RE: [Declude.JunkMail] SmarterMail and Subspools

2006-10-17 Thread Kevin Bilbee
I do not know if it does but. I can tell you that you need to be careful
with domain aliases on SmarterMail. They are treated as outgoing for
junkmail processing.


Kevin Bilbee

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
> Behalf Of Mark Strother
> Sent: Tuesday, October 17, 2006 6:33 PM
> To: declude.junkmail@declude.com
> Subject: [Declude.JunkMail] SmarterMail and Subspools
> 
> 
> Does Declude work correctly with the subspool feature of 
> SmarterMail? I believe I read somewhere that it doesn't. This 
> is a requirement of a high volume SmarterMail server and 
> seems like it would relatively easy to implement.
> 
> Can anyone comment?
> 
>  Mark Strother
>  Pacific Online
>  Phone: 604-638-6010 ext. 222
>  Fax: 604-638-6020
>  Toll Free: 1-877-503-9870
>  http://www.pacificonline.com
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
> Behalf Of Robert Grosshandler
> Sent: Tuesday, October 17, 2006 3:46 PM
> To: declude.junkmail@declude.com
> Subject: [Declude.JunkMail] Test - ignore
> 
> Test, please ignore.
> 
> 
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
> type "unsubscribe Declude.JunkMail".  The archives can be 
> found at http://www.mail-archive.com.
> 
> 
> 
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
> type "unsubscribe Declude.JunkMail".  The archives can be 
> found at http://www.mail-archive.com.
> 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] SmarterMail and Subspools

2006-10-17 Thread Mark Strother
Does Declude work correctly with the subspool feature of SmarterMail? I
believe I read somewhere that it doesn't. This is a requirement of a
high volume SmarterMail server and seems like it would relatively easy
to implement.

Can anyone comment?

 Mark Strother
 Pacific Online
 Phone: 604-638-6010 ext. 222
 Fax: 604-638-6020
 Toll Free: 1-877-503-9870
 http://www.pacificonline.com

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Robert Grosshandler
Sent: Tuesday, October 17, 2006 3:46 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Test - ignore

Test, please ignore.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Whitelisting flaw in Declude?

2006-10-17 Thread Darin Cox
Hi Dave,

We've always let the message get delivered to everyone. So far no
complaints.

The only real problem we've had with whitelisting is with auto whitelisting
from webmail contact lists.  While this is a useful feature, it does result
in spam getting through that forges the users address.  It would be
preferable if some tests could be exempted from whitelisting, or even
better, instead of whitelisting applying a negative weight to messages from
the webmail contact list.  That way SPF FAIL could still filter out forging
spam, while contact list whitelisting/negative weighting could allow
everything else through.

Darin.


- Original Message - 
From: "Dave Beckstrom" <[EMAIL PROTECTED]>
To: 
Sent: Tuesday, October 17, 2006 8:13 PM
Subject: RE: [Declude.JunkMail] Whitelisting flaw in Declude?


Hi Darin,

Thanks for the great explanation.   You always offer good feedback.   Thanks
to everyone else who replied, too.

Which is the lesser of two evils  --  Whitelist email to all recipients even
though only one recipient is in the whitelist; or ignore the whitelist
request entirely if the email has multiple recipients and only one of whom
is in the whitelist?



> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin
Cox
> Sent: Tuesday, October 17, 2006 2:37 PM
> To: declude.junkmail@declude.com
> Subject: Re: [Declude.JunkMail] Whitelisting flaw in Declude?
>
> It's actually more of an issue of how the mail server handles the message.
> In the case of multiple recipients, since there is only one message file
> addressed to multiple recipients in the headers, it's either deliver or
not
> deliver unless you rewrite the headers to modify the recipient list.  I
> think I'd rather not have the spam filtering system alter that.  Add to
the
> header, yes.  Alter the recipients, no.
>
> Also, I have not come across a situation where I wanted to let a message
go
> through to one recipient and not to others, except in the situation of
lists
> which is a whole other topic.
>
> Darin.
>
>
> - Original Message -
> From: "Dave Beckstrom" <[EMAIL PROTECTED]>
> To: 
> Sent: Tuesday, October 17, 2006 3:11 PM
> Subject: RE: [Declude.JunkMail] Whitelisting flaw in Declude?
>
>
> I would call that a flaw, then, in how Declude processes the whitelist.
>
> I have a listserver email address for which I do not want email spam
> checked.  This is because I don't want messages going out to the list that
> say SPAM in the subject line.  Because nobody who is not a member on the
> list can post to the list, there is no problem whitelisting the "TO"
address
> for mail sent to the list server email address.
>
> However, spammers will send an email to a dozen of our mail addresses (12
> recipients) one of which is the whitelised "TO" address for the
listserver.
> Because of the way Declude processes the whitelist, that means that the
> other 11 recipient receive the spam even though mail to them is not
> whitelisted.
>
> That is a bad design on Declude's part, wouldn't you agree?  Anyone else
> feel that this needs to be rectified?
>
>
>
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Darrell
> > ([EMAIL PROTECTED])
> > Sent: Tuesday, October 17, 2006 11:25 AM
> > To: declude.junkmail@declude.com
> > Subject: Re: [Declude.JunkMail] Whitelisting flaw in Declude?
> >
> > If one user is whitelisted they all will be whitelisted for that email.
> > There are some things you can do to prevent this like BYPASSWHITELIST
> test.
> >
> > Darre;;
> >
> > 
> > Check out http://www.invariantsystems.com for utilities for Declude And
> > Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration,
> MRTG
> > Integration, and Log Parsers.
> >
> > - Original Message -
> > From: "Dave Beckstrom" <[EMAIL PROTECTED]>
> > To: 
> > Sent: Tuesday, October 17, 2006 11:18 AM
> > Subject: [Declude.JunkMail] Whitelisting flaw in Declude?
> >
> >
> > If an email is received that is addressed to multiple recipients, one of
> > whom is whitelisted, does Declude treat the email as whitelisted for all
> > recipients?
> >
> >
> >
> >
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> >
> >
> >
> >
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
>
>
>
>
>
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>
>

[Declude.JunkMail] test - ignore

2006-10-17 Thread Robert Grosshandler
test - ignore
---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] Whitelisting flaw in Declude?

2006-10-17 Thread Dave Beckstrom
Hi Darin,

Thanks for the great explanation.   You always offer good feedback.   Thanks
to everyone else who replied, too.

Which is the lesser of two evils  --  Whitelist email to all recipients even
though only one recipient is in the whitelist; or ignore the whitelist
request entirely if the email has multiple recipients and only one of whom
is in the whitelist?



> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin
Cox
> Sent: Tuesday, October 17, 2006 2:37 PM
> To: declude.junkmail@declude.com
> Subject: Re: [Declude.JunkMail] Whitelisting flaw in Declude?
> 
> It's actually more of an issue of how the mail server handles the message.
> In the case of multiple recipients, since there is only one message file
> addressed to multiple recipients in the headers, it's either deliver or
not
> deliver unless you rewrite the headers to modify the recipient list.  I
> think I'd rather not have the spam filtering system alter that.  Add to
the
> header, yes.  Alter the recipients, no.
> 
> Also, I have not come across a situation where I wanted to let a message
go
> through to one recipient and not to others, except in the situation of
lists
> which is a whole other topic.
> 
> Darin.
> 
> 
> - Original Message -
> From: "Dave Beckstrom" <[EMAIL PROTECTED]>
> To: 
> Sent: Tuesday, October 17, 2006 3:11 PM
> Subject: RE: [Declude.JunkMail] Whitelisting flaw in Declude?
> 
> 
> I would call that a flaw, then, in how Declude processes the whitelist.
> 
> I have a listserver email address for which I do not want email spam
> checked.  This is because I don't want messages going out to the list that
> say SPAM in the subject line.  Because nobody who is not a member on the
> list can post to the list, there is no problem whitelisting the "TO"
address
> for mail sent to the list server email address.
> 
> However, spammers will send an email to a dozen of our mail addresses (12
> recipients) one of which is the whitelised "TO" address for the
listserver.
> Because of the way Declude processes the whitelist, that means that the
> other 11 recipient receive the spam even though mail to them is not
> whitelisted.
> 
> That is a bad design on Declude's part, wouldn't you agree?  Anyone else
> feel that this needs to be rectified?
> 
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Darrell
> > ([EMAIL PROTECTED])
> > Sent: Tuesday, October 17, 2006 11:25 AM
> > To: declude.junkmail@declude.com
> > Subject: Re: [Declude.JunkMail] Whitelisting flaw in Declude?
> >
> > If one user is whitelisted they all will be whitelisted for that email.
> > There are some things you can do to prevent this like BYPASSWHITELIST
> test.
> >
> > Darre;;
> >
> > 
> > Check out http://www.invariantsystems.com for utilities for Declude And
> > Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration,
> MRTG
> > Integration, and Log Parsers.
> >
> > - Original Message -
> > From: "Dave Beckstrom" <[EMAIL PROTECTED]>
> > To: 
> > Sent: Tuesday, October 17, 2006 11:18 AM
> > Subject: [Declude.JunkMail] Whitelisting flaw in Declude?
> >
> >
> > If an email is received that is addressed to multiple recipients, one of
> > whom is whitelisted, does Declude treat the email as whitelisted for all
> > recipients?
> >
> >
> >
> >
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> >
> >
> >
> >
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> 
> 
> 
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 
> 
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] Test - ignore

