30 seconds. I have many filters 3 external tests and about 8 IP4R
tests.
Kevin
Bilbee
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On Behalf Of
WillSent: Tuesday, August 02, 2005 11:31 AMTo:
Declude.JunkMail@declude.comSubject: RE
not support is is authentication with declude.
Supposedly version 3 of smartermail will support authentication.
Kevin Bilbee
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives
No. I used to get nabbed by that, it is the first thing I check when having
problems.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Guhl, Markus
(LDS)
Sent: Monday, July 25, 2005 7:22 AM
To: Declude.JunkMail@declude.com
Subject: AW
Well
that would explain why many of my filters are not as effective as they used to
be. Has Declude announced when the fix will be available
Kevin
Bilbee
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On Behalf Of John
CarterSent: Monday, July
try in the forward doing this .,[EMAIL PROTECTED]
The ., will leave a copy in the users local mail and forward a copy to the
blackberry account.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Michael L.
Hardrick
Sent: Friday, June 10
Or turn off IMAP and web calendaring
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Darin Cox
Sent: Tuesday, May 24, 2005 12:58 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] IMail Server Vulnerabilities
WHITELIST AUTH with Declude.
Any other whitelisting of remote users like whitelisting their domain will
cause spoofed spam to be whitelisted.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Evans Martin
Sent: Wednesday, May 04, 2005 11:11
Then they need to auth to the server. You need 8.x to be able to have
declude
know if the user has authed just set WHITELIST AUTH in yor global.cfg
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Evans Martin
Sent: Wednesday, May 04, 2005
received a
mail, abd determins if it is spam or not, when declude is done with the
message the mail server then either delivers it to a mailbox or relays it to
another mail server.
You need to use WHITELIST AUTH or whitelist all the possible IP address your
users will be sending mail from.
Kevin Bilbee
AUTOWHITELIST works withe the users address book use WHITELIST AUTH.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Darin Cox
Sent: Wednesday, May 04, 2005 4:57 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail
. SPF also was already in SmarterMail...
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of IMail Admin
Sent: Thursday, April 28, 2005 5:12 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Imail 8.2 / smartermail
So how
No declude does not pluginto SM's spam filtering. Delcude works pretymuch
just like it does on Imail.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jonathan
Sent: Thursday, April 28, 2005 7:57 PM
To: Declude.JunkMail@declude.com
This looks like a possible mixup with SmarterMail code?? SmarterMail useses
HDR file and EML files instead of Q and D files.
Kevin
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John
Tolmachoff (Lists)
Sent: Sunday, April 17, 2005 10:53 PM
To:
I would double\tripple check to see if the path is correct to the filter
file???
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
[EMAIL PROTECTED]
Sent: Friday, April 15, 2005 8:48 AM
To: Declude.JunkMail@declude.com
Subject: RE
See previous post
SmarterMail does support SMTP Auth but it does not at this time spaa that
info off to declude.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Darin Cox
Sent: Tuesday, April 05, 2005 2:34 PM
To: Declude.JunkMail
According to SmarterMail it will be availabel in 3.0 which will be
availabel arrount August.
Kevin
Bilbee
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On Behalf Of
MattSent: Tuesday, April 05, 2005 2:27 PMTo:
Declude.JunkMail@declude.comSubject
a great job of it. Adding actions
for individual users is a complicated thing and if you remember Scott was
hesitant that it was even possible.
Kevin
Bilbee
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On Behalf Of Gary
BrummSent: Wednesday, March 16
There is a fix for that issue. I guess I did no update the web site wiht the
link. I will do that.
download the following file and replace the files.
http://www.ssc-ips.net/HoldAnalyzer/DLAApp.zip
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED
http://www.ssc-isp.net/HoldAnalyzer
I wrote this and made it available. Please send feedback. I have a newer
version that also works with smartermail and fixes a few bugs and simplifies
the admin GUI.
I hope to make the newer version availble by the end of the month or so.
