[Declude.JunkMail] OT - Server Watching.
Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] copy all inbound/outbound mail
IpSwitch knowledge base: http://support.ipswitch.com/kb/IM-2602-DM01.htm -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Dan Spangenberg Sent: Friday, February 07, 2003 2:26 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] copy all inbound/outbound mail I know this has been discussed somewhere, either here or in the imail list, but I can't seem to find it. How can I copy all inbound and outbound email for a specific user or users and then possibly for a complete domain? For incoming mail, I know to use the ., in the forward field in imail user admin, but not sure how to accomplish it for outgoing. And not sure how to do it for an entire domain. Our need is to monitor a couple of specific imail users, and secondly we are considering archiving all email for a domain. Is there anything in declude to help me with this? Thanks Dan Spangenberg --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude JunkMail v1.67 (beta) released
Scott, Would it be possible to change the format to this? COMMENTS comments 5 x 10 0 COMMENTS comments 5 weight 10 0 Where the number is the minimum needed to fail the test. The second value indicates whether or not the admin wants a cumulative weight. The third and forth values indicate base weights as normal. Jerod M. Bennett Director of Media Production Pixelpushers, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Tuesday, February 04, 2003 7:00 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude JunkMail v1.67 (beta) released > > The test is defined in the global.cfg file as follows: > > > >COMMENTS comments 5 x 10 0 > > > > where the "5" means that 5 such comments have to be encountered (the > > 10 is the weight that will be added for E-mail that fails the test). > > Alternatively, you can use: > > > >COMMENTS comments weight x 10 0 > >OK, I must not be thinking correctly. > >I understand the first example but I'm confused on the second example. >If I wanted to add 5 for every comment line found in a message, and the >weight of the test is 10, wouldn't I put the number 5 where the word >weight is, thereby making the two comment lines identical? The formula for the weight that is added to the E-mail is: b + n, where "b" is the base weight of the test (10 in both examples above), and "b" is either 0 (in the first example) or the number of anti-filtering comments that are found. There isn't an option for a multiplier (so that an E-mail with 20 comments would get a weight of 100 and an E-mail with 40 comments would get a weight of 200). So you can't add 5 for every comment. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Comments in filters
Just a small sidenote... In Notepad ... You can press Ctrl-G and type in the line number to go to. Jerod M. Bennett Director of Media Production Pixelpushers, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Shacklett Sent: Friday, December 13, 2002 2:41 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Comments in filters Here's my take on why I endorse John's request. I understand Dan's suggestion and agree with its intent, I just don't want to raise my log level yet. I'm a MID loglevel person, and happy to be there otherwise. When Declude calls my IPFILE test and nabs a message for failing, the logfile line includes the comment from the line in my IPFILE that failed. When Declude calls my FROMFILE test and nabs the message for failing, the logfile line includes the comment from the line in my FROMFILE that failed. My IPFILE has comments which identify the presumed domain of the IP address, and my FROMFILE has other comments that are similarly relevant and which remind me why I blacklisted them. When Declude runs one of my filter tests and nabs a message for failing, the logfile tells which line in the filter caused the match. [Caused isn't the right word, but work with me here.] So then, if I'm curious, I open the filter file in Notepad and manually count the lines until I find the one that matched, and then I can take corrective action if it's called for. I do this frequently, and I'm saddened that John's suggestion never occurred to me previously. And before someone chimes in and tells me that I should be using a better text editor that contains automatic line counting, let me say THAT'S NOT THE POINT. The point is trying to bring Declude's admittedly awesome capabilities into balance. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Dan Patnode Sent: Friday, 13 December 2002 5:19 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Comments in filters Put your log level to HIGH and it shows each phrase that caught something. While its not intuitive to see which of multiple tests a given phrase belongs to, because a given email can fail multiple tests in the same package, you actually get more info. Dan On Friday, December 13, 2002 12:38, John Tolmachoff <[EMAIL PROTECTED]> wrote: >>>Or, can the headers or log show what the filter was instead of a test line >>>number? Say, add a comment after the line. >>> >>>Example: >>>SUBJECT 5 CONTAINS FREE "Subject contains free." >> >>No, that is not possible. > >Feature request! :)) That could be useful to see in the logs why it was >caught instead of just the line number. > >John Tolmachoff MCSE, CSSA >IT Manager, Network Engineer >RelianceSoft, Inc. >Fullerton, CA 92835 >www.reliancesoft.com > > > > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type >"unsubscribe Declude.JunkMail". The archives can be found at >http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Outgoing per-domain?