2006-10-17 Thread Robert Grosshandler
Sorry for the multiple tests, please ignore.

Rob




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] What Blacklists are you using?

2006-10-17 Thread Chris Anton
Yeah, the NETSOL thing screwed us earlier... turned off all our blacklists for 
now.  Just wondering what the recommended blacklists were. Thought I would 
update our blacklists while I was in there. -Chris

-- Original Message --
From: "David Barker" <[EMAIL PROTECTED]>
Reply-To: declude.junkmail@declude.com
Date:  Tue, 17 Oct 2006 17:05:28 -0400

>Could you be having a DNS issue ?? Also There is a widespread DNS outage at
>Network Solutions just FYI
>
>David Barker
>Director of Product Development
>Your Email security is our business
>978.499.2933 office
>978.988.1311 fax
>[EMAIL PROTECTED]
>
>
>-Original Message-
>From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris
>Anton
>Sent: Tuesday, October 17, 2006 4:55 PM
>To: declude.junkmail@declude.com
>Subject: [Declude.JunkMail] What Blacklists are you using?
>
>I am getting timeouts on all the blacklists below... what are people
>currently using for their blacklists??? I haven't updated my blacklists in
>almost a year. Please adivse.  Thanks! -Chris
>
>dnsbl.ahbl.org
>list.dsbl.org
>sbl.spamhaus.org
>blackholes.intersil.net
>sbl.csma.biz
>blacklist.spambag.org
>blackholes.five-ten-sg.com
>dnsbl.jammconsulting.com
>dsn.rfc-ignorant.org
>abuse.rfc-ignorant.org
>postmaster.rfc-ignorant.org
>bulk.rhs.mailpolice.com
>porn.rhs.mailpolice.com
>fraud.rhs.mailpolice.com
>
>
>
>---
>This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
>just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
>Declude.JunkMail".  The archives can be found at
>http://www.mail-archive.com.
>
>
>
>---
>This E-mail came from the Declude.JunkMail mailing list.  To
>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>type "unsubscribe Declude.JunkMail".  The archives can be found
>at http://www.mail-archive.com.
>
>



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] Test - ignore

2006-10-17 Thread Robert Grosshandler
Test, please ignore.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] Declude 4.3.14 - Issues

2006-10-17 Thread Andy Schmidt



Hi,
 
I'm running my first 
few tests.
 
ISSUE 1 - 
Mail Headers
 
My mail headers now include
 
X-Declude-RefID: 

 
I never requested 
that header in my config file!
 
 
ISSUE 2 - 
Log Files
 
LOGLEVEL MID and 
HIGH is no longer recording messages in the DEC*.log. (The message was a 
whitelisted message.)
 
The virus log still 
works:
 
10/17/2006 
16:35:25.155 q3e8a013600f7.smd Log Level set to MID10/17/2006 
16:35:25.170 q3e8a013600f7.smd Vulnerability flags = 010/17/2006 
16:35:26.264 q3e8a013600f7.smd Virus scanner 1 reports exit code of 
010/17/2006 16:39:20.270 q3f77013600fd.smd Vulnerability flags = 
010/17/2006 16:39:21.255 q3f77013600fd.smd Virus scanner 1 reports exit 
code of 010/17/2006 17:00:35.428 q446e01360114.smd Vulnerability flags = 
010/17/2006 17:00:36.444 q446e01360114.smd Virus scanner 1 reports exit 
code of 010/17/2006 17:03:15.557 q451001360119.smd Vulnerability flags = 
010/17/2006 17:03:16.557 q451001360119.smd Virus scanner 1 reports exit 
code of 010/17/2006 17:05:00.685 q45780136011c.smd Vulnerability flags = 
010/17/2006 17:05:01.685 q45780136011c.smd Virus scanner 1 reports exit 
code of 0 
But, for those 
messages, the Declude Junkmail no longer have any entries - unless I 
set LOGLEVEL DEBUG.  The only message that has log entires for Declude 
Junkmail is messageID q446e01360114, because I had set log level to DEBUG 
for that:
 
