RE: [Declude.JunkMail] adding weight based on x-country-chain

2006-02-15 Thread Susan Duncan 









I’m pretty sure I don’t have
the pro version.  Does that mean that I cannot use country filters?

 



Susan Duncan 
Web/Communications Officer / Agent des Communications/web
Union of Taxation Employees / Syndicat des employées de l'Impôt
Tel: 613-235-6704 ext 240
Fax: 613-234-7290
e-mail: [EMAIL PROTECTED]
http://www.ute-sei.org/



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher
Sent: February 15, 2006 11:25 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail]
adding weight based on x-country-chain

 



all_list.dat should be in your
declude folder. Mine is dated 10/29/2005.





 





If you have JunkMail pro, you can
write the filters.





 





REMOTEIP 5 CONTAINS . is a trick
that I learned from Matt that essentially is always true. The sender's ip
address (REMOTEIP) should always have a period in it.





 







- Original Message - 





From: Susan Duncan 





To: Declude.JunkMail@declude.com






Sent: Wednesday,
February 15, 2006 9:50 AM





Subject: RE:
[Declude.JunkMail] adding weight based on x-country-chain





 



I was looking for this in
the documentation and didn’t find it in the Junkmail documentation

http://www.declude.com/Version/Manuals/JunkMail/JM_2.0.6.asp

 

I don’t see
anything about country nor remoteip the way you are using it (it’s a
variable as far as I can see).  I didn’t see anything on the
all_list.dat file either and I did text searches on the manual file.

 

I’m wondering if I
am just not looking in the right place.

 



Susan Duncan 
Web/Communications Officer / Agent des Communications/web
Union of Taxation Employees / Syndicat des employées de l'Impôt
Tel: 613-235-6704 ext 240
Fax: 613-234-7290
e-mail: [EMAIL PROTECTED]
http://www.ute-sei.org/



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher
Sent: February 15, 2006 10:15 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail]
adding weight based on x-country-chain

 



The
COUNTRY filter is used for searching the last country in the country
chain. The COUNTRY filter requires the all_list.dat file. See the end of the
document for a link to this file.

COUNTRY was introduced in the 1.62.

 

The
COUNTRIES filter is used for searching all countries in the country
chain. The COUNTRIES filter requires the all_list.dat file. See the end of the
document for a link COUNTRIES was introduced in the 1.62 version.

 

You could use a filter of:

COUNTRY END IS US

COUNTRY END IS CA

REMOTEIP 5 CONTAINS .

 

 

 

 

 







- Original Message - 





From: Susan Duncan 





To: Declude.JunkMail@declude.com






Sent: Wednesday,
February 15, 2006 8:48 AM





Subject:
[Declude.JunkMail] adding weight based on x-country-chain





 



Is there a way to add a weight based
on the country?  I do not want to block on country, but the chances of
mail coming from somewhere other than Canada or the US is fairly remote, so a
weight on country + anything would mean it’s got a high chance of being
spam.

 

I couldn’t find anything in
the docs on it.

 

Susan Duncan 
Web/Communications Officer / Agent des Communications/web
Union of Taxation Employees / Syndicat des employées de l'Impôt
Tel: 613-235-6704 ext 240
Fax: 613-234-7290
e-mail: [EMAIL PROTECTED]
http://www.ute-sei.org/

 

Re: [Declude.JunkMail] adding weight based on x-country-chain

2006-02-15 Thread Scott Fisher 



all_list.dat should be in your declude folder. Mine 
is dated 10/29/2005.
 
If you have JunkMail pro, you can write the 
filters.
 
REMOTEIP 5 CONTAINS . is 
a trick that I learned from Matt that essentially is always true. The sender's 
ip address (REMOTEIP) should always have a period in it.
 

  - Original Message - 
  From: 
  Susan 
  Duncan 
  To: Declude.JunkMail@declude.com 
  
  Sent: Wednesday, February 15, 2006 9:50 
  AM
  Subject: RE: [Declude.JunkMail] adding 
  weight based on x-country-chain
  
  
  I was looking for 
  this in the documentation and didn’t find it in the Junkmail 
  documentation
  http://www.declude.com/Version/Manuals/JunkMail/JM_2.0.6.asp
   
  I don’t see anything 
  about country nor remoteip the way you are using it (it’s a variable as far as 
  I can see).  I didn’t see anything on the all_list.dat file either and I 
  did text searches on the manual file.
   
  I’m wondering if I am 
  just not looking in the right place.
   
