Re: [Declude.JunkMail] spamcop
I have already deactivated Spamcop...should I just leave it that way..I have seen where spamcop caught some pretty nasty email..but the declude may have caught it anyway... Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, November 21, 2005 4:19 PM Subject: Re: [Declude.JunkMail] spamcop gmail has many outbound servers - chances are one of the messages went via a server listed in spamcop. Spamcop these days has been proving to be less and less reliable - I can't tell you how often AOL, Earthlink, Gmail, Attbi, and other big ISP's get listed... Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Richard Farris writes: I just sent myself 4 messages all the same from my gmail to my ethixs.com account and 3 came thru and one got caught in the filter because of spamcop? 3 of the messages had a weight of 0 and the one that was caught had a weight of 33does this make any sense...all the messages were the same except I put test 1, test 2, test 3 and test 4 in the subject.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] spamcop
Richard, Last I checked, SpamCop was tagging about 50% of all of my spam, and while it certainly isn't perfect, it doesn't tag IP's that are perfectly clean. It is somewhat doubtful that one could remove SpamCop and not see more spam leakage. As a Declude user, I think that you might want to consider changing the weight that you apply to SpamCop instead, and make sure that you aren't automatically taking action on just that single hit. Personally I have few problems with SpamCop, and when they occur, they are almost always with bulk E-mail. Since I weight it low enough and it takes multiple false positives to result in blocking a legitimate personal E-mail on my system, hits from SpamCop on places like Gmail, AOL, etc. go almost completely unnoticed. The bulk E-mail is a different story though because many places have false positive issues with such traffic and varying definitions of spam, but people rarely complain about missing something like an Overstock.com ad if they do get blocked. Matt Richard Farris wrote: I have already deactivated Spamcop...should I just leave it that way..I have seen where spamcop caught some pretty nasty email..but the declude may have caught it anyway... Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, November 21, 2005 4:19 PM Subject: Re: [Declude.JunkMail] spamcop gmail has many outbound servers - chances are one of the messages went via a server listed in spamcop. Spamcop these days has been proving to be less and less reliable - I can't tell you how often AOL, Earthlink, Gmail, Attbi, and other big ISP's get listed... Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Richard Farris writes: I just sent myself 4 messages all the same from my gmail to my ethixs.com account and 3 came thru and one got caught in the filter because of spamcop? 3 of the messages had a weight of 0 and the one that was caught had a weight of 33does this make any sense...all the messages were the same except I put test 1, test 2, test 3 and test 4 in the subject.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] spamcop
For me this month spamcop has been correct 99.3% of the time. It has detected about 45% of all spams. - Original Message - From: Richard Farris [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, November 22, 2005 9:02 AM Subject: Re: [Declude.JunkMail] spamcop I have already deactivated Spamcop...should I just leave it that way..I have seen where spamcop caught some pretty nasty email..but the declude may have caught it anyway... Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, November 21, 2005 4:19 PM Subject: Re: [Declude.JunkMail] spamcop gmail has many outbound servers - chances are one of the messages went via a server listed in spamcop. Spamcop these days has been proving to be less and less reliable - I can't tell you how often AOL, Earthlink, Gmail, Attbi, and other big ISP's get listed... Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Richard Farris writes: I just sent myself 4 messages all the same from my gmail to my ethixs.com account and 3 came thru and one got caught in the filter because of spamcop? 3 of the messages had a weight of 0 and the one that was caught had a weight of 33does this make any sense...all the messages were the same except I put test 1, test 2, test 3 and test 4 in the subject.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] spamcop
For my system I would not deactivate it, but the weight assigned to it is not very much. It's a good test when used in a well structured weighting system. Darrell DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus. Supports all versions of Declude from 1.5x - 3.x. http://www.invariantsystems.com Richard Farris writes: I have already deactivated Spamcop...should I just leave it that way..I have seen where spamcop caught some pretty nasty email..but the declude may have caught it anyway... Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, November 21, 2005 4:19 PM Subject: Re: [Declude.JunkMail] spamcop gmail has many outbound servers - chances are one of the messages went via a server listed in spamcop. Spamcop these days has been proving to be less and less reliable - I can't tell you how often AOL, Earthlink, Gmail, Attbi, and other big ISP's get listed... Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Richard Farris writes: I just sent myself 4 messages all the same from my gmail to my ethixs.com account and 3 came thru and one got caught in the filter because of spamcop? 3 of the messages had a weight of 0 and the one that was caught had a weight of 33does this make any sense...all the messages were the same except I put test 1, test 2, test 3 and test 4 in the subject.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] FW: Memory leak
