RE: [Declude.JunkMail] Issue with Bounce EML File
>>>SMTP-(0254) >MAIL FROM:[EMAIL PROTECTED]> 04:29 14:42 >>>s missing the preceeding " < " to wrap the address That's the issue...the fact/problem is Declude or Imail is the one who wrote that command to Yahoo's server that way. According to specs, we do not put <> around emails in bounce messages. Any other thoughts? Robert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Issue with Bounce EML File
I asked this yesterday right before the Hotmail issue came to light...so I'll ask again to see if there are any thoughts: Setting up a 'bad users/stalker' filter (BOUNCEONLYIFYOUMUST) in Declude in which I have my Yahoo address in the external file as a test address. The bounced email (VIEWERABUSE.EML) looks like an 'unknown user' bounce with a copy to me, so the sender thinks the person is no longer here. In my bounce email I have: To: [EMAIL PROTECTED],%MAILFROM% From: [EMAIL PROTECTED] Subject: Undeliverable message returned to sender I get the '[EMAIL PROTECTED]' bounce/copied email, but the one back to my yahoo account never shows up. Here is the snippet from the SYS log: 04:29 14:42 SMTP-(0254) Trying yahoo.com (0) 04:29 14:42 SMTP-(0254) Connect yahoo.com [64.157.4.79:25] (1) 04:29 14:42 SMTP-(0254) 220 YSmtp mta157.mail.sc5.yahoo.com ESMTP service ready 04:29 14:42 SMTP-(0254) >EHLO wjla.com 04:29 14:42 SMTP-(0254) 250-mta157.mail.sc5.yahoo.com 04:29 14:42 SMTP-(0254) 250-8BITMIME 04:29 14:42 SMTP-(0254) 250-SIZE 10485760 04:29 14:42 SMTP-(0254) 250 PIPELINING 04:29 14:42 SMTP-(0254) >MAIL FROM:[EMAIL PROTECTED]> 04:29 14:42 SMTP-(0254) 501 Syntax error in parameters or arguments 04:29 14:42 SMTP-(0254) ERR undeliverable 501 Syntax error in parameters or arguments 04:29 14:42 SMTP-(0254) SMTP_DELIV_FAILED 04:29 14:42 SMTP-(0254) >QUIT I think it's the 04:29 14:42 SMTP-(0254) >MAIL FROM:[EMAIL PROTECTED]> Line but can't figure out why the format is being sent that way. BTW, I am using the latest release from Declude. Thanks Robert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Issue with Bounce EML File
Setting up a 'bad users/stalker' filter (BOUNCEONLYIFYOUMUST) in Declude in which I have my Yahoo address in the external file as a test address. The bounced email (VIEWERABUSE.EML) looks like an 'unknown user' bounce with a copy to me, so the sender thinks the person is no longer here. In my bounce email I have: To: [EMAIL PROTECTED],%MAILFROM% From: [EMAIL PROTECTED] Subject: Undeliverable message returned to sender I get the '[EMAIL PROTECTED]' bounce/copied email, but the one back to my yahoo account never shows up. Here is the snippet from the SYS log: 04:29 14:42 SMTP-(0254) Trying yahoo.com (0) 04:29 14:42 SMTP-(0254) Connect yahoo.com [64.157.4.79:25] (1) 04:29 14:42 SMTP-(0254) 220 YSmtp mta157.mail.sc5.yahoo.com ESMTP service ready 04:29 14:42 SMTP-(0254) >EHLO wjla.com 04:29 14:42 SMTP-(0254) 250-mta157.mail.sc5.yahoo.com 04:29 14:42 SMTP-(0254) 250-8BITMIME 04:29 14:42 SMTP-(0254) 250-SIZE 10485760 04:29 14:42 SMTP-(0254) 250 PIPELINING 04:29 14:42 SMTP-(0254) >MAIL FROM:[EMAIL PROTECTED]> 04:29 14:42 SMTP-(0254) 501 Syntax error in parameters or arguments 04:29 14:42 SMTP-(0254) ERR undeliverable 501 Syntax error in parameters or arguments 04:29 14:42 SMTP-(0254) SMTP_DELIV_FAILED 04:29 14:42 SMTP-(0254) >QUIT I think it's the 04:29 14:42 SMTP-(0254) >MAIL FROM:[EMAIL PROTECTED]> Line but can't figure out why the format is being sent that way. BTW, I am using the latest release from Declude. Thanks Robert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist as a filter
