Re: [Declude.JunkMail] Whitelist question
Serge, Just one clarification for your 172.x.x.x address space. Those start at 172.16.x.x and end at 172.31.x.x. So your whitelist entry for that would be 172.16.0.0/12 instead of 172.18.0.0/13 But, then again you may care about those first two networks and intentionally excluded them. Darrell -- Check Out DLAnalyzer a comprehensive reporting tool for Declude Junkmail Logs - http://www.dlanalyzer.com serge writes: i was trying to whitelist all private ip adresses when i added whitelist ip 10. it started whitlisting everything that included 10. (210.xxx, xxx.210, ...) how do i whitelist the 3 private ip ranges ? 10. 192.168 172. Should I use WHITELIST IP 10.0.0.0/8 WHITELIST IP 192.168.0.0/16 WHITELIST IP 172.18.0.0/13 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Whitelist question
i was trying to whitelist all private ip adresses when i added whitelist ip 10. it started whitlisting everything that included 10. (210.xxx, xxx.210, ...) That's what should happen. :) "WHITELIST IP 10." means "Whitelist any IP that contains '10.'". According to http://www.declude.com/junkmail/manual.htm , you can use the format "WHITELIST IP 192.168.100.0/24". Or in this case, it would be "10.0.0.0/8" (per the CIDR tool at http://www.DNSstuff.com ). how do i whitelist the 3 private ip ranges ? 10. 192.168 172. Should I use WHITELIST IP 10.0.0.0/8 WHITELIST IP 192.168.0.0/16 WHITELIST IP 172.18.0.0/13 That looks perfect. :) -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Whitelist question
i was trying to whitelist all private ip adresses when i added whitelist ip 10. it started whitlisting everything that included 10. (210.xxx, xxx.210, ...) how do i whitelist the 3 private ip ranges ? 10. 192.168 172. Should I use WHITELIST IP 10.0.0.0/8 WHITELIST IP 192.168.0.0/16 WHITELIST IP 172.18.0.0/13 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist Question
> Do you have over 200 whitelist entries in the global.cfg > file? There is a > limit of 200, after which some of the earlier ones will be > overwritten. aah, yeah. Many more than 200. Possibly 1500. What is the length limit on a filter.txt file? Perhaps I can do the dirty work there instead of in the GLOBAL.CFG file. The only limitations are in the global.cfg file itself. You can have an unlimited number of entries in the filter files (or sender/IP blacklists). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist Question
> Do you have over 200 whitelist entries in the global.cfg > file? There is a > limit of 200, after which some of the earlier ones will be > overwritten. aah, yeah. Many more than 200. Possibly 1500. What is the length limit on a filter.txt file? Perhaps I can do the dirty work there instead of in the GLOBAL.CFG file. unless... you could possibly extend the limit to something like 2000 for strange configurations like mine. That's really odd that we haven't had any reports of problems except for the BBC email if only 200 of our whitelist entries are working. I need to do some customer satisfaction polling. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist Question
Running 1.75. Yeah, I did this first, but added the others when this one didn't work. It doesn't seem to be working on this particular email. Do you have over 200 whitelist entries in the global.cfg file? There is a limit of 200, after which some of the earlier ones will be overwritten. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist Question
> > >WHITELIST FROM @bbc.reply.tm0.com > > >WHITELIST FROM @bbs.co.uk > > >WHITELIST FROM @bbcdailyemail.reply.tm0.com > > >WHITELIST FROM @bounce.lodo.exactis.com > > > > > >yet it still tagged it as spam. > > > > > X-Declude-Sender: [EMAIL PROTECTED] > > [64.210.92.56] > > > > The "WHITELIST FROM @bounce.lodo.exactis.com" one should > > cover this. Shouldn't there be a FROMDOMAIN for partial match ( FROM being for full match of user name)? To make it match up better w/ TO and TODOMAIN? And, I assume he checked for spaces after the name in his whitelist etnries? K Oland --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist Question
> >WHITELIST FROM @bbc.reply.tm0.com > >WHITELIST FROM @bbs.co.uk > >WHITELIST FROM @bbcdailyemail.reply.tm0.com > >WHITELIST FROM @bounce.lodo.exactis.com > > > >yet it still tagged it as spam. > > > X-Declude-Sender: [EMAIL PROTECTED] > [64.210.92.56] > > The "WHITELIST FROM @bounce.lodo.exactis.com" one should > cover this. What > version of Declude are you running Running 1.75. Yeah, I did this first, but added the others when this one didn't work. It doesn't seem to be working on this particular email. The logs show the message failing the tests mentioned, but that's all. These whitelist entries are toward the top of my long list of whitelist entries, and I know a lot of later entries are working. If you want to get the BBC email yourself, subscriber at http://www.bbc.co.uk/dailyemail/ (they don't seem to hand out the email address to anyone that sends spam) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Whitelist Question
Exactly what field(s) does WHITELIST FROM work on?
