RE: [Declude.JunkMail] Sending out a bounced message

2003-02-19 Thread Jim Rooth
Larry, this is why we really do not want to send out messages about
receiving spam.  This is from the man who programs the Declude program.  

While I understand you do not want spam bounced, the email that gets caught
is going to bounce, along with any spam email.  As stated below, most spam
is shown to be sent from a forged address and that means that some poor soul
gets told he or she is sending out spam.  Before it is over, tempers flare
and we get sent to a blacklist for sending out bogus email.  It is a vicious
circle.

I am going to turn it back off and wait for a decision from John before I
turn it on and leave us liable...

Jim Rooth
Klotron, Inc.
214.244.0979
[EMAIL PROTECTED]

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: Wednesday, February 19, 2003 4:01 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Sending out a bounced message

The problem is that if you bounce obvious spam -- which is almost always 
sent with a fake return address -- the legitimate user of the return 
address is going to get the bounce messages, which does nobody any 
good.  For example, if some spammer used "[EMAIL PROTECTED]" as the 
return address of their spam, would your client really want a ton of bounce 
messages?

Bouncing spam just makes the spam problem worse, as it spreads the spam 
further.
  -Scott

 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.456 / Virus Database: 256 - Release Date: 2/18/2003
 

---

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Sending out a bounced message

2003-02-19 Thread R. Scott Perry


Just received a call from the client.  He doesn't want to know about the
bounced emails now...he wants the sender to know they are sending spam.
(Like they don't already know that!)  I have activated the
WEIGHT40bounce.eml as I have a weight of 40 that deletes.  Do I need to
change the name to WEIGHT40DELETE.eml or change the $default$.junkmail to
read BOUNCE?  I really do not want to bounce...don't want the extra work
load on returned mail.


If the client wants to do that, you should charge him to do it.  And charge 
him plenty.

The problem is that if you bounce obvious spam -- which is almost always 
sent with a fake return address -- the legitimate user of the return 
address is going to get the bounce messages, which does nobody any 
good.  For example, if some spammer used "[EMAIL PROTECTED]" as the 
return address of their spam, would your client really want a ton of bounce 
messages?

Bouncing spam just makes the spam problem worse, as it spreads the spam 
further.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Sending out a bounced message

2003-02-19 Thread Jim Rooth
Just received a call from the client.  He doesn't want to know about the
bounced emails now...he wants the sender to know they are sending spam.
(Like they don't already know that!)  I have activated the
WEIGHT40bounce.eml as I have a weight of 40 that deletes.  Do I need to
change the name to WEIGHT40DELETE.eml or change the $default$.junkmail to
read BOUNCE?  I really do not want to bounce...don't want the extra work
load on returned mail.

Jim Rooth
Klotron, Inc.
214.244.0979
[EMAIL PROTECTED]

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jim Rooth
Sent: Wednesday, February 19, 2003 3:05 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Sending out a bounced message

You have no idea

Jim Rooth
Klotron, Inc.
214.244.0979
[EMAIL PROTECTED]

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff
Sent: Wednesday, February 19, 2003 2:34 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Sending out a bounced message

> trying to just send it to the one domain. But as much flak as I have been
> getting lately about spam, I think I will let everyone see they are
getting
> spam blocked!

I don't know Jim. 

The smell of diesel is calling stronger and stronger.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.456 / Virus Database: 256 - Release Date: 2/18/2003
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.456 / Virus Database: 256 - Release Date: 2/18/2003
 

---

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.456 / Virus Database: 256 - Release Date: 2/18/2003
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.456 / Virus Database: 256 - Release Date: 2/18/2003
 

---

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Sending out a bounced message

