] by
cottonwoodfinancial.com
 (SMTPD-8.21) id A1190444; Thu, 03 Nov 2005 13:12:25 -0600
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=ginc1024;
d=yahoo-inc.com;

b=p2OiCTjMDGenNXSS96zFPWPUJWbDSYtXDGfx+d+759EZNpjxhxAkRF35XS37W00BJ3v6G0WpK8
rYURzt55Dtrw8e6wXInDswJk67+7vNJnZRNIECCZO7cXBoKKaw2i4B8/wcWwL6WNeIq2lOUW
rYURzt55Dtrw8e6wXInDswJk67+f8JH
rYogvNoV28SaQReeLJUYw=;
Received: from [66.218.69.2] by n10.bulk.scd.yahoo.com with NNFMP; 03 Nov
2005 19:12:53 -
Received: from [66.94.229.26] by mailer2.bulk.scd.yahoo.com with NNFMP; 03
Nov 2005 19:12:53 -
Received: from [127.0.0.1] by dlv8.alerts.scd.yahoo.com with NNFMP; 03 Nov
2005 19:12:53 -
X-yahoo-newman-property: alerts
X-yahoo-newman-id: [EMAIL PROTECTED]
From: Yahoo! Alerts [EMAIL PROTECTED]
Subject: **SPAM**=?UTF-8?B?S2V5d29yZCBOZXdzOiBbIkFkdmFuY2UgQW1lcmljYSJd?=
To: [EMAIL PROTECTED]
Reply-To: Yahoo! Alerts [EMAIL PROTECTED]
Return-Path: [EMAIL PROTECTED]
Errors-To: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Yahoo-AlertId:5cYJ5LIxGXHDwPmeko3O878bwgWlTAmS
X-Yahoo-Alerts-Beta: YES
Date: Thu,  3 Nov 2005 11:12:53 -0800
Message-Id: [EMAIL PROTECTED]
X-RBL-Warning: MXRATE-ALLOW: GOOD SENDER
X-RBL-Warning: CMDSPACE: Space found in RCPT TO: command.
X-RBL-Warning: MAILFROM: Domain returns.bulk.y has no MX or A records
[0301].
X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam
[420e].
X-RBL-Warning: SUBJECTCHARS: Subject with at least 50 characters found.
X-RBL-Warning: WEIGHT10: Weight of 24 reaches or exceeds the limit of 10.
X-Declude-Sender:
alerts.kmydqmbqgu2wknrtmy3taljygvxdau3ikndxovs7he3gwx3hhbeha2thovsvmvjxmiyuw
[EMAIL PROTECTED] [66.218.66.189]
X-Declude-Spoolname: D611901607008.smd
X-Declude-Note: Scanned by Declude 3.0.5.5
(http://www.declude.com/x-note.htm) for spam.
X-Declude-Scan: Score [24] at 13:12:37 on 03 Nov 2005
X-Declude-Tests: MXRATE-ALLOW, CMDSPACE, MAILFROM, SPAMHEADERS,
SUBJECTCHARS, WEIGHT10, WEIGHT14, WEIGHT18
X-Country-Chain: UNITED STATES-destination
X-RCPT-TO: [EMAIL PROTECTED]
Status: U
X-UIDL: 424737504
X-IMail-ThreadID: 611901607008




Confidentiality Notice:  The information contained in this transmission is
intended only for the personal and confidential use of the designated
recipient named above.  If the receiver of this transmission is not the
intended recipient or an agent responsible for delivering it to the 
intended

recipient, you are hereby notified that you have received this document in
error, and that any review, dissemination, distribution, or copying of 
this

message is strictly prohibited.  If you are not the intended recipient,
please immediately notify the sender and delete this e-mail message from
your system.


---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], 

RE: [Declude.JunkMail] Declude 3.0.5.14 Posted

2005-11-04 Thread Mike Wiegers
Is there a link we can just get the declude exe file instead of the complete
install each time?

Thanks,
Mike 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Monday, October 31, 2005 12:09 PM
To: Declude.JunkMail@declude.com; Declude.Virus@declude.com;
[EMAIL PROTECTED]
Subject: [Declude.JunkMail] Declude 3.0.5.14 Posted

Declude 3.0.5.14

ADDED - WINSOCKCLEANUPON
Located in Declude.cfg. Some customers had issues related to their network
stack causing loss of functionality for basic network operations. The
default for this directive is OFF

FIX - Memory leaked fixed by forcing windows to close handles once complete 
(Note this only effected a handful of customers)

David B
www.declude.com

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Declude 3.0.5.14 Posted

2005-11-04 Thread David Barker
Yes under the Declude Upgrade Section on the My Account Home Page

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mike Wiegers
Sent: Friday, November 04, 2005 10:54 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Declude 3.0.5.14 Posted

Is there a link we can just get the declude exe file instead of the complete
install each time?