"Note that "WHITELIST FROM" will whitelist a return address (like IMail
does in the Kill List), which may be different from the From: or Reply-To:
addresses. You need to look at the X-Declude-Sender: header (if you use the
XSENDER ON option) or the "MAIL FROM:" line in the IMail SMTP log file to
find the return address."
The header (at the bottom) is an example of an email that I want to
whitelist.
These are the whitelist commands I've got in my GLOBAL.CFG:
WHITELIST FROM @bbc.reply.tm0.com
WHITELIST FROM @bbs.co.uk
WHITELIST FROM @bbcdailyemail.reply.tm0.com
WHITELIST FROM @bounce.lodo.exactis.com
yet it still tagged it as spam.
> X-Declude-Sender: [EMAIL PROTECTED]
[64.210.92.56]
The "WHITELIST FROM @bounce.lodo.exactis.com" one should cover this. What
version of Declude are you running ("\IMail\Declude -diag" from a command
prompt will show you)? I believe there was an older version that would not
properly process long E-mail addresses like this one.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
[Declude.JunkMail] Whitelist Question
Exactly what field(s) does WHITELIST FROM work on? The header (at the bottom) is an example of an email that I want to whitelist. These are the whitelist commands I've got in my GLOBAL.CFG: WHITELIST FROM @bbc.reply.tm0.com WHITELIST FROM @bbs.co.uk WHITELIST FROM @bbcdailyemail.reply.tm0.com WHITELIST FROM @bounce.lodo.exactis.com yet it still tagged it as spam. Thanks, Keith Received: from SMTP32-FWD by purescience.com (SMTP32) id A0CD0; Thu, 25 Sep 2003 05:04:23 -0600 Received: from sender56.mail1.experian-ems.com [64.210.92.56] by purescience.com with ESMTP (SMTPD32-7.07) id ABB46DE018E; Thu, 25 Sep 2003 05:04:20 -0600 Received: by sender56.mail1.experian-ems.com (queueup version 6.2: Copyright 2000 Experian, Inc. All rights reserved.) with stdio id PURESCIAAASH18750; Thu, 25 Sep 2003 05:04:02 MDT Date: Thu, 25 Sep 2003 05:04:02 MDT From: "BBC daily email" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Errors-To: [EMAIL PROTECTED] Message-Id: <[EMAIL PROTECTED]> Subject: [SPAM-WEIGHT12]Your daily e-mail from the BBC MIME-Version: 1.0 Content-Type: text/html; charset=ISO-8859-1 Content-transfer-encoding: quoted-printable X-RBL-Warning: FIVETEN-BULK: 56.92.210.64.blackholes.five-ten-sg.com. X-Declude-Sender: [EMAIL PROTECTED] [64.210.92.56] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: FIVETEN-BULK, KILLEDBYNAME, WEIGHT12 [17] Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 25 Sep 2003 11:04:23.0190 (UTC) FILETIME=[C6C69360:01C38354] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Whitelist question
Keith, Monday, September 15, 2003 you wrote: KA> I don't see "WHITELIST REVDNS ... " in the instructions anywhere. What is KA> this doing exactly, and what are the other WHITELIST options? see http://www.declude.com/relnotes.htm 1.66 [Beta, 17 Jan 2003] Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Whitelist question
I don't see "WHITELIST REVDNS ... " in the instructions anywhere. What is this doing exactly, and what are the other WHITELIST options? Thanks --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Whitelist Question
I agree on that one. The people that don't want the filtering don't want spam, they want the message from their 5th cousin that lives in BFE, Oklahoma. So, I, more than likely, won't be on a CC list from their cousin, but could be on a CC list for a piece of spam. So, they get their email message from their cousin, and I don't get spam that has me listed in the CC. They don't get the spam either, but that's okay. Koree R. Scott Perry wrote: Maybe if we all bombard Ipswitch with this request, it will get notice? Do you really want it though? I haven't heard of a single case where this was really an issue. The cost of making this change could be huge. For example, IMail right now will have a difficult time sending a mailing list to 2,000 users (100 E-mails each with 20 recipients). If that were 1,000 E-mails each with 1 recipient, it would take a much longer time to deliver. The real question is how often does a company send out an E-mail to multiple recipients (meaning they all get the *exact* same E-mail, so no personal/confidential information is included), where one or more recipients think it is spam, but it is important to the another recipient? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist Question
