Reply to: Keith Johnson
Re: [Declude.JunkMail] New XBL from Spamhaus on Sunday 11:32:26 AM
http://www.spamhaus.org/xbl/index.lasso
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
K I read the following on the Register. Does anyone know
that
this is making an appearance with no variable indicated.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL
Reply to: John Tolmachoff (Lists)
Re: [Declude.JunkMail] X-Declude-Date in Header on Friday 7:18:53 PM
Thanks.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
J It is a temporary insertion by Declude for troubling shooting. It will be
J taken
Filter actions have so many nice basic functions, IGNORE, WARN,
DELETE, HOLD etc.
Looking at new filters today and observing logs, it just seems
one of these actions naturally should be WHITELIST.
Does this make sense?
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
---
[This E-mail
, but only if
the whitelist filters did not engage... ;)
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
Filter actions have so many nice basic functions, IGNORE, WARN,
DELETE, HOLD etc.
Looking at new filters today and observing logs, it just seems
a more compliant solution. Does any one know how to
attack this issue in another way?
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
R Well, the real question is why do you think that you are safer by
R rejecting those E-mails? I'm not aware of any safety issues. The
R only issue I am
Reply to: John Tolmachoff (Lists)
Re: [Declude.JunkMail] Null Sender Spam for Valid Accounts on Thursday 11:15:50
AM
This is what I was doing but Spam Review might have 2000-10,000 of
bounced mails... too much to do in deleting them...
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
Reply to: Adrian Hauri
Re: [Declude.JunkMail] Spam assassin .exe as external filter on Wednesday
7:46:06 PM
I would also like to see how this would work. It is free and looks
like it has a big following: http://spamassassin.taint.org/index.html
--
Roger Heath
[EMAIL PROTECTED
Reply to: R. Scott Perry
Re: [Declude.JunkMail] Foreign Characters and Declude on Friday 7:40:45 PM
I want to enable foreign characters but filter on their
exact words. It sounds like these character sets are not
'viewed' and filtered in Declude?
--
Roger Heath
[EMAIL PROTECTED
providers except .NL
Watch out for this one...too.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
K One of our upstream providers is Qwest, and we have the same problem.
K However, everyone seems to be aware of the SPAM-SUPPORT flaw because it has
K
Searching the archives, I could not find out if Hijack
accepts CIDR format for ALLOW IP? Does any one here know
if it does? The documentation does not indicate this.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
--
ActivatorMail(tm) ver.00922031 Scanned for all viruses
In Deccon I see relay IP 0.0.0.0 from time to time. What is the
best way to filter, ban, or configure for this IP showing up?
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
--
ActivatorMail(tm) ver.00922031 Scanned for all viruses by
www.activatormail.com intelligent anti-virus anti-spam
not see this indicated in any messages I have read.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
B Attached is a list of spamdomains and their coresponding aliases that I've compiled
thus far. Anybody want to comment or expand upon this?
B Bill
You are right $6500 is absolutely rediculous. Nothing like paying
thousands more for many less features...
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
D Scott,
D A couple of notes...
D 1.) We started with IMail Antivirus and next week it looks
be allowed to send e-mail into the enterprise.
Would be a nice feature in Declude...
This appliance costs $27,000 each.. geesh..
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
Does Declude realize it is a store and forward scenario, thus
/2 bandwidth..
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
Scott, I just had an MIT engineer/user suggest a feature to reject
messages based on their size. I found this fascinating personally.
You could look at the size and bounce, e.g.
SIZE
Reply to: Andy Schmidt
Re: [Declude.JunkMail] Reject Msg based on Size on Monday 8:07:22 AM
This is not in my earlier version of Imail... Does this do this
on an account basis or domain basis? It must be in later versions
unless I am missing something.
--
Roger Heath
[EMAIL PROTECTED
.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
--
ActivatorMail(tm) ver.122102 Scanned for all viruses by
www.activatormail.com intelligent anti-virus anti-spam service
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from
Congratulations, Scott. Declude is mentioned in PCMag,
latest February 25th Issue, page 95. Sniffer is also in
the same listing. Suppose we'll see price increases now.
big grin
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
--
ActivatorMail(tm) ver.122102 Scanned for all viruses
dictionary attacks. It
detects too many errors brought on by many failed logins...
[Settings]
smtp.error.count=10 ;total errors within
smtp.error.interval=120 ;this amount of time(sec)then blocked
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
How would this be implemented on a user or domain basis?