Thanks,
Mike 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Monday, October 31, 2005 12:09 PM
To: Declude.JunkMail@declude.com; Declude.Virus@declude.com;
[EMAIL PROTECTED]
Subject: [Declude.JunkMail] Declude 3.0.5.14 Posted

Declude 3.0.5.14

ADDED - WINSOCKCLEANUPON
Located in Declude.cfg. Some customers had issues related to their network
stack causing loss of functionality for basic network operations. The
default for this directive is OFF

FIX - Memory leaked fixed by forcing windows to close handles once complete 
(Note this only effected a handful of customers)

David B
www.declude.com

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Address Not Whitelisted?

2005-11-04 Thread declude

I am missing the thought process.

Why is counterweighting by a large number so much better than whitelisting 
if both achieve the same purpose?


Just asking,
Don

- Original Message - 
From: Travis Sullivan [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Friday, November 04, 2005 8:59 AM
Subject: Re: [Declude.JunkMail] Address Not Whitelisted?


Exactly, counterweight works so much better.  Whitelist at the last 
possible option.


I counterweight everything and don't have a single whitelist entry.

Travis

- Original Message - 
From: Darin Cox [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Thursday, November 03, 2005 7:24 PM
Subject: Re: [Declude.JunkMail] Address Not Whitelisted?


We've found that to be too general...  You might try a regex or 
phrase-based
whitelist that looks for unique text in the newsletter to whitelist it 
(or

rather counterweight it).

Darin.


- Original Message - 
From: Tyler Jensen [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Thursday, November 03, 2005 7:01 PM
Subject: RE: [Declude.JunkMail] Address Not Whitelisted?


Try

Whitelist from @returns.bulk.yahoo.com

Or

Whitelist from @yahoo-inc.com

I have one of these to allow fantasy football and baseball emails through 
to
my franchisees. I have not seen any spam whitelisted because of this 
setup
and I have been using it for at least a year. It may not be the best way 
but

it has worked for me.

Tyler



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of mail-lists
Sent: Thursday, November 03, 2005 6:36 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Address Not Whitelisted?


 I'm at my wits end.. These Yahoo news alerts are legitimate messages, 
but

I can't seem to whitelist them.

 So far in my global.cf I've added WHITELIST FROM settings to the 
following
addresses, but they still don't get to the recipient! 
[EMAIL PROTECTED],
[EMAIL PROTECTED], and [EMAIL PROTECTED]  Anybody 
know

what else I can do to allow these e-mails in?

 Thanks!

 Cavell

Received: from n10.bulk.scd.yahoo.com [66.218.66.189] by
cottonwoodfinancial.com
 (SMTPD-8.21) id A1190444; Thu, 03 Nov 2005 13:12:25 -0600
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=ginc1024;
d=yahoo-inc.com;

b=p2OiCTjMDGenNXSS96zFPWPUJWbDSYtXDGfx+d+759EZNpjxhxAkRF35XS37W00BJ3v6G0WpK8
rYURzt55Dtrw8e6wXInDswJk67+7vNJnZRNIECCZO7cXBoKKaw2i4B8/wcWwL6WNeIq2lOUW
rYURzt55Dtrw8e6wXInDswJk67+f8JH
rYogvNoV28SaQReeLJUYw=;
Received: from [66.218.69.2] by n10.bulk.scd.yahoo.com with NNFMP; 03 Nov
2005 19:12:53 -
Received: from [66.94.229.26] by mailer2.bulk.scd.yahoo.com with NNFMP; 
03

Nov 2005 19:12:53 -
Received: from [127.0.0.1] by dlv8.alerts.scd.yahoo.com with NNFMP; 03 
Nov