  
  Susan Duncan Web/Communications 
  Officer / Agent des Communications/webUnion of Taxation Employees / 
  Syndicat des employées de l'ImpôtTel: 613-235-6704 ext 240Fax: 
  613-234-7290e-mail: [EMAIL PROTECTED]http://www.ute-sei.org/
  -Original 
  Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of Scott 
  FisherSent: February 15, 
  2006 10:15 AMTo: 
  Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] adding 
  weight based on x-country-chain
   
  
  The COUNTRY filter is used for searching the 
  last country in the country chain. The COUNTRY filter requires the 
  all_list.dat file. See the end of the document for a link to this 
  file.
  COUNTRY was introduced in the 
  1.62.
   
  The COUNTRIES filter is used for searching 
  all countries in the country chain. The COUNTRIES filter requires the 
  all_list.dat file. See the end of the document for a link COUNTRIES was 
  introduced in the 1.62 version.
   
  You could use a filter 
  of:
  COUNTRY END IS 
US
  COUNTRY END IS 
CA
  REMOTEIP 5 CONTAINS 
  .
   
   
   
   
   
  

- Original Message - 


From: Susan Duncan 


To: Declude.JunkMail@declude.com 


Sent: 
Wednesday, February 15, 2006 8:48 AM

Subject: 
[Declude.JunkMail] adding weight based on 
    x-country-chain

 
Is there a way to add a weight 
based on the country?  I do not want to block on country, but the 
chances of mail coming from somewhere other than Canada or the US is fairly 
remote, so a weight on country + anything would mean it’s got a high chance 
of being spam.
 
I couldn’t find anything in the 
docs on it.
 
Susan Duncan Web/Communications 
Officer / Agent des Communications/webUnion of Taxation Employees / 
Syndicat des employées de l'ImpôtTel: 613-235-6704 ext 240Fax: 
613-234-7290e-mail: [EMAIL PROTECTED]http://www.ute-sei.org/
 

Re: [Declude.JunkMail] adding weight based on x-country-chain

2006-02-15 Thread Scott Fisher 



I do score this way. One of the reasons is I can 
track whwere the spam is coming from with the log results.
I'll score 30 points on a hold of 200. Not too 
high.
 
I'll then run those that didn't fail the 
Filter-country through Matt's MP_Foreign Test ending those that triggered the 
initial country filter.
Matt's MP Foreign filter looks at the 
headers/mailfrom/helo/revdns for country codes.
 
There is definite false positives but 30 points is 
15% of the hold weight, pretty reasonable. With the internationalization of 
companies, you never know where a company's email server lives.
 
- Original Message - 

  From: 
  John 
  Carter 
  To: Declude.JunkMail@declude.com 
  
  Sent: Wednesday, February 15, 2006 9:46 
  AM
  Subject: RE: [Declude.JunkMail] adding 
  weight based on x-country-chain
  
  Of course, all of this is "your mileage will vary", but 
  
  Scott's filter might be simpler (therefore better), but I 
  have a country filter (which I got from Scott) which allows me to set the 
  score by the country. 
   
  The 
  Global.cfg is
  FILTER-COUNTRY filter  d:\Decludefilters\filter-country.txt x 0 0
  (zero scoring because it comes from the filter)
   
  $default$.junkmail is
  FILTER-COUNTRY  WARN
   
  The 
  filter-country.txt file is (snip)
  COUNTRIES    3    
  CONTAINS    ADCOUNTRIES    
  3    CONTAINS    
  AECOUNTRIES    3    
  CONTAINS    AFCOUNTRIES    
  3    CONTAINS    
  AGCOUNTRIES    3    
  CONTAINS    AICOUNTRIES    
  3    CONTAINS    
  ALCOUNTRIES    3    
  CONTAINS    AMCOUNTRIES    
  3    CONTAINS    
  ANCOUNTRIES    3    
  CONTAINS    AOCOUNTRIES    
  3    CONTAINS    AQ
  etc.
   
  For 
  me, I removed the US and set CA & UK to one (of course based on the nature 
  of our clientele.) Others are at 3, but I can adjust each if I have 
  particular problems.
   
  John 
  C
  
  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Susan 
  DuncanSent: Wednesday, February 15, 2006 8:48 AMTo: 
  Declude.JunkMail@declude.comSubject: [Declude.JunkMail] adding 
  weight based on x-country-chain
  
  
  Is there a way to add a weight 
  based on the country?  I do not want to block on country, but the chances 
  of mail coming from somewhere other than Canada or the US is fairly remote, so 
  a weight on country + anything would mean it’s got a high chance of being 
  spam.
   
