Re: [Declude.JunkMail] statistical filtering

2003-09-09 Thread R. Scott Perry
is it possible for you to create a test that would use imail's antispam-table-ini.txt ? No. In order to do that, we would need to create a naive Bayes test that works exactly like the one that Ipswitch created. I'm sure we could come up with a better algorithm. :)

[Declude.JunkMail] JM log analyzer

2003-09-09 Thread Sharyn Schmidt
Title: JM log analyzer Good morning, I know a lot of you use some of the JM log analyzer tools that are listed on the Declude site. I am unsure which one is best suited to our needs. I am looking for something which will parse the JM logs, tell me how many emails have been processed

Re: [Declude.JunkMail] JM log analyzer

2003-09-09 Thread support
Sharyn, Please check out DLAnalyzer. DLAnalyzer can produce the reports you are looking for and in much greater detail. DLAnalyzer can produce Overall server summaries, Domain Test Summaries, and Advanced Reports Based on User, Domain, and Test. In addition, these reports can be formatted

[Declude.JunkMail] OT: Classless Reverse DNS Delegation and DNSStuff.com

2003-09-09 Thread Russ Uhte \(Lists\)
Greetings- I've attempted to setup classless reverse DNS delegation for a customer of mine. I think I have it done correctly, but I don't understand exactly what I'm seeing on www.dnsstuff.com when I do a reverse DNS query. The specific address I'm testing is 12.161.105.129. It appears that

Re: [Declude.JunkMail] Strange Subject

2003-09-09 Thread Mike Leonard
Matthew Bramble wrote: Use a text filter and add something like: SUBJECT 40 CONTAINS =?ISO-8859-1?b? to it. I tried this all the way down to ust ?b? and a SUBJECT filter didn't catch it. The SUBJECT filter also doesn't catch the decoded text. I sent one to myself before I posted, just to

RE: [Declude.JunkMail] Error in JM log

2003-09-09 Thread John Tolmachoff \(Lists\)
Sharyn, if your DNS server is on the same box as Imail, set it up to use 127.0.0.1, not the public IP address. Also, flush the cache on both Imail DNS cache and the W2K DNS. Have you checked to see if the W2K DNS is passing both tests? John Tolmachoff MCSE CSSA Engineer/Consultant eServices For

RE: [Declude.JunkMail] Error in JM log

2003-09-09 Thread Sharyn Schmidt
Have you checked to see if the W2K DNS is passing both tests? Yeah, it is now, I stopped and restarted the DNS service. Love it when things just quit working for no reason..job security. Sharyn We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged

Re: [Declude.JunkMail] Strange Subject

2003-09-09 Thread Matthew Bramble
Add www.spamchk.com Base64 encoded subject lines will be decoded before the keyword-check. Markus It's on my list of things to do. That would be the best of both worlds since this stuff always seems keyword rich. Right now I'm writing custom filters, and loving the results... Thanks,

Re: [Declude.JunkMail] Strange Subject

2003-09-09 Thread Matthew Bramble
Mike, I'm using v1.75i4 right now, is it possible that you are using a version older than 1.75? I tested my setup about 10 times before I gave up on the SUBJECT filter and moved to using HEADERS? BTW, regardless of how you do it or how it works, this is a great filter. It's not that common,

Re: [Declude.JunkMail] Strange Subject

2003-09-09 Thread Mike Leonard
Matthew Bramble wrote: Mike, I'm using v1.75i4 right now, is it possible that you are using a version older than 1.75? We're using 1.75. I don't know what the sub-version is. I downloaded it on 7/22. Maybe Scott could offer an explanation or hint as to why ours works and yours doesn't. I

[Declude.JunkMail] Detecting gibberish

2003-09-09 Thread Matthew Bramble
Scott, I've been trying out a custom gibberish filter made up of two character strings that are extremely uncommon in order to find a way to detect the spam that comes through with a linked image and a smattering of text. So far it's doing a great job of detecting this stuff, however it does

Re: [Declude.JunkMail] Foreign TLDs, was: Strange Subject

2003-09-09 Thread Matthew Bramble
Mike Leonard wrote: We got about 10 of these for V-pill over the weekend, that's why I set it up. I haven't seen any legitimate email get caught by this filter, but we don't normally get email from any non-English speaking countries (unless it's spam). Mike I've been meaning to share this

Re: [Declude.JunkMail] Detecting gibberish

2003-09-09 Thread R. Scott Perry
Could you let me know what it is exactly a BODY filter will search, and if this searching happens after BASE64 decoding? Does it search every character that appears below the header, including things like the message boundaries and attachments? The entire body will be searched (including MIME

