Re: [Declude.JunkMail] Fake IP Test

I'm with you 100%.  Sorry for the confusion, that was actually Andy's filter line and I didn't mean to say it was wrong, just not how I approach it.  There is software out there for sending bulk-mail, primarily from PC's I believe and some server scripts that will bracket the IP as the HELO.  I

RE: [Declude.JunkMail] Fake IP Test

What I was saying is not to score well formed ip addresses [xxx.xxx.xxx.xxx], I do not score these at all. I do run an external test that tells me if there is an ip in the helo string if the ip is well formed I skip weighting the test. I also have a filter in declude that looks for our domai

Re: [Declude.JunkMail] Fake IP Test

Rick, It's very, very spammy and I don't believe that I have ever seen a false positive on this in over 6 months of use.   At the same time however, I'm not aware of any spamware right now that forges your IP as the HELO and encloses it in brackets as one of Kevin's filter lines shows.  I actu

Re: [Declude.JunkMail] Fake IP Test

I hold mail if the HELO matches my servers IP address, is there a situation I am overlooking where this would be a bad idea? Rick Davidson National Systems Manager North American Title Group - - Original Message - From: "Kevin Bilbee" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thur

RE: [Declude.JunkMail] Fake IP Test

HELO 4STARTSWITH [ You do not want to apply weight if the HELO string is an IP address the helo string being in the format of [xxx.xxx.xxx.xxx] is a vaild helo as long as it is the ip address of the sending server. HELO 8STARTSWITH 65.16.167. I would definitly suggest doing th

RE: [Declude.JunkMail] Fake IP Test

Title: Message Hi Todd:   It's this line that the other test is checking:       Received: from 65.16.167.134 ([211.249.122.134]) It discovers that the other side was using YOUR servers IP address in its own HELO string.   I'm pretty certain that the "HELOVALID" test in declude will catch t

RE: [Declude.JunkMail] Latest Versions question.

>From the release notes: cmdspace in the 1.78 Whitelist auth in the 1.76 (IMail v8 and later). Scott Fisher Director of IT Farm Progress Companies >>> [EMAIL PROTECTED] 07/01/04 12:22PM >>> Thanks for the reply John, I guess I must have a beta version as well, anyone know if CMDSPACE and/or

RE: [Declude.JunkMail] Latest Versions question.

Thanks for the reply John,   I guess I must have a beta version as well, anyone know if CMDSPACE and/or WHITELIST AUTH will work with 1.76?   C:\IMail>declude -diag Declude 1.76b (C) Copyright 2000-2003 Computerized Horizons.  All Rights Reserve d.     Diagnostics ON (Declude v1.76

Re: [Declude.JunkMail] logfile naming

Thanks. I've been looking at them but since I have perl on the systems most everything I need it there. Bonno Bloksma wrote: >Hi, > >Get the UnixTools for Windows http://unxutils.sourceforge.net/ and use all >the Unix commands you've always wanted in a Windows environment. ;-) > >Met vriendeli

Re: [Declude.JunkMail] logfile naming

Yeah a real pain. My concern is mostly last July's logs getting written over or blended with this years. If they are uniquely named then no issue. A dribble of the previous days data in the next or previous days data isn't an issue for me. Thanks for the thoughts. Rod -- Roderick A. Anderso

RE: [Declude.JunkMail] Latest Versions question.

The web site shows the correct versions available. To see what was added for each beta version, read the release notes linked at the bottom of the manual.   Declude is trying hard to get a new release version out, hopefully soon.   John Tolmachoff Engineer/Consultant/Owner eServices

[Declude.JunkMail] A happy conclusion to hours spent setting up SPF

Thanks for everyone's help yesterday and the day before with all my SPF questions and issues. The bottom line is, the email I have attached, failed the tests it was supposed to fail, including the spf test, as this particular email did NOT come from my mail server or my domain. Matter of fact, my

[Declude.JunkMail] Fake IP Test

We are seeing more spam getting through triggering very few test. We have a secondary spam system and it has a test called RCVD_FAKE_IP that is rated at 80% of its hold weight.   Does Declude have something similar to this that I am not familiar with it?    Here is the header from an email

[Declude.JunkMail] Latest Versions question.

I am currently running declude v1.76 and want to upgrade.   I only see v1.75 and beta v1.79 available, anyone know if there is a better full blown version of declude available.   I have updated my global.cfg & $default$.junkmail to add some additional ip4r tests, cmdspace and WHITELIST

Re: [Declude.JunkMail] logfile naming

Hi, Get the UnixTools for Windows http://unxutils.sourceforge.net/ and use all the Unix commands you've always wanted in a Windows environment. ;-) Met vriendelijke groet, Bonno Bloksma - Original Message - From: "Roderick A. Anderson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: