Looking for a tool that works with Outlook/Exchange..

I'd like to be able to pull all the header info out of any messages in a
particular folder.. like last-hop IP, domain name, that kind of stuff.
Once a week, I copy all messages sent/rev'd in the past few days into a
sort folder, and then manually check them all, deleting legit emails, to
see what got through my filters. What I'm left with is 100% SPAM that
made it into my Exchange box. I'd like a quick way to pull out the
header info from all these messages and parse it for reverse DNS,
sending domains, etc... 

Anyone know of something out there before I write my own ?

Karl Drugge
 
 
 
 
 
 
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Chris Asaro
Sent: Tuesday, January 09, 2007 5:13 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] all_list.dat ?

It has been requested of Engineering that a new all_list.dat be build
ASAP.
You should have this in your hands soon.

 
Chris A.

 
 
 
 
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Tuesday, January 09, 2007 4:30 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] all_list.dat ?

David (or any Declude people that may be reading),

Any chance of seeing a new all_list.dat any time soon, considering the
current one has a date of 6 Jul 06, and considering the additional input
from this recent thread?

I'm starting to see false positives caused by weights I previously gave
to
"IANA Reserved" and "RIPE Unlisted".

Gary



-------- Original Message --------
> From: "Jay Sudowski - Handy Networks LLC" <[EMAIL PROTECTED]>
> Sent: Thursday, January 04, 2007 5:57 PM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] [IANA Reserved] ?
> 
> Indeed.  When we obtained our own IP space from ARIN, it was from
72/8,
> which had been released only about 6 months prior to it being assigned
> to us.  You wouldn't believe the number of networks that were running
> with 72/8 in their bogons list and were entirely blocking traffic from
> our network...
> 
> 
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Darrell ([EMAIL PROTECTED])
> Sent: Thursday, January 04, 2007 3:47 PM
> To: declude.junkmail@declude.com
> Subject: Re: [Declude.JunkMail] [IANA Reserved] ?
> 
> 
> I would be very careful with this.  IANA just released (I believe in 
> October) 96/8, 97/8, 98/8, 99/8.  With the all_list.dat not being
> updated 
> frequently I would tred very lightly in this area.  Part of 96/8 has
> been 
> handed out.
> 
> Darrell
>
------------------------------------------------------------------------
> Check out http://www.invariantsystems.com for utilities for Declude
And 
> Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI
integration,
> MRTG 
> Integration, and Log Parsers.
> 
> ----- Original Message ----- 
> From: "S.J.Stanaitis" <[EMAIL PROTECTED]>
> To: <declude.junkmail@declude.com>
> Sent: Thursday, January 04, 2007 3:29 PM
> Subject: RE: [Declude.JunkMail] [IANA Reserved] ?
> 
> 
> Nice.
> 
> Thanks,
> Sam
> 
> SJ.Stanaitis - Network Administrator
> Decorative Product Source E-commerce Network
> 
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Scott
> Fisher
> Sent: Thursday, January 04, 2007 3:16 PM
> To: declude.junkmail@declude.com
> Subject: Re: [Declude.JunkMail] [IANA Reserved] ?
> 
> sending hop only: COUNTRY 0 IS *R
> 
> or
> 
> all hops: COUNTRIES 0 CONTAINS *R
> 
> ----- Original Message ----- 
> From: "S.J.Stanaitis" <[EMAIL PROTECTED]>
> To: <declude.junkmail@declude.com>
> Sent: Thursday, January 04, 2007 1:55 PM
> Subject: RE: [Declude.JunkMail] [IANA Reserved] ?
> 
> 
> > Holy [EMAIL PROTECTED], that answers one question!
> >
> > Any idea how to incorporate the "IANA Reserved" thing into Declude?
> >
> > Thanks,
> > Sam
> >
> > SJ.Stanaitis - Network Administrator
> > Decorative Product Source E-commerce Network
> >
> > -----Original Message-----
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Scott
> > Fisher
> > Sent: Thursday, January 04, 2007 2:37 PM
> > To: declude.junkmail@declude.com
> > Subject: Re: [Declude.JunkMail] [IANA Reserved] ?
> >
> > Here are my december totals for the odd-balls (COUNTRY IS test)
> >
> >      Country Name CountOfMessageID DEL SPAM HELD SPAM Poss SPAM OK
> >      APNIC Unlisted 97 97 0 0 0
> >      ARIN Unlisted 1426 1395 12 1 18
> >      Central/South America 89 89 0 0 0
> >      European Union 1804 1674 8 1 121
> >      IANA Reserved 11677 11428 91 118 39
> >      Multi-Regional 23 19 1 1 2
> >      RIPE Unlisted 1332 1330 1 1 0
> >      Unknown 4018 3938 13 3 64
> >
> >
> > #
> > #  Special Codes
> > #
> > #*1 Multi-Regional
> > #*2 Europe
> > #*3 North America
> > #*4 Central/South America
> > #*5 Pacific Rim
> > #*A ARIN Unlisted (North America/South Africa)
> > #*B Public Data Network
> > #*E RIPE Unlisted (Europe, North Africa, Middle East)
> > #*I Private IP
> > #*L Loopback
> > #*M Multicast
> > #*P APNIC Unlisted (Asia Pacific)
> > #*R IANA Reserved
> > #*U Unknown
> >
> >
> > ----- Original Message ----- 
> > From: "S.J.Stanaitis" <[EMAIL PROTECTED]>
> > To: <declude.junkmail@declude.com>
> > Sent: Thursday, January 04, 2007 1:02 PM
> > Subject: [Declude.JunkMail] [IANA Reserved] ?
> >
> >
> >>I currently tag each incoming email from a country other than the US
> (with
> >> few exceptions) with a weight of 10.  Some emails come in with
[IANA
> >> Reserved] in the X-Country-Chain header and as such these emails
> >> (originating in places like Amsterdam, etc) aren't affected by the
> >> FILTER-COUNTRY filter.  Any way to add a weight to those IP's too?
> Do
> >> American IP's show up as IANA Reserved ever?
> >>
> >> Thanks,
> >> Sam
> >>
> >> SJ.Stanaitis - Network Administrator
> >> Decorative Product Source E-commerce Network
> >>
> >>
> >>
> >>
> >> ---





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to