2003-02-19 Thread John Tolmachoff
Oh believe me, I do right now.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED]] On Behalf Of Jim Rooth
> Sent: Wednesday, February 19, 2003 1:05 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] Sending out a bounced message
> 
> You have no idea
> 
> Jim Rooth
> Klotron, Inc.
> 214.244.0979
> [EMAIL PROTECTED]
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff
> Sent: Wednesday, February 19, 2003 2:34 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] Sending out a bounced message
> 
> > trying to just send it to the one domain. But as much flak as I have
been
> > getting lately about spam, I think I will let everyone see they are
> getting
> > spam blocked!
> 
> I don't know Jim.
> 
> The smell of diesel is calling stronger and stronger.
> 
> John Tolmachoff MCSE, CSSA
> IT Manager, Network Engineer
> RelianceSoft, Inc.
> Fullerton, CA  92835
> www.reliancesoft.com
> 
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> ---
> 
> 
> ---
> Incoming mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.456 / Virus Database: 256 - Release Date: 2/18/2003
> 
> 
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.456 / Virus Database: 256 - Release Date: 2/18/2003
> 
> 
> ---
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Sending out a bounced message

2003-02-19 Thread Jim Rooth
You have no idea

Jim Rooth
Klotron, Inc.
214.244.0979
[EMAIL PROTECTED]

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff
Sent: Wednesday, February 19, 2003 2:34 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Sending out a bounced message

> trying to just send it to the one domain. But as much flak as I have been
> getting lately about spam, I think I will let everyone see they are
getting
> spam blocked!

I don't know Jim. 

The smell of diesel is calling stronger and stronger.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.456 / Virus Database: 256 - Release Date: 2/18/2003
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.456 / Virus Database: 256 - Release Date: 2/18/2003
 

---

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Sending out a bounced message

2003-02-19 Thread John Tolmachoff
> trying to just send it to the one domain. But as much flak as I have been
> getting lately about spam, I think I will let everyone see they are
getting
> spam blocked!

I don't know Jim. 

The smell of diesel is calling stronger and stronger.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Sending out a bounced message

2003-02-19 Thread Jim Rooth
That was the first place I went to, the security settings.  I had Imail send
one to the client that was complaining and of course,  it went through
without a hiccup...thanks anyway.

Thanks Scott for your help.  Yes that is what I wanted but I had in mind
trying to just send it to the one domain. But as much flak as I have been
getting lately about spam, I think I will let everyone see they are getting
spam blocked!

Jim Rooth
Klotron, Inc.
214.244.0979
[EMAIL PROTECTED]

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Helpdesk
Sent: Wednesday, February 19, 2003 2:03 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Sending out a bounced message

on 2/19/03 2:54 PM, R. Scott Perry wrote:

>> After checking the logs I do see the SMTPD and SMTP entries as stated.
So
>> that portion is working…now to find out why I am losing attachments.
> 
> Is it the whole E-mail being lost, or just the attachment?  Neither
Declude
> nor IMail will remove attachments, so if the attachment is missing, it's
> almost certainly a mail client issue.

If it is just the attachments, and the client is running Outlook Express 6,
the problem is their security settings.

Microsoft's instructions for changing the security settings in Outlook
Express and Internet Explorer can be found at
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q291387 .

Later,
Greg

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.456 / Virus Database: 256 - Release Date: 2/18/2003
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.456 / Virus Database: 256 - Release Date: 2/18/2003
 

---

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Sending out a bounced message

2003-02-19 Thread Helpdesk
on 2/19/03 2:54 PM, R. Scott Perry wrote:

>> After checking the logs I do see the SMTPD and SMTP entries as stated.  So
>> that portion is working…now to find out why I am losing attachments.
> 
> Is it the whole E-mail being lost, or just the attachment?  Neither Declude
> nor IMail will remove attachments, so if the attachment is missing, it's
> almost certainly a mail client issue.

If it is just the attachments, and the client is running Outlook Express 6,
the problem is their security settings.

Microsoft's instructions for changing the security settings in Outlook
Express and Internet Explorer can be found at
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q291387 .

Later,
Greg

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Sending out a bounced message

2003-02-19 Thread R. Scott Perry


>Does Declude  JunkMail have an email file similar to the virus file
>recip.eml?  I have a client that wants to be notified when they have an
>email they don't receive.

In that case, you could use the ATTACH action, and modify the
\IMail\Declude\spamattach.eml file to not include the original spam.

I would use the ATTACH action instead of DELETE or HOLD?


Correct.


Won't that send all spam forward or at least notification of receiving spam?


Yes -- but isn't that exactly what you wanted (to be notified of E-mail 
that would otherwise be held/deleted)?