Kevin Bilbee
and
renames the application to DecludeHoldReports
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Richard Lanard
Sent: Monday, March 14, 2005 1:11 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Automated requeuing
Kevin
We use
weightrange and do not use per user configurations. Also the messages that were
over our delete weight and not deleted did not contain a routto
action??
Kevin
Bilbee
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On Behalf Of
MattSent: Friday
= IGNORE
When it should have been deleted.
If the message was processed differently for different accounts then I would
expect to see
Last action = DELETE - [EMAIL PROTECTED]
Last action = IGNORE - [EMAIL PROTECTED]
Because in all actuality there were multiple final actions.
Kevin Bilbee
lol , its been a while. I would suggest also putting it in log level high,
due to most log analyzers do not use the debug mode. I think most of the
issues right now are that most admins are looking at log level high and that
the information on last action is missleading.
Kevin Bilbee
The copy all account is added before the message is passed ot declude so
declude should not know the difference.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Ncl Admin
Sent: Thursday, March 03, 2005 2:34 PM
To: Declude.JunkMail
Does the DNS global.cfg list work in 1.82 or is it only availabel in 2.05.
I just tried to switch to 2.05 and it would not delete email that was at or
above my hold weight. I am thinking it is the copy_all_account issue. I have
reverted back to 1.82.
Kevin Bilbee
---
[This E-mail was scanned
Title: Message
I saw
the samething today after installing 2.05. I went back to 1.82 after about 10
minutes.
Kevin
Bilbee
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Andy SchmidtSent: Wednesday, March 02, 2005
8:23 PMTo
Title: Message
One thing I noticed
from our logs is some tests seem to run before WHITELIST AUTH is checked. If
WHITELIST AUTH ie enabled Declude should not even run or look at the filters if
a user authed.
Here is a message
that ran the HELO filter and the BODY filter before whitlisting
x 25 0
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Goran Jovanovic
Sent: Tuesday, March 01, 2005 7:12 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Declude 2 and DELETE
John,
If all I
registration
which is not affecting spam processing.
As for the auto install it will not update or modify any of your config
files and that is as it should be. It would be scarry if it tried to
especially with the flexibility of declude.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED
Talk about a vague question or mabe at 12:30 I am just being thick!
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John
Tolmachoff (Lists)
Sent: Tuesday, February 22, 2005 11:24 PM
To: Declude.JunkMail@declude.com
Subject
.
With IMail I can just move the Q and D files back to the spool for final
delivery. The manual has not been updated for SmarterMail and the HOLD
action.
Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]
(805) 520-5800 x7332
Changing
file
to the spool\overflow folder. I also edit the D*.SMD file before I move
it, to remove any previous header additions, so that on the next Declude
scan, it gets only the corrected headers.
This is not necessary. See above!
Kevin Bilbee
---
[This E-mail was scanned for viruses by Declude
from filters
to adjust for. I do not adjust for IP4 black list failures a server would
have to be in 2 or 3 black lists to be held.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Colbeck, Andrew
Sent: Wednesday, February 23, 2005 5:39 PM
functional.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno
Sent: Wednesday, February 23, 2005 9:11 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] SmarterMail Held email recovery
Wow any of those
Title: Message
I have
received spam from thes in the last day. The RDNS domains are all registered to
the same address in NY and the host is in Argentina.
200.80.64.x
200.80.65.x
200.80.66.x
200.80.67.x
200.80.68.x
We use SmartFilter by Secure Computing in integerates with our pix firewall.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Patrick Childers
Sent: Tuesday, February 15, 2005 11:00 AM
To: Declude.JunkMail@declude.com
Subject
Does declude decode messages before using filters? I have a domain in a body
filter that keeps getting through?
Kevin Bilbee
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just
The headers say base64
Kevin
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Thursday, February 10, 2005 4:56 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Base 64 Encoded messages
Does declude decode
not give verymany points to
ROUTING and 0 points to NOLEGITCONTENT. Also I have seen many false
positives on NOABUSE and would not weight that one either.
My 2 cents,
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno
Sent
it instead of the system account.