>>What is the proper configuration if I want to only run a particular >>test for outgoing mail for one domain? >Unfortunately, the actions for outgoing E-mail are global, and can not be >set per domain. -Scott In that case how would you recommend setting up Imail / JunkMail to copy all emails sent to and from a particular domain? -Jerod --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Outgoing per-domain?
What is the proper configuration if I want to only run a particular test for outgoing mail for one domain? I know for incoming I copy $default$.JunkMail into the /imail/declude/domain directory. Do I just copy Global.cfg if I want to customize outgoing? Jerod M. Bennett Director of Media Production Pixelpushers, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude JunkMail v1.62 (beta) released
Scott,
I was just looking at the JunkMail manual page and you have the
fpcmd.exe parameters marked with /
As of 3.12b fpcmd.exe requires parameters to be marked with -
i.e. SCANFILE fpcmd.exe -TYPE -SILENT -NOMEM -ARCHIVE -NOBOOT -DUMB
-REPORT=report.txt
Jerod M. Bennett
Director of Media Production
Pixelpushers, Inc.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:Declude.JunkMail-owner@;declude.com] On Behalf Of R. Scott Perry
Sent: Monday, November 04, 2002 11:16 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Declude JunkMail v1.62 (beta) released
We have just released Declude v1.62 (beta). See
http://www.declude.com/junkmail/manual.htm . Changes include:
o Will now handle multiple return codes in ip4r tests.
o Will now record the action for each test that fails.
o Changes handling of invalid "[?.?.?.?]".
o External tests can now have variables in their definitions.
o Adds a failsafe for invalid CIDR ranges in IP blacklists.
o Adds COUNTRY (of remote mailserver) and COUNTRIES (of any
mailservers
in chain) to filter.
o Adds %COUNTRYCHAIN% variable.
o Adds "ipnotinmx" test, which catches E-mail sent from an IP not in
the
MX records of sending domain.
o HABEAS whitelist type, for whitelisting E-mails with Habeas headers
("WHITELIST HABEAS").
o New "habeas" test type, to allow for negative weighting of E-mails
with Habeas headers.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer
Here is the latest version of that tool. It includes fixes for the first of the month, including leap-year issues. Jerod M. Bennett Director of Media Production Pixelpushers, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner@;declude.com] On Behalf Of John Higday Sent: Friday, October 25, 2002 4:38 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude log test analyzer I am interested in this program if it will work on Win2000 iMail 7.13 and Declude 1.61 Beta John - Original Message - From: "Tom" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, October 25, 2002 4:19 PM Subject: RE: [Declude.JunkMail] Declude log test analyzer > > I just remembered! There is another Declude log analyzer someone wrote > for NT. I have the zip files if anyone needs them or you can look at > the mail archives for a download link. > > > Usage version 1.2 > By Jeff Pitoniak > > [ Description: ] > The USAGE.CMD NT command script parses the Imail server and Declude > log files and generates a daily summary report that is mailed to the > email addresses you choose. > > > Regards, > Tom > Image`fx > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] > > > --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. Usage1-32.zip Description: Binary data
[Declude.JunkMail] BASE64 test
I searched the mail archive and found this example for the BASE64 test definition BASE64 base64 x x 4 0 I have two questions 1) Is this the correct format? 2) Does this test only fail on messages with Content-Type: text/html Content-Transfer-Encoding: base64 It is my assumption that if this is true, currently this is very good indicator of spam. Is this assumption correct? Jerod M. Bennett Director of Media Production Pixelpushers, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter types and Definitions?
