Re: [Declude.JunkMail] ? Name Voting Time
I second that one, but maybe e-mail instead of mail. Wednesday, February 15, 2006, 10:18:11 PM, Darin Cox <[EMAIL PROTECTED]> wrote: DC> I'd like to vote for a write-in DC> Declude Mail Security Suite DC> You can add a 4 in there if you want...as in DC> Declude Mail Security Suite 4.0 DC> Darin. DC> - Original Message - DC> From: "Barry Simpson" <[EMAIL PROTECTED]> DC> To: ; DC> Sent: Wednesday, February 15, 2006 5:39 PM DC> Subject: [Declude.JunkMail] ? Name Voting Time DC> Here are the choices: DC> Please send your votes to [EMAIL PROTECTED] no later than 5pm Eastern Time DC> Friday 17th February. DC> - Declude Quattro DC> - DEC4 DC> - Suite4 DC> - R/4 (release four) DC> - Declude Total DC> - Declude Power Suite 4 DC> - Declude Max4 DC> - Declude ForePlay just making sure you're paying attention) DC> - Declude-ES4 (E-mail security 4) DC> Thanks DC> Barry DC> --- DC> [This E-mail was scanned for viruses by Declude EVA www.declude.com] DC> --- DC> This E-mail came from the Declude.JunkMail mailing list. To DC> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and DC> type "unsubscribe Declude.JunkMail". The archives can be found DC> at http://www.mail-archive.com. DC> --- DC> [This E-mail was scanned for viruses by Declude EVA www.declude.com] DC> --- DC> This E-mail came from the Declude.JunkMail mailing list. To DC> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and DC> type "unsubscribe Declude.JunkMail". The archives can be found DC> at http://www.mail-archive.com. Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] ? Name Voting Time
I'd like to vote for a write-in Declude Mail Security Suite You can add a 4 in there if you want...as in Declude Mail Security Suite 4.0 Darin. - Original Message - From: "Barry Simpson" <[EMAIL PROTECTED]> To: ; Sent: Wednesday, February 15, 2006 5:39 PM Subject: [Declude.JunkMail] ? Name Voting Time Here are the choices: Please send your votes to [EMAIL PROTECTED] no later than 5pm Eastern Time Friday 17th February. - Declude Quattro - DEC4 - Suite4 - R/4 (release four) - Declude Total - Declude Power Suite 4 - Declude Max4 - Declude ForePlay just making sure you're paying attention) - Declude-ES4 (E-mail security 4) Thanks Barry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Fw: [Declude.Virus] ? Name Voting Time
First, I vote AGAINST anything with "4" in it. Why 4? You were calling it version 4, but that's a complete misnomer. Currently, it represents the same feature set as the so-called version 3, so there is no reason to call it version 4. In addition, there are three components in it (AVA, JM, HJ), so again there is nothing to indicate "four." Am I missing something here? It seems that any name with four in it or indicating a four (such as the cute "Quattro") is actually misleading. That's as bad as your current process of naming it "version 4". By process of elimination: 1. Quattro is not only inappropriate but a rip-off of the old Borland name. And it leaves no room for future changes to the suite. 2. DEC4 is a waste, but DEC alone is redundant from Declude, not to mention confusing with Digital Equipment. So that's out. 3. Suite4 can be salvaged by shortening to Suite. This is completely unoriginal, but at least it's honest and clear, leaving no room for doubt. 4. R/4 is another rip-off, and really doesn't explain the collective nature of the different products. 5. Total is probably best, because it is just as clear as "Suite" but a little more original. And it doesn't have a stupid "4" in it. 6. Power Suite4. Again, let's dump the 4. Is "Power Suite" really any better than just "Suite"? Only to marketing types who live on tropical islands and worship Donald Trump. 7. Max4 is another rip-off, and it doesn't explain the collective nature of the combined products. 8. ForePlay sounds good to me. What's your problem? 