Re: [Declude.JunkMail] CMDSPACE Failures
David Barker wrote: Christian, Another way that you could deal with this specific Microsoft Office Outlook build is to create a filter that contains the following: HEADERS -8 CONTAINS Microsoft Office Outlook, Build 11.0.5510 As a suggestion to limit the collateral damage I would preface the filter line below with TESTFAILED END NOTCONTAINS cmdsapce -Nick David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christian Meenaghan Sent: Tuesday, November 15, 2005 8:59 PM To: Declude.JunkMail Subject: [Declude.JunkMail] CMDSPACE Failures I love the CMDSPACE test, seems to catch a load of spammers. However, it also catches all of my clients that are using Microsoft Office Outlook. Build 11.0.5510 Is there a way i can retain the use of this test, and the weight (if possible), and not have Outlook fail the test? I mean, of course, short of going up again MS and telling them to fix their faulty software? Thanks -Christian -- Please direct all support questions to [EMAIL PROTECTED] Christian Meenaghan Host Support/Webmaster [EMAIL PROTECTED] CySpace City Marketing Inc. 1415 West 22nd Street Tower Floor Oak Brook, IL 60523 USA Support: 877.730.2668 Telephone: 866.730.2668/630.954.2331 Fax: 630.960.5552 http://www.cyspacecity.net --- [This E-mail scanned for viruses by CySpace Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] CMDSPACE Failures
> Another way that you could deal with this specific Microsoft > Office Outlook build is to create a filter that contains the > following: > > HEADERS -8 CONTAINS Microsoft Office Outlook, > Build 11.0.5510 ...but keep in mind that some Spammers write in the headers exactly this string to pass spam-filters. If you cant WHITELIST AUTH or certain IP-ranges your only choice is to use CMD-space in combination of filters. For example if SNIFFER + CMDSPACE fails or if CMDSPACE and a filter file that contains some forreign countries you can't be sure that none of your customers will never send a legit message from there. Maybe you have all you client configurations set to use a certain host name as outgoing smtp-server while the official host name in the MX-Records for all incomming messages is another one. In this case you can point the outgoing smtp IP to another machine and set up there a SMTP-relay that forwards all messages to your actual mail server. Then you can whitelist all messages coming from the relay servers IP. But now you have to solve how to configure the relay server without becoming an open relay Markus --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] CMDSPACE Failures
Christian, Another way that you could deal with this specific Microsoft Office Outlook build is to create a filter that contains the following: HEADERS -8 CONTAINS Microsoft Office Outlook, Build 11.0.5510 David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christian Meenaghan Sent: Tuesday, November 15, 2005 8:59 PM To: Declude.JunkMail Subject: [Declude.JunkMail] CMDSPACE Failures I love the CMDSPACE test, seems to catch a load of spammers. However, it also catches all of my clients that are using Microsoft Office Outlook. Build 11.0.5510 Is there a way i can retain the use of this test, and the weight (if possible), and not have Outlook fail the test? I mean, of course, short of going up again MS and telling them to fix their faulty software? Thanks -Christian -- Please direct all support questions to [EMAIL PROTECTED] Christian Meenaghan Host Support/Webmaster [EMAIL PROTECTED] CySpace City Marketing Inc. 1415 West 22nd Street Tower Floor Oak Brook, IL 60523 USA Support: 877.730.2668 Telephone: 866.730.2668/630.954.2331 Fax: 630.960.5552 http://www.cyspacecity.net --- [This E-mail scanned for viruses by CySpace Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] CMDSPACE Failures