2005 19:12:53 -
X-yahoo-newman-property: alerts
X-yahoo-newman-id: [EMAIL PROTECTED]
From: Yahoo! Alerts [EMAIL PROTECTED]
Subject: **SPAM**=?UTF-8?B?S2V5d29yZCBOZXdzOiBbIkFkdmFuY2UgQW1lcmljYSJd?=
To: [EMAIL PROTECTED]
Reply-To: Yahoo! Alerts [EMAIL PROTECTED]
Return-Path: [EMAIL PROTECTED]
Errors-To: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Yahoo-AlertId:5cYJ5LIxGXHDwPmeko3O878bwgWlTAmS
X-Yahoo-Alerts-Beta: YES
Date: Thu,  3 Nov 2005 11:12:53 -0800
Message-Id: [EMAIL PROTECTED]
X-RBL-Warning: MXRATE-ALLOW: GOOD SENDER
X-RBL-Warning: CMDSPACE: Space found in RCPT TO: command.
X-RBL-Warning: MAILFROM: Domain returns.bulk.y has no MX or A records
[0301].
X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam
[420e].
X-RBL-Warning: SUBJECTCHARS: Subject with at least 50 characters found.
X-RBL-Warning: WEIGHT10: Weight of 24 reaches or exceeds the limit of 10.
X-Declude-Sender:
alerts.kmydqmbqgu2wknrtmy3taljygvxdau3ikndxovs7he3gwx3hhbeha2thovsvmvjxmiyuw
[EMAIL PROTECTED] [66.218.66.189]
X-Declude-Spoolname: D611901607008.smd
X-Declude-Note: Scanned by Declude 3.0.5.5
(http://www.declude.com/x-note.htm) for spam.
X-Declude-Scan: Score [24] at 13:12:37 on 03 Nov 2005
X-Declude-Tests: MXRATE-ALLOW, CMDSPACE, MAILFROM, SPAMHEADERS,
SUBJECTCHARS, WEIGHT10, WEIGHT14, WEIGHT18
X-Country-Chain: UNITED STATES-destination
X-RCPT-TO: [EMAIL PROTECTED]
Status: U
X-UIDL: 424737504
X-IMail-ThreadID: 611901607008




Confidentiality Notice:  The information contained in this transmission 
is

intended only for the personal and confidential use of the designated
recipient named above.  If the receiver of this transmission is not the
intended recipient or an agent responsible for delivering it to the 
intended
recipient, you are hereby notified that you have received this document 
in
error, and that any review, dissemination, distribution, or copying of 
this

message is strictly prohibited.  If you are not the intended recipient,
please immediately notify the sender and delete this e-mail message from
your system.


---
This E-mail 

[Declude.JunkMail] CMDSPACE? Odd failures.

2005-11-04 Thread Darrell \([EMAIL PROTECTED])
I think (have no real proof) that CMDSPACE is not working right under 3.x? 

I have been seeing a rash of servers which I would never expect to fail 
CMDSPACE. 

I have had CMDSPACE failures from Earthlink, Novell GroupWise, and Prodigy. 

These are all legit messages (nothing forged to make it look like it was 
going through those servers.  I just find it hard to beleive that Earthlink 
is not using RFC compliant mail servers? 


Anyone else seeing anything like this?
Darrell 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Address Not Whitelisted?

2005-11-04 Thread Darin Cox
Because counterweighting let's you control how good you think a particular
source is.  That way, if a really bad email comes in (high score), perhaps
from a spammer that is mimicking certain patterns to slip through filters,
then you still catch it.  Whitelisting would have it go through no matter
how bad it really was.

We maintain three counterweighting levels to give us the granularity we
need.  One at our hold weight, one just under our delete weight, and a third
at twice our delete weight for the really had senders that a particular
customer needs mail from.

Darin.


- Original Message - 
From: [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Friday, November 04, 2005 11:23 AM
Subject: Re: [Declude.JunkMail] Address Not Whitelisted?


I am missing the thought process.

Why is counterweighting by a large number so much better than whitelisting
if both achieve the same purpose?

Just asking,
Don

- Original Message - 
From: Travis Sullivan [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Friday, November 04, 2005 8:59 AM
Subject: Re: [Declude.JunkMail] Address Not Whitelisted?


 Exactly, counterweight works so much better.  Whitelist at the last
 possible option.

 I counterweight everything and don't have a single whitelist entry.

 Travis

 - Original Message - 
 From: Darin Cox [EMAIL PROTECTED]
 To: Declude.JunkMail@declude.com
 Sent: Thursday, November 03, 2005 7:24 PM
 Subject: Re: [Declude.JunkMail] Address Not Whitelisted?


 We've found that to be too general...  You might try a regex or
 phrase-based
 whitelist that looks for unique text in the newsletter to whitelist it
 (or
 rather counterweight it).

 Darin.


