Re: [Declude.JunkMail] SPF PASS/FAIL test format

2005-12-08 Thread Darrell \([EMAIL PROTECTED])



Karl,
 
The correct format is 
 

SPFFAIL   
spf    fail x 
7 0
 
DarrellinvURIBL 
- Intelligent URI filtering plug-in for Declude, mxGuard, and ORF.  Stop 
spam at the source the spamvertised domain.  More effective than 
traditional RBL's.  Try it today - http://www.invariantsystems.com

  - Original Message - 
  From: 
  IS - Systems Eng. (Karl Drugge) 
  
  To: declude.junkmail@declude.com 
  
  Sent: Thursday, December 08, 2005 1:08 
  PM
  Subject: [Declude.JunkMail] SPF PASS/FAIL 
  test format
  
  
  
  Quick question on the global.cfg 
  file…
   
  I upgraded to 3.0.5 yesterday. 
  Working great so far. I want to add the SPFPASS and SPFFAIL tests.. what is 
  the format ? I want to subtract 7 points for a pass, and add 7 points for a 
  fail…( if they’re too stupid to have an SPF by now… )
   
  I have this, but it is obviously 
  wrong…
   
  SPFFAIL   
  spffail   
  x x 7 
  0
  SPFPASS   
  spfpass   
  x x -7    
  0
   
   
  Karl 
  Drugge B.S.I.T., A.S., 
  M.C.S.E. ( NT 4.0 + 2000 ), C.C.N.A., C.C.D.A., Network+, A+ 
  I dream of the 
  day when I will learn to stop asking questions to which I will regret learning 
  the answers ( Roy Greenhilt, Order of the Stick 
   ) 
   
  PLEASE NOTE : Florida 
  has a very broad public records law. Most written communications to or from 
  City officials regarding City business are public records available to the 
  public and media upon request. Your E-mail communications may be subject to 
  public disclosure.


RE: [Declude.JunkMail] SPF PASS/FAIL test format

2005-12-08 Thread David Barker



>>Does 8.22 
require 3.0 or can I run my 2.x version?
 
Imail 8.20+ requires 
Declude 3.0 or later.
 
David 
B
www.declude.com


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of John 
DoyleSent: Thursday, December 08, 2005 2:16 PMTo: 
Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] SPF 
PASS/FAIL test format

I have 
quick question re. 3.0 version of Declude.
I 
installed both the .20 and the .21 version on a windows 2003 enterprise server 
with Imail 8.15 hf2 and discovered a memory leak.
I've 
not heard back from Declude as to a fix.
 
I'd 
like to go to 8.22 to address a few issues but am worried about 3.0.5.21 having 
the memory leak. I can only run about 2 to 4
hours 
before we seem to lose the ability to access dns. and run low on 
memory.
 
Does 8.22 require 3.0 or can I run my 2.x 
version?
 
Does 
anyone have any experiance with this and would share any 
thoughts.
 
thanks 

 
John
 

  -Original Message-From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]On Behalf Of Scott 
  FisherSent: Thursday, December 08, 2005 10:55 AMTo: 
  Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] SPF 
  PASS/FAIL test format
  Also make sure you have at least version 
  3.0.5.20
   
  Previous 3.0.5. versions had an error with SPF
   
   Original Message - 
  
From: 
IS - Systems Eng. (Karl 
Drugge) 
To: declude.junkmail@declude.com 

Sent: Thursday, December 08, 2005 12:08 
PM
Subject: [Declude.JunkMail] SPF 
    PASS/FAIL test format



Quick question on the global.cfg 
file…
 
I upgraded to 3.0.5 yesterday. 
Working great so far. I want to add the SPFPASS and SPFFAIL tests.. what is 
the format ? I want to subtract 7 points for a pass, and add 7 points for a 
fail…( if they’re too stupid to have an SPF by now… )
 
I have this, but it is obviously 
wrong…
 
SPFFAIL   
spffail   
x x 
7 0
SPFPASS   
spfpass   
x x -7    
0
 
 
Karl 
Drugge B.S.I.T., 
A.S., M.C.S.E. ( NT 4.0 + 2000 ), C.C.N.A., C.C.D.A., Network+, 
A+ I dream of the day when I will 
learn to stop asking questions to which I will regret learning the answers ( 
Roy Greenhilt, Order of the Stick  ) 
 
PLEASE NOTE : Florida 
has a very broad public records law. Most written communications to or from 
City officials regarding City business are public records available to the 
public and media upon request. Your E-mail communications may be subject to 
public disclosure.