After checking the logs I do see the SMTPD and SMTP entries as stated.  So 
that portion is working…now to find out why I am losing attachments.

Is it the whole E-mail being lost, or just the attachment?  Neither Declude 
nor IMail will remove attachments, so if the attachment is missing, it's 
almost certainly a mail client issue.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Sending out a bounced message

2003-02-19 Thread Jim Rooth








 

 

 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: Wednesday, February 19, 2003 12:53 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Sending out a bounced message

 

 

>Does Declude  JunkMail have an email file similar to the virus
file 

>recip.eml?  I have a client that wants to be notified when
they have an 

>email they don't receive.

 

In that case, you could use the ATTACH action, and modify the 

\IMail\Declude\spamattach.eml file to not include the original spam.

 

I would use the ATTACH
action instead of DELETE or HOLD?  Won't that send all spam forward or at
least notification of receiving spam?

 

>We are having an unusual amount of lost emails and they are (and I
am) 

>trying to finds out why.  Almost all attachments with .pdf are
being lost.

 

Have you checked your IMail rules?  That's a common reason for
.pdfs 

getting lost.

 

I looked at the rules section…all
are blank as nothing had ever been set up in them.  I am checking with
IMAIL as that seems to be their area.

 

You might also want to check the IMail log file -- it should have
"SMTPD" 

lines for the E-mail arriving (before Declude scans it), and
"SMTP-" or 

"SMTP" lines afterwards for the actual delivery of the E-mail.

 

After checking the logs I
do see the SMTPD and SMTP entries as stated.  So that portion is working…now
to find out why I am losing attachments.  It seems like any attachment is
subject but pdf’s never make it through.  Except to me and my Boss…we
are both using the latest and greatest Outlook and have not had any problems. 
That is why I am prone to think there is an issue with older Email platforms.

  
-Scott

 

---

[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 

---

This E-mail came from the Declude.JunkMail mailing list.  To

unsubscribe, just send an E-mail to [EMAIL PROTECTED], and

type "unsubscribe Declude.JunkMail".  The archives can
be found

at http://www.mail-archive.com.

---

 

 

---

Incoming mail is certified Virus Free.

Checked by AVG anti-virus system (http://www.grisoft.com).

Version: 6.0.456 / Virus Database: 256 - Release Date: 2/18/2003

 








---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.456 / Virus Database: 256 - Release Date: 2/18/2003
 


Re: [Declude.JunkMail] Sending out a bounced message

2003-02-19 Thread R. Scott Perry


Does Declude  JunkMail have an email file similar to the virus file 
recip.eml?  I have a client that wants to be notified when they have an 
email they don't receive.

In that case, you could use the ATTACH action, and modify the 
\IMail\Declude\spamattach.eml file to not include the original spam.

We are having an unusual amount of lost emails and they are (and I am) 
trying to finds out why.  Almost all attachments with .pdf are being lost.

Have you checked your IMail rules?  That's a common reason for .pdfs 
getting lost.

You might also want to check the IMail log file -- it should have "SMTPD" 
lines for the E-mail arriving (before Declude scans it), and "SMTP-" or 
"SMTP" lines afterwards for the actual delivery of the E-mail.
  -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Sending out a bounced message

2003-02-19 Thread Jim Rooth








Does Declude  JunkMail have an email file similar to
the virus file recip.eml?  I have a client that wants to be notified when
they have an email they don’t receive.  We are having an unusual
amount of lost emails and they are (and I am) trying to finds out why. 
Almost all attachments with .pdf are being lost.  I believe it is a bad
mail client issue but need to verify this.  The broken mail client is
caught by Declude Virus but I am unable to capture all of them as I can not sit
in front of the tube constantly.  So some sort of notification will
help.  

 

Also can I direct this to one domain only?  Mt biggest
client wants it but I do not want all our clients to be inconvenienced by it.

 

I see where attbi.com is without an abuse account…sorry
about that!  SPEWS listed my ISP …3 Class C blocks because of an
email from one account.  Makes sense to me.

 

Jim Rooth 
Klotron, Inc. 
214.244.0979 
[EMAIL PROTECTED] 

 








---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.456 / Virus Database: 256 - Release Date: 2/18/2003