With the new features you have added, namely SKIP, END, MaxWeight - it seems like adding a whitelist filter type should be real easy. :) (as a programmer I love it when people say that..) A Whitelist filter type could actually serve as an extension to END in some ways.. I was thinking: WhitelistBODY CONTAINSDeclude whitelistSUBJECT STARTSWITH Hello Excellent Idea! Please Santa Scott?! Please!?!? :) Robert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist File Help
>So, whitelists for IP's and REVDNS should remain in the GLOBAL.CFG? Correct. >Does a single address get handled as both TO and FROM? I used both in >the global. The WHITELISTFILE option only works on the sender's address. -Scott Thanks Scott! --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist File Help
>The whitelistfile.txt has a format of: > >FROM [EMAIL PROTECTED] So, whitelists for IP's and REVDNS should remain in the GLOBAL.CFG? Does a single address get handled as both TO and FROM? I used both in the global. Robert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Whitelist File Help
I have this in my $default$.junkmail file: WHITELISTFILE c:\IMail\Declude\whitelistfile.txt The whitelistfile.txt has a format of: FROM [EMAIL PROTECTED] FROM @katz-media.com FROM @NielsenMedia.com FROM @sellstufflocal.com FROM @evertz.com FROM @continentaltvsales.com FROM @continentaltvsales.com FROM @mail.disney.com FROM @magid.com Is this correct??? Thanks Robert P.s. I using latest Pro version --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Do you use ColdFusion?
I have about 15...why? Robert -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason (by way of "R. Scott Perry" <[EMAIL PROTECTED]>) Sent: Thursday, November 06, 2003 4:43 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OT: Do you use ColdFusion? I was just wondering how many people here have a ColdFusion server at their disposal. Jason Wolfe Lead Developer Netcomm, Inc. http://www.netcomm.com (859) 224-4124 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Why did this get bounced?
---begin snip Mail Server: 218.253.238.146 for wjla.com [wjla.com] DNS Pointer: cm218-253-238-146.hkcable.com.hk Host Name: wjla.com Triggers: SPAMCHK, MYHELOTEST, SPAMCOP, IPNOTINMX, WEIGHT10, WEIGHT20, WEIGHT70, WEIGHT130, FIVETEN-SPAM (Blocked - see http://www.spamcop.net/bl.shtml?218.253.238.146) ---end snip I'm testing a new HELOTEST which checks to see if the mail is pretending to come from my domain (HELO 5 CONTAINS wjla.com). I have it set to HOLD and SPAMCOP is set to BOUNCE. The bounce message, because of the SPAMCOP bounce, did get through to me when I thought the it would have been held due to MYHELO test. FYI, 'some' of the HELOTEST emails are getting held. Am I missing something in the processing order, which I thought was HOLD, BOUNCE, and DELETE, ROUTETO? Thanks Robert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Process Tree
Can someone give me the order(IMAIL/DECLUDE JM/DECLUDE VIRUS) in which an email is processed? I have Imail rules which 'I think' are setup properly: B~(name=".*\.pif"\s|name=".*\.exe"\s|name=".*\.lnk"\s):NUL B~(begin 6.*\.pif\s|begin 6.*\.exe\s|begin 6.*\.lnk\s):NUL but I still see these emails in the Virus directory. Should'nt an email that get routed to NUL never get to declude? TIA Robert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Interesting Log Entries
>>>So, your internal users are sending out spam with a score of over 150? I use Imail to store and forward email for another domain we use to provide email for some of our clients. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Interesting Log Entries
