] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Friday, June 15, 2007 11:16 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
Smartermail had made a change to the .hdr file in the way that CMDSPACE was
being reported, I am currently testing the fix for
E: [EMAIL PROTECTED]
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Monday, April 09, 2007 1:17 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
David,
Has any progress been made on this
nuary 04, 2007 1:09 PM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
>
> David,
>
> Has any progress been made on this issue? Using SmarterMail Enterprise
> 3.3.2439 and Declude 4.3.23, I still am not seeing C
Ditto
Mike
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
mber 13, 2006 10:38 AM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
>
> I am looking for more information regarding this issue.
>
> Is this unique to the SM Enterprise Edition?
>
> Also, does it seem to be related to a specifi
Here.
Running SmarterMail 3.3.2369, Declude 4.2.3.
Shayne
Original Message
> From: "Michael Jaworski" <[EMAIL PROTECTED]>
> Sent: Tuesday, November 14, 2006 7:55 PM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] CMDSPACE/S
Of David
Barker
Sent: Monday, November 13, 2006 7:19 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
I am looking for more information regarding this issue.
Is this unique to the SM Enterprise Edition?
Also, does it seem to be related to a specific
:[EMAIL PROTECTED] On Behalf Of Goran
Jovanovic
Sent: Friday, November 10, 2006 5:44 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
My understanding from quite a while ago is that SmarterMail did not pass the
CMDSPACE info on to Declude (somehow). So the
4:18 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] CMDSPACE/SmarterMail
Michael,
If you have anything being held as spam, that folder will contain the *.hdr
ad *.eml files. Look at one of the *.hdr files to see whether it contains a
mention of CMDSPACE. That is how SmarterMai
Michael,
If you have anything being held as spam, that folder will contain the *.hdr
ad *.eml files. Look at one of the *.hdr files to see whether it contains a
mention of CMDSPACE. That is how SmarterMail has been passing that
information to Declude. If it is there, send us a copy of the *.hdr fi
-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Friday, November 10, 2006 3:40 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
Thanks, David. It's little things like this short acknowledging message
that can go miles to
, November 10, 2006 3:10 PM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
>
> I see that too, I will look into this.
>
> David B
> www.declude.com
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Thanks Gary!
It is a Declude holiday. We might hear something from them Monday.
M
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Friday, November 10, 2006 11:27 AM
To: declude.junkmail@declude.com
Subject: re: [Declude.JunkMail
I see that too, I will look into this.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Friday, November 10, 2006 2:27 PM
To: declude.junkmail@declude.com
Subject: re: [Declude.JunkMail] CMDSPACE/SmarterMail
I'm also using SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14, and
have had CMDSPACE configured for quite a while, but hadn't thought anything
about it. When I saw your message I ran DLanalyzer on my logs for the past two
weeks and saw that there were no hits for CMDSPACE at all. S
h spam over our
'skipifweight'
Erik
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gufler Markus
Sent: Monday, January 09, 2006 12:30 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] CMDSPACE Percent of Weight based on your
(DELETE) a
If you're able to whitelist (by IP or AUTH-ed users) all users who connect from
inbound to outbound to your server then you can use a very high weight for this
test. I give >50% of my hold weight for the test and add additional points if
there is a combination with certain other test. For exampl
Hi,
I would like to ask those that having been using CMDSPACE; what percentage
of your weight do you assign to this?
Zero. I have backup and anti virus software using Microsoft DLLs which have
the same bug.
So if I were to use the CMDSPACE it would push some mails to my "subject
modificati
David Barker wrote:
Christian,
Another way that you could deal with this specific Microsoft Office Outlook
build is to create a filter that contains the following:
HEADERS -8 CONTAINS Microsoft Office Outlook, Build 11.0.5510
As a suggestion to limit the collateral damage I would prefa
> Another way that you could deal with this specific Microsoft
> Office Outlook build is to create a filter that contains the
> following:
>
> HEADERS -8 CONTAINS Microsoft Office Outlook,
> Build 11.0.5510
...but keep in mind that some Spammers write in the headers exactly this
Christian,
Another way that you could deal with this specific Microsoft Office Outlook
build is to create a filter that contains the following:
HEADERS -8 CONTAINS Microsoft Office Outlook, Build 11.0.5510
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[
If you're using CDONTS, switch to CSOSYS. You'll be much happier.
Darin.
- Original Message -
From: "Bonno Bloksma" <[EMAIL PROTECTED]>
To:
Sent: Wednesday, November 16, 2005 6:26 AM
Subject: Re: [Declude.JunkMail] CMDSPACE Failures
Hi,
> If MS w
Hi,
> If MS were to fix it, we wouldn't be detecting a lot of the spam. So,
while
> on one hand it would be nice if it were fixed... on the other hand the
> CMDSPACE test wouldn't be catching nearly as much.
