Is there white paper on reading the junkmail log files? Like the one
that someone created on reading IMail logs.
Thanks,
Todd Holt
Xidix Technologies, Inc
Las Vegas, NV USA
www.xidix.com
702.319.4349
---
[This E-mail scanned for viruses by Declude Virus (http://www.declude.com)]
---
[This E-
I have a customer using Outlook Express 6 and each message he sends
fails the HELOBOGUS test as shown below:
10/10/2003 14:45:30 Q28770c310140cd76 HELOBOGUS:6 . Total weight = 6
10/10/2003 14:45:30 Q28770c310140cd76 Msg failed HELOBOGUS (Domain TONY
has no MX or A records.). Action=HEADER.
10/10/
Hi;
Yes we have been using it for a while.. With success. This is our filter.
HEADERS 12 CONTAINS X-IMAIL-SPAM-VALFROM
HEADERS 5 CONTAINS X-IMAIL-SPAM-VALHELO
HEADERS 12 CONTAINS X-IMAIL-SPAM-VALREVDNS
We have set i
Is anyone using the "VERIFY THE MAIL FROM" and "VERIFY THE EHLO/HELO DOMAIN"
features in Imail 8.x before running Declude with sucess?
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe
> You should never find an "@" in a REVDNS response, so the
> above entry would
> be useless.
Good point. Thanks
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-ma
- Original Message -
From: "Keith Anderson" <[EMAIL PROTECTED]>
> I've got it working now as a filter with these types of entries:
>
> revdns -900 endswith .domain.com
> revdns -900 endswith @domain.com
You should never find an "@" in a REVDNS response, so the above entry would
be us
This is correct. We stopped offering the IMail specific (non Declude) version
of Alligate a couple of months ago. We have also suspended free trials of the
Declude add-in until we can bring it up to date so that the same detection
methods are used by both the Declude version and our gateway versi
Hi Chuck:
We have done that and it works great for us.
We have designed a database that all spam data goes in there. All filter
parameters are entered in a relational table.
We have a script that downloads various queries into text files and then
they are copied on a schedule in the IMail direc
Thanks Scott:
The reason blocking IPs is not the answer is because I would have to spend
24 hours a day doing it. Also Imail's control access list is just a list of
IPs. It would be nice if the list was part of a database where you could
put dates and reasons for blacklisting IPs -
Chuck Schick
> That's the WHITELISTFILE option -- but, it won't work with
> reverse DNS entries yet. For that, you can
> use a filter, with negative weights.
I've got it working now as a filter with these types of entries:
revdns -900 endswith .domain.com
revdns -900 endswith @domain.com
mailfrom -9
I use BlackIce server.
Give me an idea as to what to look for and I will tell you if it is working.
Fred
- Original Message -
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, October 10, 2003 12:23 PM
Subject: Re: [Declude.JunkMail] Dictionary attacks ---
I am on version 1.76i5 I have been getting this error for many months, yes
even back on verison 1.6x
the error happens to every email that reaches the action weight of DELETE
Could you type "\IMail\Declude -diag" from a command prompt to double-check
that you are actually on 1.76i5? There was a
I was thinking more in the line of a item we sign sand send to the customer.
Some info to include
"Email Scan and Forward Polices.
We are committed to honoring the privacy of our users and visitors.
We never sell or make available individual names, lists of users, or
aggregate data to any third
Could someone post an example of an external filter used as a replacement
for the GLOBAL.CFG whitelist entries?
Most specifically, the REVDNS entries... I can't seem to get the right
thing working. I'm still new at this.
That's the WHITELISTFILE option -- but, it won't work with reverse DNS
ent
We are constantly getting hammered with dictionary attacks. Does anyone
have any solutions? Does the new version of Imail address this issue?
Whenever I check a lot of it comes from open proxies.
Blocking the IPs is not a solution. Any ideas are appreciated.
Blocking the IPs is the only solutio
FYI
-Original Message-
From: Brian Milburn [mailto:[EMAIL PROTECTED]
Sent: Friday, October 10, 2003 12:05 PM
To: [EMAIL PROTECTED]
Subject: Re: Alligate Information Request
Hi,
Thanks for your interest in Alligate for IMail.