>>I would recommend using "LOGLEVEL HIGH" in the \IMail\Declude\global.cfg >>file. When doing so, Declude JunkMail will record in the log file which >>configuration file it is using. That will make it easier to see which >>config file has "WEIGHT150 IGNORE" (or no action listed for >>WEIGHT150). My >>guess would be that this is for outgoing E-mail, in the >>\IMail\Declude\global.cfg file. >> Found it...forgot to check the Outbound rules in the GLOBAL. sorry for not checking there first. Robert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Interesting Log Entries
>>That's because Declude JunkMail is very flexible, and has per-user, >>per-domain, incoming, outgoing, and now even sender actions. So a single >>test may have many different actions. >> >>In this case, you have a configuration file with "WEIGHT150 BOUNCE", and >>another that either has "WEIGHT150 IGNORE" or no line starting with >>"WEIGHT150" to determine the action to take (IGNORE is the default). >> >>-Scott I only use one config set...no per-user configurations. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Interesting Log Entries
07/22/2003 15:01:57 Q8a220d1a00b4cc34 Msg failed WEIGHT150 (Weight of 169 reaches or exceeds the limit of 150.). Action=IGNORE. WEIGHT 150 ACTION SHOULD BOUNCE...WHY DID IT IGNORE? TWO SECONDS LATER: 07/22/2003 15:01:59 Q8a2314af00a2d099 Msg failed WEIGHT150 (Weight of 193 reaches or exceeds the limit of 150.). Action=BOUNCE. SAME WEIGHT 150 TEST...ACTION DOES BOUNCE LIKE IT SHOULD Why two different action results? Using Declude 1.75 release Robert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Help with Bounce emails
I'm getting complaints about bounce messages from spammers that are using internal emails as the FROM person. The bounce messages go back to the original recipient who never sent the email in the first place. Is this a valid command at the top of the bounce message that declude would send out if an email fails a test: SKIPIFSENDER @wjla.com will this prevent any bounce messages to anyone at wjla.com? Also, does declude send the bounce mail directly to IMAIL so it is not scanned or processed by Declude? Thanks Robert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Issue with Whitelisting
I'm having an issue with some domains that are supposed to be whitelisted, but still failing a test: I Hold on SPAMDOMAINS In my Global: WHITELIST FROM .paypal.com Log snippet: 07/19/2003 01:26:43 Qd69101bd009c5c65 Msg failed SPAMCHK (Message failed SPAMCHK: 60.). Action=WARN. 07/19/2003 01:26:43 Qd69101bd009c5c65 Msg failed SPAMDOMAINS (Spamdomain '@yahoo.' found: Address of [EMAIL PROTECTED] sent from invalid smtp1.nix.paypal.com.). Action=HOLD. 07/19/2003 01:26:43 Qd69101bd009c5c65 Msg failed NOABUSE (Not supporting [EMAIL PROTECTED]). Action=WARN. 07/19/2003 01:26:43 Qd69101bd009c5c65 Msg failed NOPOSTMASTER (Not supporting [EMAIL PROTECTED]). Action=WARN. 07/19/2003 01:26:43 Qd69101bd009c5c65 Msg failed WEIGHT10 (Weight of 73 reaches or exceeds the limit of 10.). Action=IGNORE. 07/19/2003 01:26:43 Qd69101bd009c5c65 Msg failed WEIGHT20 (Weight of 73 reaches or exceeds the limit of 20.). Action=WARN. 07/19/2003 01:26:43 Qd69101bd009c5c65 Msg failed WEIGHT70 (Weight of 73 reaches or exceeds the limit of 70.). Action=SUBJECT. Should not this email NOT gotten held in the spam directory? Robert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Recent Message From Declude.JunkMail-owner@declude.com?