Would it be possible to add CONTAINSWORD so "white" wouldn't be caught?
Obviously, I understand it complicates things because you have to deal
with things like "hi." Perhaps you can just search for the word
surrounded by non-letters and numbers.
Just a thought.
Jerod M. Bennett
Director of Media Production
Pixelpushers, Inc.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: Monday, September 23, 2002 1:49 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Filter types and Definitions?
>I was wondering if someone could post the filter types and definitions.
>For example, I found these and I'm sure there are more.
>
>BODY10 CONTAINSif the Body contains a word or
phrase
>HELO10 CONTAINSif the HELO command contains a
>word or phrase
>MAILFROM10 CONTAINSif the MAILFROM contains a word
or
>phrase
>REMOTEIP10 IS if the REMOTEIP IS
>REVDNS 10 ENDSWITHif REVDNS ENDSWITH
>SUBJECT 10 CONTAINSif the SUBJECT contains a word
or
>phrase
>BODY10 CONTAINSif the BODY contains a word or
phrase
It's in the manual now. You can filter on SUBJECT, HELO, BODY,
MAILFROM,
REMOTEIP or REVDNS. Those will filter the subject, the HELO/EHLO
hostname,
the return address, the remote IP address, or the reverse DNS entry of
the
remote IP address.
You can use CONTAINS, STARTSWITH, ENDSWITH, or IS for determining a
match. They are pretty much self-explanatory -- "IS" is an exact match
("hi" matches just "hi", not "hi there" or "I said hi"), STARTSWITH
looks
for something that starts with your filter ("hi" would match "hi" or "hi
there", but not "I said hi"), ENDSWITH looks for a match at the end
("hi"
would match "hi" and "I said hi", but not "hi there"), and CONTAINS
matches
anything that has your filter in it ("hi" would match "hi", "I said hi",
"hi there", and even "white").
-Scott
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
RE: [Declude.JunkMail] Watching CC's?
>The problem is that a lot of spammers will do something very similar to >this, where the usernames are similar, but not always the same. So it >might be "[EMAIL PROTECTED]", "[EMAIL PROTECTED]", ... >While it might not be difficult to detect the identical usernames, it would >be difficult to detect the similar ones. >Also, it's common to receive E-mail sent to multiple postmaster@ or abuse@ >accounts. While this is all true, I still agree that the test would be beneficial as something that could add weight. Jerod M. Bennett Director of Media Production Pixelpushers, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] MISSING_REVERSE_DNS:Declude Queue
What product is required to purchase to get the benefits of Declude Queue? Jerod M. Bennett Director of Media Production Pixelpushers, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] broken headers
Sorry about the signature. My Bad. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Jerod M. Bennett Sent: Friday, February 08, 2002 11:05 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] broken headers Steve, You have failed "missing a Message-ID: header" http://www.declude.com/tools/header.php?code=420e You can use this code to add the header. objSendMail.AddCustomHeader "Message-ID:<" & Rnd() &_ Right( senderEmail, (Len(senderEmail) - InStrRev( senderEmail, "@" )) ) & ">" -Jerry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of steve Sent: Friday, February 08, 2002 11:08 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] broken headers I am trying to clean up some of my programs, (it is pretty bad when mail you send to your self is marked as spam). The aspemail component we use seems to have broken headers. Can someone tell me what is wrong, so that I can possibly fix it. The headers are below. I believe at one time there was going to be a lookup table