Re: [Declude.JunkMail] Spamcheck

2003-03-25 Thread andyb
What's the difference between spamcheck and declude? - Original Message - From: "Frederick P. Squib, Jr." <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, March 22, 2003 7:47 PM Subject: RE: [Declude.JunkMail] Spamcheck > Tom, > http://w

Re: [Declude.JunkMail] Spamcheck

2003-03-25 Thread R. Scott Perry
What's the difference between spamcheck and declude? Spamcheck is an addon for Declude JunkMail ( http://www.declude.com/tools lists a number of addons for Declude). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

RE: [Declude.JunkMail] Spamcheck

2003-03-25 Thread Markus Gufler
e ini-file I've posted some days ago in this thread. Markus > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of andyb > Sent: Tuesday, March 25, 2003 6:03 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Spamcheck >

Re: [Declude.JunkMail] request?

2003-03-26 Thread R. Scott Perry
How about a test to check if the e-mail address in the subject is the same as the person it was sent to? Or how about a test that checks for the following dupe names: [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] We're looking into tests that would detect these tricks.

Re: [Declude.JunkMail] Whitelist

2003-03-31 Thread R. Scott Perry
I know that this may have been covered in previous posts, but I wanted to cover this topic again. (I may even have discussed this myself). I have some users that have requested that they receive everything so I have had their accounts whitelisted (WHITELIST TO [EMAIL PROTECTED]). I also have b

RE: [Declude.JunkMail] IPNOTINMX

2003-04-02 Thread Patrick Childers
> Why didn't negative weight get added for this piece of mail I > received from the IPNOTINMX Test. > > Global.cfg > IPNOTINMX ipnotinmx x x 0 -3 > > Default.junkmail file > IPNOTINMX IGNORE Because you set the action to "IGNORE". Change it to "WARN" and it sh

RE: [Declude.JunkMail] IPNOTINMX

2003-04-02 Thread Darrell LaRock
PROTECTED] On Behalf Of Patrick Childers Sent: Wednesday, April 02, 2003 9:26 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] IPNOTINMX > Why didn't negative weight get added for this piece of mail I > received from the IPNOTINMX Test. > > Global.cfg > IPNOTINMX ipnot

Re: [Declude.JunkMail] IPNOTINMX

2003-04-02 Thread R. Scott Perry
Why didn't negative weight get added for this piece of mail I received from the IPNOTINMX Test. The E-mail definitely should not fail the IPNOTINMX test, as the IP it came from is in the MX record for the domain in the return address. The log file snippet confirms that the E-mail did not fail t

RE: [Declude.JunkMail] IPNOTINMX

2003-04-02 Thread Darrell LaRock
ROTECTED] Subject: Re: [Declude.JunkMail] IPNOTINMX >Why didn't negative weight get added for this piece of mail I received >from the IPNOTINMX Test. The E-mail definitely should not fail the IPNOTINMX test, as the IP it came from is in the MX record for the domain in the return add

RE: [Declude.JunkMail] IPNOTINMX

2003-04-02 Thread R. Scott Perry
My expected behavior would be that this piece of mail *SHOULD* have had -3 subtracted from it. This is the behavior that I am shooting for. Correct. The log files for Declude show that it wasn't subtracted 03/31/2003 18:24:33 Qce102a4f0086c057 BASE64:5 SNIFFER:8 . Total weight = 13 Something i

RE: [Declude.JunkMail] bigfoot.com?

2003-04-02 Thread Kami Razvan
Hi; We have received much SPAM from that address and they are in our blacklist - which simply means automatic deletion. Regards, Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sheldon Koehler Sent: Wednesday, April 02, 2003 11:55 AM To: [EMAIL PROT

Re: [Declude.JunkMail] bigfoot.com?

2003-04-02 Thread Sheldon Koehler
pause and reflect." Mark Twain - Original Message - From: "Kami Razvan" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, April 02, 2003 9:15 AM Subject: RE: [Declude.JunkMail] bigfoot.com? Hi; We have received much SPAM from that address and they are

RE: [Declude.JunkMail] Freelotto

2003-04-05 Thread John Tolmachoff \(Lists\)
You need to add the "XSENDERON" setting in the GLOBAL.CFG so that you can see what the actual sender e-mail address is. Do you mean the auto-whitelisting feature for webmail? John Tolmachoff MCSE, CSSA Owner, Network Engineer/Consultant PO Box 91975 City of Industry, CA 91715-1975 626-737-60

RE: [Declude.JunkMail] Freelotto

2003-04-05 Thread Rich
At 07:56 AM 4/5/2003, John Tolmachoff \(Lists\) wrote: You need to add the "XSENDERON" setting in the GLOBAL.CFG so that you can see what the actual sender e-mail address is. Done... Do you mean the auto-whitelisting feature for webmail? Yep. It was working before, just all of the sudden sto

RE: [Declude.JunkMail] Freelotto

2003-04-05 Thread John Tolmachoff \(Lists\)
> Yep. It was working before, just all of the sudden stopped. No changes > here since the report from the customer. What does the log show? John Tolmachoff MCSE, CSSA Owner, Network Engineer/Consultant eServices For You City of Industry, CA www.eservicesforyou.com --- [This E-mail was scanne

RE: [Declude.JunkMail] Freelotto

2003-04-05 Thread Rich
At 08:20 AM 4/5/2003, John Tolmachoff \(Lists\) wrote: > Yep. It was working before, just all of the sudden stopped. No changes > here since the report from the customer. What does the log show? 04/05/2003 03:15:26 Qbaca06c OSSOFT:5 BADHEADERS:8 SNIFFER:10 BADIPS:10 WIREHUB-DNSBL:5 . Total weig

RE: [Declude.JunkMail] Freelotto

2003-04-05 Thread R. Scott Perry
What does the log show? 04/05/2003 03:15:26 Qbaca06c From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 64.14.48.145 ID: The next release will fix this. A change was made to the last beta to the whitelisting to prevent false positives, but it ended up breaking the "all@" functionality.

RE: [Declude.JunkMail] Freelotto

2003-04-05 Thread John Tolmachoff \(Lists\)
> Yet some mail is whitelisted properly to other customers... Look at these once you have the XSENDER setting ON. I am thinking it will show that the actual sender is different than the from address in the header. John Tolmachoff MCSE, CSSA Owner, Network Engineer/Consultant eServices For You Ci

Re: [Declude.JunkMail] Help!

2003-06-06 Thread R. Scott Perry
Just upgraded and all my emails are getting stuck in the Spool directory and not getting delivered. Any thoughts??? Please respond to [EMAIL PROTECTED] What do the logs shows? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail

Re: [Declude.JunkMail] %REMOTEIP%

2003-06-07 Thread R. Scott Perry
I have noticed something. It seems that %REMOTEIP% always shows the IP the Imail received from, even if that IP is listed in the Global.cfg as IPBYPASS. >From my Global.cfg: LOGLEVELHIGH HOP 0 HOPHIGH 2 CONSOLE ON IPBYPASS67.94.227.36 >From my vulnerabi

RE: [Declude.JunkMail] %REMOTEIP%

2003-06-07 Thread John Tolmachoff \(Lists\)
> That's because Declude JunkMail and Declude Virus are separate. Although > they share a lot of functionality, this is a place where they > differ: Declude JunkMail has the ability to use the HOP/HOPHIGH/IPBYPASS > options, but Declude Virus does not. DUH. I guess that is what I get for working

Re: [Declude.JunkMail] WHITELISTFILE

2003-05-27 Thread R. Scott Perry
For a given to address (i.e. WhiteListFile @TheCustomer.com D:\IMail\Declude\WL_TheCustomercom.txt) what is the syntax for the lines in WL_TheCustomercom.txt? Can it be something like @notspam.com? Can it be an IP address? Each line in the file can be either an E-mail address ("[EMAIL PROTECTED]"

Re: [Declude.JunkMail] Spamdomains

2003-05-30 Thread Bill B.
Somebody mentioned aol.com and netscape.com a while ago, but I cant recall which format it was. Perhaps somebody else remembers... aol.com netscape.com AND/OR netscape.comaol.com Bill -Original Message- From: Dan Patnode Sent: 29 May 2003 16:12:11 -0700 Subject: [Declude.JunkMai

RE: [Declude.JunkMail] Spamdomains

2003-05-30 Thread Markus Gufler
Before SPAMDOMAINS we've used a blacklist to give all from the following sender-domains a little weight: @yahoo.com @yahoo.co.uk @yahoo.de hotmail.com msn.com email.com email.it @aol.com @mail.com lycos.com lycos.co.uk lycos.it @info.it @usa.net earthling.net earthling.com earthlink.net earthlink.