Maybe if we all bombard Ipswitch with this request, it will get notice? Do you really want it though? I haven't heard of a single case where this was really an issue. The cost of making this change could be huge. For example, IMail right now will have a difficult time sending a mailing list to 2,000 users (100 E-mails each with 20 recipients). If that were 1,000 E-mails each with 1 recipient, it would take a much longer time to deliver. The real question is how often does a company send out an E-mail to multiple recipients (meaning they all get the *exact* same E-mail, so no personal/confidential information is included), where one or more recipients think it is spam, but it is important to the another recipient? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Whitelist Question
So, if I'm understanding this right, the following is what happens when there is no whitelist, and there is a peruser config: email comes from [EMAIL PROTECTED] It's addressed to [EMAIL PROTECTED] It's also CC'd to user1, user2, and [EMAIL PROTECTED] innocentvictim has some spam filtering, user1, 2 and 3, do not have any. The message fails TEST for [EMAIL PROTECTED] innocentvictim, user1, user2, and user3 do not get the message. Am I correct on this? Correct (assuming that you use the HOLD, DELETE, or similar action for [EMAIL PROTECTED]). In this case, the "worst" action will be taken (as is the case when an E-mail arrives to a single recipient, but multiple conflicting tests fail). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist Question
Maybe if we all bombard Ipswitch with this request, it will get notice? John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED]] On Behalf Of Keith Johnson > Sent: Monday, February 10, 2003 11:29 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Whitelist Question > > John, > I put that request in as a 'feature request' about a month ago > due to the issues I was having with the Nobody Alias. Unfortunately, > since Imail phone support does not have direct access to the programmers > they don't know what is being looked at seriously and what is not. They > told me to keep looking at the 'patch/upgrade' page for updates to see > if it ever lands there. > > Keith > > > -Original Message- > > From: John Tolmachoff [mailto:[EMAIL PROTECTED]] > > Sent: Monday, February 10, 2003 1:59 PM > > To: [EMAIL PROTECTED] > > Subject: RE: [Declude.JunkMail] Whitelist Question > > > > > > > A per-user config would likely be the best option in this > > case. The > > > problem is that E-mail with Cc:'s or Bcc:'s must be handled > > the same > > > for each recipient -- so whatever happens for one recipient will > > > happen for > > the > > > others. With whitelisting (which takes priority over everything > > > else), it would cause the spam to get through to the other > > recipients. > > > However, by setting up a per-user configuration that > > doesn't take any > > > action on > > E-mail, > > > the E-mail with multiple recipients will still get filtered. The > > > E-mail with multiple recipients is essentially "shared" (the sender > > > *knows* > > that), > > > so you need to decide how the recipients share it (whether to > > > whitelist > > it, > > > or block it). > > > > What is the chance of requesting Ipswitch to change the > > behavior of how it receives messages with more than one local > > user create a separate D and Q file for every user? > > > > I think that would help solve a number of issues. > > > > John Tolmachoff MCSE, CSSA > > IT Manager, Network Engineer > > RelianceSoft, Inc. > > Fullerton, CA 92835 > > www.reliancesoft.com > > > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Whitelist Question
So, if I'm understanding this right, the following is what happens when there is no whitelist, and there is a peruser config: email comes from [EMAIL PROTECTED] It's addressed to [EMAIL PROTECTED] It's also CC'd to user1, user2, and [EMAIL PROTECTED] innocentvictim has some spam filtering, user1, 2 and 3, do not have any. The message fails TEST for [EMAIL PROTECTED] innocentvictim, user1, user2, and user3 do not get the message. Am I correct on this? Koree R. Scott Perry wrote: Scott... how hard would it be for Declude to split the message when faced with a conflict like this. Quite. Imagine the following scenarios: [1] An E-mail addressed to "[EMAIL PROTECTED]", that gets delivered to "[EMAIL PROTECTED]" [2] An E-mail addressed to "[EMAIL PROTECTED]" that gets delivered to "[EMAIL PROTECTED]" [3] An E-mail addressed to "[EMAIL PROTECTED]" that gets delivered to "[EMAIL PROTECTED]" and "[EMAIL PROTECTED]" That's just the first recipient -- the second one could be any of those combinations as well. So in case "1-1" (2 recipients, both addressed to the properly user account), it's relatively easy to deal (make a copy of the D*.SMD file and Q*.SMD file, then split up the recipients in the Q*.SMD files). In a case such as "1-2" (one recipient addressed to a user, another