[Declude.JunkMail] Charset filter.

2002-11-27 Thread eddie pang
Does anyone check the charset of a email? We are receiving a bunch of korean emails from hotmail and yahoo, I was wondering if anyone has setup a filter isolating emails by charsets? Thanks, Eddie :) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-

RE: [Declude.JunkMail] Long Weekend

2002-11-27 Thread Tom
> FYI, just in case Scott does take some time off, > (cough cough) I will be around. (As if that would actually help.) As am I. Though, like John said, don't know how much this will help. Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

RE: [Declude.JunkMail] SpamReview Web App Released

2002-11-27 Thread Charles Frolick
I caught a bug in rules file processing. It only affected the setRuleFile function for local rules, remote rules (which is how I am set up) has no known issues. The new version has been posted. Thanks, Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL P

[Declude.JunkMail] Long Weekend

2002-11-27 Thread John Tolmachoff
FYI, just in case Scott does take some time off, (cough cough) I will be around. (As if that would actually help.) John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http

RE: [Declude.JunkMail] "Greeting" Card EULA Abusers

2002-11-27 Thread Madscientist
Message Sniffer now has a new experimental rule group "Scumware Greetings" that contains all of the domains mentioned in the following message. The new rulesets for this have been published. Version 2 users will see symbol 62 for this group. If anybody has a reliable source for the growing list we

RE: [Declude.JunkMail] Should postmaster or abuse accept all e-mail?

2002-11-27 Thread John Tolmachoff
Scott said: >You can add "WHITELIST TO [EMAIL PROTECTED]" and "WHITELIST TO >[EMAIL PROTECTED]" to the \IMail\Declude\Global.cfg file to whitelist >E-mail to those domains (even if you are not running the Pro version, you >can whitelist E-mail to postmaster@ and abuse@ accounts). And Darrell s

RE: [Declude.JunkMail] Should postmaster or abuse accept all e-mail?

2002-11-27 Thread John Tolmachoff
>It has been my findings that most spam that really needs to be deleted comes from >servers that have neither a postmaster@ or abuse@. Personally, I feel its a waste of >resources to try and bounce it back to those addresses. If they have no A / MX >record and are on a blacklists, they need to be c

RE: [Declude.JunkMail] Should postmaster or abuse accept all e-mail?

2002-11-27 Thread John Shacklett
Title: Message I think that misses the point of this thread: If I'm bouncing [or rejecting outright] mail from a host or domain, then they have no appeal recourse unless I can open up a safe channel for _SOME_ mail to flow through.   On the other hand, I have abuse@mydomains and postmaster@

RE: [Declude.JunkMail] Should postmaster or abuse accept all e-mail?

2002-11-27 Thread pholmes
Title: Message     It has been my findings that most spam that really needs to be deleted comes from servers that have neither a postmaster@ or abuse@. Personally, I feel its a waste of resources to try and bounce it back to those addresses. If they have no A / MX record and are on a blackli

RE: [Declude.JunkMail] Should postmaster or abuse accept all e-mail?

2002-11-27 Thread Darrell L.
Marc,   We actually whitelist the following addresses   WHITELIST TO postmaster@ WHITELIST TO abuse@   For the mentioned reasons below.   Darrell   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Marc Catuogno Sent: Wednesday, November

Re: [Declude.JunkMail] Should postmaster or abuse accept alle-mail?

2002-11-27 Thread R. Scott Perry
I've been using the delete action on a blacklist test for Junkmail. I also have a few ip ranges blocked. I was thinking that if anyone with any brains figured out that they were blocked that maybe they would e-mail postmaster or abuse. Should I have a separate junkmail file for one or both

[Declude.JunkMail] Should postmaster or abuse accept all e-mail?

2002-11-27 Thread Marc Catuogno
I've been using the delete action on a blacklist test for Junkmail.  I also have a few ip ranges blocked.  I was thinking that if anyone with any brains figured out that they were blocked that maybe they would e-mail postmaster or abuse.  Should I have a separate junkmail file for one or bot

[Declude.JunkMail] SpamReview Web App Released

2002-11-27 Thread Charles Frolick
I have posted a copy of my SpamReview web app for download. It is sourceware, modify to your needs. I will provide as much support as I can, but I can't promise a whole lot. It works well from my development and production servers and I have released it for use to my customers. The app can be p

Re: [Declude.JunkMail] KillListGen

2002-11-27 Thread Scott MacLean
oops. Sorry about that guys, fumble fingers caused that. It's back up, but I've moved it to where I should have put it in the first place to keep it from being deleted: http://www.nerosoft.com/Download/KillListGenInst.exe ...and for anyone who has a few minutes to kill, and wants a good laugh:

