Re: [Declude.JunkMail] Spam not being marked

2005-07-12 Thread Matt
I saw something like this happen a couple months back in another thread.  There were two things going on there.  For one, the messages were being double processed due to a configuration issue.  There was also a typo in an XINHEADER or XOUTHEADER that was causing a double line break so when the

Re: [Declude.JunkMail] Spam not being marked

2005-07-12 Thread Mike Hyslip
WEIGHT10weight x x 10 0 WEIGHT14weight x x 14 0 WEIGHT20weight x x 20 0 Note - this only happens here and there. 99% of the messages are flagged and show up correctly, just a couple a day seem

RE: [Declude.JunkMail] [Declude.Virus] Brief Update

2005-07-12 Thread Michael Hardrick
Any new news on this issue? Basically, version 2.X is useless to me. If there is any way I can assist by sending debug info, lmk. --Mike TNWEB From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill BillmanSent: Wednesday, June 29, 2005 15:24To: Declude.Virus@declude.com; Decl

Re: [Declude.JunkMail] Spam not being marked

2005-07-12 Thread Darrell \([EMAIL PROTECTED])
In your global config how is it configured? Darrell invURIBL - Intelligent URI filtering. Stops 85%+ of SPAM with the default configuration... http://www.invariantsystems.com Mike Hyslip writes: WEIGHT10SUBJECT **SPAM: WEIGHT14

Re: [Declude.JunkMail] Spam not being marked

2005-07-12 Thread Mike Hyslip
WEIGHT10SUBJECT **SPAM: WEIGHT14SUBJECT **SPAM: WEIGHT20SUBJECT **SPAM: There's not weightrange option configured far as I can tell. The headers that get stuck in the body show it is marked - >> Hello, >> Message-Id: <[EMAIL PROTECTED]> >> Subject:

Re: [Declude.JunkMail] Spam not being marked

2005-07-12 Thread Darrell \([EMAIL PROTECTED])
What are the actions you have configured for WEIGHT10 and WEIGHT14. Also, are those configured as WEIGHT's or WEIGHTRANGE? Darrell - DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus. http://www.invariantsystems.com Mi

RE: RE: [Declude.JunkMail] Bounced viruses or e-mail I'm confused...

2005-07-12 Thread Colbeck, Andrew
Sure thing, Marc. Posting here is a public resource! Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno Sent: Tuesday, July 12, 2005 8:58 AM To: Declude.JunkMail@declude.com Subject: RE: RE: [Declude.JunkMail] Bounced viruses or e-m

RE: RE: [Declude.JunkMail] Bounced viruses or e-mail I'm confused...

2005-07-12 Thread Marc Catuogno
THANK YOU! I am going to forward this to Road Runner support (with your permission). I kept telling them that this was something going on THEIR network and they kept telling me no. I feel a little less like I am going crazy - Thanks- Marc -Original Message- From: [EMAIL PROTECTED]

RE: RE: [Declude.JunkMail] Bounced viruses or e-mail I'm confused...

2005-07-12 Thread Colbeck, Andrew
Not all viruses use their own SMTP engine; this was likely one of the recent MyTob variants that tries to use the SMTP server of the current user. The virus can do this with some success because many ISPs use routing or firewalls to allow their users to use their servers as an open relay, because

RE:RE: [Declude.JunkMail] Bounced viruses or e-mail I'm confused...

2005-07-12 Thread Marc Catuogno
Thanks for the explanation. I figured that this is a home user with and infected PC claiming to be prudentialrand.com but I guess where I am confused is that I thought most of the current viruses have their own SMTP engine and didn't use the ISP's mail server. So I didn't expect the ISP mail serv

RE: [Declude.JunkMail] Bounced viruses or e-mail I'm confused...

2005-07-12 Thread Jeff Robertson
> -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Marc Catuogno > Sent: Monday, July 11, 2005 11:12 PM > To: Declude.JunkMail@declude.com > Subject: SV [Declude.JunkMail] Bounced viruses or e-mail I'm confused... > > > > Please bear