> In other words, if you forward from one mailbox to another - both of them
local on the
> final server, declude will not see the message at all because it is local
delivery.
Try using %REALRECIPS%. I believe Declude will search the Imail registry for
the final recipient.
John Tolmachoff
Engineer
My weights:
100 = subject tag
200 = hold
300 = delete
Matt from Mailpure had a discussion on NDR's about a month ago, and using sniffer and
<> was his suggestion.
The theory is that your user's aren't sending out spam, so the NDR's that sniffer
catches are usually from joe-jobs coming back to fa
I've recently noticed several instances where spam was sent to my home email account
and the subject
line contained the first names of friends with whom I occasionally exchange email. Not
common names
like Bill or Susan, but relatively unusual names. It could be just spammers luck that
they used
I have noticed over the past few days that spammers have been sending to
random names on our domain using a automated process i.e. [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED] This is usually sucessful with
domains such as hotmail that have millions of address. This spammer tried
hundred
The odds are 100%, Keith.
That's exactly how all the current viruses work. Recently, WORM_SOBER.* has
also generated usernames at the domains it harvests to increase their hit
rate, because they don't care about their failure rate or the massive number
of NDRs that they generate.
Andrew 8)
OK, but is it generating usernames or collecting them?
Keith Purtell, Web/Network Administrator
VantageMed Corporation (Kansas City office)
CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole
use of the
intended recipient(s) and may contain confidential and pri
I agreed with you that it is collecting them, and also noted that at least
one virus is generating them.
For example, see this write-up:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SOBER.G
&VSect=T
For a reference on how those email addresses are collected by one specifi
Title: Message
v8.12==
NEW FEATURES
IMail now uses the Open SSL library.IMail now
uses the Open LDAP server.The IMAP server now supports IMAP ACLs (RFC 2086).
This enables IMail support for the Bynari Insight Connector. IMail Anti-spam
will search for phrases in the subject.
For the last couple of days, 2 of my clients that my Imail server is a
gateway for their Exchange servers have been getting hit with dictionary
attack type spam. I have been trying to figure out how they are getting
through, even though I keep adjusting the filters.
Finally found, and it is an old
Anyone want to speculate on the "Unique New SPAM Test coming soon!" advertised on the
www.declude.com webpage?
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [
URL lookups.
Just a guess of course. I would prefer having the banned extension
bouncing capabilities modified before that though :)
Matt
Scott Fisher wrote:
Anyone want to speculate on the "Unique New SPAM Test coming soon!" advertised on the
www.declude.com webpage?
---
[This E-mail was scan
I think that it must decompose the mail into it's basic ingredients...then
see if, when reassembled and grilled for breakfast, it goes with eggs...
Just a wild guess...I suppose it could be something completely different...
Darin.
- Original Message -
From: "Scott Fisher" <[EMAIL PROTE
> For the last couple of days, 2 of my clients that my Imail server is
> a gateway for their Exchange servers have been getting hit with
> dictionary attack type spam.
John, have you checked out exchange2aliases in my sig?
--Sandy
Sanford Whiteman, C
13 matches
Mail list logo