If you're using CDONTS, switch to CSOSYS. You'll be much happier. Darin. - Original Message - From: "Bonno Bloksma" <[EMAIL PROTECTED]> To: Sent: Wednesday, November 16, 2005 6:26 AM Subject: Re: [Declude.JunkMail] CMDSPACE Failures Hi, > If MS were to fix it, we wouldn't be detecting a lot of the spam. So, while > on one hand it would be nice if it were fixed... on the other hand the > CMDSPACE test wouldn't be catching nearly as much. It seems this library is broken. Sophos also has this problem as they use this MS lib: --- The library is called CDO (Collaboration Data Objects). http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ dncdsys/html/cdo_roadmap.asp --- If MS were to fix that lot's of software would be fixed. > WHITELIST AUTH and custom filters to negate specific senders and servers > that fail this test is how we manage false positives. But I cannot get this software, and my backup software, and whatever else is using this library, to use SMTP AUTH. :-( Met vriendelijke groet, Bonno Bloksma --- [E-mail scanned at tio.nl for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] CMDSPACE Failures
Hi, > If MS were to fix it, we wouldn't be detecting a lot of the spam. So, while > on one hand it would be nice if it were fixed... on the other hand the > CMDSPACE test wouldn't be catching nearly as much. It seems this library is broken. Sophos also has this problem as they use this MS lib: --- The library is called CDO (Collaboration Data Objects). http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ dncdsys/html/cdo_roadmap.asp --- If MS were to fix that lot's of software would be fixed. > WHITELIST AUTH and custom filters to negate specific senders and servers > that fail this test is how we manage false positives. But I cannot get this software, and my backup software, and whatever else is using this library, to use SMTP AUTH. :-( Met vriendelijke groet, Bonno Bloksma --- [E-mail scanned at tio.nl for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] CMDSPACE Failures
If MS were to fix it, we wouldn't be detecting a lot of the spam. So, while on one hand it would be nice if it were fixed... on the other hand the CMDSPACE test wouldn't be catching nearly as much. WHITELIST AUTH and custom filters to negate specific senders and servers that fail this test is how we manage false positives. Darin. - Original Message - From: "Christian Meenaghan" <[EMAIL PROTECTED]> To: "Declude.JunkMail" Sent: Tuesday, November 15, 2005 8:58 PM Subject: [Declude.JunkMail] CMDSPACE Failures I love the CMDSPACE test, seems to catch a load of spammers. However, it also catches all of my clients that are using Microsoft Office Outlook. Build 11.0.5510 Is there a way i can retain the use of this test, and the weight (if possible), and not have Outlook fail the test? I mean, of course, short of going up again MS and telling them to fix their faulty software? Thanks -Christian -- Please direct all support questions to [EMAIL PROTECTED] Christian Meenaghan Host Support/Webmaster [EMAIL PROTECTED] CySpace City Marketing Inc. 1415 West 22nd Street Tower Floor Oak Brook, IL 60523 USA Support: 877.730.2668 Telephone: 866.730.2668/630.954.2331 Fax: 630.960.5552 http://www.cyspacecity.net --- [This E-mail scanned for viruses by CySpace Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] CMDSPACE Failures
The only real ways to work around this is to "whitelist auth" clients assuming you are using Imail 8.x. Short of that or whitelisting client ip's there is no way to fix it. Darrell --- DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus. Download it today - http://www.invariantsystems.com - Original Message - From: "Christian Meenaghan" <[EMAIL PROTECTED]> To: "Declude.JunkMail" Sent: Tuesday, November 15, 2005 8:58 PM Subject: [Declude.JunkMail] CMDSPACE Failures I love the CMDSPACE test, seems to catch a load of spammers. However, it also catches all of my clients that are using Microsoft Office Outlook. Build 11.0.5510 Is there a way i can retain the use of this test, and the weight (if possible), and not have Outlook fail the test? I mean, of course, short of going up again MS and telling them to fix their faulty software? Thanks -Christian -- Please direct all support questions to [EMAIL PROTECTED] Christian Meenaghan Host Support/Webmaster [EMAIL PROTECTED] CySpace City Marketing Inc. 1415 West 22nd Street Tower Floor Oak Brook, IL 60523 USA Support: 877.730.2668 Telephone: 866.730.2668/630.954.2331 Fax: 630.960.5552 http://www.cyspacecity.net --- [This E-mail scanned for viruses by CySpace Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.