9. ES4 can be shortened to ES, but that's really just another wordplay on "Suite" and "Power Suite". You guys are kind of in a rut, huh? Sounds like #5 is best, since your Puritan hearts won't let you pick #8. Personally, I think you need to start the contest over and get some new names altogether. Is this really all the names you received? Heck, I could think up better names than this... wait, I did send in some names, and none of them made the list. So you guys filtered the choices before presenting for a vote? I thought you already admitted you don't know how to name products? So why would you try to list only your favorites. Time to go back to #8 (wish I had thought of that one, even though it does have a stupid "4" in it). Ben BC Web - Original Message - From: "Barry Simpson" <[EMAIL PROTECTED]> To: ; Sent: Wednesday, February 15, 2006 2:39 PM Subject: [Declude.Virus] ? Name Voting Time > Here are the choices: > > Please send your votes to [EMAIL PROTECTED] no later than 5pm Eastern Time > Friday 17th February. > > - Declude Quattro > > - DEC4 > > - Suite4 > > - R/4 (release four) > > - Declude Total > > - Declude Power Suite 4 > > - Declude Max4 > > - Declude ForePlay just making sure you're paying attention) > > - Declude-ES4 (E-mail security 4) > > Thanks > > Barry > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] IIS SMTP / IMAIL + Declude Same Box
I am playing around with running IIS Smtp on the same box as my Imail + Declude installation. I had some questions for folks that have already implemented this. 1.) I know that IMAIL 8.15HF2 binds to all IP addresses. I changed the smtp listen port to 26. I installed IIS have it running and listening on 25 than forwarding outbound mail to 26. The headers show this on messages that flow through this configuration as: Received: from mail2.local.int [10.6.48.176] by mail2.local.int with ESMTP (SMTPD32-8.15) id A4662000D2; Wed, 15 Feb 2006 17:24:54 -0800 Received: from testclient ([10.6.48.100]) by mail2.local.int with Microsoft SMTPSVC(6.0.3790.1830); Now my question is how does Declude handle this in relation to hops. Since it adds an extra hop it will affect any HOP setting I have. I know it doesnt Do you handle this by: IPBYPASS 10.6.48.176? Or do you just bind mssmtp to a different ip address and IPBYPASS that setting as you would if the box was just external. Darrell - Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] ? Name Voting Time
I vote for Declude Pro Suite V4 Kevin Bilbee > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Barry Simpson > Sent: Wednesday, February 15, 2006 2:39 PM > To: Declude.JunkMail@declude.com; Declude.Virus@declude.com > Subject: [Declude.JunkMail] ? Name Voting Time > > > Here are the choices: > > Please send your votes to [EMAIL PROTECTED] no later than 5pm Eastern Time > Friday 17th February. > > - Declude Quattro > > - DEC4 > > - Suite4 > > - R/4 (release four) > > - Declude Total > > - Declude Power Suite 4 > > - Declude Max4 > > - Declude ForePlay just making sure you're paying attention) > > - Declude-ES4 (E-mail security 4) > > Thanks > > Barry > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] ? Name Voting Time
Here are the choices: Please send your votes to [EMAIL PROTECTED] no later than 5pm Eastern Time Friday 17th February. - Declude Quattro - DEC4 - Suite4 - R/4 (release four) - Declude Total - Declude Power Suite 4 - Declude Max4 - Declude ForePlay just making sure you're paying attention) - Declude-ES4 (E-mail security 4) Thanks Barry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Opinion
X-Note: X-Note: This email was scanned for spam. [Details at http://spamstats.madriveraccess.com] X-Note: This email has been virus scanned by F-Prot,McAfee AV, and ClamAV. X-Note: Please send abuse reports to [EMAIL PROTECTED] X-Country-Chain: X-Hello: X-Note: SMTP Sender: [EMAIL PROTECTED] X-Note: Sent from: [Revdns: mail.madriveraccess.com] [RemoteHostDomain: declude.com] [IP: 12.152.254.4] [SenderHost: madriveraccess.com] X-Note: Spam [v:2.0.6.16] tests: Whitelisted X-Note: Total spam weight of this E-mail is 0. X-Note: Scan time: 17:34:26 on 15 Feb 2006 X-Note: Queue name: DAC7142510140C4AD.SMD X-Note: I have this space - 209.200.34.0/24 -Nick Matt wrote: I originally only blacklisted some of their IP space that was known to spam and gave the rest of their space a few extra points, but late in 2004 I decided to block everything from them: 69.42.64.0/19Webair Internet Development Inc/webair.com (Spam Host/House) [69.42.64.0 - 69.42.95.255] - 12/09/2004 209.200.0.0/19Webair Internet Development Inc/webair.com (Spam Host/House) [209.200.0.0 - 209.200.31.255] - 12/09/2004 216.130.188.0/24Webair Internet Development Inc/webair.com (Spam Host/House) [216.130.188.0 - 216.130.188.255] - 12/09/2004 This list very likely could be updated by checking ARIN for "Webair" and then cross checking that IP space in Senderbase.org just to make sure there aren't issues with false positives. A quick check shows that I am probably missing a block or two. Matt Kevin Bilbee wrote: What is known about this ISP OrgName:Webair Internet Development Inc OrgID: WAIR Address:333 Jericho Tpke Address:Suite 200 City: Jericho StateProv: NY PostalCode: 11753 Country:US We are getting spam from them that is not on IP or URI black lists Kevin Bilbee Network Administrator Standard Abrasives, Inc. [EMAIL PROTECTED] (805) 520-5800 x7332 Changing the way industry works. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Opinion
I originally only blacklisted some of their IP space that was known to spam and gave the rest of their space a few extra points, but late in 2004 I decided to block everything from them: 69.42.64.0/19Webair Internet Development Inc/webair.com (Spam Host/House) [69.42.64.0 - 69.42.95.255] - 12/09/2004 209.200.0.0/19Webair Internet Development Inc/webair.com (Spam Host/House) [209.200.0.0 - 209.200.31.255] - 12/09/2004 216.130.188.0/24Webair Internet Development Inc/webair.com (Spam Host/House) [216.130.188.0 - 216.130.188.255] - 12/09/2004 This list very likely could be updated by checking ARIN for "Webair" and then cross checking that IP space in Senderbase.org just to make sure there aren't issues with false positives. A quick check shows that I am probably missing a block or two. Matt Kevin Bilbee wrote: What is known about this ISP OrgName:Webair Internet Development Inc OrgID: WAIR Address:333 Jericho Tpke Address:Suite 200 City: Jericho StateProv: NY PostalCode: 11753 Country:US We are getting spam from them that is not on IP or URI black lists Kevin Bilbee Network Administrator Standard Abrasives, Inc. [EMAIL PROTECTED] (805) 520-5800 x7332 Changing the way industry works. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Opinion
What is known about this ISP OrgName:Webair Internet Development Inc OrgID: WAIR Address:333 Jericho Tpke Address:Suite 200 City: Jericho StateProv: NY PostalCode: 11753 Country:US We are getting spam from them that is not on IP or URI black lists Kevin Bilbee Network Administrator Standard Abrasives, Inc. [EMAIL PROTECTED] (805) 520-5800 x7332 Changing the way industry works. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Doc for SM3-ver3 vs. ver4
Is there documentation for “Processing Order” using Smartermail 3 with junkmail ver3 vs. ver4? I have been testing SM3 with ver3 and getting some unexplainable results. It is in the doc’s for Imail but not SM. This would really help. Rick
RE: [Declude.JunkMail] How would I catch email like this?
Thanks Darrell, Close to 24 hours since I implemented this and haven't had a single message get through Declude+invURIBL! Cavell McDermott Network Administrator Cottonwood Financial 972.753.0822 Office 214.403.4918 Cell http://www.thecashstore.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, February 14, 2006 11:44 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] How would I catch email like this? Implement a URI filtering type application like our invURIBL. The domain in the email is listed in both SURBL and URIBL and would have been caught. Non-authoritative answer: Name:benawarde.com.multi.surbl.org Address: 127.0.0.102 Non-authoritative answer: Name:benawarde.com.multi.uribl.com Address: 127.0.0.2 Darrell --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. mail-lists writes: > Never seen an e-mail like this.. Obviously didn't hit my bodyfilter for > VIAGRA or VALIUM. Not quite sure how to scan for something like this. Or > even give a better description of what it is.. When viewing it in html if I > go to highlight the readable text, it also highlights the garbled text on > the right side of the page. > > Thanks! > > Here is the body in plain text. > > > Hello > > VyI w AvGiRbAs j $r3j,s7c5 y VvAaL r l p U n Mu b$k1u,k2 p 1dCqIvA o LpImS > n w $ r 3s,h3 m 3k > and many other http://www.benawarde.com > > Here is the HTML.. > > > > > > > > > Hello > > VyI w > AvG style="BORDER-LEFT: 0px; float: right">iRbAs j > $r3 style="BORDER-LEFT: 0px; float: right">j,s7c5 y > > VvAaL style="BORDER-LEFT: 0px; float: right"> r l p U > n Mu style="BORDER-LEFT: 0px; float: right">b$k1u,k2 style="BORDER-LEFT: 0px; float: right"> p 1d > CqIvA style="BORDER-LEFT: 0px; float: right"> o LpImS n > w $ style="BORDER-LEFT: 0px; float: right"> r 3s,h3 m > 3k > > and many other href="http://www.benawarde.com";> size=2>http://www.benawarde.com > > > > > > > > Confidentiality Notice: The information contained in this transmission is intended only for the personal and confidential use of the > designated recipient named above. If the receiver of this transmission is not