RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-03 Thread George Kulman
Scott,

Could this be done with some form of DNS based test where the test result(s)
are only used in the $default$.junkmail for the specific domain?

George

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of R. 
> Scott Perry
> Sent: Wednesday, September 03, 2003 7:55 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] Need aid on Declude Header rule
> 
> 
> 
> > Since we house mulitple domains (using spam 
> filtering) and this 
> > filter test is used in the Global file it seems it would 
> fail every other 
> > domain email (i.e. 1000 weight) that we house on the same 
> box?!  Is there 
> > a way to only define it for use in the default config file for that 
> > domain (we have the pro version), thus not be used for other 
> > domains?  Thanks again for the aid.
> 
> Unfortunately, there isn't any way to have different weights 
> applied to 
> different domains.
> 
> -Scott
> ---
> Declude JunkMail: The advanced anti-spam solution for IMail 
> mailservers.
> Declude Virus: Catches known viruses and is the leader in mailserver 
> vulnerability detection.
> Find out what you have been missing: Ask for a free 30-day evaluation.
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-03 Thread R. Scott Perry

Since we house mulitple domains (using spam filtering) and this 
filter test is used in the Global file it seems it would fail every other 
domain email (i.e. 1000 weight) that we house on the same box?!  Is there 
a way to only define it for use in the default config file for that 
domain (we have the pro version), thus not be used for other 
domains?  Thanks again for the aid.
Unfortunately, there isn't any way to have different weights applied to 
different domains.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Keith Johnson
Scott,
Since we house mulitple domains (using spam filtering) and this filter test is 
used in the Global file it seems it would fail every other domain email (i.e. 1000 
weight) that we house on the same box?!  Is there a way to only define it for use in 
the default config file for that domain (we have the pro version), thus not be used 
for other domains?  Thanks again for the aid.
 
Keith

-Original Message- 
From: R. Scott Perry [mailto:[EMAIL PROTECTED] 
Sent: Tue 9/2/2003 6:41 PM 
To: [EMAIL PROTECTED] 
Cc: 
Subject: RE: [Declude.JunkMail] Need aid on Declude Header rule




>  I spoke to soon.  If I use the weighting method, it hurts my
> ability to use the Weight system to guard them against Spam.  Your 
thoughts...

Ah, I see.

In that case, you can have the same filter, but instead of having it
defined as "MYFILTER filter C:\IMail\Declude\myfilter.txt x -1000 0", you
could define it as "MYFILTER filter C:\IMail\Declude\myfilter.txt x 0
1000".  That way, any E-mail that triggers the filter will have the regular
spam control enabled, but any E-mail that does *not* trigger the filter
(E-mail not to current employees) will have a weight of at least 1000.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


<>

RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread R. Scott Perry

 I spoke to soon.  If I use the weighting method, it hurts my 
ability to use the Weight system to guard them against Spam.  Your thoughts...
Ah, I see.

In that case, you can have the same filter, but instead of having it 
defined as "MYFILTER filter C:\IMail\Declude\myfilter.txt x -1000 0", you 
could define it as "MYFILTER filter C:\IMail\Declude\myfilter.txt x 0 
1000".  That way, any E-mail that triggers the filter will have the regular 
spam control enabled, but any E-mail that does *not* trigger the filter 
(E-mail not to current employees) will have a weight of at least 1000.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Keith Johnson
Scott,
 I spoke to soon.  If I use the weighting method, it hurts my ability to use 
the Weight system to guard them against Spam.  Your thoughts...
 
Keith

-Original Message- 
From: Keith Johnson 
Sent: Tue 9/2/2003 1:27 PM 
To: [EMAIL PROTECTED] 
Cc: 
Subject: RE: [Declude.JunkMail] Need aid on Declude Header rule



Scott,
SWEET, that is a great idea, I'll give it a go, you are the man.

Keith Johnson


>CONTAINS *would* work in this way.  For example:
>
> HEADERS  -1000  CONTAINS  [EMAIL PROTECTED]
> HEADERS  -1000  CONTAINS  [EMAIL PROTECTED]
> ...
>
>
>In this case, an E-mail with "[EMAIL PROTECTED]" in the headers

>would always receive a weight less than 0.  You can then create a
"WEIGHT0"
>test that would delete all E-mail with a weight of 0 or higher.
>-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


<>

RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Keith Johnson
Scott,
SWEET, that is a great idea, I'll give it a go, you are the man.