Kevin Bilbee
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives
Declude can not do this so your only option is to write an external test to
plug into declude and pass the variables %HELO% and %MAILFROM%.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Dan Geiser
Sent: Monday, January 31, 2005 9:39 AM
\junkmailfiles\standardabrasives.com.junkmail.
WHITELISTFILE
D:\Imail\declude\junkmailfiles\whitelistfiles\standardabrasives.com.whitelis
t.txt
And the X-Declude-Sender: [EMAIL PROTECTED] [218.16.121.102] is in the
whitelist file as [EMAIL PROTECTED]
We are on declude 1.82.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Monday, January 24, 2005 10:39 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Not whitelisted, why
Log lines
01/21/2005 03:03:45 Qe18f09a600c0cf70
email addresses or or just the alias address. Declude version 1.82
Kevin Bilbee
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type
The france@ account is the alias and points to one alias and two accounts.
This is a messages that was held and then moved back into the spool folder.
01:15 09:32 SMTPD(53b50bec00ac1995) [12.9.25.244] connect 12.9.25.248 port
3579
01:15 09:32 SMTPD(53b50bec00ac1995) [12.9.25.248] HELO
the alias address once. If alias pointed to 100 addresses
would it show france@ 100 times??
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Monday, January 17, 2005 2:31 PM
To: Declude.JunkMail@declude.com
Subject: RE
There are some things missing, but there are also a lot of
small neat features that make you say 'what a neat idea'...
Could you elaborate on what is missing and what is neat?
Kevin Bilbee
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail
Title: Message
Reverse dns should never have spaces in it.
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Scott FisherSent: Monday, January 10, 2005 7:22
PMTo: Declude.JunkMail@declude.comSubject:
[Declude.JunkMail] external program
not follow it. Get management involved and let them know how much of yor time is
wasted looking for messages with no subject lines.
If you
are using outlook install LookOut to index your mesages for keyword
searching.
Kevin
Bilbee
-Original Message-From:
[EMAIL PROTECTED
I
created a tool to do just this. Break it for me and I will fix
it.
http://www.ssc-isp.net/HoldAnalyzer/rdnsclassclookup.aspx
Kevin
Bilbee
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On Behalf Of
MattSent: Wednesday, December 08, 2004 12:18 PMTo
We just installed new hardware for our Imail server. We want to start
defragging on a regular basis. My question is should I stop qmanager and
SMTP before doing the defrag of the user mbx and spool disks???
Kevin Bilbee
---
[This E-mail was scanned for viruses by Declude Virus (http
at all however if most of your customers use POP3 to
retrieve their E-mail and delete it from the server because every time a
file is modified in this way, it is rewritten, thus the fragments are
removed (appending to a file causes fragments).
Matt
Kevin Bilbee wrote:
We just installed
This won't be
an issue hardly at all however if most of your customers use POP3 to
retrieve their E-mail and delete it from the server because every time a
file is modified in this way, it is rewritten, thus the fragments are
removed (appending to a file causes fragments).
Matt
Kevin Bi
Where did you get the sleep.exe???
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of DLAnalyzer
Support
Sent: Wednesday, November 17, 2004 3:59 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Log file locking???
Matt
http://biz.yahoo.com/fool/041105/1099675080_1.html
Hurray
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe
look at a program that I wrote. We have been using it very successfully for
about a year now
http://www.ssc-isp.net/holdanalyzer/
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of John Carter
Sent: Wednesday, November 03, 2004 11:51 AM
Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Kevin Bilbee
Sent: Wednesday, November 03, 2004 12:03 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Vulnerability hold conflicting with
filter
look at a program that I wrote. We have
Title: Message
Thanks
for the information. I can now block smaphole address from downloading the
software???
Kevin
Bilbee
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On Behalf Of Colbeck,
AndrewSent: Wednesday, November 03, 2004 1:07 PMTo
on IPSwitches
part.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Bud Durland
Sent: Tuesday, October 26, 2004 11:06 AM
To: [EMAIL PROTECTED]
Subject: Re: CBL:RE: [Declude.JunkMail] Declude and Ipswitch ICS
Markus Gufler wrote:
So you're
Scott,
What other products are you preparing Declude to function with??? If you are
not I sugest you do!
