RE: [Declude.JunkMail] HTML code in spam
I wouldn't operate under that assumption... there is plenty of email that's sent with a font size of 1. The legal disclaimer on the bottom of my real account is a good example, as are numerous carefully-formatted emails from Amazon, etc. Font Size=1 isn't *that* small. ;-) -- Original Message -- From: Colbeck, Andrew [EMAIL PROTECTED] Reply-To: declude.junkmail@declude.com Date: Thu, 17 Aug 2006 10:47:47 -0700 ... But a font size of 1 in an email is always spam. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Thursday, August 17, 2006 7:57 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] HTML code in spam Hi John, Since it's feasible that after the image tag there could be text (such as an image caption), yes, it is entirely feasible for the font tag to be preceding an img tag. E.g., pfont...img ...the (in)famous 9 minutes/font/p Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Thursday, August 17, 2006 02:46 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] HTML code in spam Is this ever seen in a legit message where it sets the Font size for an image? FONT size=1img src= John T eServices For You Seek, and ye shall find! --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] AutoWhitelist feature with Imail 2006
On 8/9 I received the following response from Declude in regards to the AutoWhiteList feature with iMail 2006: No. Declude version 4.3.7 is not compatible with this. We are currently working on a fix. Thanks. -- Original Message -- From: Bill Green dfn Systems [EMAIL PROTECTED] Reply-To: declude.junkmail@declude.com Date: Fri, 18 Aug 2006 16:49:34 -0600 I'm currently running Imail 8.21 and declude 3.0.5.20. I've been watching for a certain set of features to be available in IMail 2006 with Declude before I upgrade. Specifically, AutoWhitelist and the Mailbox Action. My customers are used to checking their Spam folder online and adding any false positives to their Contacts list for whitelisting. I remember reading on one of my email lists that the Declude Autowhitelist feature is broken when used with Imail 2006. Was this really the case? Has it been fixed in current release? Is anyone using it successfully? Bill Green dfn Systems --- [This E-mail scanned for viruses by Declude EVA] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude + IMail Anti-Spam Premium Filters
We just performed a cutover tonight, and both products appear to be working great. The problem is the lack of weighting in iMail for their Premium Filters. I was hoping to use Declude to filter for X-IMAIL-PREMIUM in the headers, but it doesn't seem to work. I wonder if the IMail Premium filters execute after Declude - does anyone know? I can't seem to find any additional details in the JunkMail manual or the list archives. Thanks! --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude 2.06 with Imail 8.21
Greetings all, We're planning on upgrading to iMail 8.21 this week, and wanted to see if anyone know of any significant problems with this latest release and Declude 2.06+AV+FProt+Sniffer+invURIbl2.5. We're still affected by too many Declude processes that somehow get spawned, locking up mail processing (the server needs to be rebooted 2-3 times a week because way more than the max limit of 25 Declude processes run, causing mail processing to more or less stop and routing everything to the overflow folder). Thanks! --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SmarterMail vs iMail
I've long been evaluating both SmarterMail and iMail. While offended at the iMail price increases, I am generally pleased with the maturity of the product (trying to track down the cause of mail routing failures, etc. would seem more difficult in SmarterMail). However, I have not used SmarterMail in any production capacity under load. Does anyone have an opinion regarding whether SmarterMail will easily handle 800 users / 50,000 emails daily on the same dual 2.8 gHz/4gb RAM hardware that our iMail install currently runs on? Declude, invURIbl, and Message Sniffer would be running on both platforms. Thanks... --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] PIDDEBUG
Very distressingly, I've had the same thing happen to me multiple times, but to a much more significant degree. Just yesterday, I received a client call regarding a lack of email coming in. I checked, and there were *83* Declude processes running, all of which seemed to be doing nothing. There was a huge backlog of overflow messages, and it was growing quickly. I stopped the iMail services and tried killing all the Declude processes(yeah, that took a while). Then I'd get 2 or 3 Declude processes, but no more-- and they weren't anywhere close to keeping up with inbound mail much less process the overflow. Only a reboot fixed the problem, and the queue was empty within an hour. We run a dual 2.4 gHz PE2650 with 4 GB RAM. Two weeks ago, on a Saturday of all days, I had the same problem... but mail had been backed up since that Friday afternoon and we had 55,000 messages to pour through. I think it's happened a half dozen times, and I've never been able to figure out the cause. I thought Declude wasn't supposed to spawn more than 25 processes Has anyone had similar experiences, or a solution to share? -- Original Message -- From: John Tolmachoff \(Lists\) [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Fri, 5 Aug 2005 11:49:46 -0700 Is PIDDEBUG still available to use in 2.0.6.x? I am seeing a problem where after a couple days I notice there are 15 Declude processes running but not doing anything. This is on the 0xc142 error. There are no Q or D files in limbo. I can not stop the processes, I must restart the server. (This is remotely through TS.) I am wondering if turning PIDDEBUG will help track down the problem with those errors. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] MAILBOX Action Missing Headers