RE: [Declude.JunkMail] SPF PASS/FAIL test format

2005-12-08 Thread John Doyle



I have 
quick question re. 3.0 version of Declude.
I 
installed both the .20 and the .21 version on a windows 2003 enterprise server 
with Imail 8.15 hf2 and discovered a memory leak.
I've 
not heard back from Declude as to a fix.
 
I'd 
like to go to 8.22 to address a few issues but am worried about 3.0.5.21 having 
the memory leak. I can only run about 2 to 4
hours 
before we seem to lose the ability to access dns. and run low on 
memory.
 
Does 8.22 require 3.0 or can I run my 2.x 
version?
 
Does 
anyone have any experiance with this and would share any 
thoughts.
 
thanks 

 
John
 

  -Original Message-From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]On Behalf Of Scott 
  FisherSent: Thursday, December 08, 2005 10:55 AMTo: 
  Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] SPF 
  PASS/FAIL test format
  Also make sure you have at least version 
  3.0.5.20
   
  Previous 3.0.5. versions had an error with SPF
   
   Original Message - 
  
From: 
IS - Systems Eng. (Karl 
Drugge) 
To: declude.junkmail@declude.com 

Sent: Thursday, December 08, 2005 12:08 
PM
Subject: [Declude.JunkMail] SPF 
    PASS/FAIL test format



Quick question on the global.cfg 
file…
 
I upgraded to 3.0.5 yesterday. 
Working great so far. I want to add the SPFPASS and SPFFAIL tests.. what is 
the format ? I want to subtract 7 points for a pass, and add 7 points for a 
fail…( if they’re too stupid to have an SPF by now… )
 
I have this, but it is obviously 
wrong…
 
SPFFAIL   
spffail   
x x 
7 0
SPFPASS   
spfpass   
x x -7    
0
 
 
Karl 
Drugge B.S.I.T., 
A.S., M.C.S.E. ( NT 4.0 + 2000 ), C.C.N.A., C.C.D.A., Network+, 
A+ I dream of the day when I will 
learn to stop asking questions to which I will regret learning the answers ( 
Roy Greenhilt, Order of the Stick  ) 
 
PLEASE NOTE : Florida 
has a very broad public records law. Most written communications to or from 
City officials regarding City business are public records available to the 
public and media upon request. Your E-mail communications may be subject to 
public disclosure.


RE: [Declude.JunkMail] SPF PASS/FAIL test format

2005-12-08 Thread Kevin Bilbee



Which 
may still be there. I reported a false positive to declude the other day. Where 
declude sais the email failed but running the check from dnsstuff.com it 
passes.
 
 
Kevin 
Bilbee

  -Original Message-From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]On Behalf Of Scott 
  FisherSent: Thursday, December 08, 2005 10:55 AMTo: 
  Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] SPF 
  PASS/FAIL test format
  Also make sure you have at least version 
  3.0.5.20
   
  Previous 3.0.5. versions had an error with SPF
   
   Original Message - 
  
From: 
IS - Systems Eng. (Karl 
Drugge) 
To: declude.junkmail@declude.com 

Sent: Thursday, December 08, 2005 12:08 
PM
Subject: [Declude.JunkMail] SPF 
PASS/FAIL test format



Quick question on the global.cfg 
file…
 
I upgraded to 3.0.5 yesterday. 
Working great so far. I want to add the SPFPASS and SPFFAIL tests.. what is 
the format ? I want to subtract 7 points for a pass, and add 7 points for a 
fail…( if they’re too stupid to have an SPF by now… )
 
I have this, but it is obviously 
wrong…
 
SPFFAIL   
spffail   
x x 
7 0
SPFPASS   
spfpass   
x x -7    
0
 
 
Karl 
Drugge B.S.I.T., 
A.S., M.C.S.E. ( NT 4.0 + 2000 ), C.C.N.A., C.C.D.A., Network+, 
A+ I dream of the day when I will 
learn to stop asking questions to which I will regret learning the answers ( 
Roy Greenhilt, Order of the Stick  ) 
 
PLEASE NOTE : Florida 
has a very broad public records law. Most written communications to or from 
City officials regarding City business are public records available to the 
public and media upon request. Your E-mail communications may be subject to 
public disclosure.