the intended recipient or an agent responsible for > delivering it to the intended recipient, you are hereby notified that you have received this document in error, and that any review, > dissemination, distribution, or copying of this message is strictly prohibited. If you are not the intended recipient, please > immediately notify the sender and delete this e-mail message from your system. > > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. Confidentiality Notice: The information contained in this transmission is intended only for the personal and confidential use of the designated recipient named above. If the receiver of this transmission is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this document in error, and that any review, dissemination, distribution, or copying of this message is strictly prohibited. If you are not the intended recipient, please immediately notify the sender and delete this e-mail message from your system. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Left over D*.SM$ files in proc\work
Thank Bill, I will review what I have setup later and get back to you. Goran Jovanovic Omega Network Solutions From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Green dfn Systems Sent: Wednesday, February 15, 2006 11:52 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Left over D*.SM$ files in proc\work Goran, I was having the same issue. I seem to have resolved it accidently while working on an ?unrelated? connectivity issue. Since I was not focusing on the orphaned proc/work files as I made changes, I do not know which change resolved this issue. These are the changes I made: In Queue Manager: Disabled DNS Cache Disabled Failed Domain Skipping In SMTP Security Tab: Disabled "Check Valid Sender" Disabled "Auto-deny possible Hack Attempts" Bill Green dfn Systems - Original Message - From: Goran Jovanovic Hi, I have noticed that I am getting left over D*.SM$ files in the proc\work directory. I am getting 2 to 4 of these per day on a volume of 15-20K messages a day. ~~~ Anyone have any ideas about this? Thanks Goran Jovanovic Omega Network Solutions
RE: [Declude.JunkMail] adding weight based on x-country-chain
I’m pretty sure I don’t have the pro version. Does that mean that I cannot use country filters? Susan Duncan Web/Communications Officer / Agent des Communications/web Union of Taxation Employees / Syndicat des employées de l'Impôt Tel: 613-235-6704 ext 240 Fax: 613-234-7290 e-mail: [EMAIL PROTECTED] http://www.ute-sei.org/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: February 15, 2006 11:25 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] adding weight based on x-country-chain all_list.dat should be in your declude folder. Mine is dated 10/29/2005. If you have JunkMail pro, you can write the filters. REMOTEIP 5 CONTAINS . is a trick that I learned from Matt that essentially is always true. The sender's ip address (REMOTEIP) should always have a period in it. - Original Message - From: Susan Duncan To: Declude.JunkMail@declude.com Sent: Wednesday, February 15, 2006 9:50 AM Subject: RE: [Declude.JunkMail] adding weight based on x-country-chain I was looking for this in the documentation and didn’t find it in the Junkmail documentation http://www.declude.com/Version/Manuals/JunkMail/JM_2.0.6.asp I don’t see anything about country nor remoteip the way you are using it (it’s a variable as far as I can see). I didn’t see anything on the all_list.dat file either and I did text searches on the manual file. I’m wondering if I am just not looking in the right place. Susan Duncan Web/Communications Officer / Agent des Communications/web Union of Taxation Employees / Syndicat des employées de l'Impôt Tel: 613-235-6704 ext 240 Fax: 613-234-7290 e-mail: [EMAIL PROTECTED] http://www.ute-sei.org/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: February 15, 2006 10:15 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] adding weight based on x-country-chain The COUNTRY filter is used for searching the last country in the country chain. The COUNTRY filter requires the all_list.dat file. See the end of the document for a link to this file. COUNTRY was introduced in the 1.62. The COUNTRIES filter is used for searching all countries in the country chain. The COUNTRIES filter requires the all_list.dat file. See the end of the document for a link COUNTRIES was introduced in the 1.62 version. You could use a filter of: COUNTRY END IS US COUNTRY END IS CA REMOTEIP 5 CONTAINS . - Original Message - From: Susan Duncan To: Declude.JunkMail@declude.com Sent: Wednesday, February 15, 2006 8:48 AM Subject: [Declude.JunkMail] adding weight based on x-country-chain Is there a way to add a weight based on the country? I do not want to block on country, but the chances of mail coming from somewhere other than Canada or the US is fairly remote, so a weight on country + anything would mean it’s got a high chance of being spam. I couldn’t find anything in the docs on it. Susan Duncan Web/Communications Officer / Agent des Communications/web Union of Taxation Employees / Syndicat des employées de l'Impôt Tel: 613-235-6704 ext 240 Fax: 613-234-7290 e-mail: [EMAIL PROTECTED] http://www.ute-sei.org/
Re: [Declude.JunkMail] Left over D*.SM$ files in proc\work
Goran, I was having the same issue. I seem to have resolved it accidently while working on an ?unrelated? connectivity issue. Since I was not focusing on the orphaned proc/work files as I made changes, I do not know which change resolved this issue. These are the changes I made: In Queue Manager: Disabled DNS Cache Disabled Failed Domain Skipping In SMTP Security Tab: Disabled "Check Valid Sender" Disabled "Auto-deny possible Hack Attempts" Bill Green dfn Systems - Original Message - From: Goran Jovanovic Hi, I have noticed that I am getting left over D*.SM$ files in the proc\work directory. I am getting 2 to 4 of these per day on a volume of 15-20K messages a day. ~~~ Anyone have any ideas about this? Thanks Goran Jovanovic Omega Network Solutions
[Declude.JunkMail] E-mail size filter
Title: E-mail size filter Can someone show an example or two on how to filter out e-mail over 12mb. My users Imail mailboxes will except mail over 10mb even though the limit is set at 10mb thus causing a blockage when the try to DL mail. This always results in a call to me. It seems to be the same people over and over, no matter what I tell them it goes in one ear and out the other. I need to put an end to this, any ideas will be appreciated. Kelly
Re: [Declude.JunkMail] adding weight based on x-country-chain
all_list.dat should be in your declude folder. Mine is dated 10/29/2005. If you have JunkMail pro, you can write the filters. REMOTEIP 5 CONTAINS . is a trick that I learned from Matt that essentially is always true. The sender's ip address (REMOTEIP) should always have a period in it. - Original Message - From: Susan Duncan To: Declude.JunkMail@declude.com Sent: Wednesday, February 15, 2006 9:50 AM Subject: RE: [Declude.JunkMail] adding weight based on x-country-chain I was looking for this in the documentation and didnt find it in the Junkmail documentation http://www.declude.com/Version/Manuals/JunkMail/JM_2.0.6.asp I dont see anything about country nor remoteip the way you are using it (its a variable as far as I can see). I didnt see anything on the all_list.dat file either and I did text searches on the manual file. Im wondering if I am just not looking in the right place. Susan Duncan Web/Communications Officer / Agent des Communications/webUnion of Taxation Employees / Syndicat des employées de l'ImpôtTel: 613-235-6704 ext 240Fax: 613-234-7290e-mail: [EMAIL PROTECTED]http://www.ute-sei.org/ -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott FisherSent: February 15, 2006 10:15 AMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] adding weight based on x-country-chain The COUNTRY filter is used for searching the last country in the country chain. The COUNTRY filter requires the all_list.dat file. See the end of the document for a link to this file. COUNTRY was introduced in the 1.62. The COUNTRIES filter is used for searching all countries in the country chain. The COUNTRIES filter requires the all_list.dat file. See the end of the document for a link COUNTRIES was introduced in the 1.62 version. You could use a filter of: COUNTRY END IS US COUNTRY END IS CA REMOTEIP 5 CONTAINS . - Original Message - From: Susan Duncan To: Declude.JunkMail@declude.com Sent: Wednesday, February 15, 2006 8:48 AM Subject: [Declude.JunkMail] adding weight based on x-country-chain Is there a way to add a weight based on the country? I do not want to block on country, but the chances of mail coming from somewhere other than Canada or the US is fairly remote, so a weight on country + anything would mean its got a high chance of being spam. I couldnt find anything in the docs on it. Susan Duncan Web/Communications Officer / Agent des Communications/webUnion of Taxation Employees / Syndicat des employées de l'ImpôtTel: 613-235-6704 ext 240Fax: 613-234-7290e-mail: [EMAIL PROTECTED]http://www.ute-sei.org/
