RE: [Declude.JunkMail] Re: Why is Declude Not Scanning This?
This issue has been discussed for many months now with no resolution. We finally gave up and are having great luck with ASSP. It's a shame that something so good had to turn into what is now Declude. Evans Martin Martek.Net Former Declude customer > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave > Beckstrom > Sent: Monday, September 04, 2006 10:17 PM > To: declude.junkmail@declude.com > Subject: RE: [Declude.JunkMail] Re: Why is Declude Not Scanning This? > > I see about 10 - 20 per day where Declude is broken and where it doesn't > scan the email and puts the Declude headers at the bottom. > > > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Kevin > > Bilbee > > Sent: Monday, September 04, 2006 10:10 PM > > To: declude.junkmail@declude.com > > Subject: RE: [Declude.JunkMail] Re: Why is Declude Not Scanning This? > > > > I have been seeing about 2-3 emails per month with out declude headers > > anywhere in the emil message. They have all been spam. No delcude > headers > in > > the header or body. > > > > > > Kevin Bilbee > > > > > -Original Message- > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > > > Behalf Of David Dodell > > > Sent: Monday, September 04, 2006 7:33 PM > > > To: declude.junkmail@declude.com > > > Subject: [Declude.JunkMail] Re: Why is Declude Not Scanning This? > > > > > > > > > On Sep 4, 2006, at 4:58 PM, John T ((Lists)) wrote: > > > > > > > But you need to check the message body. There has been discussion > > > > about a > > > > string of spam that has bad headers where the Declude Headers end > > > > up at the > > > > bottom of the body > > > > > > > > > John, I have done so ... the only other part of the message is a JPG > > > attachment which has the actual "viewable" spam advertisement > > > ... did > > > not note any more header lines enclosed in the body of the message. > > > > > > David > > > > > > > > > > > > > > > > >> -Original Message- > > > >> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf > > > >> Of David > > > >> Dodell > > > >> Sent: Monday, September 04, 2006 3:16 PM > > > >> To: declude.junkmail@declude.com > > > >> Subject: [Declude.JunkMail] Re: Why is Declude Not Scanning This? > > > >> > > > >>> By anychance are the Declude headers all the way at the bottom of > > > >>> the > > > >>> message. Also, in 8.x trains of Imail there were situations > > > >>> where the > > > >>> QueueManager could steal the message from Declude 2.x and > > > below and > > > >>> deliver > > > >>> it before Declude processed it. > > > >> > > > >> Darrell > > > >> > > > >> (1) No more headers were visible any place in either the message > > > >> header or header text > > > >> > > > >> (2) I'm running Imail 9.0 and Declude 4.All the latest releases > > > >> > > > >> Still perplexed ... only happens once in a while, otherwise all > > > >> working ok > > > >> > > > >> > > > >> --- > > > >> This E-mail came from the Declude.JunkMail mailing list. To > > > >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > > > >> "unsubscribe Declude.JunkMail". The archives can be found at > > > >> http://www.mail-archive.com. > > > > > > > > > > > > > > > > > > > > --- > > > > This E-mail came from the Declude.JunkMail mailing list. To > > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > > > > "unsubscribe Declude.JunkMail". The archives can be found at > > > > http://www.mail-archive.com. > > > > > > > > > > > > > > > > > > > > --- > > > This E-mail came from the Declude.JunkMail mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.JunkMail". The archives can be > > > found at http://www.mail-archive.com. > > > > > > > > > > > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Why is Declude Not Scanning This?
Hi, I reported this issue to Declude as follows: Declude v3.10 [30A-0C30A9AC-1BB6] 6/26/2006 Declude V3.11 [040-0C6669E9-2D9E] 8/7/2006 XINHEADERS not appearing in every email message for which scanning is enabled. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of David Dodell > Sent: Sunday, September 03, 2006 1:11 PM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] Why is Declude Not Scanning This? > > I see this occasionally ... a spam message will come in, but > according to the headers, it isn't even touch or scanned by Declude > since none of my normal declude headers are there; the address > "[EMAIL PROTECTED]" is NOT whitelisted, and even so, would show the > declude headers still. > > Any ideas? > > > David > > > > From: [EMAIL PROTECTED] > Subject:Best love [EMAIL PROTECTED] at best store! > Date: September 3, 2006 5:20:39 AM MST > To: [EMAIL PROTECTED] > Received: from friend [70.109.234.122] by > stat.com with ESMTP > (SMTPD-9.03) id AA770B24; Sun, 03 Sep 2006 10:01:43 -0700 > Message-Id: <[EMAIL PROTECTED]> > Mime-Version: 1.0 > Content-Type: multipart/related; > type="multipart/alternative"; > boundary="ms030208050508080001090405" > X-Priority: 3 > X-Msmail-Priority: Normal > X-Mailer: Microsoft Outlook Express 6.00.2900.2180 > X-Mimeole: Produced By Microsoft MimeOLE V6.00.2900.2180 > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Re: Why is Declude Not Scanning This?