RE: [Declude.JunkMail] Spamdomains

2003-05-30 Thread R. Scott Perry
Just to confirm: If I want to find out which of this domains can be used with the spamdomains-test, I have to find a legit/real mail from each one, so that I can check if the IP of those outgoing smtp-gateway has a REVDNS containing the domain name. Right? Correct. Technically, you might need to

Re: [Declude.JunkMail] Spamdomains

2003-05-30 Thread Joshua Levitsky
On Thursday, May 29, 2003, at 07:23 PM, Bill B. wrote: Somebody mentioned aol.com and netscape.com a while ago, but I cant recall which format it was. Perhaps somebody else remembers... aol.com netscape.com AND/OR netscape.comaol.com Bill I think you mean netscape.net no? I might be over-

Re: [Declude.JunkMail] Spamdomains

2003-05-30 Thread Bill B.
Thats correct, my mistake. It should be netscape.net Bill -Original Message- From: Joshua Levitsky Sent: Thu, 29 May 2003 22:33:21 -0400 Subject: Re: [Declude.JunkMail] Spamdomains On Thursday, May 29, 2003, at 07:23 PM, Bill B. wrote: > Somebody mentioned aol.com and netscape.

Re: [Declude.JunkMail] Whitelist

2003-05-31 Thread R. Scott Perry
I want to whitelist from a file in both the config.cfg and $default$.junkmail I know this is the command for $default$.junkmail WHITELISTFILE C:\IMail\Declude\WhiteList.txt What is the command for the config.cfg. The WHITELISTFILE command does not work in the global.cfg file. It only applies t

Re: [Declude.JunkMail] Whitelist

2003-05-31 Thread Frederick Samarelli
What command can I use to White list from a file in the config.cfg Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, May 30, 2003 10:18 AM Subject: Re: [Declude.JunkMail] Whitelist > > >I want to wh

Re: [Declude.JunkMail] Whitelist

2003-05-31 Thread R. Scott Perry
What command can I use to White list from a file in the config.cfg To whitelist in the global.cfg file (FYI, there is no "config.cfg" file), you need to use the WHITELIST command (such as "WHITELIST FROM [EMAIL PROTECTED]"). Rather than trying to figure out a way to whitelist from a file in th

Re: [Declude.JunkMail] helobogus

2003-05-31 Thread Serge
X-RBL-Warning: HELOBOGUS: Domain fr_ru1_exch_01.azlan.fr has no MX or A records. X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 81.80.195.20 with no reverse DNS entry. X-RBL-Warning: WEIGHT10: Weight of 12 reaches or exceeds the limit of 10. X-Spam-Tests-Failed: HELOBOGUS, REVDNS, WEI

Re: [Declude.JunkMail] helobogus

2003-05-31 Thread R. Scott Perry
X-RBL-Warning: HELOBOGUS: Domain fr_ru1_exch_01.azlan.fr has no MX or A records. Did this fail the hellobogus because they used host name instead of domain name (azlan.fr does have mx) ? No. It failed the HELOBOGUS test because their mailserver claimed to be a host named fr_ru1_exch_01.azlan.f

Re: [Declude.JunkMail] Wordfilter

2003-05-31 Thread R. Scott Perry
When I see the following in a message header: X-RBL-Warning: WORDFILTER: Message failed WORDFILTER test (294) Do I assume that this means the message failed the filter on line 294 of my wordfilter file? That is correct. I am seeing multiple messages fail wordfilter, showing line 294, however

Re: [Declude.JunkMail] Spamdomains

2003-06-03 Thread Bill B.
Actually, I didn't even notice... That was "quest" not "qwest". The previous entry for "qwest." should be fine: qwest. But just to be safe, it could be changed to: @qwest..qwest. -Original Message- From: "Bill B." Sent: Mon, 02 Jun 2003 23:44:38 EST Subject: Re: Spamdomains Th

Re: [Declude.JunkMail] Spamdomains

2003-06-03 Thread Bill B.
Thanks for pointing that out. Perhaps the following will work better: @qwest. .quest. I have also added these: ameritech.netyahoo.com @go.com .go.com -Original Message- From: Dan Patnode Sent: 02 Jun 2003 21:32:03 -0700 Subject: Spamdomains Interesting FP toda

