Re: [Declude.JunkMail] CMDSPACE Failures

2005-11-16 Thread Nick Hayer

David Barker wrote:


Christian,

Another way that you could deal with this specific Microsoft Office Outlook
build is to create a filter that contains the following:

HEADERS -8  CONTAINS Microsoft Office Outlook, Build 11.0.5510
 

As a suggestion to limit the collateral damage I would preface the 
filter line below with

TESTFAILED   END   NOTCONTAINS   cmdsapce

-Nick


David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Christian Meenaghan
Sent: Tuesday, November 15, 2005 8:59 PM
To: Declude.JunkMail
Subject: [Declude.JunkMail] CMDSPACE Failures

I love the CMDSPACE test, seems to catch a load of spammers.

However, it also catches all of my clients that are using Microsoft Office
Outlook. Build 11.0.5510

Is there a way i can retain the use of this test, and the weight (if
possible), and not have Outlook fail the test?  


I mean, of course, short of going up again MS and telling them to fix their
faulty software?

Thanks

-Christian

--
Please direct all support questions to [EMAIL PROTECTED]

Christian Meenaghan
Host Support/Webmaster
[EMAIL PROTECTED]
CySpace City Marketing Inc.
1415 West 22nd Street
Tower Floor
Oak Brook, IL 60523 USA
Support: 877.730.2668
Telephone: 866.730.2668/630.954.2331
Fax: 630.960.5552
http://www.cyspacecity.net



---
[This E-mail scanned for viruses by CySpace Virus]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


 


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] CMDSPACE Failures

2005-11-16 Thread Markus Gufler


> Another way that you could deal with this specific Microsoft 
> Office Outlook build is to create a filter that contains the 
> following:
> 
> HEADERS   -8  CONTAINS Microsoft Office Outlook, 
> Build 11.0.5510


...but keep in mind that some Spammers write in the headers exactly this
string to pass spam-filters. 

If you cant WHITELIST AUTH or certain IP-ranges your only choice is to use
CMD-space in combination of filters. For example if SNIFFER + CMDSPACE fails
or if CMDSPACE and a filter file that contains some forreign countries you
can't be sure that none of your customers will never send a legit message
from there.

Maybe you have all you client configurations set to use a certain host name
as outgoing smtp-server while the official host name in the MX-Records for
all incomming messages is another one. In this case you can point the
outgoing smtp IP to another machine and set up there a SMTP-relay that
forwards all messages to your actual mail server. Then you can whitelist all
messages coming from the relay servers IP. But now you have to solve how to
configure the relay server without becoming an open relay

Markus

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] CMDSPACE Failures

2005-11-16 Thread David Barker
Christian,

Another way that you could deal with this specific Microsoft Office Outlook
build is to create a filter that contains the following:

HEADERS -8  CONTAINS Microsoft Office Outlook, Build 11.0.5510

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Christian Meenaghan
Sent: Tuesday, November 15, 2005 8:59 PM
To: Declude.JunkMail
Subject: [Declude.JunkMail] CMDSPACE Failures

I love the CMDSPACE test, seems to catch a load of spammers.

However, it also catches all of my clients that are using Microsoft Office
Outlook. Build 11.0.5510

Is there a way i can retain the use of this test, and the weight (if
possible), and not have Outlook fail the test?  

I mean, of course, short of going up again MS and telling them to fix their
faulty software?

Thanks

-Christian

--
Please direct all support questions to [EMAIL PROTECTED]

Christian Meenaghan
Host Support/Webmaster
[EMAIL PROTECTED]
CySpace City Marketing Inc.
1415 West 22nd Street
Tower Floor
Oak Brook, IL 60523 USA
Support: 877.730.2668
Telephone: 866.730.2668/630.954.2331
Fax: 630.960.5552
http://www.cyspacecity.net



---
[This E-mail scanned for viruses by CySpace Virus]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] CMDSPACE Failures

2005-11-16 Thread Darin Cox
If you're using CDONTS, switch to CSOSYS.  You'll be much happier.

Darin.


- Original Message - 
From: "Bonno Bloksma" <[EMAIL PROTECTED]>
To: 
Sent: Wednesday, November 16, 2005 6:26 AM
Subject: Re: [Declude.JunkMail] CMDSPACE Failures


Hi,

> If MS were to fix it, we wouldn't be detecting a lot of the spam.  So,
while
> on one hand it would be nice if it were fixed... on the other hand the
> CMDSPACE test wouldn't be catching nearly as much.