Hi all I'm suffering with a connectivity issue. After about 4 to 6 hours I lose the ability to query spam databases. If I restart decludeproc I can again connect to the databases. I also have a slow memory creep. It will slowly climb and I don't know if this is the cause of the loss of connectivity or not. I've added winsockcleanup on to my declude.cfg file, but still have the memmory creep. This problem started after upgrading declude from 2.x to 3.0.5.20 Any thoughts. Imail 8.15 hf2 windows server 2003 declude 3.0.5.20 Thanks John --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] spamcop
With this being said, no spam test is perfect. Therefore, I don't recomend a single test, regardless how effective it is, being equal to your hold/delete weight. I love the spamcop test, however, it is set to 60% of my hold weight, requiring another test or two to fail before the email is held. Removing spamcop from your testing would be a mistake IMHO. Travis - Original Message - From: Matt [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, November 22, 2005 9:20 AM Subject: Re: [Declude.JunkMail] spamcop Richard, Last I checked, SpamCop was tagging about 50% of all of my spam, and while it certainly isn't perfect, it doesn't tag IP's that are perfectly clean. It is somewhat doubtful that one could remove SpamCop and not see more spam leakage. As a Declude user, I think that you might want to consider changing the weight that you apply to SpamCop instead, and make sure that you aren't automatically taking action on just that single hit. Personally I have few problems with SpamCop, and when they occur, they are almost always with bulk E-mail. Since I weight it low enough and it takes multiple false positives to result in blocking a legitimate personal E-mail on my system, hits from SpamCop on places like Gmail, AOL, etc. go almost completely unnoticed. The bulk E-mail is a different story though because many places have false positive issues with such traffic and varying definitions of spam, but people rarely complain about missing something like an Overstock.com ad if they do get blocked. Matt Richard Farris wrote: I have already deactivated Spamcop...should I just leave it that way..I have seen where spamcop caught some pretty nasty email..but the declude may have caught it anyway... Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, November 21, 2005 4:19 PM Subject: Re: [Declude.JunkMail] spamcop gmail has many outbound servers - chances are one of the messages went via a server listed in spamcop. Spamcop these days has been proving to be less and less reliable - I can't tell you how often AOL, Earthlink, Gmail, Attbi, and other big ISP's get listed... Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Richard Farris writes: I just sent myself 4 messages all the same from my gmail to my ethixs.com account and 3 came thru and one got caught in the filter because of spamcop? 3 of the messages had a weight of 0 and the one that was caught had a weight of 33does this make any sense...all the messages were the same except I put test 1, test 2, test 3 and test 4 in the subject.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Global.cfg lines for SPF
This is what we have in our 'global.cfg' file: SPFFAIL spffail x x 3 0 Is this old syntax? A remnant of version 1.86? We are currently running JunkMail 3.0.5.20. Also, why are the weights all zero? Shouldn't a fail add weight, and a pass subtract weight? Or, am I misunderstanding the 'spf' test? Thanks! Kim -- Original Message -- From: David Barker [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Mon, 21 Nov 2005 16:26:13 -0500 This is the correct syntax. SPFFAILspf failx 0 0 SPFPASSspf passx 0 0 SPFUNKNOWN spf unknown x 0 0 David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brad Morgan Sent: Monday, November 21, 2005 4:00 PM To: Declude.JunkMail@declude.com Cc: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Global.cfg lines for SPF I use: SPFPASS spf pass x 0 0 SPFUNKNOWN spf unknown x 0 0 SPFFAIL spf fail x 50 0 Set 1: SPFFAIL spf fail x 9 0 SPFPASS spf pass x 0 0 Thanks for the quick responses. I did have the correct pair of lines in my global.cfg file but I have received messages over the weekend which Imail's SPF check marked as SPFFAIL but Declude did not. The messages were what F-Prot is now calling W32/[EMAIL PROTECTED] and appear to be from my own domain. Since I have an SPF record, they should have failed the Declude check but they did not. As a result the first few that arrived before F-Prot updated their databases and were delivered to my users. I'm aware of at least one user who attempted to open the zip file. Is this a bug in 2.0.6.16? Is it fixed in 3.0.5.20? Brad Morgan IT Manager Horizon Interactive Inc. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] -- Kim W. Premuda FastWave Internet Services San Diego, CA -- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