to an alias), it gets a bit trickier. In case 1-3 (one recipient addressed to a user, another addressed to an alias that expands to 2 users), there isn't any way to split the E-mail properly -- IMail will end up delivering two E-mails that are both addressed to an alias, but the actual recipients will differ. That could potentially cause problems with IMail. There are also some other issues, such as creating a unique filename for the new E-mail (one that IMail can use). Also, there is the extra resources used -- every extra copy created would require an extra SMTP32.exe process to run (which means that Declude JunkMail would have to determine in which case(s) the E-mail should be split, and if split, where it should be split (rather than making one copy for each recipient). That's going to be difficult, and even harder to debug. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist Question
John, I put that request in as a 'feature request' about a month ago due to the issues I was having with the Nobody Alias. Unfortunately, since Imail phone support does not have direct access to the programmers they don't know what is being looked at seriously and what is not. They told me to keep looking at the 'patch/upgrade' page for updates to see if it ever lands there. Keith > -Original Message- > From: John Tolmachoff [mailto:[EMAIL PROTECTED]] > Sent: Monday, February 10, 2003 1:59 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Whitelist Question > > > > A per-user config would likely be the best option in this > case. The > > problem is that E-mail with Cc:'s or Bcc:'s must be handled > the same > > for each recipient -- so whatever happens for one recipient will > > happen for > the > > others. With whitelisting (which takes priority over everything > > else), it would cause the spam to get through to the other > recipients. > > However, by setting up a per-user configuration that > doesn't take any > > action on > E-mail, > > the E-mail with multiple recipients will still get filtered. The > > E-mail with multiple recipients is essentially "shared" (the sender > > *knows* > that), > > so you need to decide how the recipients share it (whether to > > whitelist > it, > > or block it). > > What is the chance of requesting Ipswitch to change the > behavior of how it receives messages with more than one local > user create a separate D and Q file for every user? > > I think that would help solve a number of issues. > > John Tolmachoff MCSE, CSSA > IT Manager, Network Engineer > RelianceSoft, Inc. > Fullerton, CA 92835 > www.reliancesoft.com > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist Question
Scott... how hard would it be for Declude to split the message when faced with a conflict like this. Quite. Imagine the following scenarios: [1] An E-mail addressed to "[EMAIL PROTECTED]", that gets delivered to "[EMAIL PROTECTED]" [2] An E-mail addressed to "[EMAIL PROTECTED]" that gets delivered to "[EMAIL PROTECTED]" [3] An E-mail addressed to "[EMAIL PROTECTED]" that gets delivered to "[EMAIL PROTECTED]" and "[EMAIL PROTECTED]" That's just the first recipient -- the second one could be any of those combinations as well. So in case "1-1" (2 recipients, both addressed to the properly user account), it's relatively easy to deal (make a copy of the D*.SMD file and Q*.SMD file, then split up the recipients in the Q*.SMD files). In a case such as "1-2" (one recipient addressed to a user, another to an alias), it gets a bit trickier. In case 1-3 (one recipient addressed to a user, another addressed to an alias that expands to 2 users), there isn't any way to split the E-mail properly -- IMail will end up delivering two E-mails that are both addressed to an alias, but the actual recipients will differ. That could potentially cause problems with IMail. There are also some other issues, such as creating a unique filename for the new E-mail (one that IMail can use). Also, there is the extra resources used -- every extra copy created would require an extra SMTP32.exe process to run (which means that Declude JunkMail would have to determine in which case(s) the E-mail should be split, and if split, where it should be split (rather than making one copy for each recipient). That's going to be difficult, and even harder to debug. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist Question