I see about 10 - 20 per day where Declude is broken and where it doesn't scan the email and puts the Declude headers at the bottom. > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin > Bilbee > Sent: Monday, September 04, 2006 10:10 PM > To: declude.junkmail@declude.com > Subject: RE: [Declude.JunkMail] Re: Why is Declude Not Scanning This? > > I have been seeing about 2-3 emails per month with out declude headers > anywhere in the emil message. They have all been spam. No delcude headers in > the header or body. > > > Kevin Bilbee > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > > Behalf Of David Dodell > > Sent: Monday, September 04, 2006 7:33 PM > > To: declude.junkmail@declude.com > > Subject: [Declude.JunkMail] Re: Why is Declude Not Scanning This? > > > > > > On Sep 4, 2006, at 4:58 PM, John T ((Lists)) wrote: > > > > > But you need to check the message body. There has been discussion > > > about a > > > string of spam that has bad headers where the Declude Headers end > > > up at the > > > bottom of the body > > > > > > John, I have done so ... the only other part of the message is a JPG > > attachment which has the actual "viewable" spam advertisement > > ... did > > not note any more header lines enclosed in the body of the message. > > > > David > > > > > > > > > > > >> -Original Message- > > >> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf > > >> Of David > > >> Dodell > > >> Sent: Monday, September 04, 2006 3:16 PM > > >> To: declude.junkmail@declude.com > > >> Subject: [Declude.JunkMail] Re: Why is Declude Not Scanning This? > > >> > > >>> By anychance are the Declude headers all the way at the bottom of > > >>> the > > >>> message. Also, in 8.x trains of Imail there were situations > > >>> where the > > >>> QueueManager could steal the message from Declude 2.x and > > below and > > >>> deliver > > >>> it before Declude processed it. > > >> > > >> Darrell > > >> > > >> (1) No more headers were visible any place in either the message > > >> header or header text > > >> > > >> (2) I'm running Imail 9.0 and Declude 4.All the latest releases > > >> > > >> Still perplexed ... only happens once in a while, otherwise all > > >> working ok > > >> > > >> > > >> --- > > >> This E-mail came from the Declude.JunkMail mailing list. To > > >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > > >> "unsubscribe Declude.JunkMail". The archives can be found at > > >> http://www.mail-archive.com. > > > > > > > > > > > > > > > --- > > > This E-mail came from the Declude.JunkMail mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > > > "unsubscribe Declude.JunkMail". The archives can be found at > > > http://www.mail-archive.com. > > > > > > > > > > > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be > > found at http://www.mail-archive.com. > > > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Re: Why is Declude Not Scanning This?
I have been seeing about 2-3 emails per month with out declude headers anywhere in the emil message. They have all been spam. No delcude headers in the header or body. Kevin Bilbee > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of David Dodell > Sent: Monday, September 04, 2006 7:33 PM > To: declude.junkmail@declude.com > Subject: [Declude.JunkMail] Re: Why is Declude Not Scanning This? > > > On Sep 4, 2006, at 4:58 PM, John T ((Lists)) wrote: > > > But you need to check the message body. There has been discussion > > about a > > string of spam that has bad headers where the Declude Headers end > > up at the > > bottom of the body > > > John, I have done so ... the only other part of the message is a JPG > attachment which has the actual "viewable" spam advertisement > ... did > not note any more header lines enclosed in the body of the message. > > David > > > > > > >> -Original Message- > >> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf > >> Of David > >> Dodell > >> Sent: Monday, September 04, 2006 3:16 PM > >> To: declude.junkmail@declude.com > >> Subject: [Declude.JunkMail] Re: Why is Declude Not Scanning This? > >> > >>> By anychance are the Declude headers all the way at the bottom of > >>> the > >>> message. Also, in 8.x trains of Imail there were situations > >>> where the > >>> QueueManager could steal the message from Declude 2.x and > below and > >>> deliver > >>> it before Declude processed it. > >> > >> Darrell > >> > >> (1) No more headers were visible any place in either the message > >> header or header text > >> > >> (2) I'm running Imail 9.0 and Declude 4.All the latest releases > >> > >> Still perplexed ... only happens once in a while, otherwise all > >> working ok > >> > >> > >> --- > >> This E-mail came from the Declude.JunkMail mailing list. To > >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > >> "unsubscribe Declude.JunkMail". The archives can be found at > >> http://www.mail-archive.com. > > > > > > > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > > "unsubscribe Declude.JunkMail". The archives can be found at > > http://www.mail-archive.com. > > > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be > found at http://www.mail-archive.com. > > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Re: Why is Declude Not Scanning This?