  I couldn’t find anything in the 
  docs on it.
   
  Susan Duncan Web/Communications Officer / Agent 
  des Communications/webUnion of Taxation Employees / Syndicat des employées 
  de l'ImpôtTel: 613-235-6704 ext 240Fax: 613-234-7290e-mail: 
  [EMAIL PROTECTED]http://www.ute-sei.org/
   

AW: [Declude.JunkMail] adding weight based on x-country-chain

2006-02-15 Thread Guhl, Markus \(LDS\) 



hi,
 
it was a "experimental" test (from the time scott was in 
charge). but it still works (up to 3.0.5.24bb). there is no 
documentation of this in the manuals but you can search in the archive (http://www.mail-archive.com/declude.junkmail@declude.com/).
 
best regards from germany

mfgi.a.gez. markus 
guhl***lds nrwref. 
241tel.: 0211 9449 6947fax.: 0211 9449 8344mailto:[EMAIL PROTECTED]*** 

  
  
  Von: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] Im Auftrag von Susan 
  DuncanGesendet: Mittwoch, 15. Februar 2006 16:50An: 
  Declude.JunkMail@declude.comBetreff: RE: [Declude.JunkMail] adding 
  weight based on x-country-chain
  
  
  I was looking for 
  this in the documentation and didn’t find it in the Junkmail 
  documentation
  http://www.declude.com/Version/Manuals/JunkMail/JM_2.0.6.asp
   
  I don’t see anything 
  about country nor remoteip the way you are using it (it’s a variable as far as 
  I can see).  I didn’t see anything on the all_list.dat file either and I 
  did text searches on the manual file.
   
  I’m wondering if I am 
  just not looking in the right place.
   
  
  Susan Duncan Web/Communications 
  Officer / Agent des Communications/webUnion of Taxation Employees / 
  Syndicat des employées de l'ImpôtTel: 613-235-6704 ext 240Fax: 
  613-234-7290e-mail: [EMAIL PROTECTED]http://www.ute-sei.org/
  -Original 
  Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of Scott 
  FisherSent: February 15, 
  2006 10:15 AMTo: 
  Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] adding 
  weight based on x-country-chain
   
  
  The COUNTRY filter is used for searching the 
  last country in the country chain. The COUNTRY filter requires the 
  all_list.dat file. See the end of the document for a link to this 
  file.
  COUNTRY was introduced in the 
  1.62.
   
  The COUNTRIES filter is used for searching 
  all countries in the country chain. The COUNTRIES filter requires the 
  all_list.dat file. See the end of the document for a link COUNTRIES was 
  introduced in the 1.62 version.
   
  You could use a filter 
  of:
  COUNTRY END IS 
US
  COUNTRY END IS 
CA
  REMOTEIP 5 CONTAINS 
  .
   
   
   
   
   
  

- Original Message - 


From: Susan Duncan 


To: Declude.JunkMail@declude.com 


Sent: 
Wednesday, February 15, 2006 8:48 AM

Subject: 
[Declude.JunkMail] adding weight based on 
x-country-chain

 
Is there a way to add a weight 
based on the country?  I do not want to block on country, but the 
chances of mail coming from somewhere other than Canada or the US is fairly 
remote, so a weight on country + anything would mean it’s got a high chance 
of being spam.
 
I couldn’t find anything in the 
docs on it.
 
Susan Duncan Web/Communications 
Officer / Agent des Communications/webUnion of Taxation Employees / 
Syndicat des employées de l'ImpôtTel: 613-235-6704 ext 240Fax: 
613-234-7290e-mail: [EMAIL PROTECTED]http://www.ute-sei.org/
 

RE: [Declude.JunkMail] adding weight based on x-country-chain

2006-02-15 Thread Susan Duncan 









I was looking for this in the
documentation and didn’t find it in the Junkmail documentation

http://www.declude.com/Version/Manuals/JunkMail/JM_2.0.6.asp

 

I don’t see anything about country
nor remoteip the way you are using it (it’s a variable as far as I can
see).  I didn’t see anything on the all_list.dat file either and I did
text searches on the manual file.

 

I’m wondering if I am just not
looking in the right place.

 



Susan Duncan 
Web/Communications Officer / Agent des Communications/web
Union of Taxation Employees / Syndicat des employées de l'Impôt
Tel: 613-235-6704 ext 240
Fax: 613-234-7290
e-mail: [EMAIL PROTECTED]
http://www.ute-sei.org/



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher
Sent: February 15, 2006 10:15 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail]
adding weight based on x-country-chain

 



The
COUNTRY filter is used for searching the last country in the country
chain. The COUNTRY filter requires the all_list.dat file. See the end of the
document for a link to this file.