> A per-user config would likely be the best option in this case. The > problem is that E-mail with Cc:'s or Bcc:'s must be handled the same for > each recipient -- so whatever happens for one recipient will happen for the > others. With whitelisting (which takes priority over everything else), it > would cause the spam to get through to the other recipients. However, by > setting up a per-user configuration that doesn't take any action on E-mail, > the E-mail with multiple recipients will still get filtered. The E-mail > with multiple recipients is essentially "shared" (the sender *knows* that), > so you need to decide how the recipients share it (whether to whitelist it, > or block it). What is the chance of requesting Ipswitch to change the behavior of how it receives messages with more than one local user create a separate D and Q file for every user? I think that would help solve a number of issues. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist Question
I've been thinking about this for a while. Scott... how hard would it be for Declude to split the message when faced with a conflict like this. Specifically, if a message fails at the global level, but a domain has it whitelisted then a copy of the message is created that removes the other recipientst - so that the message can be delivered to the one domain where it is desired. Similarly, if blocked at the domain level and if a single user has the message white listed then a copy of the message would be created with the single user as the addressee so that they can receive the message. I would think that the conflict would be easy to detect, that a new copy of the message could be created in queue with the appropriate address(es), and that the original to, cc, & bcc headers could be aliased with a specail x- header. This is an analog of a feature on our development list for the sortmonster mail engine, but I'll be you could implement it in IMail/Declude without much trouble. Am I wrong? _M | -Original Message- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]] On Behalf Of R. | Scott Perry | Sent: Monday, February 10, 2003 1:43 PM | To: [EMAIL PROTECTED] | Subject: Re: [Declude.JunkMail] Whitelist Question | | | | >I have some customers that wish to not have their email scanned for | >spam. I started off whitelisting them, but this presents | two problems: | > | >1. Some spam gets through to others because of their | whitelist. Ex. | >Someone sends spam to [EMAIL PROTECTED], but in the CC, there's | >[EMAIL PROTECTED] [EMAIL PROTECTED] is whitelisted, so the mail gets | >delivered to me with a weight of 0 (whitelisted). | > | >2. You can only have 200 whitelist entries. | > | >Now, creating a per-user config for the user, and setting | all actions to | >warn, would that not effectively disable spam filtering? | | A per-user config would likely be the best option in this case. The | problem is that E-mail with Cc:'s or Bcc:'s must be handled | the same for | each recipient -- so whatever happens for one recipient will | happen for the | others. With whitelisting (which takes priority over | everything else), it | would cause the spam to get through to the other recipients. | However, by | setting up a per-user configuration that doesn't take any | action on E-mail, | the E-mail with multiple recipients will still get filtered. | The E-mail | with multiple recipients is essentially "shared" (the sender | *knows* that), | so you need to decide how the recipients share it (whether to | whitelist it, | or block it). | -Scott | | --- | [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Whitelist Question
I have some customers that wish to not have their email scanned for spam. I started off whitelisting them, but this presents two problems: 1. Some spam gets through to others because of their whitelist. Ex. Someone sends spam to [EMAIL PROTECTED], but in the CC, there's [EMAIL PROTECTED] [EMAIL PROTECTED] is whitelisted, so the mail gets delivered to me with a weight of 0 (whitelisted). 2. You can only have 200 whitelist entries. Now, creating a per-user config for the user, and setting all actions to warn, would that not effectively disable spam filtering? A per-user config would likely be the best option in this case. The problem is that E-mail with Cc:'s or Bcc:'s must be handled the same for each recipient -- so whatever happens for one recipient will happen for the others. With whitelisting (which takes priority over everything else), it would cause the spam to get through to the other recipients. However, by setting up a per-user configuration that doesn't take any action on E-mail, the E-mail with multiple recipients will still get filtered. The E-mail with multiple recipients is essentially "shared" (the sender *knows* that), so you need to decide how the recipients share it (whether to whitelist it, or block it). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Whitelist Question
