Just found this:
http://help.yahoo.com/help/us/mail/defer/defer-06.html
William Stillwell
Systems Architect
Professional Staffing-ABTS,Inc.
D/B/A Able Body Labor
Clearwater, FL
wk.727.724.2610
fx.727.724.2680
cl.727.638.6208
DISCLAIMER - This message may contain confidential, proprietary
Title: Declude and Imail 2006
Some say they work fine, others say they
don't. Declude's official position is that you have to have 3.x or 4.x for
IMail 8.2x or 2006.x
Darin.
- Original Message -
From: Sharyn
Schmidt
To: declude.junkmail@declude.com
Cc: Declude.Virus@declude.com
Title: Message
Some say they work fine, others say they
don't. Declude's official position is that you have to have 3.x or 4.x for
IMail 8.2x or 2006.x
Thanks, Darin.
I
have a current Declude Service Agreement. Does this allow me to upgrade to
4.x?
Is
anyone using 4.x
You call that a downside
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Kevin Bilbee
Sent: Wednesday, November 08, 2006 12:00 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] blocking GIF attachments again ...
If you are not
-Original Message-From: "Kevin Bilbee" [EMAIL PROTECTED]If you are not an ISP get the commtouch ZEROHOUR addin. It will block mostof the GIF attachments. The only downside I have noticed is it will alsotrap the chain emails that users love to send to each other.-Kevin, I can block
Yes, if you block GIF attachments in
Declude Virus, if a HTML email as embedded GIFs, that email will be blocked.
John T
eServices For You
Life is a succession
of lessons which must be lived to be understood.
Ralph Waldo Emerson
(1802-1882)
-Original Message-
Hi David;
In an earlier message (below) you mentioned that you were working on
adding the ability to handle these malformed messages.
A couple questions.
1. When will this happen as it has been a problem for quite a while now?
2. The messages themselves are not failing any of the tests that
Herb,
1. This is currently being worked on, there are several other things that
need to be taken into account when doing this, for example if Declude has to
rewrite all me messages in order to correct this problem there will be a hit
on performance. We are also looking at some other alternatives.
Hi Dave:
1. This is currently being worked on, there are several other things that
need to be taken into account when doing this, for example if Declude has to
rewrite all me messages in order to correct this problem there will be a hit
on performance. We are also looking at some other
I'm relatively new to Declude, but have been using Imail and many of its
test for quite a while.
I'm curious if it is possible to use some of imail's antispam tests
(specifically Baysean filter, and url-blacklist) to add weight to declude
tests. We have had great results with these two tests and
You can get much of the Bayesian filtering results from Sniffer, and Sniffer
and invURIBL can be used to filter based on urls in the content.
These are external tests, to cover functionality not built into Declude.
Darin.
- Original Message -
From: Jim Comerford [EMAIL PROTECTED]
To:
How can I whitelist
based on Reverse DNS?
Kindest RegardsCraig Edmonds123
Marbella InternetW: www.123marbella.com
---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can
Andy Schmidt wrote:
I get the feeling this issue of end-of-line detection is being made overly
complicated.
Declude is not a message-fixer-upper. I have enough problems with people
using CISCO SMTP FIXUP that breaks everything. Declude's job is to
correctly determine the header vs. content
How about negative weighting instead of
whitelisting.
If you want to do it selectively, you can create a
quick Declude filter that you give a high negative weight to, and only include
the domains that you want to pass through based on having REVDNS
entries.
Darin.
- Original Message
Agreed. Put the headers where they need to be. Don't worry about fixing
the message.
Having this additional test could be worthwhile as well, to identify and
report on mailers that are broken in this fashion.
Darin.
- Original Message -
From: Andy Schmidt [EMAIL PROTECTED]
To:
Craig, I don't use any of the Declude WHITELIST features
due to the potential for giving the sender carte blanche access; if a known good
sender is sending crap, I still want to have a chance to block the
crap.
What I do is counterweight.
I create a filter file called, say,
On Nov 8, 2006, at 1:24 PM, Craig Edmonds wrote:
How can I whitelist based on Reverse DNS?
Create a filter with lines like
REVDNS xxx ENDSWITH .abcdefghi.com
where xxx is weight to apply. Xxx could be a very high number to
cause the message to be deleted or it could be a negative
Which is what we want to do. I changed my configs and instead of routing to
a mailbox, am holding. The only real reason I wanted to separate was
because searhing through a mailbox was a PIA. I downloaded the trial of
fpReview as suggested by John and will try that (so far it looks like a
great
Me three!
Is it done yet? No? Darn.
Frankly, David, if the Declude app is going to have to rewrite the whole
message anyway to insert headers, make it an optional *feature* to fix
up the line terminators. Then market it as a unique feature; I
understand that Venture Capitalists love their
Jim,
It depends on the Imail test -Some are processed before Declude. I am not
exactly sure which ones run before Declude as I do not use any of the Imail
tests.
Processing Order for IMail
Both IMail and Declude have a number of different tests that they run on
email. The order used is as
Craig Edmonds wrote:
How
can I whitelist based on Reverse DNS?
REMOTEIP WHITELIST CIDR 64.4.240.0/20
REVDNS WHITELIST ENDSWITH .paypal.com
etc...