R The AUTOWHITELIST option is a global option, and can not be done on a
R per-user or per-domain basis.
I'm assuming this auto detects
be notification to the user of
attempted delivery mailfroms... so he or she can add these to their
addressbook if desired. This is what I was looking to accomplish so I
can tell the CNET editor this feature is working in a viable
marketable way...
--
Roger Heath
[EMAIL PROTECTED
Reply to: John Tolmachoff
Re: [Declude.JunkMail] WhiteList Per User or Domain? on Tuesday 3:40:53 PM
Is there a URL for this. Sorry if I don't have it, but I
am on many lists and sometimes I delete something that maybe
I should not have. g
Thanks again,
--
Roger Heath
[EMAIL PROTECTED
' version documentation, but could you summarize
this simply for me. I'm assuming this auto detects the right path
regardless of the drive the account resides on? This is a very
interesting feature.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s
such a feature.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
C One problem with held or bounced mail that notifies the intended
C recipient that it was blocked, is, you did not elimiate the spam, only
C change it's contents to hundreds of notifications
... This would be a very
nice 'Declude Pro' feature when scaled on unique domains and users.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
C That makes sense, a mixture of the two. In that case you would not want
C to use CATCHALLMAILS, but use
,
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
--
ActivatorMail(tm) ver.122102 Scanned for all viruses by
www.activatormail.com intelligent anti-virus anti-spam service
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from
emails with a bounce by default but give a white list negative
counter-weights to let those through. Not sure his would work?
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
Is it possible to make a Declude domain or user setting that enables
wyndows.comc:\Imail\wyndows
If you do such a feature I would need to be able to point to an exact
path for each domain...
I think this would be a great feature for Declude and I hope you do
it.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
I
100 ENDSWITH domain.com
Delete White-list REBDNS Domain = adds REVDNS -100 ENDSWITH domain.com
I would find all this quite useful and I am wondering what others
might think. SpamReview could be pointed at a single filter.txt file
to edit then edit it...
--
Roger Heath
[EMAIL PROTECTED
'counterweights' look like:
MAILFROM -100 CONTAINS .classmates.com
MAILFROM -100 CONTAINS .rnc.org
MAILFROM -100 CONTAINS pcclub.com
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
One problem I see (Sandy and others, please jump
Reply to: John Tolmachoff
Re: [Declude.JunkMail] whitelisting on Thursday 5:02:56 PM
I'd like to do this. Will negative weights work for this list?
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
J One thing I am considering is using
Reply to: Kami Razvan
Re: [Declude.JunkMail] More on: %COUNTRYCHAIN% on Tuesday 9:57:48 AM
I have yet to see any countries shown... it is always:
[Unknown]-[APNIC Unlisted]-[ARIN Unlisted]-destination
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s
Reply to: Bill Beach
Re: [Declude.JunkMail] question for all... on Friday 8:44:17 AM
How do you setup a domain to spool only then forward to another
Exchange server?
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
Has anybody done this?
B I
Reply to: Sanford Whiteman
Re: [Declude.JunkMail] question for all... on Saturday 3:54:30 PM
Thanks, Sandy.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
How do you setup a domain to spool only then forward to another
Exchange server
entries
and all deleted entries in one click. Perahps the other should be
delete all then reload any new entries.. No highlighting would be
required at all.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
T Roger,
T Using standard windows select
Reply to: Darrell L.
Re: [Declude.JunkMail] SpamReview Request - Delete All on Wednesday 7:42:30 AM
I know... This is what I do now. One click would still be nicer
and faster... been using Windows since version 1. g
Thanks,
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
. This way one may inspect select
messages and manage them then delete the rest in one blow. This
will save me even more time from an already great time saving
program.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
--
ActivatorMail(tm) ver.082302 Scanned for all viruses
Reply to: Tom Schwarz
Re: [Declude.JunkMail] SpamReview Update and From EMail Discussion on
Wednesday 3:00:02 PM
This feature to add to kill still fails here. In place of
X-Declude-Sender:
I put
X-Note-Real-Mail-From:
Wondering what I might be doing wrong?
--
Roger Heath
[EMAIL
as rejected..
