Re: [Declude.JunkMail] IP Black List

2003-02-02 Thread R. Scott Perry


I have been trying to get the IP Black list file to function properly. 
Below are the settings I am using..

GLOBAL.CFG
IPFILE fromfile d:\imail\declude\ipblacklist.txt x 20 0

The "fromfile" test type is only for return addresses (E-mail addresses), 
not IP addresses.  If you change it to:

IPFILE ipfile d:\imail\declude\ipblacklist.txt x 20 0

then it should work.

One last thing once its working. If I lookup a class of IP's and it seems 
to be owned by a clearing house for SP*AM would it be advisable to add 
209.50.0.1/8 to the list ?

*If* it appears as though all the IPs in the range belong to the spammer, yes.

But, there are often cases where an IP of a known spammer gets listed, but 
there are legitimate mailers in the same Class C range, so you do have to 
be careful.

If you aren't very familiar with CIDR ranges, you can use the tool at 
http://www.DNSstuff.com -- for example, you can enter "209.50.0.1/8", and 
it will show that it covers 209.0.0.0 through 209.255.255.255.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] IP Black List

2003-02-02 Thread David Barrett



I have been trying to get the IP Black list file to 
function properly. Below are the settings I am using..
 
GLOBAL.CFG
IPFILE fromfile d:\imail\declude\ipblacklist.txt x 
20 0
 
DEFAULT.JUNKMAIL
IPFILE  HOLD
 
I added my IP address to the IPFile and sent a test 
message with no luck except my service provider failed RDNS.
 
Any thoughts ?
 
One last thing once its working. If I lookup a 
class of IP's and it seems to be owned by a clearing house for SP*AM would 
it be advisable to add 209.50.0.1/8 to the list ?
 
 
 
 
David BarrettMaine Connect, Inc
" I'd rather be a failure at something I enjoy than 
be a success at something I hate "-- George Burns


Re: [Declude.JunkMail] IP Black List

2001-12-28 Thread R. Scott Perry


>Is there any way to kill a C-Block short of entering 254 unique IP 
>addresses -- or even a /30 . . . .?

No, there's no way.  It has to be a single address.  That's just the way 
that it was programmed, given the sample files we were working with.

>I didn't miss "yet" in your response -- soon?

I don't know when IP ranges will be added, since it hasn't come up until now.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] IP Black List

2001-12-28 Thread Don Brown

At 11:17 AM 12/28/01 -0500, you wrote:

>>Similar to the white list, can you use 127.0.0 in the IP Black List to 
>>kill the entire 127 network?
>
>No, that isn't possible yet -- it has to be an exact match.
>   -Scott

Is there any way to kill a C-Block short of entering 254 unique IP 
addresses -- or even a /30 . . . .?

I didn't miss "yet" in your response -- soon?

Thanks,





Don Brown - Dallas, Texas USA   Internet Concepts, Inc.
[EMAIL PROTECTED]http://www.inetconcepts.net
PGP Key ID: 04C99A55  (972) 788-2364  Fax: (972) 788-5049
Providing Internet Solutions Worldwide - An eDataWeb Affiliate


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re[2]: [Declude.JunkMail] IP Black List

2001-12-28 Thread R. Scott Perry


>How can I test what version of declude I have?  I've missed some of this
>thread, but what is the last version that is released?

You can type "declude -diag" from a command prompt to see which version you 
are running.  The latest released version is 1.26a, the latest beta is 
1.31.  There's only one reported issue so far with 1.31 (the MAILFROM test 
may not be applied towards the weighting system), so there should be a new 
released version soon.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re[2]: [Declude.JunkMail] IP Black List

2001-12-28 Thread [EMAIL PROTECTED]

Hi,

How can I test what version of declude I have?  I've missed some of this
thread, but what is the last version that is released?

Thanks,
Andy Baldwin

[EMAIL PROTECTED]
http://www.thumpernet.com 
315-282-0020

Friday, December 28, 2001, 12:26:01 PM, you wrote:


>>Right, right, right. But the manual tells how to create the txt files, and
>>how to create the test line in the global.cfg. I assume that the final step
>>in this process is to put a matching line in $default$.junkmail telling what
>>the action is.

RSP> Ah, I see.  Yes, that is correct.
RSP> -Scott

RSP> ---
RSP> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

RSP> ---

RSP> This E-mail came from the Declude.JunkMail mailing list.  To
RSP> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
RSP> type "unsubscribe Declude.JunkMail".  You can E-mail
RSP> [EMAIL PROTECTED] for assistance.  You can visit our web
RSP> site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] IP Black List

2001-12-28 Thread R. Scott Perry


>Right, right, right. But the manual tells how to create the txt files, and
>how to create the test line in the global.cfg. I assume that the final step
>in this process is to put a matching line in $default$.junkmail telling what
>the action is.

Ah, I see.  Yes, that is correct.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] IP Black List

2001-12-28 Thread John Shacklett

Right, right, right. But the manual tells how to create the txt files, and
how to create the test line in the global.cfg. I assume that the final step
in this process is to put a matching line in $default$.junkmail telling what
the action is.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Friday, December 28, 2001 12:04 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] IP Black List



>I assume that the final step in this process is to put a matching line in
>$default$.junkmail telling what the action is.

The blacklists work by defining a special test -- you can go to
http://www.declude.com/junkmail/manual.htm and look at "Your own IP
blacklists" in the Advanced Configuration section for details.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] IP Black List

2001-12-28 Thread R. Scott Perry


>I assume that the final step in this process is to put a matching line in
>$default$.junkmail telling what the action is.

The blacklists work by defining a special test -- you can go to 
http://www.declude.com/junkmail/manual.htm and look at "Your own IP 
blacklists" in the Advanced Configuration section for details.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] IP Black List

2001-12-28 Thread John Shacklett

I assume that the final step in this process is to put a matching line in
$default$.junkmail telling what the action is.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Friday, December 28, 2001 11:17 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] IP Black List



>Similar to the white list, can you use 127.0.0 in the IP Black List to
>kill the entire 127 network?

No, that isn't possible yet -- it has to be an exact match.
   -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] IP Black List

2001-12-28 Thread R. Scott Perry


>Similar to the white list, can you use 127.0.0 in the IP Black List to 
>kill the entire 127 network?

No, that isn't possible yet -- it has to be an exact match.
   -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.JunkMail] IP Black List

2001-12-28 Thread Don Brown

Similar to the white list, can you use 127.0.0 in the IP Black List to kill 
the entire 127 network?

Don Brown - Dallas, Texas USA   Internet Concepts, Inc.
[EMAIL PROTECTED]http://www.inetconcepts.net
PGP Key ID: 04C99A55  (972) 788-2364  Fax: (972) 788-5049
Providing Internet Solutions Worldwide - An eDataWeb Affiliate


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .