RE: [Declude.JunkMail] Bounce not an action??

2004-03-05 Thread R. Scott Perry

After reading archives for the past two hours, I still do not understand 
why this is happening.  I completely removed BOUNCE from 
$default$.junkmail and global.cfg.  I changed it to delete.
Great!

As is evidenced by the lines below, WEIGHT40 is set to LOG and 
WEIGHT50=IGNORE.  But in my cfg files I have them both set to 
DELETE.  Redundant, I realize but I am going bald right now trying to 
figure this out.

I believe this file should have been deleted with a weight of 60.  Am I 
wrong in this belief and if so, how do I make it so?

03/05/2004 07:26:33 Q800304f9037efdbb SBL:20 SPAMHEADERS:20 FLOWGO:20 
.  Total weight = 60.
03/05/2004 07:26:33 Q800304f9037efdbb Warning: misconfiguration in 
following line in configuration file (bounce is not an ACTION). May be a 
duplicate test definition?
This warning: indicates that you are still using the BOUNCE action somewhere.

If you are insistent upon letting them do this, here's what I wrote yesterday:

---
What I would recommend is having them sign a contract that they will be 
liable for any issues resulting from the bounces.

Specifically, about 99.9% of the E-mail that is bouncing (E-mail that fails 
the WEIGHT40 test) is spam.  Since about 99% of spam sent with a fake 
return address, that's 100,000s of spams a year your customer is sending 
out.  If I were you, I would only do it if they assume liability for it.

In any case, if you feel that it is appropriate to do so, you can rename 
the BOUNCE action to BOUNCEONLYIFYOUMUST, and it will start working again.
---

Remember that even if they pay their bills like clockwork, there are some 
spammers out there that pay their bills like clockwork too.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Bounce not an action??

2004-03-05 Thread Jim Rooth
Title: Message



After reading 
archives for the past two hours, I still do not understand why this is 
happening. I completely removed BOUNCE from $default$.junkmail and 
global.cfg. I changed it to delete.

As is evidenced 
by the lines below, WEIGHT40 is set to LOG and WEIGHT50=IGNORE. But in my 
cfg files I have them both set to DELETE. Redundant, I realize but I am 
going bald right now trying to figure this out.

I believe this 
file should have been deleted with a weight of 60. Am I wrong in this 
belief and if so, how do I make it so?

03/05/2004 07:26:33 Q800304f9037efdbb SBL:20 SPAMHEADERS:20 FLOWGO:20 
. Total weight = 60.03/05/2004 07:26:33 Q800304f9037efdbb Warning: 
misconfiguration in following line in configuration file (bounce is not an 
ACTION). May be a duplicate test definition?03/05/2004 07:26:33 
Q800304f9037efdbb L1 Message OK03/05/2004 07:26:33 Q800304f9037efdbb 
Subject: *^*^*^ Good Morning !!*^*^*^*3/5/0403/05/2004 07:26:33 
Q800304f9037efdbb From: [EMAIL PROTECTED] 
To: [EMAIL PROTECTED] 
IP: 12.129.205.75 ID: h9208m03u7o603/05/2004 07:26:33 Q800304f9037efdbb 
Tests failed [weight=60]: SBL=IGNORE SPAMHEADERS=WARN WEIGHT40=LOG 
WEIGHT50=IGNORE CATCHALLMAILS=IGNORE FLOWGO=WARN

$default$.junkmail
DSBLWARNORDBWARNOSDULWARNOSFORMWARNOSLISTWARNOSRELAYWARNOSSMARTWARNOSSOFT 
WARNOSSRC 
WARNSPAMCOPWARNSPAMSUBJ 
WARNDSNWARNNOABUSEWARNNOPOSTMASTERWARNMYFILTERWARNBADHEADERSWARNHELOBOGUSWARNMAILFROM 
WARNPERCENTWARNREVDNSWARNROUTINGWARNSPAMHEADERSWARN#SNIFFERWARN

WEIGHT20WARNWEIGHT30WARNWEIGHT40DELETEWEIGHT50DELETEMAILTOWARNKFROMWARNCOUNTRYWARNCOMMENTS20WARNCOMMENTS40WARNCOMMENTS60WARNCOMMENTS80WARNCOMMENTS100WARNCOMMENTS120WARN

global.cfg
DSBLWARNORDBWARN#OSDULWARNOSFORMWARNOSLISTWARNOSRELAYWARNOSSMARTWARNOSSOFT 
WARNOSSRC 
WARNSPAMCOPWARNDSNWARNNOABUSEWARNNOPOSTMASTERWARNBADHEADERSWARNHELOBOGUSWARNKFROMWARNMAILFROM 
WARNMAILTOWARNPERCENTWARNREVDNSWARNROUTINGWARNSPAMHEADERSWARNSPAMSUBJWARN#SNIFFERWARNWEIGHT10WARNWEIGHT20WARNWEIGHT40DELETEWEIGHT50DELETE



Jim 
Rooth
Clotron, 
Inc 
[EMAIL PROTECTED]
214.244.0979
If 
you can read thisthank a teacher
If you 
are reading this in English, thank a veteran!


  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of MattSent: Thursday, March 04, 2004 7:53 
  PMTo: [EMAIL PROTECTED]Subject: Re: 
  [Declude.JunkMail] Bounce not an action??Jim,It's 
  the fact that administrators bounce spam or unaddressable E-mail accepted by 
  gateways for large sites like AOL and Yahoo that have completely ruined the 
  use of the nobody alias for my domains because this forged stuff is constantly 
  hitting my server, bounced from someone like you or someone like Yahoo and 
  AOL. I've had a single person get over 200 bounce messages a day for 
  things they didn't receive. As a result of this, I now have to score 
  system notifications from other servers high in order to hopefully catch them 
  on a single bit of content returned that I also sometimes false positive on 
  legitimate bounces. If people stopped bouncing trash, none of this would 
  be necessary.As far as your customer goes, allowing them to tell you 
  to bounce spam is the equivalent of telling you to spam for them IMO. I 
  will not bounce for my customers, I will capture in an account and they can go 
  through that account looking for false positives if they wish, but being to 
  lazy to want to bother is no excuse to bounce.It doesn't matter if you 
  only get 100 spams a day, you just shouldn't bounce. The same thing goes 
  for virus notifications IMO. Don't send me notices for any virus to my 
  postmaster address, and please don't send notices to my customers...reason 
  being, 99.9% of them are from forged addresses these days, and this causes 100 
  times more harm than good.MattJim Rooth wrote:
  Heck, I thought they had 10 gears but the 10th and 9th were reversed to
give you a great overdrive.  Shows what I know.  I will check the
archives again and see if I can find something that tells me different
than don't use BOUNCE!  That would be the simplest solution...

Jim Rooth
Clotron, Inc 
[EMAIL PROTECTED]
214.244.0979
"If you can read this.thank a teacher
If you are reading this in English, thank a veteran!"



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff
(Lists)
Sent: Thursday, March 04, 2004 6:17 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Bounce not an action??


Jim Jim Jim. What can I say. Sometimes, it is hard to use that new
fangled transmission that only has 9 gears instead of 13.

Check the current JunkMail manual and archives, and you will be
surprised.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


  
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- 
[EMAIL PROTECTED]] On Behalf Of Jim Rooth
Sent: Thursday, March 04, 2004 4:12 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Bounce not

RE: [Declude.JunkMail] Bounce not an action??

2004-03-05 Thread Jim Rooth
I AGREE with you 100%  Where besides the global.cfg and the
$default$.junkmail could I have BOUNCE set up?  I can't find it
anywhere.

Jim Rooth
Clotron, Inc 
[EMAIL PROTECTED]
214.244.0979
If you can read this.thank a teacher
If you are reading this in English, thank a veteran!



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Friday, March 05, 2004 7:43 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Bounce not an action??



After reading archives for the past two hours, I still do not 
understand
why this is happening.  I completely removed BOUNCE from 
$default$.junkmail and global.cfg.  I changed it to delete.

Great!