How soon can I get this, Scott? grin
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
--
ActivatorMail(tm) ver.082302 Scanned for all viruses by
www.activatormail.com intelligent anti-virus anti-spam service
---
[This E-mail was scanned for viruses by Declude Virus (http
. The ability to
set a whole domain or individual users, like the Pro version of
Declude is what we really need.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
K Hi;
K The idea is a good one but I think it truly belongs at the IMail level.
K This way, using
Reply to: John Tolmachoff
Re: [Declude.JunkMail] Address Book Only in Declude? on Thursday 9:53:27 AM
Not to be sarcastic, but how? grin
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
J Not to be sarcastic, but wouldn't that be done
was in the HEADERS, it would pass the mail..
Others have suggested making whitelists into separate lists so
you can per user or per domain them. Perhaps if you do this all
these things can be 'matched up'?
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s
Reply to: R. Scott Perry
Re: [Declude.JunkMail] Declude JunkMail v1.57 (beta) released on Tuesday 9:44:55
AM
Scott, I am seeing 'whitelisted automatically' ??? How does his
work?
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
R We have
Reply to: Jeff Kratka
Re: [Declude.JunkMail] Declude and Sniffer on Friday 3:08:26 PM
You will like Sniffer. Not only is it great at spam detection but
it is substantially faster than text based rules.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s
the menu. It
keeps putting carriage returns at the end of the file but no
addresses or domains... NT4SP6A. You are not alone. g
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
E Is anyone having a problem with the latest version (1.0.39
to see fixes on the kill.lst
That is the only problem I am experiencing at this time.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
E Roger,
E I've come to the conclusion that the spamreview software is choking on my
E spool files.
E I installed
Are key word filters case sensitive? We see some filters not
working on subject fields, for example, unless they match exactly
the case of the filter...
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
--
ActivatorMail(tm) ver.061902 Scanned for all viruses by
www.activatormail.com
Reply to: Tom
Re: [Declude.JunkMail] More Spam Addresses on Saturday 9:09:17 PM
Is there documentation on kill.lst and use of the proceeding '.'
dot? I could not find this... The Infobase says use @ in each
example... Is this for use in Declude blacklist or kill.lst?
--
Roger Heath
if it can be done... so it can be
placed in headers even temporarily to view how well mail is being
processed.
--
Roger Heath
--
ActivatorMail(tm) ver.061902 Scanned for all viruses by
www.activatormail.com intelligent anti-virus anti-spam service
---
[This E-mail was scanned for viruses
Reply to: Roger Heath
Re: [Declude.JunkMail] BLARSBL:DBSL on Thursday 8:49:08 AM
Should be DSBL... and it appears to be working here after turning
it on..
--
Roger Heath
- Copy of Original Message(s): -
R
http://www.infoworld.com/cgi-bin/fixup.pl?story=http://www.infoworld.com
have
a complete list of the free ones available?
--
Roger Heath
- Copy of Original Message(s): -
I Did you also uncomment DSBLALL ?
I Kevin M. Donovan, MCSE
I Network Support Specialist
I IntelliWare Systems, Inc.
I Phone (817) 277-0800 x228
I - Original Message -
I From: Roger
not list a weight 10 rule violation. I commented out the DBSL and
now am back to normal.
--
Roger Heath
- Copy of Original Message(s): -
No, but I will try it. It seems to be working good. Scott had
this under subscription based services in his sample global file,
so I was a bit confused
if they are persistent. It
essentially shuts off their attack for a set time period... You
can purchase this Server Firewall at www.networkice.com
--
Roger Heath
- Copy of Original Message(s): -
J Can Declude Hijack help with dictionary attacks and
J other attacks that attempt at mail
to find out why 1800 and all local accounts would take
this amount of time or longer. Am I missing a setting somewhere?
I have never seen it take so long to deliver local emails.
Otherwise regular emails are passing very fast.
--
Roger Heath
- Copy of Original Message(s): -
J
Reply to: John Shacklett
Re: [Declude.JunkMail] 1.49 list problem on Friday 8:38:25 AM
We have been witnessing this for a while... as well. It seems
like list mail just sits there forever unless is is manually
pushed.. This seems to be the only way it gets delivered.
--
Roger
This is a forwarded message
From: R. Scott Perry [EMAIL PROTECTED]
To: Roger Heath [EMAIL PROTECTED]
Thought others here might find this interesting as I did.
--
Roger Heath
=Original message text===
My mail server and Declude is really being tested today.
I think
that exists.
