RE: [Declude.JunkMail] External Tests
Here is alos another test for Ip addresses in the HELO but it should use less resources it has declude pass the helo string as it see it so it will honor you hop settings http://www.ssc-isp.net/HoldAnalyzer/containsip.aspx Kevin Bilbee > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher > Sent: Wednesday, September 01, 2004 3:12 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] External Tests > > > HeloISIP look at this link: > http://www.mail-archive.com/[EMAIL PROTECTED]/msg17874.html > > I use: > HELOCONTAINSIPexternalnonzero > "D:\imail\declude\heloisip\heloisip.exe" 30 0 > > > Scott Fisher > Director of IT > Farm Progress Companies > > >>> [EMAIL PROTECTED] 09/01/04 04:53PM >>> > I see on the spamchk public site that there is an external test listed > as sniffer-snake. I am assuming that the sniffer portion is the message > sniffer from Sort Monster (if I am wrong let me know), but I don't know > what the snake part is. I also saw a test called HELOISIP. Does anyone > have any info on these tests? > > --- > Danny Spence > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] External Tests
On Wednesday, September 1, 2004, 5:53:07 PM, Danny wrote: DS> I see on the spamchk public site that there is an DS> externaltest listed as sniffer-snake. I am assuming that the DS> sniffer portion is themessage sniffer from Sort Monster (if I am DS> wrong let me know), but I dontknow what the snake part is. I I think that SNIFFER-SNAKE captures the specific result code from SNIFFER for "Snake-Oil". All of the SNIFFER- tests are set up to capture specific result codes. These graphs should be considered a subset of the general SNIFFER graph which indicates the overall (nonzero) performance of SNIFFER. A reference to the SNIFFER result codes can be found here: http://www.sortmonster.com/MessageSniffer/Help/ResultCodesHelp.html DS> alsosaw a test called HELOISIP. Doesanyone have any info on these DS> tests? I don't know a good answer for this at top of mind. It's not the same as HELOBOGUS though. _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] External Tests
HeloISIP look at this link: http://www.mail-archive.com/[EMAIL PROTECTED]/msg17874.html I use: HELOCONTAINSIP externalnonzero "D:\imail\declude\heloisip\heloisip.exe" 30 0 Scott Fisher Director of IT Farm Progress Companies >>> [EMAIL PROTECTED] 09/01/04 04:53PM >>> I see on the spamchk public site that there is an external test listed as sniffer-snake. I am assuming that the sniffer portion is the message sniffer from Sort Monster (if I am wrong let me know), but I don't know what the snake part is. I also saw a test called HELOISIP. Does anyone have any info on these tests? --- Danny Spence --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] External Tests
I see on the spamchk public site that there is an external test listed as sniffer-snake. I am assuming that the sniffer portion is the message sniffer from Sort Monster (if I am wrong let me know), but I don’t know what the snake part is. I also saw a test called HELOISIP. Does anyone have any info on these tests? --- Danny Spence
Re: [Declude.JunkMail] external tests
Any chance of getting an option to run an external test last after the filters? I have some tests that I want to run first. Maybe externallast? It's something we will look into, but I'm guessing that we won't be able to add such a feature in the near future. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] external tests
Any chance of getting an option to run an external test last after the filters? I have some tests that I want to run first. Maybe externallast? I was brainstorming that if I had an external test to run the troublemaker e-mails that don't score high or low (<4% of total e-mail) through the dnsbl.net.au rbl. I'd be well under the 1000 lookups per day. But I need filters to run first to get to that low. Scott Fisher Director of IT Farm Progress Companies >>> [EMAIL PROTECTED] 06/29/04 02:56PM >>> >Do external tests automatically run before all filters, or do they run >where they are located in the global.cfg? They do run before the filters. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] external tests
Do external tests automatically run before all filters, or do they run where they are located in the global.cfg? They do run before the filters. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] external tests
Do external tests automatically run before all filters, or do they run where they are located in the global.cfg? Scott Fisher Director of IT Farm Progress Companies --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] external tests
Okay. I only had it occur twice over the past day with a new external test we built. We are gonna fix it, but I was curious how that was handled. Thanks, Bill -Original Message- From: "R. Scott Perry" Sent: Fri, 07 Feb 2003 10:25:14 -0500 Subject: Re: [Declude.JunkMail] external tests >How does Declude handle an external test that hangs? Does Declude just >keep waiting on a response from the external test?...or does it eventually >timeout and continue on? It will time out after an hour. If it happens rarely, this wouldn't be a problem. If there was a problem where the external test was never ending, for all E-mail that was scanned, then it could cause some mail delivery problems. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] external tests
How does Declude handle an external test that hangs? Does Declude just keep waiting on a response from the external test?...or does it eventually timeout and continue on? It will time out after an hour. If it happens rarely, this wouldn't be a problem. If there was a problem where the external test was never ending, for all E-mail that was scanned, then it could cause some mail delivery problems. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] external tests
How does Declude handle an external test that hangs? Does Declude just keep waiting on a response from the external test?...or does it eventually timeout and continue on? Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] External tests weight
>But wich weight will have this test? The external test definition line >has 4 paramters: >-TestName >-external >-returnvalue >-filename > >...but no "xx 5 0" (for example) You can just add the "5 0" at the end. For example: MYTEST external 1 "c:\IMail\Declude\myprog.exe" 5 0 In this case, if the test fails, the weight would be 5. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] External tests weight
Hi all, In the manual I cann read "To define the test, you need a line in the format 'TESTNAME external returnvalue "filename"'. TESTNAME is the name of your test, "returnvalue" is the code your program will return when it detects spam (or "nonzero" for any code other than zero), and the name of your file needs to be in quotes. The test will then work in Declude JunkMail just like any other test." Ok. But wich weight will have this test? The external test definition line has 4 paramters: -TestName -external -returnvalue -filename ...but no "xx 5 0" (for example) Is there a way to use the returncode as weight? Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