I got one too...wierd. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Dan Geiser > Sent: Friday, June 06, 2003 2:16 PM > To: Declude JunkMail > Subject: [Declude.JunkMail] Recent Message From > [EMAIL PROTECTED] > > > Hello, All, > A little less than 1/2 hour I received a message in my inbox > which purported > to be from Declude.com. Here is the full message (the 's are mine)... > > > > Received: from declude.com [66.189.124.29] by NexusTechGroup.com > with ESMTP > (SMTPD32-6.06) id A33F67FC0114; Fri, 06 Jun 2003 13:45:35 -0400 > X-Declude-Sender: [EMAIL PROTECTED] [66.189.124.29] > X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for > spam. > X-Spam-Tests-Failed: BADHEADERS [5] > > This E-mail is scanned and free from viruses. www.nexustechgroup.com > X-RCPT-TO: <[EMAIL PROTECTED]> > Date: Fri, 6 Jun 2003 13:45:42 -0400 > X-UIDL: 354754410 > Status: U > From: <[EMAIL PROTECTED]> > > > > As you can see there's not much to it. Did anyone else receive this > message? Was this message actually sent from Declude? Or was it > a misfire > in an impending attempt to use the good name of Declude.com to > slip through > people's spam filtering? > > Just curious. It seemed like a very odd message to me. > > Thanks, Much! > Dan Geiser [EMAIL PROTECTED] > > > This E-mail is scanned and free from viruses. www.nexustechgroup.com > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Help!
> In any case, there is a new interim release of Declude Virus (1.70i4) at > http://www.declude.com/release/170i/declude.exe that will now detect this > situation. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Just upgraded and all my emails are getting stuck in the Spool directory and not getting delivered. Any thoughts??? Please respond to [EMAIL PROTECTED] Thanks Robert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] For real?
5 words BODY 2000 CONTAINS Richard Schuler :) Robert > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Sean Fahey > Sent: Friday, June 06, 2003 9:25 AM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] For real? > > > Declude blocked this (thankfully) but because it's so blatant, I > went ahead > and read it... had to check my blood pressure afterwards. It got > me thinking > though - would a real spammer send this out or was it the work of a > vigilante. The rest of the e-mail posts phone numbers, cell > phones, business > addresses, web sites a lot of contact info. > > >>> BEGIN SPAM PITCH <<< > > Welcome to the 2nd Edition of the Efficient Systems "Money Making > Newsletter - (And please pass this e-mail along to any interested > friends & > associates who are looking to make THOUSANDS per day doing BULK E-MAIL!) > > My name is Richard Schuler, I'm a 23 year old Multi-Millionare and I'm > inviting you to Learn How to Spam Millions of People Per Day like I do. My > Online Pharmacy Business is the single largest E-mail marketing company in > the world today. Efficient Systems of Dania, Florida proudly > sends OVER 600 > MILLION SPAM E-MAILS per day, every single day, through a rapidly growing > network of saavy and aggressive worldwide marketing partners and > our rapidly > growing in-house e-mail marketing team to play an agressive, currently $60 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Alert Emails
> >To send an alert email to multiple recipients, the syntax is: > > > >To: %MAILFROM%, [EMAIL PROTECTED] > > Actually, the IMail1.exe program that Declude uses to send the > E-mail won't > accept that, because of the space in there (it is very picky!). If you > change it to: > > To: %MAILFROM%,[EMAIL PROTECTED] > > then it should work. > > -Scott I removed the space, save the .eml file and still no luck. Any Ideas?? Robert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Alert Emails
a-so thank you master grasshopper > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry > Sent: Wednesday, May 28, 2003 11:05 AM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Alert Emails > > > > >To send an alert email to multiple recipients, the syntax is: > > > >To: %MAILFROM%, [EMAIL PROTECTED] > > Actually, the IMail1.exe program that Declude uses to send the > E-mail won't > accept that, because of the space in there (it is very picky!). If you > change it to: > > To: %MAILFROM%,[EMAIL PROTECTED] > > then it should work. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > Declude Virus: Catches known viruses and is the leader in mailserver > vulnerability detection. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Alert Emails
To send an alert email to multiple recipients, the syntax is: To: %MAILFROM%, [EMAIL PROTECTED] From: [EMAIL PROTECTED] Subject: Courtesy Email From %LOCALHOST% If this is correct, I get the [EMAIL PROTECTED] emails for monitoring purposes with no problem, but the %MAILFROM% never gets the alert. I tested this (rsp SE_T OFF REVDNS) from my Yahoo account...when its just %MAILFROM%, the alert goes back to the Yahoo account like it should. When its %MAILFROM%, [EMAIL PROTECTED], only the postmaster(me) alert gets delivered, the yahoo account never gets the alert message. Bug or Feature ??? :) Robert Forsyth --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Why Did This Get Through?