On Sep 4, 2006, at 4:58 PM, John T ((Lists)) wrote: But you need to check the message body. There has been discussion about a string of spam that has bad headers where the Declude Headers end up at the bottom of the body John, I have done so ... the only other part of the message is a JPG attachment which has the actual "viewable" spam advertisement ... did not note any more header lines enclosed in the body of the message. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Dodell Sent: Monday, September 04, 2006 3:16 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Re: Why is Declude Not Scanning This? By anychance are the Declude headers all the way at the bottom of the message. Also, in 8.x trains of Imail there were situations where the QueueManager could steal the message from Declude 2.x and below and deliver it before Declude processed it. Darrell (1) No more headers were visible any place in either the message header or header text (2) I'm running Imail 9.0 and Declude 4.All the latest releases Still perplexed ... only happens once in a while, otherwise all working ok --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Re: Why is Declude Not Scanning This?
But you need to check the message body. There has been discussion about a string of spam that has bad headers where the Declude Headers end up at the bottom of the body. John T eServices For You "Seek, and ye shall find!" > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David > Dodell > Sent: Monday, September 04, 2006 3:16 PM > To: declude.junkmail@declude.com > Subject: [Declude.JunkMail] Re: Why is Declude Not Scanning This? > > > By anychance are the Declude headers all the way at the bottom of the > > message. Also, in 8.x trains of Imail there were situations where the > > QueueManager could steal the message from Declude 2.x and below and > > deliver > > it before Declude processed it. > > Darrell > > (1) No more headers were visible any place in either the message > header or header text > > (2) I'm running Imail 9.0 and Declude 4.All the latest releases > > Still perplexed ... only happens once in a while, otherwise all > working ok > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Re: Why is Declude Not Scanning This?
By anychance are the Declude headers all the way at the bottom of the message. Also, in 8.x trains of Imail there were situations where the QueueManager could steal the message from Declude 2.x and below and deliver it before Declude processed it. Darrell (1) No more headers were visible any place in either the message header or header text (2) I'm running Imail 9.0 and Declude 4.All the latest releases Still perplexed ... only happens once in a while, otherwise all working ok --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Test idea
Scott, I specifically specified 3 characters not 4 to allow for the 2 character TLDs. I would be very interested to see the results based on 3 characters, not 4. Ratio of 1 to 13 is not bad if we are talking about a resulting penalty of 20-25% of hold weight. Also, if the test could be configured to not only allow for specified tests failed end but also other parameters say HELO contains problematicdomaincausingtoomanyfalsepositives would that help? John T eServices For You "Seek, and ye shall find!" > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher > Sent: Monday, September 04, 2006 8:15 AM > To: declude.junkmail@declude.com > Subject: Re: [Declude.JunkMail] Test idea > > I ran a query on this looking at my August email results (228889 emails): > > Excluding HELOBOGUS > Excluding (timeout) and [No Reverse DNS] and (Private IP) > Looking at last 4 chars of helo <> last 4 chars of revdns > > 1487 ham: > including gov / us mismatches > a fair amount of .com / .org with DSL / CABLE static revdns > small amount of valid mismatches shaw.ca / shawcable.net > mindspring.com/earthlink.net. I've definitely seen this from some non US > mailservers where a country code is in one and .net is in another. > > 19668 spam > lots of zommbies,especially non-US > Fair amount of static spammers .net / .info mismatches for example > > - Original Message - > From: "John T (Lists)" <[EMAIL PROTECTED]> > To: > Sent: Monday, September 04, 2006 1:29 AM > Subject: [Declude.JunkMail] Test idea > > > > Idea! (Ouch) > > > > If email failed HELOBOGUS or NOREVDNS (or other specified tests) END > > otherwise compare the last 3 characters of the HELO with the last 3 > > characters of the REVDNS and if not match add say 1/5 or so of HOLD > > weight. > > > > Thoughts, comments, boos, yahs, Go back to sleep (Can I Please?) > > > > John T > > eServices For You > > > > "Seek, and ye shall find!" > > > > > > > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Test idea