10/17/2006 
16:35:25.155 q3e8a013600f7.smd Declude v4.3.14 for IMail10/17/2006 
17:00:35.428 q446e01360114.smd CFG: Bypassing IP 
63.107.174.32.10/17/2006 17:00:35.428 q446e01360114.smd CFG: Bypassing 
IP 65.119.204.32.10/17/2006 17:00:35.428 q446e01360114.smd CFG: 
Bypassing IP 67.132.45.18.10/17/2006 17:00:35.428 q446e01360114.smd CFG: 
Bypassing IP 127.0.0.1.10/17/2006 17:00:35.428 q446e01360114.smd CFG: 
Set hop to 0.10/17/2006 17:00:35.428 q446e01360114.smd 
STOPPROCESSINGONFIRSTDELETE: Set to ON10/17/2006 17:00:35.428 
q446e01360114.smd Setting AUTOWHITELIST to ON10/17/2006 17:00:35.428 
q446e01360114.smd CFG: Whitelisting AUTH .
more debug 
lines...
10/17/2006 
17:00:40.897 q446e01360114.smd Test #26 [SORBS] is same as Test #33 
[SORBS-ZOMBIE=127.0.0.9]. Answer=dns.isux.com.?10/17/2006 17:00:40.897 
q446e01360114.smd Last line of headers checking for Recived: X-Auth: 
Yes   
10/17/2006 17:00:40.897 q446e01360114.smd Skipping4 E-mail from IP 
63.107.174.136; whitelisted (63.107.174.0/24). nm=ff0010/17/2006 
17:00:40.897 q446e01360114.smd AlterMessage10/17/2006 17:00:40.897 
q446e01360114.smd Subject = []10/17/2006 17:00:40.897 
q446e01360114.smd Warning = [X-Declude-RefID: 
X-Declude: Version 
4.3.14; D446e01360114.smd from corner-office.usa.hm-software.com 
[63.107.174.136]
X-Declude: Code 
0
X-Declude: Triggered 
[0] Whitelisted
X-Countries: 

Return-Path: <[EMAIL PROTECTED]>
]10/17/2006 
17:00:40.897 q446e01360114.smd Header = []10/17/2006 17:00:40.897 
q446e01360114.smd Footer = []10/17/2006 17:00:40.897 
q446e01360114.smd MoveFile in AlterMessage - datafile = 
[D:\IMail\spool\proc\work\D446e01360114.smd] TempFile = 
[D:\IMail\spool\proc\work\D446e01360114.sm$]10/17/2006 17:00:40.897 
q446e01360114.smd Adding warning [X-Declude-RefID: 
X-Declude: Version 
4.3.14; D446e01360114.smd from corner-office.usa.hm-software.com 
[63.107.174.136]
X-Declude: Code 
0
X-Declude: Triggered 
[0] Whitelisted
X-Countries: 

Return-Path: <[EMAIL PROTECTED]>
]10/17/2006 
17:00:40.897 q446e01360114.smd TempFile = 
[D:\IMail\spool\proc\work\D446e01360114.sm$]10/17/2006 17:00:40.897 
q446e01360114.smd TempFile = 
[D:\IMail\spool\proc\work\D446e01360114.sm$] was deleted10/17/2006 
17:00:40.897 q446e01360114.smd passiton set - args 
[D:\IMail\spool\proc\work\q446e01360114.smd]10/17/2006 17:00:40.897 
q446e01360114.smd Attempting to move files to spool10/17/2006 
17:00:40.897 q446e01360114.smd Files successfully moved back to 
spool10/17/2006 17:00:40.897 q446e01360114.smd Passing to SMTP32: 
D:\IMAIL\smtp32.exe D:\IMail\spool\q446e01360114.smd.
 
 
Here is my 
Global.CFG
 
LOGFILE  Spool\dec.logLOGLEVEL HIGH#LOGFILE 
 Spool\decX.log#LOGLEVEL DEBUG
#PID / PID DEBUG
#EVENTLOG ON#LOG_OK NONE
 
Issue 3 Incorrect Phone Number
 
Your auto-response system sends out a three 
paragraph notice - the last paragraph has an incorrect phone 
number:
 
>> Call customer care 866-332-5822 #3 
to purchase or renew a service agreement. <<
Best 
RegardsAndy SchmidtPhone:  +1 201 934-3414 x20 
(Business)Fax:    +1 201 934-9206 
 

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] Whitelisting flaw in Declude?