for codes like: [420e] Is that available anywhere? Thanks, Steve Received: from web7.iaccorp.com [198.88.9.54] by mail.iaccorp.com with ESMTP (SMTPD32-7.05) id AF9F69300B8; Fri, 08 Feb 2002 13:57:35 -0500 Received: from AspEmail [198.88.9.63] by web7.iaccorp.com (SMTPD32-6.00) id AF9E2E20022; Fri, 08 Feb 2002 13:57:34 -0500 From: "RPI Alumni Email Auto-mailer" <[EMAIL PROTECTED]> To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> Subject: WEIGHT 1:Vanity Email Request Date: Fri, 08 Feb 2002 13:57:34 -0500 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="--=FC9ED89B8F20464D92D6_636C_1E69_B792" Message-Id: <200202081357504.SM00980@AspEmail> X-RBL-Warning: This E-mail has headers consistent with spam [420e]. X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-RCPT-TO: <[EMAIL PROTECTED]> Status: R X-UIDL: 309645267 --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] broken headers
Steve, You have failed "missing a Message-ID: header" http://www.declude.com/tools/header.php?code=420e You can use this code to add the header. objSendMail.AddCustomHeader "Message-ID:<" & Rnd() &_ Right( senderEmail, (Len(senderEmail) - InStrRev( senderEmail, "@" )) ) & ">" -Jerry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of steve Sent: Friday, February 08, 2002 11:08 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] broken headers I am trying to clean up some of my programs, (it is pretty bad when mail you send to your self is marked as spam). The aspemail component we use seems to have broken headers. Can someone tell me what is wrong, so that I can possibly fix it. The headers are below. I believe at one time there was going to be a lookup table for codes like: [420e] Is that available anywhere? Thanks, Steve Received: from web7.iaccorp.com [198.88.9.54] by mail.iaccorp.com with ESMTP (SMTPD32-7.05) id AF9F69300B8; Fri, 08 Feb 2002 13:57:35 -0500 Received: from AspEmail [198.88.9.63] by web7.iaccorp.com (SMTPD32-6.00) id AF9E2E20022; Fri, 08 Feb 2002 13:57:34 -0500 From: "RPI Alumni Email Auto-mailer" <[EMAIL PROTECTED]> To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> Subject: WEIGHT 1:Vanity Email Request Date: Fri, 08 Feb 2002 13:57:34 -0500 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="--=FC9ED89B8F20464D92D6_636C_1E69_B792" Message-Id: <200202081357504.SM00980@AspEmail> X-RBL-Warning: This E-mail has headers consistent with spam [420e]. X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-RCPT-TO: <[EMAIL PROTECTED]> Status: R X-UIDL: 309645267 --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . smime.p7s Description: application/pkcs7-signature
RE: [Declude.JunkMail] Why?
I put the code 4202 into the tool and it said that "This E-mail is missing a Message-ID: header", but that header is there "Message-Id: <200201161949717.SM00656@AspEmail>" Any reason why this might occur? Jerod M. Bennett Director of Media Production Pixelpushers, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Thursday, January 17, 2002 11:46 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Why? >Here is a header from our web-based mail-list system. > >Could you tell me why it is failing the SPAMHEADER test? We can't always find out the exact reason an E-mail failed the SPAMHEADERS or BADHEADERS test just by looking at the headers, because we aren't as well trained as the computer! However, if you look in your Declude JunkMail log file, it will show you a code (such as [8202]) when an E-mail fails the SPAMHEADERS or BADHEADERS test. That code can be looked up using the BADHEADERS lookup at http://www.declude.com/tools , or you can send it to us and we can let you know why the E-mail failed. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Why?