Re: [Declude.JunkMail] SPF PASS/FAIL test format

2005-12-08 Thread Scott Fisher



Also make sure you have at least version 
3.0.5.20
 
Previous 3.0.5. versions had an error with SPF
 
 Original Message - 

  From: 
  IS - Systems Eng. (Karl Drugge) 
  
  To: declude.junkmail@declude.com 
  
  Sent: Thursday, December 08, 2005 12:08 
  PM
  Subject: [Declude.JunkMail] SPF PASS/FAIL 
  test format
  
  
  
  Quick question on the global.cfg 
  file…
   
  I upgraded to 3.0.5 yesterday. 
  Working great so far. I want to add the SPFPASS and SPFFAIL tests.. what is 
  the format ? I want to subtract 7 points for a pass, and add 7 points for a 
  fail…( if they’re too stupid to have an SPF by now… )
   
  I have this, but it is obviously 
  wrong…
   
  SPFFAIL   
  spffail   
  x x 7 
  0
  SPFPASS   
  spfpass   
  x x -7    
  0
   
   
  Karl 
  Drugge B.S.I.T., A.S., 
  M.C.S.E. ( NT 4.0 + 2000 ), C.C.N.A., C.C.D.A., Network+, A+ 
  I dream of the 
  day when I will learn to stop asking questions to which I will regret learning 
  the answers ( Roy Greenhilt, Order of the Stick 
   ) 
   
  PLEASE NOTE : Florida 
  has a very broad public records law. Most written communications to or from 
  City officials regarding City business are public records available to the 
  public and media upon request. Your E-mail communications may be subject to 
  public disclosure.


RE: [Declude.JunkMail] SPF PASS/FAIL test format

2005-12-08 Thread Colbeck, Andrew



Karl, the correct format is as below:
 
SPFPASS  spf pass x 0 0SPFFAIL  spf fail x 5 0
Note that nobody uses SPFPASS to grant a negative 
weight to an incoming message.  This is because a certain family of the bad 
guys definitely use SPF and their own mail servers, and we don't want to 
help them.
 
The best practice is to score a positive weight for a hit 
on SPFFAIL, ignore SPFUNKNOWN, and not grant a negative weight on 
SPFPASS.
 
If you want to go the extra mile, use SPFPASS as a 
test in a JunkMail Pro filter file in combination with other 
tests.
 
Idea 1) Use it with TESTSFAILED to stop processing early 
in a filter file that checks for zombie spam to mitigate false 
positives.
Idea 2) Use it with a filter file that already awards 
negative points to your important business partners to award extra negative 
weight so as to mitigate false positives (e.g. to counterbalance a sudden 
listing of their IP address in SpamCop).
 
Andrew 8)
 

  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems 
  Eng. (Karl Drugge)Sent: Thursday, December 08, 2005 10:09 
  AMTo: declude.junkmail@declude.comSubject: 
  [Declude.JunkMail] SPF PASS/FAIL test format
  
  
  
  Quick question on the global.cfg 
  file…
   
  I upgraded to 3.0.5 yesterday. 
  Working great so far. I want to add the SPFPASS and SPFFAIL tests.. what is 
  the format ? I want to subtract 7 points for a pass, and add 7 points for a 
  fail…( if they’re too stupid to have an SPF by now… )
   
  I have this, but it is obviously 
  wrong…
   
  SPFFAIL   
  spffail   
  x x 7 
  0
  SPFPASS   
  spfpass   
  x x -7    
  0
   
   
  Karl 
  Drugge B.S.I.T., A.S., 
  M.C.S.E. ( NT 4.0 + 2000 ), C.C.N.A., C.C.D.A., Network+, A+ 
  I dream of the 
  day when I will learn to stop asking questions to which I will regret learning 
  the answers ( Roy Greenhilt, Order of the Stick 
   ) 
   
  PLEASE NOTE : Florida 
  has a very broad public records law. Most written communications to or from 
  City officials regarding City business are public records available to the 
  public and media upon request. Your E-mail communications may be subject to 
  public disclosure.


[Declude.JunkMail] SPF PASS/FAIL test format

2005-12-08 Thread IS - Systems Eng. \(Karl Drugge\)







Quick question on the global.cfg file…

 

I upgraded to 3.0.5 yesterday. Working great so far. I want
to add the SPFPASS and SPFFAIL tests.. what is the format ? I want to subtract
7 points for a pass, and add 7 points for a fail…( if they’re too
stupid to have an SPF by now… )

 

I have this, but it is obviously wrong…

 

SPFFAIL  
spffail  
x x 7 0

SPFPASS  
spfpass  
x x -7    0

 

 

Karl Drugge 
B.S.I.T., A.S., M.C.S.E. ( NT 4.0 + 2000 ), C.C.N.A.,
C.C.D.A., Network+, A+ 
I dream of the day when
I will learn to stop asking questions to which I will regret learning the
answers ( Roy Greenhilt, Order of the Stick  ) 

 




PLEASE NOTE : Florida has a very broad public records law. Most written communications to or from City officials regarding City business are public records available to the public and media upon request. Your E-mail communications may be subject to public disclosure.