2006-10-17 Thread Kevin Bilbee
Delcude has always functioned like this.

What declude could do in this case is to duplicate the message for each 
recipient and write a new header file to each recipient. Not a big issue. 
Deliver to the one that whitelists and run the spam checks for the others.



Kevin Bilbee

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Darin Cox
> Sent: Tuesday, October 17, 2006 12:37 PM
> To: declude.junkmail@declude.com
> Subject: Re: [Declude.JunkMail] Whitelisting flaw in Declude?
> 
> It's actually more of an issue of how the mail server handles the
> message.
> In the case of multiple recipients, since there is only one message
> file
> addressed to multiple recipients in the headers, it's either deliver or
> not
> deliver unless you rewrite the headers to modify the recipient list.  I
> think I'd rather not have the spam filtering system alter that.  Add to
> the
> header, yes.  Alter the recipients, no.
> 
> Also, I have not come across a situation where I wanted to let a
> message go
> through to one recipient and not to others, except in the situation of
> lists
> which is a whole other topic.
> 
> Darin.
> 
> 
> - Original Message -
> From: "Dave Beckstrom" <[EMAIL PROTECTED]>
> To: 
> Sent: Tuesday, October 17, 2006 3:11 PM
> Subject: RE: [Declude.JunkMail] Whitelisting flaw in Declude?
> 
> 
> I would call that a flaw, then, in how Declude processes the whitelist.
> 
> I have a listserver email address for which I do not want email spam
> checked.  This is because I don't want messages going out to the list
> that
> say SPAM in the subject line.  Because nobody who is not a member on
> the
> list can post to the list, there is no problem whitelisting the "TO"
> address
> for mail sent to the list server email address.
> 
> However, spammers will send an email to a dozen of our mail addresses
> (12
> recipients) one of which is the whitelised "TO" address for the
> listserver.
> Because of the way Declude processes the whitelist, that means that the
> other 11 recipient receive the spam even though mail to them is not
> whitelisted.
> 
> That is a bad design on Declude's part, wouldn't you agree?  Anyone
> else
> feel that this needs to be rectified?
> 
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Darrell
> > ([EMAIL PROTECTED])
> > Sent: Tuesday, October 17, 2006 11:25 AM
> > To: declude.junkmail@declude.com
> > Subject: Re: [Declude.JunkMail] Whitelisting flaw in Declude?
> >
> > If one user is whitelisted they all will be whitelisted for that
> email.
> > There are some things you can do to prevent this like BYPASSWHITELIST
> test.
> >
> > Darre;;
> >
> > -
> ---
> > Check out http://www.invariantsystems.com for utilities for Declude
> And
> > Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI
> integration,
> MRTG
> > Integration, and Log Parsers.
> >
> > - Original Message -
> > From: "Dave Beckstrom" <[EMAIL PROTECTED]>
> > To: 
> > Sent: Tuesday, October 17, 2006 11:18 AM
> > Subject: [Declude.JunkMail] Whitelisting flaw in Declude?
> >
> >
> > If an email is received that is addressed to multiple recipients, one
> of
> > whom is whitelisted, does Declude treat the email as whitelisted for
> all
> > recipients?
> >
> >
> >
> >
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> >
> >
> >
> >
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> 
> 
> 
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 
> 
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] What Blacklists are you using?

2006-10-17 Thread David Barker
Could you be having a DNS issue ?? Also There is a widespread DNS outage at
Network Solutions just FYI

David Barker
Director of Product Development
Your Email security is our business
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris
Anton
Sent: Tuesday, October 17, 2006 4:55 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] What Blacklists are you using?

I am getting timeouts on all the blacklists below... what are people
currently using for their blacklists??? I haven't updated my blacklists in
almost a year. Please adivse.  Thanks! -Chris

dnsbl.ahbl.org
list.dsbl.org
sbl.spamhaus.org
blackholes.intersil.net
sbl.csma.biz
blacklist.spambag.org
blackholes.five-ten-sg.com
dnsbl.jammconsulting.com
dsn.rfc-ignorant.org
abuse.rfc-ignorant.org
postmaster.rfc-ignorant.org
bulk.rhs.mailpolice.com
porn.rhs.mailpolice.com
fraud.rhs.mailpolice.com



---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] What Blacklists are you using?