Re: [Declude.JunkMail] adding weight based on x-country-chain
I do score this way. One of the reasons is I can track whwere the spam is coming from with the log results. I'll score 30 points on a hold of 200. Not too high. I'll then run those that didn't fail the Filter-country through Matt's MP_Foreign Test ending those that triggered the initial country filter. Matt's MP Foreign filter looks at the headers/mailfrom/helo/revdns for country codes. There is definite false positives but 30 points is 15% of the hold weight, pretty reasonable. With the internationalization of companies, you never know where a company's email server lives. - Original Message - From: John Carter To: Declude.JunkMail@declude.com Sent: Wednesday, February 15, 2006 9:46 AM Subject: RE: [Declude.JunkMail] adding weight based on x-country-chain Of course, all of this is "your mileage will vary", but Scott's filter might be simpler (therefore better), but I have a country filter (which I got from Scott) which allows me to set the score by the country. The Global.cfg is FILTER-COUNTRY filter d:\Decludefilters\filter-country.txt x 0 0 (zero scoring because it comes from the filter) $default$.junkmail is FILTER-COUNTRY WARN The filter-country.txt file is (snip) COUNTRIES 3 CONTAINS ADCOUNTRIES 3 CONTAINS AECOUNTRIES 3 CONTAINS AFCOUNTRIES 3 CONTAINS AGCOUNTRIES 3 CONTAINS AICOUNTRIES 3 CONTAINS ALCOUNTRIES 3 CONTAINS AMCOUNTRIES 3 CONTAINS ANCOUNTRIES 3 CONTAINS AOCOUNTRIES 3 CONTAINS AQ etc. For me, I removed the US and set CA & UK to one (of course based on the nature of our clientele.) Others are at 3, but I can adjust each if I have particular problems. John C From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan DuncanSent: Wednesday, February 15, 2006 8:48 AMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] adding weight based on x-country-chain Is there a way to add a weight based on the country? I do not want to block on country, but the chances of mail coming from somewhere other than Canada or the US is fairly remote, so a weight on country + anything would mean its got a high chance of being spam. I couldnt find anything in the docs on it. Susan Duncan Web/Communications Officer / Agent des Communications/webUnion of Taxation Employees / Syndicat des employées de l'ImpôtTel: 613-235-6704 ext 240Fax: 613-234-7290e-mail: [EMAIL PROTECTED]http://www.ute-sei.org/
AW: [Declude.JunkMail] adding weight based on x-country-chain
hi, it was a "experimental" test (from the time scott was in charge). but it still works (up to 3.0.5.24bb). there is no documentation of this in the manuals but you can search in the archive (http://www.mail-archive.com/declude.junkmail@declude.com/). best regards from germany mfgi.a.gez. markus guhl***lds nrwref. 241tel.: 0211 9449 6947fax.: 0211 9449 8344mailto:[EMAIL PROTECTED]*** Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Susan DuncanGesendet: Mittwoch, 15. Februar 2006 16:50An: Declude.JunkMail@declude.comBetreff: RE: [Declude.JunkMail] adding weight based on x-country-chain I was looking for this in the documentation and didnt find it in the Junkmail documentation http://www.declude.com/Version/Manuals/JunkMail/JM_2.0.6.asp I dont see anything about country nor remoteip the way you are using it (its a variable as far as I can see). I didnt see anything on the all_list.dat file either and I did text searches on the manual file. Im wondering if I am just not looking in the right place. Susan Duncan Web/Communications Officer / Agent des Communications/webUnion of Taxation Employees / Syndicat des employées de l'ImpôtTel: 613-235-6704 ext 240Fax: 613-234-7290e-mail: [EMAIL PROTECTED]http://www.ute-sei.org/ -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott FisherSent: February 15, 2006 10:15 AMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] adding weight based on x-country-chain The COUNTRY filter is used for searching the last country in the country chain. The COUNTRY filter requires the all_list.dat file. See the end of the document for a link to this file. COUNTRY was introduced in the 1.62. The COUNTRIES filter is used for searching all countries in the country chain. The COUNTRIES filter requires the all_list.dat file. See the end of the document for a link COUNTRIES was introduced in the 1.62 version. You could use a filter of: COUNTRY END IS US COUNTRY