Re: [Declude.JunkMail] KillListGen

2002-11-27 Thread Thomas Juliano
>The link for the Killlistgenerator.exe is dead. Can someone post this >file or email it to me? Here is the master link http://www.nerosoft.com/ perhaps you could contact them about it. Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] ---

Re: [Declude.JunkMail] Bounce messages

2002-11-27 Thread Thomas Juliano
>1. created a fromfile test called JUNK >2. created a JUNKbounce.eml file >3. set the action of the test to BOUNCE >4. entered 2 known high volume addresses (that I already block) into my >junksenders.txt file (i.e. bounce@domain) >5. created a JUNKbounce.eml file > >Just waiting for the onslaught

Re: [Declude.JunkMail] Bounce Message

2002-11-27 Thread Thomas Juliano
>For those who have a small enough volume and bounce messages that fail >your spam tests how do you word your bounce messages. http://www.imagefxonline.net/apps/delog/bounce.txt edit it the way you want. Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www

RE: [Declude.JunkMail] Deleting Mail Inbound Mail

2002-11-27 Thread R. Scott Perry
I assume that would change it so that if one recipient on a mutilple recipient email got flagged, you would just remove that one recipient from the header and the email would still get delivered to the others as opposed to deleting the enitre email? That is correct. That is what we are plannin

RE: [Declude.JunkMail] Deleting Mail Inbound Mail

2002-11-27 Thread Dan Spangenberg
That would be good. Is the issue the same for filtering using a single text file as it is for the per-user configuration? I assume that would change it so that if one recipient on a mutilple recipient email got flagged, you would just remove that one recipient from the header and the email would st

RE: [Declude.JunkMail] OWA and BASE64

2002-11-27 Thread John Tolmachoff
>Doesn't this test reduce the weight of any message coming from an Exchange server regardless of whether or not the message fails BASE64? No, because the server itself does not publish it's version, only the client that creates the message does. For example, I received a postmaster NDR message th

[Declude.JunkMail] KillListGen

2002-11-27 Thread Johnson, Mike
The link for the Killlistgenerator.exe is dead. Can someone post this file or email it to me?   Thanks in advance.      I~ I~   I    I~ )_)  )_)  )_)   )___))___))___)\    )))_)\\ _III\\\__ -\ Venture Computer  /- ^^^ \ 

Re: [Declude.JunkMail] OWA and BASE64

2002-11-27 Thread Helpdesk
on 11/26/02 12:25 PM, John Tolmachoff wrote: > Here is what I have done as a work around: (JunkMail PRO) > > Create a filter test something like this: > > WHITEFILTER1 filter D:\imail\declude\whitefilter1.txtx00 > > Use these two lines in the whitefilter1.txt file: > > HEADERS -15

[Declude.JunkMail] BASE64 usage

2002-11-27 Thread John Tolmachoff
Even thought it has been determined that there is no legit REASON to use BASE64 encoding in the body, I am finding and increasing use of it. Most of these are junk, but it has caught a number of legit messages. Therefore, I have downgraded BASE64 from 15 to 12. Any one experiencing similar? Joh

RE: [Declude.JunkMail] Block IP

2002-11-27 Thread John Tolmachoff
I think that answer that was given before was not possible. However, I am working on an external program (not me, my programmers) that will probably do that. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message

RE: [Declude.JunkMail] Bounce messages

2002-11-27 Thread John Tolmachoff
>Anyone else doing something similar? >Comments are welcome Did you see Darrell's post at 5:50 this morning? Same comments. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude V

RE: [Declude.JunkMail] Increase in SPAMCOP listing

2002-11-27 Thread John Tolmachoff
>The problem with SpamCop is that if 2% of the mail from a server is considered spam by the recipients, it will be listed. If SpamCop would wise up and include the % in the TXT record, then the mailserver administrator could choose the percentage to filter on. Most spam is sent from servers t

RE: Re: [Declude.JunkMail] Increase in SPAMCOP listing

2002-11-27 Thread Darrell L.
I had the same thing happen to me yesterday as well. Got several complaints from AOL users. Darrell LaRock -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Brian Milburn Sent: Wednesday, November 27, 2002 10:00 AM To: [EMAIL PROTECTED] Subject: DSN:Re: [

[Declude.JunkMail] Block IP

2002-11-27 Thread Jerry Freund
I know I have asked this before, I will take notes this time.   How do I Block a IP that is connecting to my server but still receive emails from a certain email address? Jerry FreundInformation Systems SupervisorPhoenix Gold Int'l Inc. tel. 503.286.9300  ext. 530fax. 503.978.8531 WWW.PH