Scott, I can't remmeber exactly my suggestion (as said it was around two years ago) but I've made a similar research as you in the logfiles in order to go sure that the HH-SS / SH-SH ratio would be good enough to consider it a valuable option for some points in the weighting system. There are more values that can be compared: HELO REVDNS MAILFROM COUNTRY ... There are many zombies out who send messages with randomly selected/generated values. If there is a message with HELO xy.domain.de REVDNS xy.domain.net MAILFROM [EMAIL PROTECTED] and COUNTRY shows Mexiko as origin then it maybe should be possible to add something like 20 - 40% of your hold weight to the final weight of this message. Markus > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Scott Fisher > Sent: Monday, September 04, 2006 5:15 PM > To: declude.junkmail@declude.com > Subject: Re: [Declude.JunkMail] Test idea > > I ran a query on this looking at my August email results > (228889 emails): > > Excluding HELOBOGUS > Excluding (timeout) and [No Reverse DNS] and (Private IP) > Looking at last 4 chars of helo <> last 4 chars of revdns > > 1487 ham: > including gov / us mismatches > a fair amount of .com / .org with DSL / CABLE static revdns > small amount of valid mismatches shaw.ca / shawcable.net > mindspring.com/earthlink.net. I've definitely seen this from > some non US mailservers where a country code is in one and > .net is in another. > > 19668 spam > lots of zommbies,especially non-US > Fair amount of static spammers .net / .info mismatches for example > > - Original Message - > From: "John T (Lists)" <[EMAIL PROTECTED]> > To: > Sent: Monday, September 04, 2006 1:29 AM > Subject: [Declude.JunkMail] Test idea > > > > Idea! (Ouch) > > > > If email failed HELOBOGUS or NOREVDNS (or other specified tests) END > > otherwise compare the last 3 characters of the HELO with the last 3 > > characters of the REVDNS and if not match add say 1/5 or so of HOLD > > weight. > > > > Thoughts, comments, boos, yahs, Go back to sleep (Can I Please?) > > > > John T > > eServices For You > > > > "Seek, and ye shall find!" > > > > > > > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Test idea
I ran a query on this looking at my August email results (228889 emails): Excluding HELOBOGUS Excluding (timeout) and [No Reverse DNS] and (Private IP) Looking at last 4 chars of helo <> last 4 chars of revdns 1487 ham: including gov / us mismatches a fair amount of .com / .org with DSL / CABLE static revdns small amount of valid mismatches shaw.ca / shawcable.net mindspring.com/earthlink.net. I've definitely seen this from some non US mailservers where a country code is in one and .net is in another. 19668 spam lots of zommbies,especially non-US Fair amount of static spammers .net / .info mismatches for example - Original Message - From: "John T (Lists)" <[EMAIL PROTECTED]> To: Sent: Monday, September 04, 2006 1:29 AM Subject: [Declude.JunkMail] Test idea Idea! (Ouch) If email failed HELOBOGUS or NOREVDNS (or other specified tests) END otherwise compare the last 3 characters of the HELO with the last 3 characters of the REVDNS and if not match add say 1/5 or so of HOLD weight. Thoughts, comments, boos, yahs, Go back to sleep (Can I Please?) John T eServices For You "Seek, and ye shall find!" --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Test idea
Wouldnt this block Imail servers? Assume the Imail server had revdns. 1.) If email failed HELOBOGUS or NOREVDNS END Imail server would pass this since it has REVDNS 2.) compare the last 3 characters of the HELO with the last 3 characters of the REVDNS Since the HELO changes with the outbound domain chances are the revdns is not for the domain but for the server in general (speaking of hosting environments). I only bring this up because of all the issues folks have with CBL etc. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: "Markus Gufler" <[EMAIL PROTECTED]> To: Sent: Monday, September 04, 2006 2:41 AM Subject: RE: [Declude.JunkMail] Test idea > If email failed HELOBOGUS or NOREVDNS (or other specified > tests) END otherwise compare the last 3 characters of the > HELO with the last 3 characters of the REVDNS and if not > match add say 1/5 or so of HOLD weight. Hmm John, I consider it a good idea. As I can remember I suggested it arround 2 years ago. You know what happened in the meantime? Ok, so yes you can go back to sleep like a bear for the comming next winter and be currious if in the meantime will happened something new ;-) Markus --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