Here is a header from our web-based mail-list system. Could you tell me why it is failing the SPAMHEADER test? Jerod M. Bennett Director of Media Production Pixelpushers, Inc. = Received: from AspEmail [216.216.166.32] by email1.pixelpushers.com (SMTPD32-7.05) id A9B215C0126; Wed, 16 Jan 2002 19:49:09 -0800 From: <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: S-SPAMHEADER:Bulk Test Date: Wed, 16 Jan 2002 19:49:11 -0800 MIME-Version: 1.0 Message-Id: <200201161949717.SM00656@AspEmail> X-RBL-Warning: This E-mail was sent from a mail server [No Reverse DNS] with no reverse DNS entry. X-Declude-Sender: [EMAIL PROTECTED] [216.216.166.32] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Note: This E-mail was sent from [No Reverse DNS] ([216.216.166.32]). X-RCPT-TO: <[EMAIL PROTECTED]> Status: U X-UIDL: 311239211 = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] S-ORBZOUTPUTS:RE: Config files (Was: RE: [Declude.JunkMail] Declude v1.30 released (beta))
I haven't installed 1.30, but I am running 1.29a -Jerry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Wednesday, December 19, 2001 12:55 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] S-ORBZOUTPUTS:RE: Config files (Was: RE: [Declude.JunkMail] Declude v1.30 released (beta)) >All of a sudden, I am getting ORBZOUTPUTS failure on all Imail lists >(JunkMail, Virus, IMail, HKSI). It looks like the ORBZ tests are down right now; I don't know if it is temporary or not. Are you running the latest version of Declude? If you are running an older version, there's a chance that it could be treating the timeout as a test failure. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . smime.p7s Description: application/pkcs7-signature
RE: S-ORBZOUTPUTS:RE: Config files (Was: RE: [Declude.JunkMail] Declude v1.30 released (beta))
Scott, All of a sudden, I am getting ORBZOUTPUTS failure on all Imail lists (JunkMail, Virus, IMail, HKSI). I included the header to this email. Do you have any ideas? Jerod M. Bennett Pixelpushers, Inc. = Received: from declude.com [24.240.171.218] by email1.pixelpushers.com with ESMTP (SMTPD32-7.04) id A344A71013A; Tue, 18 Dec 2001 11:04:36 -0800 Received: from mediamonks.net [62.108.7.199] by mail.declude.com with ESMTP (SMTPD32-7.04) id A3402CC9029E; Tue, 18 Dec 2001 14:04:32 -0500 Received: from jimbo [62.108.11.158] by mediamonks.net with ESMTP (SMTPD32-7.04) id A297AA0120; Tue, 18 Dec 2001 20:01:43 +0100 From: "Terrence Koeman" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: S-ORBZOUTPUTS:RE: Config files (Was: RE: [Declude.JunkMail] Declude v1.30 released (beta)) Date: Tue, 18 Dec 2001 20:01:44 +0100 Organization: MediaMonks B.V. Message-ID: <000f01c187f6$705f4180$9e0b6c3e@jimbo> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=_NextPart_000_0010_01C187FE.D223A980" X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.3416 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600. Importance: Normal In-Reply-To: <012801c187f5$28d26960$a642a58e@laptop> X-Info: This E-mail was scanned for spam and viruses by mail.mediamonks.net (no guarantees!). X-Abuse-Info: Please send abuse reports about this e-mail to [EMAIL PROTECTED] X-Declude-Sender: [EMAIL PROTECTED] [62.108.7.199] X-Declude-Spoolname: D934029e.SMD X-Note: This E-mail was scanned for viruses by Declude (www.declude.com) X-NRecips: 1 X-Reverse-IP: node07c7.a2000.nl. X-Weight: 0 Precedence: bulk Sender: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] X-Declude-Sender: [EMAIL PROTECTED] [62.108.7.199] X-Declude-Spoolname: D1ae63d6.LST X-Note: This E-mail was scanned for viruses by Declude (www.declude.com) Organization: Computerized Horizons X-Declude-Sender: [EMAIL PROTECTED] [24.240.171.218] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Note: This E-mail was sent from 24-240-171-218.hsacorp.net. ([24.240.171.218]). X-RCPT-TO: <[EMAIL PROTECTED]> Status: U X-UIDL: 288232139 smime.p7s Description: application/pkcs7-signature