COUNTRY was introduced in the 1.62.

 

The
COUNTRIES filter is used for searching all countries in the country
chain. The COUNTRIES filter requires the all_list.dat file. See the end of the
document for a link COUNTRIES was introduced in the 1.62 version.

 

You could use a filter of:

COUNTRY END IS US

COUNTRY END IS CA

REMOTEIP 5 CONTAINS .

 

 

 

 

 







- Original Message - 





From: Susan Duncan 





To: Declude.JunkMail@declude.com






Sent: Wednesday,
February 15, 2006 8:48 AM





Subject:
[Declude.JunkMail] adding weight based on x-country-chain





 



Is there a way to add a weight based
on the country?  I do not want to block on country, but the chances of
mail coming from somewhere other than Canada or the US is fairly remote, so a weight
on country + anything would mean it’s got a high chance of being spam.

 

I couldn’t find anything in
the docs on it.

 

Susan Duncan 
Web/Communications Officer / Agent des Communications/web
Union of Taxation Employees / Syndicat des employées de l'Impôt
Tel: 613-235-6704 ext 240
Fax: 613-234-7290
e-mail: [EMAIL PROTECTED]
http://www.ute-sei.org/

 

RE: [Declude.JunkMail] adding weight based on x-country-chain

2006-02-15 Thread John Carter 



Of course, all of this is "your mileage will vary", but 

Scott's filter might be simpler (therefore better), but I 
have a country filter (which I got from Scott) which allows me to set the score 
by the country. 
 
The 
Global.cfg is
FILTER-COUNTRY filter  d:\Decludefilters\filter-country.txt x 0 0
(zero 
scoring because it comes from the filter)
 
$default$.junkmail is
FILTER-COUNTRY  WARN
 
The 
filter-country.txt file is (snip)
COUNTRIES    3    
CONTAINS    ADCOUNTRIES    3    
CONTAINS    AECOUNTRIES    3    
CONTAINS    AFCOUNTRIES    3    
CONTAINS    AGCOUNTRIES    3    
CONTAINS    AICOUNTRIES    3    
CONTAINS    ALCOUNTRIES    3    
CONTAINS    AMCOUNTRIES    3    
CONTAINS    ANCOUNTRIES    3    
CONTAINS    AOCOUNTRIES    3    
CONTAINS    AQ
etc.
 
For 
me, I removed the US and set CA & UK to one (of course based on the nature 
of our clientele.) Others are at 3, but I can adjust each if I have 
particular problems.
 
John 
C



From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Susan 
DuncanSent: Wednesday, February 15, 2006 8:48 AMTo: 
Declude.JunkMail@declude.comSubject: [Declude.JunkMail] adding weight 
based on x-country-chain


Is there a way to add a weight based 
on the country?  I do not want to block on country, but the chances of mail 
coming from somewhere other than Canada or the US is fairly remote, so a weight 
on country + anything would mean it’s got a high chance of being 
spam.
 
I couldn’t find anything in the docs 
on it.
 
Susan Duncan Web/Communications Officer / Agent des 
Communications/webUnion of Taxation Employees / Syndicat des employées de 
l'ImpôtTel: 613-235-6704 ext 240Fax: 613-234-7290e-mail: 
[EMAIL PROTECTED]http://www.ute-sei.org/
 

RE: [Declude.JunkMail] adding weight based on x-country-chain

2006-02-15 Thread Markus Gufler 



 
Personaly I wouldn't block or assign weights for 
certain countries. (keep in mind that COUNTRY and COUNTRIES are not the 
same)
But I've seen excellent results by assigning a relative 
low wheigt for all IP-blacklists and add additional wheight only if the message 
is not origininating from "trustworthily" countries.
 

COUNTRY END 
STARTSWITH itCOUNTRY END 
STARTSWITH ...
 
TESTSFAILED 20 CONTAINS CBLTESTSFAILED 10 CONTAINS 
DSBLTESTSFAILED 25 CONTAINS ORDBTESTSFAILED 30 CONTAINS 
SPAMCOPTESTSFAILED 30 CONTAINS ...

 
Markus
 
 
 
 
 
 
 

  
  - Original Message - 
  
  
From: 
Susan 
Duncan 
To: Declude.JunkMail@declude.com 

Sent: Wednesday, February 15, 2006 8:48 
    AM
Subject: [Declude.JunkMail] adding 
    weight based on x-country-chain


Is there a way to add a weight 
based on the country?  I do not want to block on country, but the 
chances of mail coming from somewhere other than Canada or the US is fairly 
remote, so a weight on country + anything would mean it’s got a high chance 
of being spam.
 
