Now - whether the parent servers do have or don't have any glue - why would
THAT effect your ability to compare 65.119.204.32 with 63.107.174.24 and
plainly see that they are NOT in the same Class C address space?
Because the Class C test in the DNS Report sees and , not
65.119.204.32 and
Delude Support network.
Boy have things gone downhill. We are getting thousands of spam mail
getting through back to our customers. Its like declude Spam filtering just
stopped working completely Even looking at the deccon viewer it is not
showing the action being taken on any email.
Can anyone
Looking at some logs for a client, and was slightly horrified. This guy
runs DECLUDE on a P-3 333mhz machine with 256 meg of RAM, off of half a
T-1. He WAS running about 2/3's of this level last month. Keep in mind,
he only has 80+/- users. He is getting about 95% kill ratio on his SPAM.
He has
How will this filter deal with this
header.
Received: from scmp-m01.mail.aol.com
(scmp-m01.mail.aol.com [172.20.75.169]) by omr-m01.mx.aol.com (v95.1) with ESMTP
id RELAYIN6-Received: from
imo-r04.mx.aol.com (imo-r04.mail.aol.com [172.31.37.4]) by scmp-m01.mail.aol.com
(v92.16) with ESMTP
Can anyone help me or shed some light on what has happened and how to fix it.
The first thing to do is go to a command prompt and type \IMail\Declude
-diag. You can check the Declude JunkMail Status: line to make sure
that it says registered (otherwise, it won't be running).
The next thing to
I have added the following line to both GIBBERISH and ANTIGIBBERISH tests:
BODY0 CONTAINSQS-9000
BODY0 CONTAINSQS9000
BODY0 CONTAINSQS 9000
This is in response to messages that mention certifications, specifically
the
How will this filter deal with this header.
Received: from scmp-m01.mail.aol.com (scmp-m01.mail.aol.com
[172.20.75.169]) by omr-m01.mx.aol.com (v95.1) with ESMTP id RELAYIN6-
Received: from imo-r04.mx.aol.com (imo-r04.mail.aol.com
[172.31.37.4]) by scmp-m01.mail.aol.com (v92.16) with ESMTP
Does the incoming mail to an account that is forwarded out of the server to another
ISP's mail server get checked for spam before it is forwarded ?
--
Avolve Support
Get High Speed Internet - Go Wireless !
http://www.avolvewireless.net
--
---
[This E-mail scanned for viruses by Declude Virus By
I'll add these to the list that I maintain as well for both the
ANTIGIBBERISHSUB and ANTIGIBBERISH filters. You shouldn't need to add
these to the base filters though since the two letter string will trip
it without any assistance.
I took note of your parts suggestion as well, but haven't yet
Does the incoming mail to an account that is forwarded out of the server
to another ISP's mail server get checked for spam before it is forwarded ?
Yes, it does.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail
Matt can I take a look at an updated version of you files.
Fred
- Original Message -
From: Matthew Bramble [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, October 08, 2003 11:48 AM
Subject: Re: [Declude.JunkMail] GIBBERISH test adjustment
I'll add these to the list that I
I'll add these to the list that I maintain as well for both the
ANTIGIBBERISHSUB and ANTIGIBBERISH filters. You shouldn't need to add
these to the base filters though since the two letter string will trip
it without any assistance.
I did not want to loose the QS, so I added the legit use of
This is what Diag Told Me
Why did my spam mail registration key stop?
Diagnostics ON (Declude v1.65).
Declude JunkMail: Config file found (E:\imail\Declude\global.CFG).
Declude Virus: Config file found (E:\imail\Declude\Virus.CFG).
Declude Hijack:Not installed (no
Thanks !
-- Original Message --
From: R. Scott Perry [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date: Wed, 08 Oct 2003 11:51:13 -0400
Does the incoming mail to an account that is forwarded out of the server
to another ISP's mail server get checked
John Tolmachoff (Lists) wrote:
I'll add these to the list that I maintain as well for both the
ANTIGIBBERISHSUB and ANTIGIBBERISH filters. You shouldn't need to add
these to the base filters though since the two letter string will trip
it without any assistance.
I did not
This is what Diag Told Me
Why did my spam mail registration key stop?
Your activation code stopped working when you changed the Official Host
Name of the server (you know that warning that IMail pops up when you do
that...?)
If you change it back to the original Official Host Name, then
Fred,
If you don't mind a short delay, I just finished the design on my new
site in which I am planning on placing this stuff. Given a little bit
of additional time to populate the pages in question and clean up the
files, I'll have this ready to download shortly. If you have the most
recent
I did not change the host name of our mail server. Below is what I did do
with Imail tech support
Imail had two host names Scooby running on a local ip 192.168.1.2 and
Scooby.linkbrokers.com running on public ip 64.118.70.2 some features of
I mail were not fuctioning because it was looking
Title: Message
Hello
Matthew,
Probably should have sent this off-list but I just want you to know how
much we appreciate the work you share with the group. Your filters have helped
reduce our spam significantly. I know how often we seem to complain when things
don't go right but how
I did not change the host name of our mail server. Below is what I did do
with Imail tech support
Imail had two host names Scooby running on a local ip 192.168.1.2 and
Scooby.linkbrokers.com running on public ip 64.118.70.2 some features of
I mail were not fuctioning because it was
This may have been asked already, but I could not find it in the archives...
in the spamdomains.txt file, can I use an entry like:
.br
to block all mail from Brazil or is that going to be too broad?