 - Original Message - 
 From: Tyler Jensen [EMAIL PROTECTED]
 To: Declude.JunkMail@declude.com
 Sent: Thursday, November 03, 2005 7:01 PM
 Subject: RE: [Declude.JunkMail] Address Not Whitelisted?


 Try

 Whitelist from @returns.bulk.yahoo.com

 Or

 Whitelist from @yahoo-inc.com

 I have one of these to allow fantasy football and baseball emails through
 to
 my franchisees. I have not seen any spam whitelisted because of this
 setup
 and I have been using it for at least a year. It may not be the best way
 but
 it has worked for me.

 Tyler



 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of mail-lists
 Sent: Thursday, November 03, 2005 6:36 PM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Address Not Whitelisted?


  I'm at my wits end.. These Yahoo news alerts are legitimate messages,
 but
 I can't seem to whitelist them.

  So far in my global.cf I've added WHITELIST FROM settings to the
 following
 addresses, but they still don't get to the recipient!
 [EMAIL PROTECTED],
 [EMAIL PROTECTED], and [EMAIL PROTECTED]  Anybody
 know
 what else I can do to allow these e-mails in?

  Thanks!

  Cavell

 Received: from n10.bulk.scd.yahoo.com [66.218.66.189] by
 cottonwoodfinancial.com
  (SMTPD-8.21) id A1190444; Thu, 03 Nov 2005 13:12:25 -0600
 Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=ginc1024;
 d=yahoo-inc.com;


b=p2OiCTjMDGenNXSS96zFPWPUJWbDSYtXDGfx+d+759EZNpjxhxAkRF35XS37W00BJ3v6G0WpK8
 rYURzt55Dtrw8e6wXInDswJk67+7vNJnZRNIECCZO7cXBoKKaw2i4B8/wcWwL6WNeIq2lOUW
 rYURzt55Dtrw8e6wXInDswJk67+f8JH
 rYogvNoV28SaQReeLJUYw=;
 Received: from [66.218.69.2] by n10.bulk.scd.yahoo.com with NNFMP; 03 Nov
 2005 19:12:53 -
 Received: from [66.94.229.26] by mailer2.bulk.scd.yahoo.com with NNFMP;
 03
 Nov 2005 19:12:53 -
 Received: from [127.0.0.1] by dlv8.alerts.scd.yahoo.com with NNFMP; 03
 Nov
 2005 19:12:53 -
 X-yahoo-newman-property: alerts
 X-yahoo-newman-id: [EMAIL PROTECTED]
 From: Yahoo! Alerts [EMAIL PROTECTED]
 Subject: **SPAM**=?UTF-8?B?S2V5d29yZCBOZXdzOiBbIkFkdmFuY2UgQW1lcmljYSJd?=
 To: [EMAIL PROTECTED]
 Reply-To: Yahoo! Alerts [EMAIL PROTECTED]
 Return-Path: [EMAIL PROTECTED]
 Errors-To: [EMAIL PROTECTED]
 MIME-Version: 1.0
 Content-Type: text/html; charset=utf-8
 Content-Transfer-Encoding: 8bit
 X-Yahoo-AlertId:5cYJ5LIxGXHDwPmeko3O878bwgWlTAmS
 X-Yahoo-Alerts-Beta: YES
 Date: Thu,  3 Nov 2005 11:12:53 -0800
 Message-Id: [EMAIL PROTECTED]
 X-RBL-Warning: MXRATE-ALLOW: GOOD SENDER
 X-RBL-Warning: CMDSPACE: Space found in RCPT TO: command.
 X-RBL-Warning: MAILFROM: Domain returns.bulk.y has no MX or A records
 [0301].
 X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam
 [420e].
 X-RBL-Warning: SUBJECTCHARS: Subject with at least 50 characters found.
 X-RBL-Warning: WEIGHT10: Weight of 24 reaches or exceeds the limit of 10.
 X-Declude-Sender:

alerts.kmydqmbqgu2wknrtmy3taljygvxdau3ikndxovs7he3gwx3hhbeha2thovsvmvjxmiyuw
 [EMAIL PROTECTED] [66.218.66.189]
 X-Declude-Spoolname: D611901607008.smd
 X-Declude-Note: Scanned by Declude 3.0.5.5
 (http://www.declude.com/x-note.htm) for spam.
 X-Declude-Scan: Score [24] at 13:12:37 on 03 Nov 2005
 X-Declude-Tests: MXRATE-ALLOW, 

RE: [Declude.JunkMail] Declude 3.0.5.14 Posted

2005-11-04 Thread Mike Wiegers
David,

I only find a Delcude_Setup file that's 6MB. I was looking to just replace
the declude.exe file. I will go this route.