I couldn’t find anything in the 
docs on it.
 
Susan Duncan Web/Communications Officer / Agent 
des Communications/webUnion of Taxation Employees / Syndicat des 
employées de l'ImpôtTel: 613-235-6704 ext 240Fax: 
613-234-7290e-mail: [EMAIL PROTECTED]http://www.ute-sei.org/
 

Re: [Declude.JunkMail] adding weight based on x-country-chain

2006-02-15 Thread Scott Fisher 



Darn enter key. didn' get to finish my 
email.
 
Here are the special coutnry codes:
##  Special Codes## *1 
Multi-Regional# *2 Europe# *3 North America# *4 Central/South 
America# *5 Pacific Rim# *A ARIN Unlisted (North America/South 
Africa)# *B Public Data Network# *E RIPE Unlisted (Europe, North Africa, 
Middle East)# *I Private IP# *L Loopback# *M Multicast# *P APNIC 
Unlisted (Asia Pacific)# *R IANA Reserved# *U Unknown
So this filter might work better:
COUNTRY END IS USCOUNTRY END IS CA
COUNTRY END IS *3
COUNTRY END IS *A
REMOTEIP 5 CONTAINS .
 

  - Original Message - 
  From: 
  Susan 
  Duncan 
  To: Declude.JunkMail@declude.com 
  
  Sent: Wednesday, February 15, 2006 8:48 
  AM
  Subject: [Declude.JunkMail] adding weight 
  based on x-country-chain
  
  
  Is there a way to add a weight 
  based on the country?  I do not want to block on country, but the chances 
  of mail coming from somewhere other than Canada or the US is fairly remote, so 
  a weight on country + anything would mean it’s got a high chance of being 
  spam.
   
  I couldn’t find anything in the 
  docs on it.
   
  Susan Duncan Web/Communications Officer / Agent 
  des Communications/webUnion of Taxation Employees / Syndicat des employées 
  de l'ImpôtTel: 613-235-6704 ext 240Fax: 613-234-7290e-mail: 
  [EMAIL PROTECTED]http://www.ute-sei.org/
   

Re: [Declude.JunkMail] adding weight based on x-country-chain

2006-02-15 Thread Scott Fisher 




The COUNTRY filter is used for searching 
the last country in the country chain. The COUNTRY filter requires the 
all_list.dat file. See the end of the document for a link to this 
file.
COUNTRY 
was introduced in the 1.62.
 
The COUNTRIES filter is used for searching 
all countries in the country chain. The COUNTRIES filter requires the 
all_list.dat file. See the end of the document for a link COUNTRIES was 
introduced in the 1.62 version.
 
You 
could use a filter of:
COUNTRY 
END IS US
COUNTRY 
END IS CA
REMOTEIP 
5 CONTAINS .
 
 
 
 
 

  - Original Message - 
  From: 
  Susan 
  Duncan 
  To: Declude.JunkMail@declude.com 
  
  Sent: Wednesday, February 15, 2006 8:48 
  AM
  Subject: [Declude.JunkMail] adding weight 
  based on x-country-chain
  
  
  Is there a way to add a weight 
  based on the country?  I do not want to block on country, but the chances 
  of mail coming from somewhere other than Canada or the US is fairly remote, so 
  a weight on country + anything would mean it’s got a high chance of being 
  spam.
   
  I couldn’t find anything in the 
  docs on it.
   
  Susan Duncan Web/Communications Officer / Agent 
  des Communications/webUnion of Taxation Employees / Syndicat des employées 
  de l'ImpôtTel: 613-235-6704 ext 240Fax: 613-234-7290e-mail: 
  [EMAIL PROTECTED]http://www.ute-sei.org/
   

[Declude.JunkMail] adding weight based on x-country-chain

2006-02-15 Thread Susan Duncan 








Is there a way to add a weight based on the country?  I do
not want to block on country, but the chances of mail coming from somewhere
other than Canada or the US is fairly remote, so a weight on country + anything
would mean it’s got a high chance of being spam.

 

I couldn’t find anything in the docs on it.

 

Susan
Duncan 
Web/Communications Officer / Agent des Communications/web
Union of Taxation Employees / Syndicat des employées de l'Impôt
Tel: 613-235-6704 ext 240
Fax: 613-234-7290
e-mail: [EMAIL PROTECTED]
http://www.ute-sei.org/