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Monday, October 25, 2004 11:10 AM
To: [EMAIL PROTECTED
We could also use MSSMTP as our gateway and what ever backend we want.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff
(Lists)
Sent: Monday, October 25, 2004 1:21 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail
It looks like spammers are starting to randomize their helo strings I just
received this as a helo
rnddg[2].rnddg[2].rnddg[2].rnddg[2]
Looks like it is trying to create a random ipaddress for the helo.
Kevin Bilbee
---
[This E-mail was scanned for viruses by Declude Virus (http
an interest to us all.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Bill Landry
Sent: Wednesday, October 20, 2004 4:55 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Random Helo strings
- Original Message -
From: Darin Cox
Brackets are perfectly valid in the host name if they wrap an ip address.
[xxx.xxx.xxx.xxx]. I have seen this only from valid sources and if I
remember correctly HELOBOGUS will pass a wellformed ip address.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL
into their HELO filters. I know I make changes based on posts to this
group. I do research to see if it fits into my configuration.
I am glad you have found clear telltale signs of spam. But I am always
acceptable of even my own configuration. because of the dynamic nature of
spam.
Kevin Bilbee
I was replying to your comment that you block helo strings thar are ip
addresses. Look at your previous post.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Bill Landry
Sent: Wednesday, October 20, 2004 6:00 PM
To: [EMAIL PROTECTED
My point of posting it was that it is a spammers intent to randomize the
HELO string as different ip addresses. Not to ask if it is valid. The
messages was clearly spam from a bulk mailer.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf
hostname or IP address as their own helo hostname - I reject these
outright.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
Sent: Wednesday, October 20, 2004 6:26 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail
I agree about the cat thisn that is why we named out cat PITA.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Wednesday, October 20, 2004 6:37 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Random Helo
Speaking of hyperthreading has anyone checked the performance of
Imail/declude with hyperthreading turned on and off. I know some apps have
showed better perforamnce with hyperthreading turned off.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED
gig of ram. We will have 6 drives 3 mirrors,
system, spool and log, mailboxes.
Anyone
willing to help load the server after our business hours?
Matt
what configuration would you like to see?? We only run declude with iamil and
our virus scanning is done on our gateways.
Kevin
Bilbee
The console setting for terminal services is for connecting to win2003 you
would have to use Johns suggestion if you are on win 2000.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John
Tolmachoff (Lists)
Sent: Friday, October 01
I have been running my ContainsIP external test with a reverse dns check and
have found the following. I have not had one report of a false positive in
the 5 days I have been running this test.
If you are interested it can be found here with usage instructions
Ah alas it seems there are no perfect spam detection techniques. Not even
human review!
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Pete McNeil
Sent: Friday, October 01, 2004 3:09 PM
To: Kevin Bilbee
Subject: Re: [Declude.JunkMail] ContainsIP
Title: Message
Good
catch I think I will wait a day or two before downloading.
Kevin
(Wow,
I don't think I have ever said that about Declude)
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On Behalf Of Andy
SchmidtSent: Friday, October 01, 2004 3:29
that I wait. When I am more comfortable with the management changes and do
not see many issues with releases I will probably go back to downloading as
soon as convenient once again.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott
Not to state the obvious by why not use dnsstuff??
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of John Shacklett
Sent: Thursday, September 30, 2004 1:08 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] OT: IP block tool
I
I would have to agree. I think that makes sense except for the debug level.
All others should honor the config line.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Elise Lewis
Sent: Wednesday, September 29, 2004 11:49 AM
To: [EMAIL
then
they will be caught with the SPF record.
Many features of declude are muted by not using WHITELIST AUTH and not being
on the 8.x version of imail.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Wednesday
, we did this after ATT theratened to terminate our
service after they received complaints to their abuse address. The source of the
email was not our server but they used an email on our server for the
NDRs.