As is evidenced by the lines below, WEIGHT40 is set to LOG and
WEIGHT50=IGNORE.  But in my cfg files I have them both set to 
DELETE.  Redundant, I realize but I am going bald right now trying to 
figure this out.

I believe this file should have been deleted with a weight of 60.  Am I
wrong in this belief and if so, how do I make it so?

03/05/2004 07:26:33 Q800304f9037efdbb SBL:20 SPAMHEADERS:20 FLOWGO:20
.  Total weight = 60.
03/05/2004 07:26:33 Q800304f9037efdbb Warning: misconfiguration in 
following line in configuration file (bounce is not an ACTION). May be
a 
duplicate test definition?

This warning: indicates that you are still using the BOUNCE action
somewhere.

If you are insistent upon letting them do this, here's what I wrote
yesterday:

---
What I would recommend is having them sign a contract that they will be 
liable for any issues resulting from the bounces.

Specifically, about 99.9% of the E-mail that is bouncing (E-mail that
fails 
the WEIGHT40 test) is spam.  Since about 99% of spam sent with a fake 
return address, that's 100,000s of spams a year your customer is sending

out.  If I were you, I would only do it if they assume liability for it.

In any case, if you feel that it is appropriate to do so, you can rename

the BOUNCE action to BOUNCEONLYIFYOUMUST, and it will start working
again.
---

Remember that even if they pay their bills like clockwork, there are
some 
spammers out there that pay their bills like clockwork too.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.
---


---

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Bounce not an action??

2004-03-05 Thread R. Scott Perry

I AGREE with you 100%  Where besides the global.cfg and the
$default$.junkmail could I have BOUNCE set up?  I can't find it
anywhere.
You can use LOGLEVEL HIGH to see which config files Declude JunkMail is using.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Bounce not an action??

2004-03-05 Thread Joe Raykiewicz
I think maybe you should ensure that there are no other config files
anywhere hanging around.  Search the folder for files inclding the text
bounce and see what you come up with.  Hope that helps.

Joe
- Original Message - 
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, March 05, 2004 7:42 AM
Subject: RE: [Declude.JunkMail] Bounce not an action??



 After reading archives for the past two hours, I still do not understand
 why this is happening.  I completely removed BOUNCE from
 $default$.junkmail and global.cfg.  I changed it to delete.

 Great!

 As is evidenced by the lines below, WEIGHT40 is set to LOG and
 WEIGHT50=IGNORE.  But in my cfg files I have them both set to
 DELETE.  Redundant, I realize but I am going bald right now trying to
 figure this out.
 
 I believe this file should have been deleted with a weight of 60.  Am I
 wrong in this belief and if so, how do I make it so?
 
 03/05/2004 07:26:33 Q800304f9037efdbb SBL:20 SPAMHEADERS:20 FLOWGO:20
 .  Total weight = 60.
 03/05/2004 07:26:33 Q800304f9037efdbb Warning: misconfiguration in
 following line in configuration file (bounce is not an ACTION). May be a
 duplicate test definition?

 This warning: indicates that you are still using the BOUNCE action
somewhere.

 If you are insistent upon letting them do this, here's what I wrote
yesterday:

 ---
 What I would recommend is having them sign a contract that they will be
 liable for any issues resulting from the bounces.

 Specifically, about 99.9% of the E-mail that is bouncing (E-mail that
fails
 the WEIGHT40 test) is spam.  Since about 99% of spam sent with a fake
 return address, that's 100,000s of spams a year your customer is sending
 out.  If I were you, I would only do it if they assume liability for it.

 In any case, if you feel that it is appropriate to do so, you can rename
 the BOUNCE action to BOUNCEONLYIFYOUMUST, and it will start working again.
 ---

 Remember that even if they pay their bills like clockwork, there are some
 spammers out there that pay their bills like clockwork too.

 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers
 since 2000.
 Declude Virus: Catches known viruses and is the leader in mailserver
 vulnerability detection.
 Find out what you've been missing: Ask for a free 30-day evaluation.

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Bounce not an action??

2004-03-05 Thread Jim Rooth
Thanks Scott, found it hidden in a per user file!

