Hello,
reply from Ipswitch:
IMail does not yet support international IDN characters.
This is in our Requested Features database. I do not know how
soon this will be added.
Alex
-Original Message-
From: Hirthe, Alexander [mailto:[EMAIL PROTECTED]
Sent:
Matt -
what are you considering to be the return code for AHBL-DUL?
-Nick Hayer
-- Original Message --
From: Matt [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date: Thu, 19 Feb 2004 18:45:26 -0500
This only works with Pro versions of the 1.78 beta
"Please return the favor and share with me any
FP's that you see on this test so that I can make adjustments for the benefit of
myself as well as others."Matt:
Interesting test.. I added your filters to our system
and just checked the log files. I simply added the test withzero weight to
nick wrote:
Matt -
what are you considering to be the return code for AHBL-DUL?
SORBS-DULip4rdnsbl.sorbs.net127.0.0.1000
NJABL-DULip4rdnsbl.njabl.org127.0.0.300
NJABL-DYNAip4rdynablock.njabl.org127.0.0.30
Looking on the bondedsender.com web site, I see no where to report things
like this:
Received: from adsl-68-78-114-74.dsl.emhril.ameritech.net
(adsl-68-78-114-74.dsl.emhril.ameritech.net [68.78.114.74])
Received: from ebay.com (data.ebay.com [66.135.195.180])
From: eBay Service [EMAIL PROTECTED]
Kami,
I turned SKIPIFWEIGHT off for this version of the test and found that
it scored over 40% of my spam. With SKIPIFWEIGHT on, it scores around
3% to of the spam (stuff that would have been held or hadn't yet
reached a hold weight). Because this hits only combinations of tests,
you are much
Matt:
What I like about Scott's new feature (not his own but that of Declude :)
) - is it makes triggering the CPU intensive filters (like our URL in body,
etc.) less likely to be used.
A lot of the ones that are deleted in our system hit our word filters and
URL in body filters. If this
Thanks for the help. That worked.
When I change the action to REROUTE or MAILBOX, it doesn't reroute to a
mailbox. When I se the action to WARN, I can see the warning in the
headers.
Do only some actions work with outgoing email?
-Original Message-
From: R. Scott Perry
Matt,
Don't remove any tests yet.
They are just not being REPORTED if you use the new TestFailed...
Contains... syntax to consolidate certain tests into one filter!
I'm ready to report this bug - just documenting it now.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent
Scott: Any chance for adding a skip test if the weight is below a certain
negative number.
That is something that we will be looking into.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude
here a Declude log, version 1.78. Notice how it ends up with two
different tests failed lines?
Correct. There is one for each recipient.
The second one lists much FEWER tests - but the same weight?
Correct. That's because only tests that have an action greater than LOG or
have a weight
Kami, I am not sure how good that would
be. The whole reason of giving negative weights is to counter balance possible failures
on other tests. Otherwise, the tests giving such negative weights would in essence
become white listings.
John Tolmachoff
Engineer/Consultant/Owner
But Scott:
The receipients looked the same to me?
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
-Original Message-
The receipients looked the same to me?
It's hard to tell what happened. At LOGLEVEL HIGH, Declude JunkMail will
record which log file was used for each recipient, which can help in
determining what happened. I'm guessing it has something to do with
SWITCHRECIP ON.
That's because only tests that have an action greater than LOG ... are
listed.
Hm - did I hear this correctly?
When I specify LOG then they do NOT appear in the LOG? That sounds
contra-intuitive to me. The option should be called NOLOG, if that's what
it does.
It's one thing to hide actions
John..
Yes but .. (always a but)..
We have all these tests that are great for catching spam.. e.g. our free
email list- that list has domains of free emails. Naturally if an email is
market by AutoWhite with -100 then I rather not have the free email be
checked..
If certain emails pass
Is there a way to get Declude JM Pro to *just* do blacklist lookups and
run filters? I have my global.cfg chopped down to this, but
loglevel=debug shows Declude is still toing revdns lookups. Can this
and anything else 'extra' be switched off?
Thx,
That's because only tests that have an action greater than LOG ... are
listed.
Hm - did I hear this correctly?
Yes, I just didn't state it correctly; it should be greater than or equal to.
-Scott
---
Declude JunkMail: The advanced anti-spam
Is there a way to get Declude JM Pro to *just* do blacklist lookups and
run filters? I have my global.cfg chopped down to this, but
loglevel=debug shows Declude is still toing revdns lookups. Can this
and anything else 'extra' be switched off?
Unfortunately, there is currently no way to turn
Hi Scott:
Sorry - may be my point got lost in the first question. My point is, that
the medium log was created to eliminate verbose line-by-line information
that the full log has. So now we have the summary line.
But, when I specify LOG as an action then they do NOT appear in the LOG?
That
But, when I specify LOG as an action then they do NOT appear in the LOG?