Thanks,
Mike 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Friday, November 04, 2005 10:14 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Declude 3.0.5.14 Posted

Yes under the Declude Upgrade Section on the My Account Home Page

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mike Wiegers
Sent: Friday, November 04, 2005 10:54 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Declude 3.0.5.14 Posted

Is there a link we can just get the declude exe file instead of the complete
install each time?

Thanks,
Mike 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Monday, October 31, 2005 12:09 PM
To: Declude.JunkMail@declude.com; Declude.Virus@declude.com;
[EMAIL PROTECTED]
Subject: [Declude.JunkMail] Declude 3.0.5.14 Posted

Declude 3.0.5.14

ADDED - WINSOCKCLEANUPON
Located in Declude.cfg. Some customers had issues related to their network
stack causing loss of functionality for basic network operations. The
default for this directive is OFF

FIX - Memory leaked fixed by forcing windows to close handles once complete 
(Note this only effected a handful of customers)

David B
www.declude.com

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Declude 3.0.5.14 Posted

2005-11-04 Thread Darrell \([EMAIL PROTECTED])
Mike, 

I am sure you know this, but you need to upgrade both declude.exe and 
decludeproc.exe under 3.x. 


Darrell
---
Incorporate SURBL and other URI blakclists into Declude.  Try invURIBL and 
see how effective intelligent URI filtering is - 
http://www.invariantsystems.com 

Mike Wiegers writes: 

David, 


I only find a Delcude_Setup file that's 6MB. I was looking to just replace
the declude.exe file. I will go this route. 


Thanks,
Mike  


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Friday, November 04, 2005 10:14 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Declude 3.0.5.14 Posted 

Yes under the Declude Upgrade Section on the My Account Home Page 


David B
www.declude.com  


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mike Wiegers
Sent: Friday, November 04, 2005 10:54 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Declude 3.0.5.14 Posted 


Is there a link we can just get the declude exe file instead of the complete
install each time? 


Thanks,
Mike  


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Monday, October 31, 2005 12:09 PM
To: Declude.JunkMail@declude.com; Declude.Virus@declude.com;
[EMAIL PROTECTED]
Subject: [Declude.JunkMail] Declude 3.0.5.14 Posted 

Declude 3.0.5.14 


ADDED - WINSOCKCLEANUPON
Located in Declude.cfg. Some customers had issues related to their network
stack causing loss of functionality for basic network operations. The
default for this directive is OFF 

FIX - Memory leaked fixed by forcing windows to close handles once complete 
	(Note this only effected a handful of customers) 


David B
www.declude.com 


---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Declude 3.0.5.14 Posted

2005-11-04 Thread David Barker
Mike,

If you are not already running the service you will need to run the
Declude_setup.exe to get the service installed  etc, only thereafter can you
upgrade just the decludeproc.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mike Wiegers
Sent: Friday, November 04, 2005 2:55 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Declude 3.0.5.14 Posted

David,

I only find a Delcude_Setup file that's 6MB. I was looking to just replace
the declude.exe file. I will go this route.

Thanks,
Mike 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Friday, November 04, 2005 10:14 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Declude 3.0.5.14 Posted

Yes under the Declude Upgrade Section on the My Account Home Page

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mike Wiegers
Sent: Friday, November 04, 2005 10:54 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Declude 3.0.5.14 Posted

Is there a link we can just get the declude exe file instead of the complete
install each time?

Thanks,
Mike 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Monday, October 31, 2005 12:09 PM
To: Declude.JunkMail@declude.com; Declude.Virus@declude.com;
[EMAIL PROTECTED]
Subject: [Declude.JunkMail] Declude 3.0.5.14 Posted

Declude 3.0.5.14

ADDED - WINSOCKCLEANUPON
Located in Declude.cfg. Some customers had issues related to their network
stack causing loss of functionality for basic network operations. The
default for this directive is OFF

FIX - Memory leaked fixed by forcing windows to close handles once complete 
(Note this only effected a handful of customers)

David B
www.declude.com

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Declude 3.0.5.18 Posted

2005-11-04 Thread David Barker
Declude 3.0.5.18

ALL - Fixed un-defined variables causing intermittent stop/start with the
decludeproc service. 
JM -  Fixed SmarterMail incoming email recipient domain aliases.
AV -  Fixed un-defined variables, causing incorrect Virus Names. 