--
Roger Heath
- Copy of Original Message(s): -
T Power is back and life is getting back to normal so I thought I would post
T an update. The last update I posted the first person that downloaded it
T found a major problem. I hope that is not the case this time
but had a blank line
as well. We are not using this variable now. I was waiting
for someone else to say something here. If you remove the
%testsfailed% perhaps you will see the blank lines disappear
too?
--
Roger Heath
- Copy of Original Message(s): -
J Good morning, all.
J I have
Reply to: R. Scott Perry
Re: [Declude.JunkMail] Am I blacklisting correctly? on Thursday 2:52:03 PM
This would explain my %testsfailed% experiences.
I even tried putting the WARNs 'above' the HOLDs but this
made no difference, just so ya know.
--
Roger Heath
- Copy of Original
need to notify senders of bad mail.
--
Roger Heath
- Copy of Original Message(s): -
T On some of the email I review I would like to click a button and send an
T email back to the sender, based on a template, letting them know that they
T have a problem. It could include all the warnings
tests with WARN? It looks like my
error in retrospect...
--
Roger Heath
- Copy of Original Message(s): -
I have already observed that this does not appear when
used in XINHEADER. I keep getting weights but no testsfailed..
It is blank every time.
R I've just tested it here
Reply to: R. Scott Perry
Re: [Declude.JunkMail] Declude v1.35 released on Wednesday 12:35:49 PM
Thanks, I keep forgetting this.
--
Roger Heath
- Copy of Original Message(s): -
R If this is in the $default$.JunkMail file, are you seeing any warning
R headers, and if so, what shows
://support.ipswitch.com/kb/IM-19990624-DM02.htm
shows the requirement for kill.lst
--
Roger Heath
- Copy of Original Message(s): -
T I don't find in the IMail documentation that you have to recycle the SMTP
T service. Can you confirm this please?
--
ActivatorMail(tm) ver.012602 Scanned for all
:
Keyboard hooks:
1. Delete key for Move to Delete in addition to button.
2. Insert key to Return to Que in addition to button.
3. F5 to Refresh key in addition to button.
Still not displaying Weight here. If you tell me what it
is looking for, maybe I can change my header to be
recognized?
--
Roger
. I do not have VB.
--
Roger Heath
- Copy of Original Message(s): -
T This program is written in VB6.0. You give it the path to your IMail spool
T folder and it locates the spam email that is in hold by looking in the spam
T folder under the spool folder. ex. c:\imail\spool\spam
to something you want to not delete. I hope
I get a lot of spam today. g
This is very useful.
--
Roger Heath
- Copy of Original Message(s): -
T Either will work.
T \\myserver\imail\spool
T or
T c:\imail\spool
T -Original Message-
T From: [EMAIL PROTECTED]
T [mailto:[EMAIL
like to get this working...
Thanks again,
--
Roger Heath
- Copy of Original Message(s): -
T I have received several replies. If it's ok with Declude, I will post the
T download address on this list. If someone from Declude would reply to me I
T would appreciate it.
T This program
like %TOTALWEIGHT% or something like that.
I do not see anything in the latest manuals or cfg files.
--
Roger Heath
- Copy of Original Message(s): -
T Roger,
T If you have upgraded Declude Junkmail recently you can find out how to use
T this new feature in their online manual.
T If you
really do not see hardly any
legitimate email captured at all. Most of these saver lists
are really spamming...under the guise of the user having signed
up. Most opt-in is really not opt-in, similar to 'This is not
spam' statements.
--
Roger Heath
- Copy of Original Message(s): -
I
. But this is very rare with the
above configuration.
--
Roger Heath
- Copy of Original Message(s): -
a Hi,
a I checked the headers, it was not pm0.net and I checked with the
a customers, they had indeed signed up for these mailing lists.
a So, there were 3 false positives this morning out
the '@'.
--
Roger Heath
- Copy of Original Message(s): -
Here's a new problem:
I have the following in my global.cfg:
whitelist fromintechpark.com
I just found a message in my HOLD directory with the following top header:
Received: from intechexc01.intechpark.com
adds up. I'd say about 80-85% of all spam
is caught now with very very few legit mails and the Imail
keyword filters are picking up most of the rest..
This feature adds an 'intelligence' to catching spam..
--
Roger Heath
[EMAIL PROTECTED]
Here's the original how-to from Scott:
The second
73 matches
Mail list logo