Jim Rooth
Clotron, Inc 
[EMAIL PROTECTED]
214.244.0979
If you can read this.thank a teacher
If you are reading this in English, thank a veteran!



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Friday, March 05, 2004 8:05 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Bounce not an action??



I AGREE with you 100%  Where besides the global.cfg and the 
$default$.junkmail could I have BOUNCE set up?  I can't find it 
anywhere.

You can use LOGLEVEL HIGH to see which config files Declude JunkMail is
using.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.
---


---

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Bounce not an action??

2004-03-05 Thread Jim Rooth
One last thing...I have figured a way to keep the customer happy and
still be bouncing everything.  I have this particular client set up per
domain.  They are the only one out of 75 that are set that way.  I have
gone into their domain $default$.junkmail file and added WEIGHT40
ROUTETO [EMAIL PROTECTED] domain .com.

I am of the opinion that this will send all mail with a weight of 40 or
higher (to WEIGHT 60 which is set to delete) that is sent to their
domain but will not send any other mail from other domains.  Is that
correct?

Jim Rooth
Clotron, Inc 
[EMAIL PROTECTED]
214.244.0979
If you can read this.thank a teacher
If you are reading this in English, thank a veteran!



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Friday, March 05, 2004 8:05 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Bounce not an action??



I AGREE with you 100%  Where besides the global.cfg and the 
$default$.junkmail could I have BOUNCE set up?  I can't find it 
anywhere.

You can use LOGLEVEL HIGH to see which config files Declude JunkMail is
using.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.
---


---

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Bounce not an action??

2004-03-05 Thread R. Scott Perry

I have gone into their domain $default$.junkmail file and added WEIGHT40
ROUTETO [EMAIL PROTECTED] domain .com.
I am of the opinion that this will send all mail with a weight of 40 or
higher (to WEIGHT 60 which is set to delete) that is sent to their
domain but will not send any other mail from other domains.  Is that
correct?
That sounds like an excellent plan, and should work as you describe.  :)

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Bounce not an action??

2004-03-05 Thread Kevin Bilbee
Someone correct me if I am wrong

with what you said no messages will be deleted they will all use the
WEIGHT40 ROUTETO action.

If you use the ROUTETO and the DELETE at t higher weight the ROUTETO once
the email is routed it can not be delete

To be confidant of which action will happen use  weight range and the final
weight use weight this is what we have. It sopped dead and confusion on what
action will happen when.

SPAM-LOWweightrange x   x   8   13
SPAM-MEDweightrange x   x   14  24
SPAM-HIGH   weight  x   x   25  0



Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
 Sent: Friday, March 05, 2004 7:09 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Bounce not an action??



 I have gone into their domain $default$.junkmail file and added WEIGHT40
 ROUTETO [EMAIL PROTECTED] domain .com.
 
 I am of the opinion that this will send all mail with a weight of 40 or
 higher (to WEIGHT 60 which is set to delete) that is sent to their
 domain but will not send any other mail from other domains.  Is that
 correct?

 That sounds like an excellent plan, and should work as you describe.  :)

 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers
 since 2000.
 Declude Virus: Catches known viruses and is the leader in mailserver
 vulnerability detection.
 Find out what you've been missing: Ask for a free 30-day evaluation.

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Bounce not an action??

2004-03-05 Thread R. Scott Perry

with what you said no messages will be deleted they will all use the
WEIGHT40 ROUTETO action.
If you use the ROUTETO and the DELETE at t higher weight the ROUTETO once
the email is routed it can not be delete
Actually, what happens with WEIGHT40 ROUTETO [EMAIL PROTECTED] and 
WEIGHT60 DELETE is that E-mails with a total weight of 60 or higher will 
have 2 actions that should be used: ROUTETO and DELETE.  DELETE takes 
priority, so the E-mail will be deleted.

To be confidant of which action will happen use  weight range and the final
weight use weight this is what we have. It sopped dead and confusion on what
action will happen when.
SPAM-LOWweightrange x   x   8   13
SPAM-MEDweightrange x   x   14  24
SPAM-HIGH   weight  x   x   25  0
This is a very good idea, as it lets you decide the action, rather than 
relying on Declude JunkMail to decide.  :)

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Bounce not an action??