It seems this library is broken. Sophos also has this problem as they use
this MS lib:
-
If MS were to fix it, we wouldn't be detecting a lot of the spam. So, while
on one hand it would be nice if it were fixed... on the other hand the
CMDSPACE test wouldn't be catching nearly as much.
WHITELIST AUTH and custom filters to negate specific senders and servers
that fail this test is how
The only real ways to work around this is to "whitelist auth" clients
assuming you are using Imail 8.x. Short of that or whitelisting client ip's
there is no way to fix it.
Darrell
---
DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus. D
uot;Travis Sullivan" <[EMAIL PROTECTED]>
To:
Sent: Thursday, November 03, 2005 10:37 AM
Subject: Re: [Declude.JunkMail] CMDSPACE test results with 3.x
how are you guaging false positives?
Travis
- Original Message -
From: "Scott Fisher" <[EMAIL PROTECTED]>
how are you guaging false positives?
Travis
- Original Message -
From: "Scott Fisher" <[EMAIL PROTECTED]>
To:
Cc: "Support - Scott" <[EMAIL PROTECTED]>
Sent: Thursday, November 03, 2005 9:07 AM
Subject: [Declude.JunkMail] CMDSPACE test results with 3.x
I was looking over my test res
rell ([EMAIL PROTECTED])"
> <[EMAIL PROTECTED]>
> To:
> Sent: Sunday, October 23, 2005 6:06 PM
> Subject: Re: [Declude.JunkMail] cmdspace command
>
>
> > Travis,
> >
> > This is a known issue - you should auth / whitelist auth
> all of your loc
Mail Queue Monitoring, Declude Overflow Queue Monitoring, SURBL/URI
integration, MRTG Integration, and Log Parsers.
- Original Message -
From: "Darrell ([EMAIL PROTECTED])" <[EMAIL PROTECTED]>
To:
Sent: Sunday, October 23, 2005 6:06 PM
Subject: Re: [Declude.JunkMail]
Travis,
This is a known issue - you should auth / whitelist auth all of your local
clients that connect/send email through your mail server.
Darrell
---
Check out http://www.invariantsystems.com for utilities for Declude And
Imail. IMail Queue Monitori
sorry...sent too soon!!
declude 1.82
ms-outlook express win xp
cmdspace scores a hit... here are my headers:
Received: from elanore [68.112.10.238] by cobra.simplecom.net with ESMTP
(SMTPD32-7.15) id A979C31E00E8; Sun, 23 Oct 2005 15:58:33 -0500
Message-ID: <[EMAIL PROTECTED]>
From: "Tr
> Up to this point I have not
> seen a false positive from a legit mail server.
> Have others?
Yes.
Older version of Tobit Infocenter has failed CMDSPACE. I've send them some
informations about the effectiveness of the CMDSPACE test and as I know they
have changed their MTA in never release
:
Sent: Wednesday, August 24, 2005 11:57 AM
Subject: Re: [Declude.JunkMail] CMDSPACE
Kevin,
The comments test is defined as
COMMENTS comments a x b 0
where a = the number of comments that are required to add "b" amount of
weight to the message.
Darrell
--
24, 2005 11:57 AM
Subject: Re: [Declude.JunkMail] CMDSPACE
Kevin,
The comments test is defined as
COMMENTS comments a x b 0
where a = the number of comments that are required to add "b" amount of
weight to the message.
Darrell
-
I weight CMDSPACE at 40 (subject tag at 100, hold at 200, delete at 300).
I show about a 3% false positive rate which includes some list servers. Also
seems to tend combine with helo-bogus and spamheaders hits.
It did detect 43% of all spams here.
I don't use comments...
- Original Messag
elist for the
CMDSPACE test only that we use to counter the weight for that test for
certain sending domains or addresses.
Darin.
- Original Message -
From: "Darrell ([EMAIL PROTECTED])" <[EMAIL PROTECTED]>
To:
Sent: Wednesday, August 24, 2005 1:00 PM
Subject: Re: [Declu
Generally in regards to this test poorly written spam software and some non
compliant clients fail this test - but legit mail servers often do not. Up
to this point I have not seen a false positive from a legit mail server.
Have others? Usually folks sending mail to you will push it through t
Kevin,
The comments test is defined as
COMMENTS comments a x b 0
where a = the number of comments that are required to add "b" amount of
weight to the message.
Darrell
-
invURIBL - Intelligent URI filtering. Stops 85% of SPAM with t
By the way, I do use WHITELIST AUTH for my own users, but the CMDSPACE
test flags emails sent from other people to our users. So I guess I
don't understand how WHITELIST AUTH would help in that situation.
Darrell ([EMAIL PROTECTED]) wrote:
My users get a lot of legit emails that get flagged
Thanks. How do I increase the COMMENT threshhold?