-Nick
Kindest Regards
Craig Edmonds
123 Marbella Internet
W: www.123marbella.com
---
This E-mail came from the
Absolutely,
WHITELIST REVDNS
.declude.com
You can alsocan create your own RDNSBL zone in your
DNS server (that's what I did) and create one for SPF domains that spammers set
up to reliably reject mail based on reverse DNS (thank you for them adhering to
SPF!).
Then
you set up a
The traditional answer on this is that IMail does not mark up the header
until after Declude returns control of the message to it, so therefore,
Declude can not leverage any of the tests that IMail does.
That does not stop you from using any of the IMail features though if
you want to think of
Could anyone tell me why these test would be skipped?
Thanks,
Kevin
11/08/2006 11:37:07.874 Q15c3521000fc8cbd Test #0: WHITLEIST [FROM] - may
skip-1
11/08/2006 11:37:07.874 Q15c3521000fc8cbd Test #1: AHBL [ip4r] - may skip-1
11/08/2006 11:37:07.874 Q15c3521000fc8cbd Test #2: BLITZEDALL [ip4r] -
Was it whitelisted in a previous test?
Darrell
Check out http://www.invariantsystems.com for utilities for Declude And
Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG
Integration, and Log
Is the Reverse DNS in the headers anywhere? I've just been going out to
DNSReports.com and pulling it for the ones I want to add. Easier way?
Todd
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Greg
Evanitsky
Sent: Wednesday, November 08, 2006 12:56
Did not have it whitelisted. That is what is so strange. I turned on the
declude log in debug mode and here is the top of the log. If anyones sees
something I am missing please let me know. I see a log of these may skip -
1 on spams.
Kevin
11/08/2006 11:37:07.733 Q15c3521000fc8cbd Setting DNS
1. I don't like to keep going in circles on this. If it was as easy as just
fix it there would be no issue. Please understand that this is a lot more
complex than you may realize, we are considering making the fixing of line
terminators as an optional feature to be turned on/off because of a
Todd,
As you know headers can be forged so its always best to manually look-up the
IP. As you said earlier you are using fpReview. In the headers view you
can right click and select resolve ip's to hostnames to get the reverse dns.
Than after that you can highlight any of the text and
Hi,
As per previous posts I agree that Declude needs to deal with this issue,
as neither SmarterMail or Imail have addressed this, just out of curiosity
has anyone contacted SmarterMail or Imail and asked them to address this
issue, and if so what was their response
I never asked them to
Hi Todd,
You can configure Declude to add its own header with diagnostic information,
including the Reverse DNS, e.g.:
XINHEADER X-Declude: Version %VERSION%; Code 0x%HEADERCODE% from
%REVDNS% [%REMOTEIP%]
XINHEADER X-Declude: Triggered [%WEIGHT%] %TESTSFAILED%
XINHEADER
In the header of the message, look at the last
IP address in square brackets, this is the IP address of the sending email
server. The text just before it is the HELO sent by it, and is often
unreliable with legitimate mail, and practically a work of fiction with
spam.To get the REVDNS that
David --
The problem exists in Interceptor, as well, so a fix from Ipswitch or
Smartermail isn't going to solve all of the problems, unfortunately.
If it helps at all, every message that is malformed this way is bad, spam
scores off the charts.
Rob
-Original Message-
From: [EMAIL
Thanks Darrell. That's a great feature (and I just purchased an fpReview
license)!
Todd
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Wednesday, November 08, 2006 3:52 PM
To: declude.junkmail@declude.com
Subject: Re:
Could anyone tell me why these test would be skipped?
That's one of the potentially misleading debug log file entries that I
added. :) The debug mode was originally designed as a troubleshooting
tool for someone with access to the source code, so there are
occasionally comments that could
Well hello there stranger! Hope all is well!
Darin.
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: declude.junkmail@declude.com
Sent: Wednesday, November 08, 2006 5:26 PM
Subject: Re: [Declude.JunkMail] may skip - 1
Could anyone tell me why these test would be
Rob,
Thanks for the info. Yes we know that these messages are most likely always
spam, the problem comes in that some admins just tag their subject lines and
rely on either rules at the mail server level or client to process the
message based on the subject. But with the altered header in the
Hi David,
How about today's suggestion that you not fix the message, but just
interpret all of the variants of CRLF in order to place added headers with
the original headers?
An additional test would be nice for the weighting system, but just getting
the headers where they need to be is the
Same in SmarterMail. It is interesting when you receive one of these messages
to find the Declude header lines at the end of the message, and the one or two
header lines that SmarterMail appends (after Declude hands the message back to
SmarterMail) right where they should be at the end of the
I do not understand why you need to rewrite the message beyond what you already
do? Just determine the end of headers properly then rewrite the message with
your headers in the proper location. You already rewrite the message when
adding headers so why would it take any longer to properly
Hi David;
Thanks for the tip on the resource directory, never thought of looking
there, altho would be good to restore the link in your KB as well.
I would also like to respond to your reply to others in the thread in
which you state that it is not productive to have to repeatedly address
Greetings all,
I thought I would put this out here as an offering, both to show what is
working for me and to leave myself open for feedback on how to improve
things. I still hear complaints about receiving spam, but I imagine that
will always be the case no matter how I tweak the system.
These
42 matches
Mail list logo