That would work (blocking any E-mail with a return address with .br in
it, which came from a
Title: Message
This may have been
asked already, but I could not find it in the archives...
in the
spamdomains.txt file, can I use an entry like:
.br
to block all mail
from Brazil or is that going to be too broad?
Jon
Lapp
Computer
Systems Specialist
Northstar
Computer Forms, Inc.
I did not change the host name of our mail server. Below is what I did
do
with Imail tech support
Imail had two host names Scooby running on a local ip 192.168.1.2 and
Scooby.linkbrokers.com running on public ip 64.118.70.2 some features
of
I mail were not fuctioning because it was
I just wanted to point out that you would not in fact lose the QS hit the
way I suggested because it will hit QS in the main file and then get credit
back for QS-9000 in the anti file. Putting QS-9000 in the main file is
redundant with the two letter strings that appear there.
Ah, gotcha.
Hello
Any ideas how to block the spam message from MS Customer Assistance? I
keep getting it and want to stop it! Aarrrgghhh.
Also, I have noticed an increase in the amount of spam getting through.
In particular, more and more sporno (porn). Is this because of the spam
domains being attacked
The MS Customer Assistance emails are probabley from the Swen virus.
Setup a filter.
BODY 0 CONTAINS BRBRBRMessage follows:BRBR
BODY 0 CONTAINS BRBRBRUndeliverable to
BODY 0 CONTAINS iframe src=3Dcid:
BODY 0 CONTAINS Run attached file. Choose Yes on displayed dialog box.
BODY 0 CONTAINS Run
What spam from MS Customer Assistance? Can you post the headers?
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Bridges, Samantha
Sent:
Here are the headers and thanks for the reply.
Microsoft Mail Internet Headers Version 2.0
Received: from apollo.misd.net ([64.88.0.98]) by xmail1.macombisd.org
with Microsoft SMTPSVC(5.0.2195.6713);
Wed, 8 Oct 2003 14:59:54 -0400
Received: from SMTP32-FWD by apollo.misd.net
(SMTP32)
Samantha, if you look at the Declude Sender header, you will see this is not
from Microsoft, but rather a virus. (Or corrupt version of.)
There have been some posts here and on the Virus list of filters to use to
trap these.
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
I know that most admins are looking for no/low cost spam protection, but
I have to say that sniffer (at $300/yr) is the single best investment
(except for the requisite Declude, of course) to detect spam. And I
find it's most accurate on sporn. We obviously use the other detection
methods such
I have a customer that has 2 computers behind a d-link router
implementing NAT. One computer works fine and can goto www.google.com
just fine. The other computer, however, cannot.
The computer that works correctly returns 216.239.57.99 for google.
The other computer returns 207.44.194.56.
This problem also appears when trying to use www.altavista.com, but
www.yahoo.com, www.lycos.com seem fine.
Has anyone seen this before? Could this be a virus, spyware, etc?
This looks like the QHosts-1 virus. See
http://us.mcafee.com/virusInfo/default.asp?id=descriptionvirus_k=100719
for
I was just wondering ifanyone
hasimplemented spamassassin with declude(as external filter)
?
There is an easy to use .exe version available from
http://www.drbig.co.uk/modules/mydownloads/.
At the moment I use SAproxy which filters a lot
with its Bayesian classifier etc.
ButI would like to
What can I say except thanks in return :)
It's somewhat a community project though, so let's not forget those
that provide the feedback for which I am only a conduit. We all
benefit from that.
Matt
JR Tatum wrote:
Message
Hello Matthew,
Probably should have sent this
Not to mention that spamdomains should catch it as well.
-Original Message-
From: John Tolmachoff
Samantha, if you look at the Declude Sender header, you will see
this is not
from Microsoft, but rather a virus. (Or corrupt version of.)
There have been some posts here and on the
On Oct 8, 2003, at 11:22 AM, Karen D. Oland wrote:
Received: from scmp-m01.mail.aol.com (scmp-m01.mail.aol.com
[172.20.75.169]) by omr-m01.mx.aol.com (v95.1) with ESMTP id RELAYIN6-
Received: from imo-r04.mx.aol.com (imo-r04.mail.aol.com
[172.31.37.4]) by scmp-m01.mail.aol.com (v92.16) with
On Oct 8, 2003, at 11:22 AM, Karen D. Oland wrote:
I imagine you would need a rule for mx.aol.com and mail.aol.com (good
thing
Josh has confirmed that mail.aol.com is never used!).
What I said was I don't believe mx5.aol.com should be any of our
mail server zones or servers...
Where do you get
Scott:
My Global.cfg contains:
BYPASSWHITELIST bypasswhitelisting 20 1 0 0
BYPASSMULTIRECP bypasswhitelisting 15 4 0 0
PREWHITELISTON
AUTOWHITELIST ON
Yet, here's one of many messages with 6 recipients and a weight of 26 that
does get whitelisted:
10/08/2003 23:39:15 Qd81d109f0148f5b6
We have a problem with some of our dialup customers. We lease our
dialup modems so their mail fails the IPNOTINMX, EASYNET and other
tests. We flag WEIGHT10 mail as possible spam so their mail now gets
flag.
Since I can't whitelist every single local email address in all the
different domains we
39 matches
Mail list logo