Re: [Declude.JunkMail] DNSSTUFF.COM

2003-06-04 Thread R. Scott Perry
Since you are having bandwidth issues hosting your DNSSTUFF.COM site is it possible to let one of us host a copy. If you can find someone willing to dedicate a server to the job for the next week, that would work. :) We have arranged to move the sites into a data center (with virtually unlimit

Re: [Declude.JunkMail] FIVETENIGNORE

2003-06-04 Thread R. Scott Perry
Does anyone have any information about FIVETENIGNORE? C:\data\ftp\ip4r.htm says "Lists IP ranges of companies that ignore spam complaints. Warning: May block large ISPs. NOTE: If you are listed, you can find the address to get removed on their page ('blackhole')." I ran the spam database lookup

Re: [Declude.JunkMail] DNSSTUFF.COM

2003-06-04 Thread Frederick Samarelli
I have a few unused servers at my datacenter but they are all windows 2000. Fred - Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 03, 2003 12:42 PM Subject: Re: [Declude.JunkMail] DNSSTUFF.COM >

RE: [Declude.JunkMail] DNSSTUFF.COM

2003-06-04 Thread VanTech.Net
Perry Sent: Tuesday, June 03, 2003 9:43 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] DNSSTUFF.COM >Since you are having bandwidth issues hosting your DNSSTUFF.COM site is >it possible to let one of us host a copy. If you can find someone willing to dedicate a server to the job f

Re: [Declude.JunkMail] DNSSTUFF.COM

2003-06-04 Thread R. Scott Perry
Since you are having bandwidth issues hosting your DNSSTUFF.COM site is it possible to let one of us host a copy. If you can find someone willing to dedicate a server to the job for the next week, that would work. :) We have arranged to move the sites into a data center (with virtually unlimit

Re: [Declude.JunkMail] Fwd:

2003-06-09 Thread R. Scott Perry
Is anyone doing anything about these messages. I am getting more and more by the day! Unfortunately: Received: from mail.stevenstransport.com [10.100.1.17] by mail.stevenstransport.com (SMTPD32-6.00) id AD69710A015C; Sun, 08 Jun 2003 14:24:25 -0500 Received: FROM declude.com BY mail.stevenstr

RE: [Declude.JunkMail] spamchk.exe

2003-06-09 Thread Markus Gufler
Hi Adam, Can you see these error messages also if you disable the spamchk-test in decludes global.cfg-file? Are there other external exe-files configured in the global.cfg? It seems like all other exe-files called from declude (SMTP, and SMTPD.EXE to deliver the message) cannot be started. Mayby

Re: [Declude.JunkMail] spamchk.exe

2003-06-09 Thread R. Scott Perry
Application popup: smtp32.exe - Application Error : The application failed to initialize properly (0xc142). Click on OK to terminate the application. You can find out more about this at http://www.declude.com/dq.htm -- upgrading Declude to v1.65 should help (it's technically a Microsoft issue

Re: [Declude.JunkMail] Counting

2003-06-13 Thread R. Scott Perry
How did this get to Weight of 24. The easiest way to find out is to use LOGLEVEL MID, which will include a line in the log file with the weights. If it finds the item in the email more then once does it accumulate. For a filter, it will only look at the first occurrence. But, if multiple lines

RE: [Declude.JunkMail] Counting

2003-06-13 Thread Paul Navarre
> How did this get to Weight of 24. > FILTER-BODY filter c:\IMail\Declude\IMail_Filter_TextinBody.txt x 0 0 > Item Listed had a weight of 4 I am guessing that it caught more than one line in your filter. From what I can see, it only lists the last item caught in your filter file, although i

RE: [Declude.JunkMail] Counting

2003-06-13 Thread R. Scott Perry
I am guessing that it caught more than one line in your filter. From what I can see, it only lists the last item caught in your filter file, although it will give all of the points for all of the lines caught. Scott, is there a way to have it list all of the lines caught in the filter? I would

Re: [Declude.JunkMail] Counting

2003-06-13 Thread Frederick Samarelli
Scott. Do you have any thoughts on how to get a list of all items in a test that fails. - Original Message - From: "Paul Navarre" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, June 13, 2003 11:02 AM Subject: RE: [Declude.JunkMail] Counting > > H

Re: [Declude.JunkMail] Counting

2003-06-13 Thread R. Scott Perry
Scott. Do you have any thoughts on how to get a list of all items in a test that fails. Yes. This is something that we plan to add. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known