I'm see an on-again off-again occurrence of emails getting through that should of failed. Below are the headers...can anyone shed some light? Thanks Robert Received: from relay04.valueweb.net [216.219.253.238] by wjla.com with ESMTP (SMTPD32-7.06) id A72D1CA50104; Tue, 25 Mar 2003 12:51:41 -0500 Received: from gaia.valueweb.net ([216.219.253.52]:21995 "EHLO gaia.valueweb.net") by relay04.valueweb.net with ESMTP id ; Tue, 25 Mar 2003 12:52:39 -0500 Received: from [67.104.187.162] ([67.104.187.162]:8219 "HELO smtp1.valueweb.net") by gaia.valueweb.net with SMTP id ; Tue, 25 Mar 2003 12:52:23 -0500 Message-Id: <[EMAIL PROTECTED]> Date: Tue, 25 Mar 2003 12:52:21 -0500 To: [EMAIL PROTECTED] From: "ARCO Computer Products, LLC." <[EMAIL PROTECTED]> Subject: What If Your Hard Drive Crashed Right Now? MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1"; format=flowed X-RBL-Warning: WEIGHT20: Weight of 65 reaches or exceeds the limit of 20. X-Declude-Sender: [EMAIL PROTECTED] [216.219.253.238] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SPAMCHK, IPNOTINMX, WEIGHT10, WEIGHT20 [65] X-RCPT-TO: <[EMAIL PROTECTED]> Status: U X-UIDL: 337582254 --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Log Analyzer - Comments Needed
I would love it too. [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell L. Sent: Friday, February 28, 2003 9:15 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Log Analyzer - Comments Needed Keith, I have a beta available and I am looking for individuals to test it out. If you are interested the beta will be made available as early as Monday. Please let me know if you are interested. Darrell LaRock -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Thursday, February 06, 2003 4:35 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Log Analyzer - Comments Needed Darrell, That is awesome. I get those same requests from our clients weekly. I appreciate your time in writing it. Keith > -Original Message- > From: Darrell L. [mailto:[EMAIL PROTECTED] > Sent: Thursday, February 06, 2003 11:35 AM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] Log Analyzer - Comments Needed > > > *Sorry if this is outside the realm in which the forum should be used. > > Several of my customers have started asking me for reports on > what Declude is blocking for their domain or a certain user. > Obtaining this information was challenging manually sifting > through the logs - to say the least. I then decided to write > an analyzer that could accomplish what I needed. > > It's a good portion of the way wrote, and I am thinking about > making it public at some point when it is completely finished. > > However, I was looking for features that people would like > that I may not have thought of at this point. > > Currently right now it can do the following > > 1.) Report on Number of messages that fails each test. > 2.) Comprehensive reporting on each individual tests. > Reports can be generated based on (to, from, domain, > subjects, date, time). > 3.) Report on individual domains and which messages failed which tests > 4.) Report on individual users and which messages failed which tests. > 5.) It is a console application written in C# (.net). It is > self contained and does not need any external databases like > SQL Server or MSDE. > > Things Still to be added > 1.) Ability to email the reports > > > Thanks > Darrell > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] So Far So Good!
24 hours with declude and 2900 emails stopped! Awesome product! Robert Forsyth Director of Internet Operations ABC 7/Newschannel 8 703-236-9580 (direct) 703-236-9259 (fax) --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