END IS CA REMOTEIP 5 CONTAINS . - Original Message - From: Susan Duncan To: Declude.JunkMail@declude.com Sent: Wednesday, February 15, 2006 8:48 AM Subject: [Declude.JunkMail] adding weight based on x-country-chain Is there a way to add a weight based on the country? I do not want to block on country, but the chances of mail coming from somewhere other than Canada or the US is fairly remote, so a weight on country + anything would mean its got a high chance of being spam. I couldnt find anything in the docs on it. Susan Duncan Web/Communications Officer / Agent des Communications/webUnion of Taxation Employees / Syndicat des employées de l'ImpôtTel: 613-235-6704 ext 240Fax: 613-234-7290e-mail: [EMAIL PROTECTED]http://www.ute-sei.org/
RE: [Declude.JunkMail] adding weight based on x-country-chain
I was looking for this in the documentation and didn’t find it in the Junkmail documentation http://www.declude.com/Version/Manuals/JunkMail/JM_2.0.6.asp I don’t see anything about country nor remoteip the way you are using it (it’s a variable as far as I can see). I didn’t see anything on the all_list.dat file either and I did text searches on the manual file. I’m wondering if I am just not looking in the right place. Susan Duncan Web/Communications Officer / Agent des Communications/web Union of Taxation Employees / Syndicat des employées de l'Impôt Tel: 613-235-6704 ext 240 Fax: 613-234-7290 e-mail: [EMAIL PROTECTED] http://www.ute-sei.org/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: February 15, 2006 10:15 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] adding weight based on x-country-chain The COUNTRY filter is used for searching the last country in the country chain. The COUNTRY filter requires the all_list.dat file. See the end of the document for a link to this file. COUNTRY was introduced in the 1.62. The COUNTRIES filter is used for searching all countries in the country chain. The COUNTRIES filter requires the all_list.dat file. See the end of the document for a link COUNTRIES was introduced in the 1.62 version. You could use a filter of: COUNTRY END IS US COUNTRY END IS CA REMOTEIP 5 CONTAINS . - Original Message - From: Susan Duncan To: Declude.JunkMail@declude.com Sent: Wednesday, February 15, 2006 8:48 AM Subject: [Declude.JunkMail] adding weight based on x-country-chain Is there a way to add a weight based on the country? I do not want to block on country, but the chances of mail coming from somewhere other than Canada or the US is fairly remote, so a weight on country + anything would mean it’s got a high chance of being spam. I couldn’t find anything in the docs on it. Susan Duncan Web/Communications Officer / Agent des Communications/web Union of Taxation Employees / Syndicat des employées de l'Impôt Tel: 613-235-6704 ext 240 Fax: 613-234-7290 e-mail: [EMAIL PROTECTED] http://www.ute-sei.org/
RE: [Declude.JunkMail] adding weight based on x-country-chain
Of course, all of this is "your mileage will vary", but Scott's filter might be simpler (therefore better), but I have a country filter (which I got from Scott) which allows me to set the score by the country. The Global.cfg is FILTER-COUNTRY filter d:\Decludefilters\filter-country.txt x 0 0 (zero scoring because it comes from the filter) $default$.junkmail is FILTER-COUNTRY WARN The filter-country.txt file is (snip) COUNTRIES 3 CONTAINS ADCOUNTRIES 3 CONTAINS AECOUNTRIES 3 CONTAINS AFCOUNTRIES 3 CONTAINS AGCOUNTRIES 3 CONTAINS AICOUNTRIES 3 CONTAINS ALCOUNTRIES 3 CONTAINS AMCOUNTRIES 3 CONTAINS ANCOUNTRIES 3 CONTAINS AOCOUNTRIES 3 CONTAINS AQ etc. For me, I removed the US and set CA & UK to one (of course based on the nature of our clientele.) Others are at 3, but I can adjust each if I have particular problems. John C From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan DuncanSent: Wednesday, February 15, 2006 8:48 AMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] adding weight based on x-country-chain Is there a way to add a weight based on the country? I do not want to block on country, but the chances of mail coming from somewhere other than Canada or the US is fairly remote, so a weight on country + anything would mean its got a high chance of being spam. I couldnt find anything in the docs on it. Susan Duncan Web/Communications Officer / Agent des Communications/webUnion of Taxation Employees / Syndicat des employées de l'ImpôtTel: 613-235-6704 ext 240Fax: 613-234-7290e-mail: [EMAIL PROTECTED]http://www.ute-sei.org/