Re: DSN:Re: [Declude.JunkMail] Increase in SPAMCOP listing

2002-11-27 Thread Smart Business Lists
Brian, Wednesday, November 27, 2002 you wrote: BM> I have noticed this as well. Yesterday Spamcop failed several BM> legitimate messages from AOL users. Maybe they are not clearing BM> out the false reports as regularly as they normally do because of BM> the holiday week. Part of it is that they

[Declude.JunkMail] Bounce messages

2002-11-27 Thread Frederick P. Squib, Jr.
I'm trying an experiment today... 1. created a fromfile test called JUNK 2. created a JUNKbounce.eml file 3. set the action of the test to BOUNCE 4. entered 2 known high volume addresses (that I already block) into my junksenders.txt file (i.e. bounce@domain) 5. created a JUNKbounce.eml file Jus

Re: [Declude.JunkMail] Increase in SPAMCOP listing

2002-11-27 Thread R. Scott Perry
Has any one else noticed an increase in the number of legit companies listed on SPAMCOP? I have been having to increase my white filter list. Examples: Ebay.com Techrepublic.com winntmag.com That's most likely just because more and more recipients of E-mail from those companies are treating

DSN:Re: [Declude.JunkMail] Increase in SPAMCOP listing

2002-11-27 Thread Brian Milburn
Hi John, I have noticed this as well. Yesterday Spamcop failed several legitimate messages from AOL users. Maybe they are not clearing out the false reports as regularly as they normally do because of the holiday week. -Brian On 11/27/02 6:51am you wrote... >Has any one else noticed an increas

RE: [Declude.JunkMail] Which Version

2002-11-27 Thread Jerry Freund
THANK YOU -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Wednesday, November 27, 2002 6:54 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Which Version >I am running version 1.60 should I be using the beta since its the n

RE: [Declude.JunkMail] Which Version

2002-11-27 Thread John Tolmachoff
>I am running version 1.60, should I be using the beta since its the newest version? If you need a function or fix that has been introduced since 1.60, then yes. If you are beta testing CYBERsitter, yes. If you want to test a new feature, yes. But if you are fine with your setup and are having

Re: [Declude.JunkMail] Which Version

2002-11-27 Thread R. Scott Perry
I am running version 1.60 should I be using the beta since its the newest version? The question is would you prefer to be running the latest released version (1.60), or the latest beta (1.63)? Usually, the betas are very stable. With 1.63, which was released Monday, there are a few issues w

[Declude.JunkMail] Increase in SPAMCOP listing

2002-11-27 Thread John Tolmachoff
Has any one else noticed an increase in the number of legit companies listed on SPAMCOP? I have been having to increase my white filter list. Examples: Ebay.com Techrepublic.com winntmag.com John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.relia

RE: [Declude.JunkMail] Bounce Message

2002-11-27 Thread John Tolmachoff
Word of warning: Many SPAM messages do not have a valid from address. Therefore, in creating a bounce message, you will be adding bounce on top of bounce and creating more volume and traffic for your sever and the Internet. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc.

[Declude.JunkMail] Which Version

2002-11-27 Thread Jerry Freund
I am running version 1.60 should I be using the beta since its the newest version? Jerry FreundInformation Systems SupervisorPhoenix Gold Int'l Inc. tel. 503.286.9300  ext. 530fax. 503.978.8531 WWW.PHOENIXGOLD.COM WWW.CARVERPRO.COMWWW.AUDIOSOURCE.NET      

Re: [Declude.JunkMail] Product of HOP?

2002-11-27 Thread Smart Business Lists
Darrell, Wednesday, November 27, 2002 you wrote: DL> Is this a product of HOP or a hiccup on spamcop's side? hop DL> 11/26/2002 17:37:21 Qf79f094e00364534 Msg failed SPAMCOP (Blocked - see DL> http://spamcop.net/bl.shtml?205.188.139.134). Action=WARN. see http://spamcop.net/w3m?action=check

[Declude.JunkMail] Product of HOP?

2002-11-27 Thread Darrell L.
Is this a product of HOP or a hiccup on spamcop's side? 11/26/2002 17:37:21 Qf79f094e00364534 Msg failed SPAMCOP (Blocked - see http://spamcop.net/bl.shtml?205.188.139.134). Action=WARN. 20021126 173719 127.0.0.1 SMTPD (094E0036) [152.163.225.100] EHLO imo-r04.mx.aol.com 20021126 173719 127

[Declude.JunkMail] Bounce Message

2002-11-27 Thread Darrell L.
For those who have a small enough volume and bounce messages that fail your spam tests how do you word your bounce messages. For example we use the following line "The message was rejected because it failed the following SPAM detection tests and has been marked as SPAM." This tends to get a few r