Here's a frustrating issue... I have two WEIGHT10 tests, one to move the mail message to the user's spambox (WEIGHT10) and another to modify the subject (WEIGHT10SUB). Both work most of the time, but I have users complaining about occasionally getting filtered spam in their INBOX instead of their SpamBox. With 40,000 spams a day, I get a couple hundred of these filtered but not put into spambox messages. Any ideas? Also, is there any way to get the warn message to show up in all emails without creating another WEIGHT10 test set to WARN? I like having the Weight of X reaches or exceeds weight of Y. in the headers. I used to use an iMail inbound rule to route spam to the spambox that had this header. Any help would be greatly appreciated (Declude newbie, although I'm earning my stars fast!). Thanks! --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Header Filter
Hi all, I have a need to use Declude to filter mail to a user's spambox based on X-IMAIL-SPAM in the headers (we're still using an imail filter that we don't want to give up). I created a custom filter file with the following: HEADERS 10 CONTAINSX-IMAIL-SPAM (separated by tabs) And created the corresponding rules in the declude config files: BANHEADER filter D:\IMail\Declude\CustomFilters\Headers.txt x 5 0 BANHEADER WARN The idea is that the imail rules run, add the X-IMAIL-SPAM header, then declude runs and matches this test against the imail-modified headers. I have the Weight10 test set to send to the user's spambox. The problem is, it doesn't seem to work. With declude logging set to debug, I see the test being called, but the test is always NOT triggered. Processing order problem? Any tips would be greatly appreciated (new Declude user). --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Header Filter
Bill, thanks-- this helps a lot. The imail statistics test was one I wanted to capture with declude, but mostly I'm looking for the phrase and URL tests (which we've spent years tweaking extensively). So, this is good news (although I still can't get it working-- maybe imail writes headers only at the end of all its processing?). The reason I'm doing any of this is because even though we have an inbound rule to route messages marked as spam by the spam filters to the users's spambox, some still get through to the inbox (even though they're clearly marked as spam). Seems imail's rules are intermittently applied. Thus I was hoping Declude could save the day... If I could dump all the imail tests, I would in a nanosecond. Thanks again. -- Original Message -- From: Bill Landry [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Tue, 24 May 2005 12:12:58 -0700 - Original Message - From: NIck Hayer [EMAIL PROTECTED] Bill Landry wrote: Actually, some IMail spam tests run before being passed to Declude and some after. The JunkMail archives will contain the gory details. Bill correct William - but the headers are after. I already tried to do this awhile ago without success.. Key here is though - awhile ago - maybe the order has been reshuffled in these later revs. Then IPSwitch has made some pretty radical changes in the spam processing since IMail V8 was first released with spam filtering capabilities, and made those changes in the wrong direction, as well. I do not use IMail spam filtering any longer, but here's the way IMail spam processing happen when V8 was released: Of all of the spam tests that IMail V8.0 now supports, all but the statistical content filtering test (which is the one that places the X-Imail-Spam entry into the header) run before being passed to Declude JunkMail. Unfortunately, the IMail statistical test does not run until JunkMail passes the message back to IMail for delivery. (http://www.mail-archive.com/declude.junkmail@declude.com/msg08970.html). If it's no longer this way, and is in fact even worse than before, that's a shame - but I don't care to prove or disprove it either way, since I couldn't be bothered to use their spam tests any longer anyway. Bill --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Header Filter
Bill, another excellent suggestion-- thanks! I enabled a HOLD action and took a look at the headers, and sure enough-- no imail headers. Strangely, my rule did catch one. It was an imail phrase test that got caught by Declude, but strangely the other 4000 messages filtered by the phrase filter didn't get headers until later. Don't ask me how that happens... Thanks again. -- Original Message -- From: Bill Landry [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Tue, 24 May 2005 12:38:45 -0700 - Original Message - From: Spaminator [EMAIL PROTECTED] Bill, thanks-- this helps a lot. The imail statistics test was one I wanted to capture with declude, but mostly I'm looking for the phrase and URL tests (which we've spent years tweaking extensively). So, this is good news (although I still can't get it working-- maybe imail writes headers only at the end of all its processing?). Don't know, but if you hold any spam via Declude JunkMail, take a look at some of the messages in your hold directory to see what, if any, headers IMail has added (since these would have been added by IMail prior to delivering to Declude). Bill --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