They do. Only if the action is IGNORE *and* the weight is 0 will it not
appear.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since
Hi Scott,
Now tests can be triggered and there is NO trace for that ever having
happened? That can't be good, specially now that filters can be used instead
of weights to process TESTSFAILED.
Again, I respectfully submit that at least the SUMMARY line (the last line
in the medium log) must be
Now tests can be triggered and there is NO trace for that ever having
happened?
It has always worked this way. If you don't want the tests logged, they
won't be logged.
That can't be good, specially now that filters can be used instead
of weights to process TESTSFAILED.
The filters work on all
Sorry ScottI meant ROUTETOI typed what I was thinking I wanted
it to do rather than the actual command. I did put a ROUTETO as the
action. With blacklist as the test name, the actual entry was this:
Blacklist ROUTETO [EMAIL PROTECTED]
So what actions work on the outgoing email? I want
Sorry ScottI meant ROUTETOI typed what I was thinking I wanted
it to do rather than the actual command. I did put a ROUTETO as the
action. With blacklist as the test name, the actual entry was this:
Blacklist ROUTETO [EMAIL PROTECTED]
I would recommend upgrading to the latest beta --
I was hoping that someone else would answer this since I've been a bit
down on Bonded Sender lately for their practice of allowing some
spammers on their system and other things.
Regardless, this isn't the fault of Bonded Sender, you are scanning on
multiple hops and the spammer forged the
Scott,
While subject decoding can be useful if you have a bunch of key phrase
filters, currently it is disabling my ability to tag the E-mail as
having base64 encoding of certain character sets.
Any chance that you could allow it to be scanned both ways like you do
with the body base64, or
I don't want to annoy you - I'm just trying to figure out why I'm having
such a hard time comprehending this. The manual states:
IGNORE = Does nothing (except add a log entry). Same as LOG action.
LOG= The LOG action places an entry into the log file
(C:\IMail\spool\dec.log by default).
Scott,
Are the additions in the 1.77i release for SKIPIFWEIGHT and MAXWEIGHT
included in 1.78 beta?
Just want to make sure I don't break my Gibberish tests. :)
Thanks!
Mark
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R.
Scott Perry
Sent:
Look on the Ipswitch site for using iMail as a Gateway.
There's an article on it.
HINT: Use the HOSTS file.
Mark
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser
Sent: Thursday, February 19, 2004 3:42 PM
To: [EMAIL PROTECTED]
Subject:
Are the additions in the 1.77i release for SKIPIFWEIGHT and MAXWEIGHT
included in 1.78 beta?
Just want to make sure I don't break my Gibberish tests. :)
Yes. We only keep one copy of the code, which means that once something
makes it to an interim release, it will appear in the next beta
While subject decoding can be useful if you have a bunch of key phrase
filters, currently it is disabling my ability to tag the E-mail as having
base64 encoding of certain character sets.
Any chance that you could allow it to be scanned both ways like you do
with the body base64, or
I don't want to annoy you - I'm just trying to figure out why I'm having
such a hard time comprehending this. The manual states:
IGNORE = Does nothing (except add a log entry). Same as LOG action.
LOG= The LOG action places an entry into the log file
(C:\IMail\spool\dec.log by default).
Hey, John, et.al.,
I allocated some time to try again to set it up and test it, to take
advantage of your kind offer, and 'lo and behold this time it worked! Doh.
Anyway for those who are interested here's my synopsis for using IMail to do
spam filtering on external domains, i.e. domains not
Is there a test out there that checks for an email address in
the subject line?
Example:
Jon Doe gets an email. In the subject line it has:
Card #29546 - Award Pending for [EMAIL PROTECTED]
I'm seeing alot more of these.
A test to match the to email address and subject contains
Another incorrect entry is this one:
@ltgsys.com ID-20040121-000433
This is a company called Lighting Systems and is one of our business
partners.
Please fix.
That's a matter of opinion, however, I will remove it for now.
If I see more from them again, then I will place
They don't accept mail to postmaster or abuse address either.. Maybe that is
why?
~Rick
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mike Gable
Sent: Friday, February 20, 2004 3:33 PM - FamHost
To: [EMAIL PROTECTED]
Subject: RE:
I have one called ADDRESSSUB. It's quite simple, and I give it 20% of
my hold weight since this might cause some FP's, though I don't recall
ever holding an E-mail with a hit for this. The file is a simple
SUBJECT CONTAINS filter like so:
- Global.cfg -
ADDRESSSUB filter
Is there a test out there that checks for an email address in the subject line?
eBay instant payment notifications:
Item # - Notification of an Instant Payment Received from
joe.user ([EMAIL PROTECTED])
AND, more important, sellers' responses to such e-mails, which may
Hi;
Is anyone else
seeing this..?
We are seeing a
lot of email that is getting caught in our HOLD weight range with the following
attributes:
==
X-Note: Scan Time:
16:49:41 on 02/20/2004X-Note: Spool File: D80d903e2005efd3f.SMDX-Note:
Server Name: localhostX-Note: SMTP
40 matches
Mail list logo