Kevin
Bilbee
-Original Message-From: Goran Jovanovic
[mailto:[EMAIL
Should not I are not testing the email address. I am testing the mail server
HELO and RDNS strings. Cellphones does not send directly they relay their
messages through a server.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Danny Spence
Correct. But there are also the patent issues, and the muckiness of it
all (I'm having troubles even finding an official Microsoft document that
documents this new Sender-ID).
Scott, have you looked at this
http://www.microsoft.com/mscorp/twc/privacy/spam_senderid.mspx
It seems to have
.
Thanks to thoes who have given feedback,
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Matt
Sent: Monday, September 20, 2004 2:20 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Idea
I would say that 99.9% is probably
to be a little stricter and if I do get a false positive
I work with the customer/ISP of our customer to fix what is
broken/non-standard.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Darin Cox
Sent: Monday, September 20, 2004 3:20 PM
-RDNSMatchFullMatch 22
CIP-RDNSMatchLeadingTextMatch 23
CIP-RDNSMatchTrailingTextMatch 24
So if you do not want to weight OnlyIp then don't put a lower weight on it
if you get many false positives
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin
Why not just block them from connecting to your server altogether??? Block
their ip addresses.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Matt
Sent: Thursday, September 16, 2004 4:58 PM
To: [EMAIL PROTECTED]
Subject: Re
CIP-FullMatch: 1660
CIP-LeadingTextMatch :269
CIP-OnlyIp : 2632
CIP-TrailingTextMatch: 2
CIP-WellFormed : 4
These are my stats for last week using this test.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED
Hve you tried stoping Imails monitor service to see if that is causing the
problem. I know it has issues with monitoring web mail service on certain
servers.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Danny K
Sent: Saturday
Here is alos another test for Ip addresses in the HELO but it should use
less resources it has declude pass the helo string as it see it so it will
honor you hop settings
http://www.ssc-isp.net/HoldAnalyzer/containsip.aspx
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED
That would be for VB. VB .net does not need to call a function to produce an
exit code.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty
Sent: Monday, August 23, 2004 9:39 PM
To: [EMAIL PROTECTED]
Subject: Re
yes
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff
(Lists)
Sent: Tuesday, August 17, 2004 11:33 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Line counts
When Declude JM counts line numbers, does it include in the count
Yes you can, here is an example
# Apex Concepts
64.136.104.0/25 - Apex Concepts
209.120.142.0/24 - Apex Concepts
206.173.30.0/24 - Apex Concepts
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Chris Patterson
Sent: Wednesday, August 11
with no help from IMail?
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Monday, August 09, 2004 2:30 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Declude as a gateway scanner
I would like to know
Looks
like you have a good handle on it. You need to look at all of these things and
choose the ones that fit the particular spam
campaign/spammer.
Spam
blocking takes a lot of fine tuning.
Kevin
Bilbee
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED
checking the list. I have not seen a message since a little after 9:00am
PST.
Yes, I agree with that. Declude as a standalone gateway product?
I would love to see it.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Bud Durland
Sent: Monday, July 12, 2004 11:42 AM
To: [EMAIL PROTECTED]
Subject: Re
)
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Mike Hyslip
Sent: Monday, July 12, 2004 1:30 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] XML? Just Say NO !
Declude can always have an option to edit a file by hand, or just
the xml files.
I do not think you have done much performace testing of XML in e loaded
server environment.
The loading of the config files from disk is minimal they should be cached
due to the high frequecy of use. So 1 config file or 10 should not make much
difference.
Kevin Bilbee
]
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Sanford Whiteman
Sent: Thursday, July 08, 2004 10:49 PM
To: Matt
Subject: Re[2]: [Declude.JunkMail] IPBYPASS and WHITELIST IP
I think you have to modify a registry setting to get
guess my new question would be why can a message trigger a test but not
fail a test using END and how do I use end where the test is triggered and
fails?
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Friday, July 09
201 - 300 of 516 matches
Mail list logo