2004-03-04 Thread R. Scott Perry

I have WEIGHT40 set to bounce in the global.cfg.
I know you're looking for an answer, but before I give it to you, can I ask 
why you are using WEIGHT40 BOUNCE?

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Bounce not an action??

2004-03-04 Thread Jim Rooth
Not because I want to, that's for sure.  But I have my largest customer
who wants all mail to be sent back so the sender can see their email
didn't go through.  They average 900 emails a day just from bounces!
The overhead caused by it is extremely detrimental but they pay the bill
like clockwork.

I just went through and I lied to you.  It started yesterday at 1311
which is when I loaded the v178.i9 on the server.

Jim Rooth
Clotron, Inc 
[EMAIL PROTECTED]
214.244.0979
If you can read this.thank a teacher
If you are reading this in English, thank a veteran!



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Thursday, March 04, 2004 5:58 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Bounce not an action??



I have WEIGHT40 set to bounce in the global.cfg.

I know you're looking for an answer, but before I give it to you, can I
ask 
why you are using WEIGHT40 BOUNCE?

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.
---


---

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Bounce not an action??

2004-03-04 Thread John Tolmachoff \(Lists\)
Jim Jim Jim. What can I say. Sometimes, it is hard to use that new fangled
transmission that only has 9 gears instead of 13.

Check the current JunkMail manual and archives, and you will be surprised.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Jim Rooth
 Sent: Thursday, March 04, 2004 4:12 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Bounce not an action??
 
 Not because I want to, that's for sure.  But I have my largest customer
 who wants all mail to be sent back so the sender can see their email
 didn't go through.  They average 900 emails a day just from bounces!
 The overhead caused by it is extremely detrimental but they pay the bill
 like clockwork.
 
 I just went through and I lied to you.  It started yesterday at 1311
 which is when I loaded the v178.i9 on the server.
 
 Jim Rooth
 Clotron, Inc
 [EMAIL PROTECTED]
 214.244.0979
 If you can read this.thank a teacher
 If you are reading this in English, thank a veteran!
 
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
 Sent: Thursday, March 04, 2004 5:58 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.JunkMail] Bounce not an action??
 
 
 
 I have WEIGHT40 set to bounce in the global.cfg.
 
 I know you're looking for an answer, but before I give it to you, can I
 ask
 why you are using WEIGHT40 BOUNCE?
 
 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers
 since 2000.
 Declude Virus: Catches known viruses and is the leader in mailserver
 vulnerability detection.
 Find out what you've been missing: Ask for a free 30-day evaluation.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
 unsubscribe Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 ---
 
 
 ---
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Bounce not an action??

2004-03-04 Thread R. Scott Perry

Not because I want to, that's for sure.  But I have my largest customer
who wants all mail to be sent back so the sender can see their email
didn't go through.  They average 900 emails a day just from bounces!
The overhead caused by it is extremely detrimental but they pay the bill
like clockwork.
What I would recommend is having them sign a contract that they will be 
liable for any issues resulting from the bounces.

Specifically, about 99.9% of the E-mail that is bouncing (E-mail that fails 
the WEIGHT40 test) is spam.  Since about 99% of spam sent with a fake 
return address, that's 100,000s of spams a year your customer is sending 
out.  If I were you, I would only do it if they assume liability for it.

In any case, if you feel that it is appropriate to do so, you can rename 
the BOUNCE action to BOUNCEONLYIFYOUMUST, and it will start working again.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Bounce not an action??

2004-03-04 Thread Jim Rooth
Heck, I thought they had 10 gears but the 10th and 9th were reversed to
give you a great overdrive.  Shows what I know.  I will check the
archives again and see if I can find something that tells me different
than don't use BOUNCE!  That would be the simplest solution...

Jim Rooth
Clotron, Inc 
[EMAIL PROTECTED]
214.244.0979
If you can read this.thank a teacher
If you are reading this in English, thank a veteran!