It seems this library is broken. Sophos also has this problem as they use
this MS lib:
---
The library is called CDO (Collaboration Data Objects).

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/
dncdsys/html/cdo_roadmap.asp
---

If MS were to fix that lot's of software would be fixed.

> WHITELIST AUTH and custom filters to negate specific senders and servers
> that fail this test is how we manage false positives.

But I cannot get this software, and my backup software, and whatever else is
using this library, to use SMTP AUTH. :-(


Met vriendelijke groet,

Bonno Bloksma

---
[E-mail scanned at tio.nl for viruses by Declude Virus]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] CMDSPACE Failures

2005-11-16 Thread Bonno Bloksma
Hi,

> If MS were to fix it, we wouldn't be detecting a lot of the spam.  So,
while
> on one hand it would be nice if it were fixed... on the other hand the
> CMDSPACE test wouldn't be catching nearly as much.

It seems this library is broken. Sophos also has this problem as they use
this MS lib:
---
The library is called CDO (Collaboration Data Objects).

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/
dncdsys/html/cdo_roadmap.asp
---

If MS were to fix that lot's of software would be fixed.

> WHITELIST AUTH and custom filters to negate specific senders and servers
> that fail this test is how we manage false positives.

But I cannot get this software, and my backup software, and whatever else is
using this library, to use SMTP AUTH. :-(


Met vriendelijke groet,

Bonno Bloksma

---
[E-mail scanned at tio.nl for viruses by Declude Virus]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] CMDSPACE Failures

2005-11-15 Thread Darin Cox
If MS were to fix it, we wouldn't be detecting a lot of the spam.  So, while
on one hand it would be nice if it were fixed... on the other hand the
CMDSPACE test wouldn't be catching nearly as much.

WHITELIST AUTH and custom filters to negate specific senders and servers
that fail this test is how we manage false positives.

Darin.


- Original Message - 
From: "Christian Meenaghan" <[EMAIL PROTECTED]>
To: "Declude.JunkMail" 
Sent: Tuesday, November 15, 2005 8:58 PM
Subject: [Declude.JunkMail] CMDSPACE Failures


I love the CMDSPACE test, seems to catch a load of spammers.

However, it also catches all of my clients that are using Microsoft
Office Outlook. Build 11.0.5510

Is there a way i can retain the use of this test, and the weight (if
possible), and not have Outlook fail the test?

I mean, of course, short of going up again MS and telling them to fix
their faulty software?

Thanks

-Christian

-- 
Please direct all support questions to [EMAIL PROTECTED]

Christian Meenaghan
Host Support/Webmaster
[EMAIL PROTECTED]
CySpace City Marketing Inc.
1415 West 22nd Street
Tower Floor
Oak Brook, IL 60523 USA
Support: 877.730.2668
Telephone: 866.730.2668/630.954.2331
Fax: 630.960.5552
http://www.cyspacecity.net



---
[This E-mail scanned for viruses by CySpace Virus]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] CMDSPACE Failures

2005-11-15 Thread Darrell \([EMAIL PROTECTED])
The only real ways to work around this is to "whitelist auth" clients 
assuming you are using Imail 8.x.  Short of that or whitelisting client ip's 
there is no way to fix it.


Darrell
---
DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus. Download 
it today - http://www.invariantsystems.com


- Original Message - 
From: "Christian Meenaghan" <[EMAIL PROTECTED]>

To: "Declude.JunkMail" 
Sent: Tuesday, November 15, 2005 8:58 PM
Subject: [Declude.JunkMail] CMDSPACE Failures



I love the CMDSPACE test, seems to catch a load of spammers.

However, it also catches all of my clients that are using Microsoft
Office Outlook. Build 11.0.5510

Is there a way i can retain the use of this test, and the weight (if
possible), and not have Outlook fail the test?

I mean, of course, short of going up again MS and telling them to fix
their faulty software?

Thanks

-Christian

--
Please direct all support questions to [EMAIL PROTECTED]

Christian Meenaghan
Host Support/Webmaster
[EMAIL PROTECTED]
CySpace City Marketing Inc.
1415 West 22nd Street
Tower Floor
Oak Brook, IL 60523 USA
Support: 877.730.2668
Telephone: 866.730.2668/630.954.2331
Fax: 630.960.5552
http://www.cyspacecity.net



---
[This E-mail scanned for viruses by CySpace Virus]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.