RE: [Declude.JunkMail] adding weight based on x-country-chain
Personaly I wouldn't block or assign weights for certain countries. (keep in mind that COUNTRY and COUNTRIES are not the same) But I've seen excellent results by assigning a relative low wheigt for all IP-blacklists and add additional wheight only if the message is not origininating from "trustworthily" countries. COUNTRY END STARTSWITH itCOUNTRY END STARTSWITH ... TESTSFAILED 20 CONTAINS CBLTESTSFAILED 10 CONTAINS DSBLTESTSFAILED 25 CONTAINS ORDBTESTSFAILED 30 CONTAINS SPAMCOPTESTSFAILED 30 CONTAINS ... Markus - Original Message - From: Susan Duncan To: Declude.JunkMail@declude.com Sent: Wednesday, February 15, 2006 8:48 AM Subject: [Declude.JunkMail] adding weight based on x-country-chain Is there a way to add a weight based on the country? I do not want to block on country, but the chances of mail coming from somewhere other than Canada or the US is fairly remote, so a weight on country + anything would mean its got a high chance of being spam. I couldnt find anything in the docs on it. Susan Duncan Web/Communications Officer / Agent des Communications/webUnion of Taxation Employees / Syndicat des employées de l'ImpôtTel: 613-235-6704 ext 240Fax: 613-234-7290e-mail: [EMAIL PROTECTED]http://www.ute-sei.org/
Re: [Declude.JunkMail] adding weight based on x-country-chain
Darn enter key. didn' get to finish my email. Here are the special coutnry codes: ## Special Codes## *1 Multi-Regional# *2 Europe# *3 North America# *4 Central/South America# *5 Pacific Rim# *A ARIN Unlisted (North America/South Africa)# *B Public Data Network# *E RIPE Unlisted (Europe, North Africa, Middle East)# *I Private IP# *L Loopback# *M Multicast# *P APNIC Unlisted (Asia Pacific)# *R IANA Reserved# *U Unknown So this filter might work better: COUNTRY END IS USCOUNTRY END IS CA COUNTRY END IS *3 COUNTRY END IS *A REMOTEIP 5 CONTAINS . - Original Message - From: Susan Duncan To: Declude.JunkMail@declude.com Sent: Wednesday, February 15, 2006 8:48 AM Subject: [Declude.JunkMail] adding weight based on x-country-chain Is there a way to add a weight based on the country? I do not want to block on country, but the chances of mail coming from somewhere other than Canada or the US is fairly remote, so a weight on country + anything would mean its got a high chance of being spam. I couldnt find anything in the docs on it. Susan Duncan Web/Communications Officer / Agent des Communications/webUnion of Taxation Employees / Syndicat des employées de l'ImpôtTel: 613-235-6704 ext 240Fax: 613-234-7290e-mail: [EMAIL PROTECTED]http://www.ute-sei.org/
Re: [Declude.JunkMail] adding weight based on x-country-chain
The COUNTRY filter is used for searching the last country in the country chain. The COUNTRY filter requires the all_list.dat file. See the end of the document for a link to this file. COUNTRY was introduced in the 1.62. The COUNTRIES filter is used for searching all countries in the country chain. The COUNTRIES filter requires the all_list.dat file. See the end of the document for a link COUNTRIES was introduced in the 1.62 version. You could use a filter of: COUNTRY END IS US COUNTRY END IS CA REMOTEIP 5 CONTAINS . - Original Message - From: Susan Duncan To: Declude.JunkMail@declude.com Sent: Wednesday, February 15, 2006 8:48 AM Subject: [Declude.JunkMail] adding weight based on x-country-chain Is there a way to add a weight based on the country? I do not want to block on country, but the chances of mail coming from somewhere other than Canada or the US is fairly remote, so a weight on country + anything would mean its got a high chance of being spam. I couldnt find anything in the docs on it. Susan Duncan Web/Communications Officer / Agent des Communications/webUnion of Taxation Employees / Syndicat des employées de l'ImpôtTel: 613-235-6704 ext 240Fax: 613-234-7290e-mail: [EMAIL PROTECTED]http://www.ute-sei.org/
[Declude.JunkMail] adding weight based on x-country-chain
Is there a way to add a weight based on the country? I do not want to block on country, but the chances of mail coming from somewhere other than Canada or the US is fairly remote, so a weight on country + anything would mean it’s got a high chance of being spam. I couldn’t find anything in the docs on it. Susan Duncan Web/Communications Officer / Agent des Communications/web Union of Taxation Employees / Syndicat des employées de l'Impôt Tel: 613-235-6704 ext 240 Fax: 613-234-7290 e-mail: [EMAIL PROTECTED] http://www.ute-sei.org/