We have decided we are no longer going to offer an I
This email message is for the sole use of the intended recipient(s) and may
contain confidential and privileged information. Any unauthorized review,
use, disclosure or distribution of this email is prohibited. If you are not
the intended recipient, please contact the sender and destroy all paper a
Terrific, thank you.
> -Original Message-
> From: DLAnalyzer Support [mailto:[EMAIL PROTECTED]
> Sent: Friday, October 10, 2003 9:48 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [Declude.JunkMail] External whitelist filter
>
>
> This is what I use and I have been very pleased with the resu
This is what I use and I have been very pleased with the results..
Global.cfg entry
REVERSEWEIGHTDNS filter x:\IMail\Declude\ReverseDNSFilter.txt x 0
0
Sample File Contents
REVDNS -3 ENDSWITH .kodak.com
REVDNS -3 ENDSWITH .mx.aol.com
REVDNS -3 ENDSWITH .dell.com
Hope this
We are constantly getting hammered with dictionary attacks. Does anyone
have any solutions? Does the new version of Imail address this issue?
Whenever I check a lot of it comes from open proxies.
Blocking the IPs is not a solution. Any ideas are appreciated.
Chuck Schick
Warp 8, Inc.
303-421-5
Does anyone have a good disclaimer/confidentiality agreement they would like
to share.
I offering Email and Scan/forward services. Recently I have been asked for a
copy of our disclaimer/confidentiality agreement.
Not wanting to re-invent the wheel I am asking the list to see if someone
would lik
Scott
I am on version 1.76i5 I have been getting this error for many months, yes
even back on verison 1.6x
the error happens to every email that reaches the action weight of DELETE
see attached the two files .GPx files form c:\ and my two Config files and
part of log file
Sincerely,
William
Could someone post an example of an external filter used as a replacement
for the GLOBAL.CFG whitelist entries?
Most specifically, the REVDNS entries... I can't seem to get the right
thing working. I'm still new at this.
Thanks
---
[This E-mail was scanned for viruses by Declude Virus (http
Reply to: R. Scott Perry
Re: [Declude.JunkMail] Null Sender on Friday 8:03:42 AM
Ah, thanks!
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
>>Would this work if it is '<>' as it most commonly is? Then it is
>>truly not blank... I think Block
Would this work if it is '<>' as it most commonly is? Then it is
truly not blank... I think Block Null Sender covers this instance.
It would be nice to have an alternative that was RFC compliant.
It would probably be best to use both:
MAILFROM 2 ISBLANK
and
MAILFROM 2 IS <>
That way, whic
On Oct 9, 2003, at 10:46 PM, Frederick Samarelli wrote:
The message was sent from a process AOL has to notify ip subnet owners
when
someone complains about an email sent to an AOL user.
What you see is what I get all the time from AOL.
I can give you my AOL contact if you like.
Actually what wo
Reply to: R. Scott Perry
Re: [Declude.JunkMail] Null Sender on Friday 7:16:33 AM
Would this work if it is '<>' as it most commonly is? Then it is
truly not blank... I think Block Null Sender covers this instance.
It would be nice to have an alternative that was RFC compliant.
--
Roger Heath
So HELO of Micorosoft.com should only be allowed if REVDNS is also
Microsoft and email is Microsoft.com.
Or can we do this already?
That sounds like it would be a good extension to the SPAMDOMAINS test
(which checks for return address and reverse DNS matches).
Is there anyway to assign points to a null sender? Most null sender
emails I get are spam and was wondering if I could assign a point value to
null sender?
I believe you could set up a filter, and add this line to the filter file:
MAILFROM 2 ISBLANK
Scott,
Is there anyway to assign points to a null
sender? Most null sender emails I get are spam and was wondering if I
could assign a point value to null sender?
Bennie
Hi;
I wonder if a test
could be setup that checks for the integrity of the email. For
example:
===
X-Declude-Sender:
[EMAIL PROTECTED]
[67.121.210.25]X-Declude-Spoolname: D17aa0bbd0062ac07.SMDX-Note: This
E-mail was scanned & filtered by Declude [1.76i5] for SPAM &
virus.X-Weight: 13X
31 matches
Mail list logo