2006-10-17 Thread Chris Anton
I am getting timeouts on all the blacklists below... what are people currently 
using for their blacklists??? I haven't updated my blacklists in almost a year. 
Please adivse.  Thanks! -Chris

dnsbl.ahbl.org
list.dsbl.org
sbl.spamhaus.org
blackholes.intersil.net
sbl.csma.biz
blacklist.spambag.org
blackholes.five-ten-sg.com
dnsbl.jammconsulting.com
dsn.rfc-ignorant.org
abuse.rfc-ignorant.org
postmaster.rfc-ignorant.org
bulk.rhs.mailpolice.com
porn.rhs.mailpolice.com
fraud.rhs.mailpolice.com



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Support

2006-10-17 Thread David Barker



Andy,
 
You should know you can call me ... 
 
David B
978-499-2933 EXT 7007


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Andy SchmidtSent: 
Tuesday, October 17, 2006 4:31 PMTo: 
declude.junkmail@declude.comSubject: [Declude.JunkMail] 
Support

Hi,
 
I've been trying to be good and follow all the 
instructions:
 
- Try to open a case as suggested one the support page 
by logging into customer page -> there is no such "open a case" 
function
 
- Send and email to [EMAIL PROTECTED] yesterday. Got a 
"ticket number" assigned. It's 4:30 - no response to my 
ticket.
 
- Now I called, because they'll be going home in 30 
minutes - I'm getting a cheerful recording!
 
And that's just for trying to install Declude on a new 
server with a different host name.
 
If anyone from Declude is monitoring this list... I 
need assistance!
Best 
RegardsAndy SchmidtPhone:  +1 201 934-3414 x20 
(Business)Fax:    +1 201 934-9206 
 


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] Sent: Monday, October 16, 2006 06:42 
PMTo: [EMAIL PROTECTED]Subject: re: 
[2A3-0CC680CD-8E62] Support Request -> Host Name Transition (Temporary 
Parallel Use)

Thank you for submitting a ticket to support. Your ticket number is 
[2A3-0CC680CD-8E62].
Please keep this ticket number for your records and include it in the subject 
(including brackets) of all future emails regarding this issue.
The response time during business hours is usually within 24 hours, if you 
have had no response in this time please do not hesitate to call our support 
number 1-866-332-5833
IMPORTANT NOTICEDeclude is migrating to a new CRM business 
solution which includes a new case management module.  We will begin using 
this feature soon, the result of this action means that Declude will no longer 
accept and create support cases using the email address 
[EMAIL PROTECTED]You will need to login into your Declude account to 
submit a case.  If you can not submit a case due to the option being 
"grayed out" this means that you do not have an active service agreement.  
Call customer care 866-332-5822 #3 to purchase or renew a service agreement. 

We understand that this will be awkward and/or unwanted, however our goal is 
to continue servicing our paying customers. Thank You.Declude 
Technical Support---This E-mail came from the Declude.JunkMail 
mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], 
andtype "unsubscribe Declude.JunkMail". The archives can be foundat 
http://www.mail-archive.com. 

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


[Declude.JunkMail] Support

2006-10-17 Thread Andy Schmidt



Hi,
 
I've been trying to be good and follow all the 
instructions:
 
- Try to open a case as suggested one the support page 
by logging into customer page -> there is no such "open a case" 
function
 
- Send and email to [EMAIL PROTECTED] yesterday. Got a 
"ticket number" assigned. It's 4:30 - no response to my 
ticket.
 
- Now I called, because they'll be going home in 30 
minutes - I'm getting a cheerful recording!
 
And that's just for trying to install Declude on a new 
server with a different host name.
 
If anyone from Declude is monitoring this list... I 
need assistance!
Best 
RegardsAndy SchmidtPhone:  +1 201 934-3414 x20 
(Business)Fax:    +1 201 934-9206 
 


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] Sent: Monday, October 16, 2006 06:42 
PMTo: [EMAIL PROTECTED]Subject: re: 
[2A3-0CC680CD-8E62] Support Request -> Host Name Transition (Temporary 
Parallel Use)

Thank you for submitting a ticket to support. Your ticket number is 
[2A3-0CC680CD-8E62].
Please keep this ticket number for your records and include it in the subject 
(including brackets) of all future emails regarding this issue.
The response time during business hours is usually within 24 hours, if you 
have had no response in this time please do not hesitate to call our support 
number 1-866-332-5833
IMPORTANT NOTICEDeclude is migrating to a new CRM business 
solution which includes a new case management module.  We will begin using 
this feature soon, the result of this action means that Declude will no longer 
accept and create support cases using the email address 
[EMAIL PROTECTED]You will need to login into your Declude account to 
submit a case.  If you can not submit a case due to the option being 
"grayed out" this means that you do not have an active service agreement.  
Call customer care 866-332-5822 #3 to purchase or renew a service agreement. 

