RE: [Declude.JunkMail] Dial-ups

2003-10-16 Thread R. Scott Perry

Scott, can you clarify something about the "DUL" and "DYNA" fragments in the
test name?
I've got an "ipfile" test that I'd like to only run against the first IP, so
I renamed it YADDA-DYNA but it is still running against my full hop count.
Does the nifty "DUL" and "DYNA" name hop restriction only work for "ip4r"
tests?
Sorry, they only work for the ip4r tests.

The ipfile test types only work with the IP of the remote mailserver (the 
first IP that isn't bypassed with the IPBYPASS or HOP settings).

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Dial-ups

2003-10-16 Thread Colbeck, Andrew
Scott, can you clarify something about the "DUL" and "DYNA" fragments in the
test name?

I've got an "ipfile" test that I'd like to only run against the first IP, so
I renamed it YADDA-DYNA but it is still running against my full hop count.
Does the nifty "DUL" and "DYNA" name hop restriction only work for "ip4r"
tests?

Andrew 8)

-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, October 15, 2003 10:55 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Dial-ups



>With regard to the headers below, 68.116.154.119 should not be
>considered by the dial-ups test, correct?  It is failing, however.
>Do I have a config issue?
>
>
>DIALUPS ip4rdialups.visi.com

The problem is that Declude JunkMail doesn't know that "DIALUPS" is a test 
that should only be checked against the first IP.  The test name needs to 
have "DUL" or "DYNA" in it in order for Declude JunkMail to only run the 
test on the first IP.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Dial-ups

2003-10-15 Thread Bill Landry
- Original Message - 
From: "R. Scott Perry" <[EMAIL PROTECTED]>

> >What about "DUN", as in DNSRBL-DUN, and PDL?  Do these test names need to
be
> >changed to "DNSRBL-DUL"and "PDL-DUL" (or -DYNA)?
>
> It would be best to change them.  We're going to look into this a bit more
> -- we just don't want to add something that shouldn't be added.  If the
> people running the tests could just use a standard format...

Okay, so you will probably want to update the test names on your spam
databases site:

http://www.declude.com/Junkmail/support/ip4r.htm

Bill

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Dial-ups

2003-10-15 Thread R. Scott Perry

What about "DUN", as in DNSRBL-DUN, and PDL?  Do these test names need to be
changed to "DNSRBL-DUL"and "PDL-DUL" (or -DYNA)?
It would be best to change them.  We're going to look into this a bit more 
-- we just don't want to add something that shouldn't be added.  If the 
people running the tests could just use a standard format...

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Dial-ups

2003-10-15 Thread Bill Landry
- Original Message - 
From: "R. Scott Perry" <[EMAIL PROTECTED]>

> The problem is that Declude JunkMail doesn't know that "DIALUPS" is a test
> that should only be checked against the first IP.  The test name needs to
> have "DUL" or "DYNA" in it in order for Declude JunkMail to only run the
> test on the first IP.

What about "DUN", as in DNSRBL-DUN, and PDL?  Do these test names need to be
changed to "DNSRBL-DUL"and "PDL-DUL" (or -DYNA)?

Bill

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Dial-ups

2003-10-15 Thread R. Scott Perry

With regard to the headers below, 68.116.154.119 should not be
considered by the dial-ups test, correct?  It is failing, however.
Do I have a config issue?
DIALUPS ip4rdialups.visi.com
The problem is that Declude JunkMail doesn't know that "DIALUPS" is a test 
that should only be checked against the first IP.  The test name needs to 
have "DUL" or "DYNA" in it in order for Declude JunkMail to only run the 
test on the first IP.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Dial-ups

2003-10-15 Thread Colbeck, Andrew
True, you do not get a trigger on the host that sent you the message
(209.225.8.34) but the hop before it does trigger this DIALUPS test.

You have your HOPHIGH set to at least 1... which isn't a bad thing but is
more aggressive than you expected?

Andrew 8)

-Original Message-
From: Don Brown [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, October 15, 2003 10:09 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Dial-ups


Scott,

With regard to the headers below, 68.116.154.119 should not be
considered by the dial-ups test, correct?  It is failing, however.
Do I have a config issue?


DIALUPS ip4rdialups.visi.com

Received: from remt24.cluster1.charter.net [209.225.8.34] by
inetconcepts.net with ESMTP
  (SMTPD32-6.06) id A38019790128; Wed, 15 Oct 2003 11:19:12 -0500
Received: from [68.116.154.119] (HELO compaq)
  by remt24.cluster1.charter.net (CommuniGate Pro SMTP 4.0.6)
  with SMTP id 588691 for [EMAIL PROTECTED]; Wed, 15 Oct 2003
12:22:55 -0400

Thanks,




Don Brown - Dallas, Texas USA Internet Concepts, Inc.
[EMAIL PROTECTED] http://www.inetconcepts.net
PGP Key ID: 04C99A55  (972) 788-2364  Fax: (972) 788-5049
Providing Internet Solutions Worldwide - An eDataWeb Affiliate


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.