Re: [Declude.JunkMail] Strange Subject

2003-09-09 Thread R. Scott Perry
I'm using v1.75i4 right now, is it possible that you are using a version older than 1.75? We're using 1.75. I don't know what the sub-version is. I downloaded it on 7/22. Maybe Scott could offer an explanation or hint as to why ours works and yours doesn't. My guess is some extra spaces/tabs

[Declude.JunkMail] AUTOWHITELIST

2003-09-09 Thread Sheldon Koehler
When Scott added the AUTOWHITELIST ON option to Declude, someone posted a wonderful text file explaining to end users how to add email addresses to their webmail. I cannot find this. Can someone post it or email a copy to me please? Sheldon Sheldon Koehler, Owner/Partner

[Declude.JunkMail] Article on News.Com

2003-09-09 Thread Sean Fahey
Finally. http://news.com.com/2100-1028_3-5073441.html?tag=fd_top --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe

RE: [Declude.JunkMail] Article on News.Com

2003-09-09 Thread Andy Schmidt
Oh, they are not blocking the servers from spamming to the REST of the world, they are only blacklisting servers from delivering mails into China. E.g., they are targeting servers in Taiwan and elsewhere that are spamming INTO China. Servers that are in China and are spamming into the U.S. don't

Re: [Declude.JunkMail] Detecting gibberish

2003-09-09 Thread Matthew Bramble
First, I must correct myself...the SUBJECT test for the ISO/Base64 line is working without any changes and after further testing. I have no clue as to how I screwed this up on so many tests, but apparently I did unless that is related to the other mysterious behavior with my system not

RE: [Declude.JunkMail] Article on News.Com

2003-09-09 Thread Kevin Bilbee
They are blocking spam from reaching chinese internet users acourding to the article. Now if they were blocking the servers traffic from leaving china that would be a victory. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Sean Fahey

Re: [Declude.JunkMail] AUTOWHITELIST

2003-09-09 Thread Sheldon Koehler
Never mind... I found that I had saved it from a web page someone sent me and I have a text file already. Here is the text in case someone else wants it: Personal Whitelist A personal whitelist allows you to accept email messages from any email address you want no matter how many Spam tests the

Re: [Declude.JunkMail] Detecting gibberish

2003-09-09 Thread Matthew Bramble
Thanks Scott, that explains pretty much everything. I'm sure you are well aware of the problem with gibberish in spam, especially if you are moving towards Bayes filtering with Declude. Is it possible to come up with a filter like say BODYTEXT that processes just decoded text and ignores

Re: [Declude.JunkMail] Detecting gibberish

2003-09-09 Thread R. Scott Perry
I'm sure you are well aware of the problem with gibberish in spam, especially if you are moving towards Bayes filtering with Declude. Just for the record, we don't have plans to implement more Bayes filtering in Declude (we did years ago, before the Paul Graham article, and found that it just

RE: [Declude.JunkMail] Detecting gibberish

2003-09-09 Thread Colbeck, Andrew
Chipping in my two cents (Hi, I'm back from vacation!) I'm waiting for something like BODYTEXT instead of BODY so that I can stop getting false positives from short sequences showing up in attachment encoding. I had to stop trying to filter: grx grx2 t1t MLM d0rm /ad /ads because they came up

[Declude.JunkMail] Imail queue stuck

2003-09-09 Thread Timothy C. Bohen
I know this is an Ipswitch problem but I think I remember seeing this mentioned here before. A couple times today my SMTP stops, I restart and I get all my mail but it seems to just get stuck in the queue. Any suggestions? I noticed this. http://support.ipswitch.com/kb/IM-19990730-DM01.htm In

[Declude.JunkMail] DSN: Not supporting null originator (DSN)

2003-09-09 Thread Bennie
Please explain this to me... X-RBL-Warning: DSN: Not supporting null originator (DSN) Bennie --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list.

Re: [Declude.JunkMail] Headers....

2003-09-09 Thread Bennie
I looked at that dnsstuff link you listed... but look at this one http://www.dnsstuff.com/tools/ptr.ch?ip=12.35.63.10 Bennie - Original Message - From: Eje Gustafsson [EMAIL PROTECTED] To: Bennie [EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 10:49 PM Subject: Re:

Re: [Declude.JunkMail] Headers....

2003-09-09 Thread Matthew Bramble
Bernie, The DSN failure means that your server isn't set up to receive messages sent from senders (null senders). There's a checkbox for this in IMail's SMTP configuration menu. You also might want to go to rfc-ignorant.org and see what you need to do in order to get out of their list, but

[Declude.JunkMail] New test request

2003-09-09 Thread John Tolmachoff \(Lists\)
How about a test like this: NUMBERSINMAILFROM It would be similar to SUBJECTSPACES but would count the amount of numbers in the mail from address. You could then configure it for say if 10 or more, add 5 to the weight and so forth. John Tolmachoff MCSE CSSA Engineer/Consultant eServices