Keith Johnson


>CONTAINS *would* work in this way.  For example:
>
> HEADERS  -1000  CONTAINS  [EMAIL PROTECTED]
> HEADERS  -1000  CONTAINS  [EMAIL PROTECTED]
> ...
>
>
>In this case, an E-mail with "[EMAIL PROTECTED]" in the headers

>would always receive a weight less than 0.  You can then create a
"WEIGHT0" 
>test that would delete all E-mail with a weight of 0 or higher.
>-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread R. Scott Perry
CONTAINS *would* work in this way.  For example:

HEADERS  -1000  CONTAINS  [EMAIL PROTECTED]
HEADERS  -1000  CONTAINS  [EMAIL PROTECTED]
...
In this case, an E-mail with "[EMAIL PROTECTED]" in the headers 
would always receive a weight less than 0.  You can then create a "WEIGHT0" 
test that would delete all E-mail with a weight of 0 or higher.
   -Scott

At 11:45 AM 9/2/2003, Keith Johnson wrote:
Scott,
The problem with using the CONTAINS is that I would have to have
a list of the ex-employees and the only list he can put together is the
good employees.  Thus if I used the CONTAINS I would be hitting good
employee email.  Any other suggestions, thanks for your time.
Keith

>What you could try is a filter using "CONTAINS", and then give the test
a
>negative weight (perhaps a weight of -1000).
---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Karen D. Oland
Keith,

What about at the client end? Could he not filter at his mail server to
refuse mail for non-local users?

It sounds like you need a "to" version of MAILFROM -- then you could delete
all those that failed the test.  Perhaps a domain rule that tests for each
of his vlalid user names and adds 100 pts if it fails?

Karen

> -Original Message-
> From: Keith Johnson
>
> Karen,
>   My bad, I failed to mention this is a Store and Forward
> domain...
>
> Keith
>
> -Original Message-
> From: Karen D. Oland
>
> Delete the nobody alias.  Then, only valid email in his domain will be
> accepted.

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Karen D. Oland
Delete the nobody alias.  Then, only valid email in his domain will be
accepted.  Delete all old employees not on the list of valid names you just
received from the domain.

> -Original Message-
> From: Keith Johnson
>   The problem with using the CONTAINS is that I would have to have
> a list of the ex-employees and the only list he can put together is the
> good employees.  Thus if I used the CONTAINS I would be hitting good
> employee email.  Any other suggestions, thanks for your time.

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Keith Johnson
Karen,
My bad, I failed to mention this is a Store and Forward
domain...

Keith

-Original Message-
From: Karen D. Oland [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 02, 2003 12:07 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Need aid on Declude Header rule


Delete the nobody alias.  Then, only valid email in his domain will be
accepted.  Delete all old employees not on the list of valid names you
just received from the domain.

> -Original Message-
> From: Keith Johnson
>   The problem with using the CONTAINS is that I would have to have
a 
> list of the ex-employees and the only list he can put together is the 
> good employees.  Thus if I used the CONTAINS I would be hitting good 
> employee email.  Any other suggestions, thanks for your time.

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Keith Johnson
Scott,
The problem with using the CONTAINS is that I would have to have
a list of the ex-employees and the only list he can put together is the
good employees.  Thus if I used the CONTAINS I would be hitting good
employee email.  Any other suggestions, thanks for your time.

Keith


>What you could try is a filter using "CONTAINS", and then give the test
a 
>negative weight (perhaps a weight of -1000).
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread R. Scott Perry

I have a customer who only wants to get email to a list of valid
employees, no one else (i.e. ex-employees).  However, the list of
ex-employees is too long for him to come up with, thus he gave me the
list of valids.  I looked, but I don't think Declude has a HEADER tag
called DOESNOT CONTAIN, does anyone have any suggestions.
Even that wouldn't work.  For example, if you had a DOESNOTCONTAIN option 
available to you, then an E-mail would have to be sent to *all* the valid 
employees in order not to fail the test (for example, if you have 
"DOESNOTCONTAIN user1" and "DOESNOTCONTAIN user2", it would be triggered if 
an E-mail was sent to "user1" (since the E-mail does not contain "user2").

What you could try is a filter using "CONTAINS", and then give the test a 
negative weight (perhaps a weight of -1000).

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.