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
(Lists)
Sent: Thursday, March 04, 2004 6:17 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Bounce not an action??


Jim Jim Jim. What can I say. Sometimes, it is hard to use that new
fangled transmission that only has 9 gears instead of 13.

Check the current JunkMail manual and archives, and you will be
surprised.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- 
 [EMAIL PROTECTED] On Behalf Of Jim Rooth
 Sent: Thursday, March 04, 2004 4:12 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Bounce not an action??
 
 Not because I want to, that's for sure.  But I have my largest 
 customer who wants all mail to be sent back so the sender can see 
 their email didn't go through.  They average 900 emails a day just 
 from bounces! The overhead caused by it is extremely detrimental but 
 they pay the bill like clockwork.
 
 I just went through and I lied to you.  It started yesterday at 1311 
 which is when I loaded the v178.i9 on the server.
 
 Jim Rooth
 Clotron, Inc
 [EMAIL PROTECTED]
 214.244.0979
 If you can read this.thank a teacher
 If you are reading this in English, thank a veteran!
 
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott 
 Perry
 Sent: Thursday, March 04, 2004 5:58 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.JunkMail] Bounce not an action??
 
 
 
 I have WEIGHT40 set to bounce in the global.cfg.
 
 I know you're looking for an answer, but before I give it to you, can 
 I ask why you are using WEIGHT40 BOUNCE?
 
 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail 
 mailservers since 2000. Declude Virus: Catches known viruses and is 
 the leader in mailserver vulnerability detection.
 Find out what you've been missing: Ask for a free 30-day evaluation.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus 
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
 unsubscribe Declude.JunkMail.  The archives can be found at 
 http://www.mail-archive.com.
 ---
 
 
 ---
 
 ---
 [This E-mail was scanned for viruses by Declude Virus 
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
 unsubscribe Declude.JunkMail.  The archives can be found at 
 http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.
---


---

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Bounce not an action??

2004-03-04 Thread John Tolmachoff \(Lists\)
No don't forget, shifting from 9 to 10 is now done by the computer.

(Man, I hate that transmission. Just feels weird.)

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Jim Rooth
 Sent: Thursday, March 04, 2004 4:26 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Bounce not an action??
 
 Heck, I thought they had 10 gears but the 10th and 9th were reversed to
 give you a great overdrive.  Shows what I know.  I will check the
 archives again and see if I can find something that tells me different
 than don't use BOUNCE!  That would be the simplest solution...
 
 Jim Rooth
 Clotron, Inc
 [EMAIL PROTECTED]
 214.244.0979
 If you can read this.thank a teacher
 If you are reading this in English, thank a veteran!
 
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
 (Lists)
 Sent: Thursday, March 04, 2004 6:17 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Bounce not an action??
 
 
 Jim Jim Jim. What can I say. Sometimes, it is hard to use that new
 fangled transmission that only has 9 gears instead of 13.
 
 Check the current JunkMail manual and archives, and you will be
 surprised.
 
 John Tolmachoff
 Engineer/Consultant/Owner
 eServices For You
 
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
  [EMAIL PROTECTED] On Behalf Of Jim Rooth
  Sent: Thursday, March 04, 2004 4:12 PM
  To: [EMAIL PROTECTED]
  Subject: RE: [Declude.JunkMail] Bounce not an action??
 
  Not because I want to, that's for sure.  But I have my largest
  customer who wants all mail to be sent back so the sender can see
  their email didn't go through.  They average 900 emails a day just
  from bounces! The overhead caused by it is extremely detrimental but
  they pay the bill like clockwork.
 
  I just went through and I lied to you.  It started yesterday at 1311
  which is when I loaded the v178.i9 on the server.
 
  Jim Rooth
  Clotron, Inc
  [EMAIL PROTECTED]
  214.244.0979
  If you can read this.thank a teacher
  If you are reading this in English, thank a veteran!
 
 
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott
  Perry
  Sent: Thursday, March 04, 2004 5:58 PM
  To: [EMAIL PROTECTED]
  Subject: Re: [Declude.JunkMail] Bounce not an action??
 