I have some customers that wish to not have their email scanned for spam. I started off whitelisting them, but this presents two problems: 1. Some spam gets through to others because of their whitelist. Ex. Someone sends spam to [EMAIL PROTECTED], but in the CC, there's [EMAIL PROTECTED] [EMAIL PROTECTED] is whitelisted, so the mail gets delivered to me with a weight of 0 (whitelisted). 2. You can only have 200 whitelist entries. Now, creating a per-user config for the user, and setting all actions to warn, would that not effectively disable spam filtering? Thanks, Koree --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Whitelist Question
is it possible to whitelist an incoming domain .. IE . WHITELIST FROMDOMAIN @abctools.com To whitelist a domain, you can use "WHITELIST FROM", such as: WHITELIST FROM@abctools.com -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Whitelist Question
First .. sorry for the abbreviated email earlier ... my pc had a 'senior moment' My question is really easy and I'm sure I'm right but being the insecure person I am .. I am looking for reassurance ... :->) is it possible to whitelist an incoming domain .. IE . WHITELIST FROMDOMAIN @abctools.com TIA Doris
Re: [Declude.JunkMail] WHITELIST Question
Thank you ever so much ! -- Original Message -- From: "R. Scott Perry" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Thu, 24 Oct 2002 15:23:34 -0400 > >>How would one setup this type of scenario with the PRO version ? > >You could accomplish this by having a >\IMail\Declude\example.com\$default$.JunkMail file with all tests set to >use the IGNORE action, and then a \IMail\Declude\example.com\jdoe.JunkMail >file for the user who wants their mail scanned. >-Scott > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". The archives can be found >at http://www.mail-archive.com. >--- >[This E-mail scanned for viruses by Declude Virus] > > -- Avolve Support 740 467 3338 -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] WHITELIST Question
WHITELIST TODOMAIN @example.com in the global.cfg file will let all spam go through to any email address at domain example.com. So if you create a subdirectory off of declude named example.com and in the subdirectory example.com have a file named jdoe.JunkMail with configurations for jdoe in controlling email, then all spam will still go to every email address at domain example.com but will be checked for [EMAIL PROTECTED] I don't know how to take a breather in that question, but is that correct thinking ? -- Avolve Support 740 467 3338 -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] WHITELIST Question
WHITELIST TODOMAIN @example.com in the global.cfg file will let all spam go through to any email address at domain example.com. So if you create a subdirectory off of declude named example.com and in the subdirectory example.com have a file named jdoe.JunkMail with configurations for jdoe in controlling email, then all spam will still go to every email address at domain example.com but will be checked for [EMAIL PROTECTED] No. Whitelisting takes priority over everything else, so if a domain is whitelisted, the whole domain will be whitelisted (even if you have per-user settings). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] WHITELIST Question
How would one setup this type of scenario with the PRO version ? -- Original Message -- From: "R. Scott Perry" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Thu, 24 Oct 2002 14:53:45 -0400 > >>WHITELIST TODOMAIN @example.com in the global.cfg file will let all spam >>go through to any email address at domain example.com. >> >>So if you create a subdirectory off of declude named example.com and in >>the subdirectory example.com have a file named jdoe.JunkMail with >>configurations for jdoe in controlling email, then all spam will still go >>to every email address at domain example.com but will be checked for >>[EMAIL PROTECTED] > >No. Whitelisting takes priority over everything else, so if a domain is >whitelisted, the whole domain will be whitelisted (even if you have >per-user settings). > -Scott > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". The archives can be found >at http://www.mail-archive.com. >--- >[This E-mail scanned for viruses by Declude Virus] > > -- Avolve Support 740 467 3338 -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] WHITELIST Question
How would one setup this type of scenario with the PRO version ? You could accomplish this by having a \IMail\Declude\example.com\$default$.JunkMail file with all tests set to use the IGNORE action, and then a \IMail\Declude\example.com\jdoe.JunkMail file for the user who wants their mail scanned. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