David B
www.declude.com

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Diag issue

2005-11-04 Thread Jeff Kratka
I have been attempting to run the diag for declude but every time I do I
received the following message

C:\IMaildecludeproc -diag

Invalid command line parameter:

-install Install Declude
-diagPrint diagnostics

What am I doing wrong.

Jeff Kratka

TymeWyse Internet
P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417
tel: (541) 643-2023  -  [EMAIL PROTECTED]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Diag issue

2005-11-04 Thread Kevin Bilbee
Yea they have not fixed hta yet. If you are looking for the version do a 

decludeproc.exe -v


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Jeff Kratka
 Sent: Friday, November 04, 2005 2:03 PM
 To: Declude.JunkMail@declude.com
 Subject: [Declude.JunkMail] Diag issue
 
 
 I have been attempting to run the diag for declude but every time I do I
 received the following message
 
 C:\IMaildecludeproc -diag
 
 Invalid command line parameter:
 
 -install Install Declude
 -diagPrint diagnostics
 
 What am I doing wrong.
 
 Jeff Kratka
 
 TymeWyse Internet
 P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417
 tel: (541) 643-2023  -  [EMAIL PROTECTED]
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 ---
 [This E-mail scanned for viruses by Declude Virus]
 
 
 
---
[This E-mail scanned for viruses by Declude Virus]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Declude.cfg

2005-11-04 Thread Gary Steiner
I'm trying to understand the different Declude configuration files.  I'm 
running 3.x Pro with JM and EV under SmarterMail.

I've seen mention of the Declude.cfg file, but my configuration doesn't have 
one.  I see global.cfg, virus.cfg, confirm.cfg and hijack.cfg, as well as the 
$default$.junkmail file.  Is Declude.cfg something that gets added with 3.x?  
Is it something that gets installed with the Setup, or is it something that you 
have to create manually?

Gary



---
[This E-mail scanned for viruses by Declude Virus]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Declude.cfg

2005-11-04 Thread Matt

Gary,

That file is created manually when you want to override the defaults 
that they have preconfigured.  It makes sense to leave it alone until 
you know of something specific that you wish to tweak that belongs in there.


Matt



Gary Steiner wrote:


I'm trying to understand the different Declude configuration files.  I'm 
running 3.x Pro with JM and EV under SmarterMail.

I've seen mention of the Declude.cfg file, but my configuration doesn't have 
one.  I see global.cfg, virus.cfg, confirm.cfg and hijack.cfg, as well as the 
$default$.junkmail file.  Is Declude.cfg something that gets added with 3.x?  
Is it something that gets installed with the Setup, or is it something that you 
have to create manually?

Gary



---
[This E-mail scanned for viruses by Declude Virus]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


 


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] SmarterMail Mailbox Action Equivalent?

2005-11-04 Thread Panda Consulting S.A. Luis Alberto Arango
As far as I know there is no support for Mailbox Action. The equivalent is
Routeto for Smartermail, but still far from the nice functionality of the
Mailbox action. I hope some day we have Mailbox action available for
smartermail as well. Is an action I miss a lot.

Luis Arango
 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Bill 
 Green dfn Systems
 Sent: Martes, 01 de Noviembre de 2005 12:25 p.m.
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] SmarterMail Mailbox Action Equivalent?
 
 
 I've been following SmarterMail's growth with interest on 
 this mailing list since IMail's price debacle last year (or 
 was it 2 yrs ago?). The dealbreaker for us then was the lack 
 of an equivalent to the IMail/Declude Mailbox Action where I 
 could route mail of a certain weight range to a user's 
 subfolder accessable by the user via WebMail.
 This has been extremely popular with our customers and 
 was actually the feature which drew us to Declude in the first place.
 
 Now, from what I'm seeing on the IMail list, it looks as if 
 IpSwitch is again engaging in Sticker Shock on the IMail 
 Annual Maintenance. I'm looking at SmarterMail with renewed 
 interest as, I'm sure, are others.
 
 Have I missed news of a SmarterMail equivalent to the Mailbox 
 Action, or is one coming soon?
 
 Bill
 
 
 ---
 [This E-mail scanned for viruses by Declude Virus]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
 type unsubscribe Declude.JunkMail.  The archives can be 
 found at http://www.mail-archive.com.
 __
 [Email scanned for viruses]
 [Email escaneado contra virus]
 

__
[Email scanned for viruses]
[Email escaneado contra virus]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.