 
 
  I have WEIGHT40 set to bounce in the global.cfg.
 
  I know you're looking for an answer, but before I give it to you, can
  I ask why you are using WEIGHT40 BOUNCE?
 
  -Scott
  ---
  Declude JunkMail: The advanced anti-spam solution for IMail
  mailservers since 2000. Declude Virus: Catches known viruses and is
  the leader in mailserver vulnerability detection.
  Find out what you've been missing: Ask for a free 30-day evaluation.
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
  (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
  unsubscribe Declude.JunkMail.  The archives can be found at
  http://www.mail-archive.com.
  ---
 
 
  ---
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
  (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
  unsubscribe Declude.JunkMail.  The archives can be found at
  http://www.mail-archive.com.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
 unsubscribe Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 ---
 
 
 ---
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Bounce not an action??

2004-03-04 Thread Matt




Jim,

It's the fact that administrators bounce spam or unaddressable E-mail
accepted by gateways for large sites like AOL and Yahoo that have
completely ruined the use of the nobody alias for my domains because
this forged stuff is constantly hitting my server, bounced from someone
like you or someone like Yahoo and AOL. I've had a single person get
over 200 bounce messages a day for things they didn't receive. As a
result of this, I now have to score system notifications from other
servers high in order to hopefully catch them on a single bit of
content returned that I also sometimes false positive on legitimate
bounces. If people stopped bouncing trash, none of this would be
necessary.

As far as your customer goes, allowing them to tell you to bounce spam
is the equivalent of telling you to spam for them IMO. I will not
bounce for my customers, I will capture in an account and they can go
through that account looking for false positives if they wish, but
being to lazy to want to bother is no excuse to bounce.

It doesn't matter if you only get 100 spams a day, you just shouldn't
bounce. The same thing goes for virus notifications IMO. Don't send
me notices for any virus to my postmaster address, and please don't
send notices to my customers...reason being, 99.9% of them are from
forged addresses these days, and this causes 100 times more harm than
good.

Matt




Jim Rooth wrote:

  Heck, I thought they had 10 gears but the 10th and 9th were reversed to
give you a great overdrive.  Shows what I know.  I will check the
archives again and see if I can find something that tells me different
than don't use BOUNCE!  That would be the simplest solution...

Jim Rooth
Clotron, Inc 
[EMAIL PROTECTED]
214.244.0979
"If you can read this.thank a teacher
If you are reading this in English, thank a veteran!"



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff
(Lists)
Sent: Thursday, March 04, 2004 6:17 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Bounce not an action??


Jim Jim Jim. What can I say. Sometimes, it is hard to use that new
fangled transmission that only has 9 gears instead of 13.

Check the current JunkMail manual and archives, and you will be
surprised.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


  
  
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- 
[EMAIL PROTECTED]] On Behalf Of Jim Rooth
Sent: Thursday, March 04, 2004 4:12 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Bounce not an action??

Not because I want to, that's for sure.  But I have my largest 
customer who wants all mail to be sent back so the sender can see 
their email didn't go through.  They average 900 emails a day just 
from bounces! The overhead caused by it is extremely detrimental but 
they pay the bill like clockwork.

I just went through and I lied to you.  It started yesterday at 1311 
which is when I loaded the v178.i9 on the server.

Jim Rooth
Clotron, Inc
[EMAIL PROTECTED]
214.244.0979
"If you can read this.thank a teacher
If you are reading this in English, thank a veteran!"



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott 
Perry
Sent: Thursday, March 04, 2004 5:58 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Bounce not an action??





  I have WEIGHT40 set to bounce in the global.cfg.
  

I know you're looking for an answer, but before I give it to you, can 
I ask why you are using "WEIGHT40 BOUNCE"?

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail 
mailservers since 2000. Declude Virus: Catches known viruses and is 
the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To 
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
"unsubscribe Declude.JunkMail".  The archives can be found at 
http://www.mail-archive.com.
---


---

---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To 
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
"unsubscribe Declude.JunkMail".  The archives can be found at 
http://www.mail-archive.com.

  
  
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.
---


---

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]