We understand that this will be awkward and/or unwanted, however our goal is 
to continue servicing our paying customers. Thank You.Declude 
Technical Support

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


Re: [Declude.JunkMail] Whitelisting flaw in Declude?

2006-10-17 Thread Darin Cox
It's actually more of an issue of how the mail server handles the message.
In the case of multiple recipients, since there is only one message file
addressed to multiple recipients in the headers, it's either deliver or not
deliver unless you rewrite the headers to modify the recipient list.  I
think I'd rather not have the spam filtering system alter that.  Add to the
header, yes.  Alter the recipients, no.

Also, I have not come across a situation where I wanted to let a message go
through to one recipient and not to others, except in the situation of lists
which is a whole other topic.

Darin.


- Original Message - 
From: "Dave Beckstrom" <[EMAIL PROTECTED]>
To: 
Sent: Tuesday, October 17, 2006 3:11 PM
Subject: RE: [Declude.JunkMail] Whitelisting flaw in Declude?


I would call that a flaw, then, in how Declude processes the whitelist.

I have a listserver email address for which I do not want email spam
checked.  This is because I don't want messages going out to the list that
say SPAM in the subject line.  Because nobody who is not a member on the
list can post to the list, there is no problem whitelisting the "TO" address
for mail sent to the list server email address.

However, spammers will send an email to a dozen of our mail addresses (12
recipients) one of which is the whitelised "TO" address for the listserver.
Because of the way Declude processes the whitelist, that means that the
other 11 recipient receive the spam even though mail to them is not
whitelisted.

That is a bad design on Declude's part, wouldn't you agree?  Anyone else
feel that this needs to be rectified?



> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Darrell
> ([EMAIL PROTECTED])
> Sent: Tuesday, October 17, 2006 11:25 AM
> To: declude.junkmail@declude.com
> Subject: Re: [Declude.JunkMail] Whitelisting flaw in Declude?
>
> If one user is whitelisted they all will be whitelisted for that email.
> There are some things you can do to prevent this like BYPASSWHITELIST
test.
>
> Darre;;
>
> 
> Check out http://www.invariantsystems.com for utilities for Declude And
> Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration,
MRTG
> Integration, and Log Parsers.
>
> - Original Message -
> From: "Dave Beckstrom" <[EMAIL PROTECTED]>
> To: 
> Sent: Tuesday, October 17, 2006 11:18 AM
> Subject: [Declude.JunkMail] Whitelisting flaw in Declude?
>
>
> If an email is received that is addressed to multiple recipients, one of
> whom is whitelisted, does Declude treat the email as whitelisted for all
> recipients?
>
>
>
>
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>
>
>
>
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Whitelisting flaw in Declude?

2006-10-17 Thread Dave Beckstrom
I would call that a flaw, then, in how Declude processes the whitelist.

I have a listserver email address for which I do not want email spam
checked.  This is because I don't want messages going out to the list that
say SPAM in the subject line.  Because nobody who is not a member on the
list can post to the list, there is no problem whitelisting the "TO" address
for mail sent to the list server email address.

However, spammers will send an email to a dozen of our mail addresses (12
recipients) one of which is the whitelised "TO" address for the listserver.
Because of the way Declude processes the whitelist, that means that the
other 11 recipient receive the spam even though mail to them is not
whitelisted.

That is a bad design on Declude's part, wouldn't you agree?  Anyone else
feel that this needs to be rectified?



> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Darrell
> ([EMAIL PROTECTED])
> Sent: Tuesday, October 17, 2006 11:25 AM
> To: declude.junkmail@declude.com
> Subject: Re: [Declude.JunkMail] Whitelisting flaw in Declude?
> 
> If one user is whitelisted they all will be whitelisted for that email.
> There are some things you can do to prevent this like BYPASSWHITELIST
test.
> 
> Darre;;
> 
> 
> Check out http://www.invariantsystems.com for utilities for Declude And
> Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration,
MRTG
> Integration, and Log Parsers.
> 
> - Original Message -
> From: "Dave Beckstrom" <[EMAIL PROTECTED]>
> To: 
> Sent: Tuesday, October 17, 2006 11:18 AM
> Subject: [Declude.JunkMail] Whitelisting flaw in Declude?
> 
> 
> If an email is received that is addressed to multiple recipients, one of
> whom is whitelisted, does Declude treat the email as whitelisted for all
> recipients?
> 
> 
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 
> 
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Whitelisting flaw in Declude?