Darrell ([EMAIL PROTECTED]) wrote:
My users get a lot of legit emails that get flagged with both these
and then end up with a weight of 12 and get put in their bulk
folder. I mean a lot. Just regular emails sent from Aetna.com,
Principal.c
My users get a lot of legit emails that get flagged with both these and
then end up with a weight of 12 and get put in their bulk folder. I mean
a lot. Just regular emails sent from Aetna.com, Principal.com, other big
insurance carriers. Should I reduce the weight of them? Are they working
If their is a space in one of the commands where there should not be per the
RFC's during the smtp transaction it will cause this test to be failed. One
thing to note Outlook fails this test every time so you should compensate
for this.
Darrell
---
invURIBL
> According to a note I found in the archives, CMDSPACE needs Imail v8, with
> SMTP-Authentication, and AUTOWHITELIST ON in global.cfg to work correctly.
> Otherwise, you get false positives from Outlook clients.
Not quite correct. AUTOWHITELIST is not needed in conjunction with CMDSPACE.
However,
According to a note I found in the archives, CMDSPACE needs Imail v8, with
SMTP-Authentication, and AUTOWHITELIST ON in global.cfg to work correctly.
Otherwise, you get false positives from Outlook clients.
As we are not on Imail v8, I ran into that problem. I handled it by reduced
the weight on
I was wondering what exactly the CMDSPACE test is. I wasn't able to
find anything about it in the Junkmail manual..
It's part of the latest beta, which means that it is currently only covered
in the release notes ( http://www.declude.com/relnotes.htm ) and on the
mailing list.
So the problem is with the sending mail server at 64.72.97.82, not the
sending client (OE 6)? Just trying to understand.
The E-mail came from 64.72.97.82, so the SMTP software running on there is
at fault (it could be a mail client or a mail server -- SMTP does not
distinguish between the two).
4 12:46 PM
Subject: Re: [Declude.JunkMail] CMDSPACE failure on OE auto-responder
>
> >I'm curious what caused this message to fail CMDSPACE?
>
> It failed because the mailserver sending the E-mail doesn't follow the
RFCs
> exactly (specifically, it had a space in o
I'm curious what caused this message to fail CMDSPACE?
It failed because the mailserver sending the E-mail doesn't follow the RFCs
exactly (specifically, it had a space in one of the SMTP commands where it
should not have).
-Scott
---
Declude J
Now when I look inthe logs I see this:
03/31/2004 11:32:03 Qf2702a4 Tests failed [weight=5]: CMDSPACE=WARN
03/31/2004 11:32:09 Qf27f25e Tests failed [weight=5]: CMDSPACE=IGNORE
Why do some lines show Ignore, and others Warn??
That's because Declude JunkMail chooses the actions based on each
reci
> The reason WHITELIST AUTH only works with Imail 8 and above is
> because Imail
> adds a line in the Q file in version 8 and above indicating the sender
> authenticated to Imail.
>
It does not add a line it changes the "S" to an "A" at the beginning ot the
envelope sender line.
Kevin Bilbee
Responding to 2 posts:
> > WHITELIST AUTH can work only if you use SMTP-Authentication
> > to allow relaying trough your server.
>
> Yep I know. But as we're only using Imail 6 ATM the WHITELIST AUTH does
> not work (although the clients are authing).
The reason WHITELIST AUTH only works with Im
> WHITELIST AUTH can work only if you use SMTP-Authentication
> to allow relaying trough your server.
Yep I know. But as we're only using Imail 6 ATM the WHITELIST AUTH does
not work (although the clients are authing).
> If your clients connects from a defined IP range(s) you can
> use the same
> I had a (mini) brain storm and added WHITELIST AUTH to
> declude, but it didn't work. When I checked the declude
> release notes it stated you needed Imail 8. We have Imail 8,
> but it isn't installed yet.
?
WHITELIST AUTH can work only if you use SMTP-Authentication to allow
relaying trou
> The solution: Use Imail v8 with SMTP-Authentication and
> Declude Junkmail Pro with the parameter "AUTOWHITELIST ON" in
> the global.cfg file.
Sorry
I meant "WHITELIST AUTH" instead of "AUTOWHITELIST ON"
Markus
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.
They also fail the helobogus. These would not normally be a problem
because the vast majority of clients are within our dialup/xDSL or lease
line range that is already white listed. This client unfortunately has
broadband through another provider!
I had a (mini) brain storm and added WHITELIST AUT
> I may be wrong but I think I read somewhere on the list that
> an email failed the CMDSPACE test when it shouldn't have?
As I know all - or at least most - Microsoft Outlook clients that connect
directly to your Imail-Server will fail the CMDSPACE test.
The solution: Use Imail v8 with SMTP-Au
Hello guys,
I may be wrong but I think I read somewhere on the list that an email
failed the CMDSPACE test when it shouldn't have?
Would somebody mind checking these headers to see if this email should
have failed the CMDSPACE test also? If you need anything else please let
me know, Thanks!
Rece
57 matches
Mail list logo