2006-10-17 Thread Darrell \([EMAIL PROTECTED])
If one user is whitelisted they all will be whitelisted for that email. 
There are some things you can do to prevent this like BYPASSWHITELIST test.

Darre;;


Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG 
Integration, and Log Parsers.

- Original Message - 
From: "Dave Beckstrom" <[EMAIL PROTECTED]>
To: 
Sent: Tuesday, October 17, 2006 11:18 AM
Subject: [Declude.JunkMail] Whitelisting flaw in Declude?


If an email is received that is addressed to multiple recipients, one of
whom is whitelisted, does Declude treat the email as whitelisted for all
recipients?





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] Whitelisting flaw in Declude?

2006-10-17 Thread Dave Beckstrom
If an email is received that is addressed to multiple recipients, one of
whom is whitelisted, does Declude treat the email as whitelisted for all
recipients?





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] blackholes.us

2006-10-17 Thread Darrell \([EMAIL PROTECTED])
They (Blackholes.us) went down about a year ago and never really recovered 
from that.  They were always intermittent at best when they returned.

Darrell

Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG 
Integration, and Log Parsers.

- Original Message - 
From: "David Barker" <[EMAIL PROTECTED]>
To: 
Sent: Monday, October 16, 2006 2:27 PM
Subject: RE: [Declude.JunkMail] blackholes.us


Jay,

I have noticed over the last 2 months that blackholes seem to timeout very
often.

David Barker
Director of Product Development
Your Email security is our business
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jay
Sudowski - Handy Networks LLC
Sent: Monday, October 16, 2006 2:22 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] blackholes.us


Is blackholes.us down for anyone else? All of our RBL tests to them are
timing out.

Thanks!
-
Jay Sudowski // Handy Networks LLC
Director of Technical Operations
Providing Shared, Reseller, Semi Managed and Fully Managed Windows 2003
Hosting Solutions
Tel: 877-70 HANDY x882 |  Fax: 888-300-2FAX www.handynetworks.com




---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] catchall/nobody aliases and filter files

2006-10-17 Thread Craig Edmonds
Thank Gary,

I have also found another page here with some filtering tips...

http://support.declude.com/Customer/KBCategory.aspx?categoryid=4


Kindest Regards
Craig Edmonds
123 Marbella Internet
W: www.123marbella.com


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Saturday, October 14, 2006 7:09 PM
To: declude.junkmail@declude.com
Subject: re: [Declude.JunkMail] catchall/nobody aliases and filter files

You can find links to several pages with filter samples at
http://it.farmprogress.com/declude/declude.htm


 Original Message 
> From: "Craig Edmonds" <[EMAIL PROTECTED]>
> Sent: Saturday, October 14, 2006 12:53 PM
> To: declude.junkmail@declude.com
> Subject: [Declude.JunkMail] catchall/nobody aliases and filter files
> 
> Unfortunately I have some clients who need the nobody alias in order 
> to catch mails. (I have seriously thought about them signing an 
> agreement when they insist on it becasue I know its not really wise to 
> have catchalls these
> days.)
>  
> In the global.cfg file there is a line that says.
>  
> CATCHALLMAILS  catchallmails x x 0 0
>  
> Should I increase the weight up to say 10?
>  
> I mean anyone sending to an account that does not exist, is more than 
> likely someone spamming right?
>  
> I am starting to fiddle with my declude setting rather than fiddling 
> with myself so any ideas on this would be welcome.
>  
> Does any one have any sample filter files for these??
>  
> #FILTER-ADULT
> #FILTER-COUNTRY
> #FILTER-FORGED
> #FILTER-MEDICAL
>  
> Kind thanks in advance.
>  
> Kindest Regards
> Craig Edmonds
> 123 Marbella Internet
> W: www.123marbella.com
> 
> 





---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] OT: Missing purported responsible address

2006-10-17 Thread Craig Edmonds



Does anyone know 
what this means?
 
A client sent it to 
me this morning saying they are trying to send to that address and are getting a 
bounce back and the bit below makes part of the error.
> 
undeliverable to [EMAIL PROTECTED]s> Body of message generated response:> 550 5.7.1 Missing purported responsible 
address
 
Kindest RegardsCraig Edmonds123 
Marbella InternetW: www.123marbella.com
 

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.