Re: [Declude.JunkMail] Counting

2003-06-13 Thread Bill Landry
t; <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, June 13, 2003 7:59 AM Subject: Re: [Declude.JunkMail] Counting > > >How did this get to Weight of 24. > > The easiest way to find out is to use LOGLEVEL MID, which will include a > line in the log file with t

RE: [Declude.JunkMail] SKIPIFVIRUSNAMEHAS

2003-06-13 Thread Markus Gufler
> And I have nothing for the recip.eml file, so I would like > suggestions on that one as well. (I screwed up earlier in the > week and deleted them all... I should know better than to do > work when I have the flu...). At the moment I can't find any other virusname to skip. For the recip.eml

RE: [Declude.JunkMail] SKIPIFVIRUSNAMEHAS

2003-06-14 Thread John Tolmachoff \(Lists\)
> At the moment I can't find any other virusname to skip. > > For the recip.eml I've set > SKIPIFVIRUSNAMEHAS Vulnerability > > And I've creted a new vulnerability.eml with > SKIPIFVIRUSNAMEDOESNOTHAVE Vulnerability > > So I can send out two different warnings for a real virus and a > vulnerabil

Re: [Declude.JunkMail] SKIPIFVIRUSNAMEHAS

2003-06-14 Thread Joshua Levitsky
>> At the moment I can't find any other virusname to skip. >> >> For the recip.eml I've set >> SKIPIFVIRUSNAMEHAS Vulnerability >> >> And I've creted a new vulnerability.eml with >> SKIPIFVIRUSNAMEDOESNOTHAVE Vulnerability >> >> So I can send out two different warnings for a real virus and a >

RE: [Declude.JunkMail] SKIPIFVIRUSNAMEHAS

2003-06-14 Thread John Tolmachoff \(Lists\)
> I have seen it discussed as something some wanted, but I never saw anything > talking about being able to use a vulnerability.eml file in a release of > Declude. I tried searching the archives but "vulnerability.eml" actually > shows every email with "vulnerability" in it which is a lot of mail.

RE: [Declude.JunkMail] SKIPIFVIRUSNAMEHAS

2003-06-14 Thread Andy Schmidt
-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Saturday, June 14, 2003 03:33 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] SKIPIFVIRUSNAMEHAS > I have seen it discussed as something some wanted, but I ne

RE: [Declude.JunkMail] SKIPIFVIRUSNAMEHAS

2003-06-15 Thread Markus Gufler
> I decided against notifying the recipient for > Vulnerabilities. Apparently, vulnerabilities are essentially > spam - and notifying the recipient would mean that they end > up getting an unwanted message after all. Yes. We've had this also until setting the AVAFTERJM option in the global.cfg

RE: [Declude.JunkMail] SKIPIFVIRUSNAMEHAS

2003-06-16 Thread John Tolmachoff \(Lists\)
> I decided against notifying the recipient for Vulnerabilities. Apparently, > vulnerabilities are essentially spam - and notifying the recipient would > mean that they end up getting an unwanted message after all. In my experience, that is true 98% of the time. That 2% percent though can cause pr

Re: [Declude.JunkMail] Spamcop?

2003-06-17 Thread Susan Duncan
I can get there now with my reporting code. Hirthe, Alexander wrote: Hello, what happened to Spamcop.net? I cannot http them? Alex --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscrib

Re: [Declude.JunkMail] Yahoo

2003-06-19 Thread R. Scott Perry
We are having problem with Yahoo emails. Are there others having the same problem? What is going on with Yahoo? Actually, it doesn't look like much is going on that hasn't been for some time: X-IMAIL-SPAM-DNSBL: (YBL,72549026,127.0.0.2) X-IMAIL-SPAM-DNSBL: (BLARS,72549026,127.1.0.97) X-IMAIL-SPA

Re: [Declude.JunkMail] Greylisting

2003-06-21 Thread Madscientist
At 05:11 PM 6/20/2003 -0400, you wrote: Just saw this on /. and thought that you all might be interested... http://projects.puremagic.com/greylisting/ I've just published a paper on a new and unique spam blocking method called "Greylisting".  The We have comparable mechanisms designed into the

Re: [Declude.JunkMail] Habeas

2003-06-24 Thread R. Scott Perry
Anybody using it to send mail? Anybody seeing mail with Habeas headers? I'm not using it, but have seen a handful of E-mails using it (typically from the "computer geek" types, not the average end user). I'm considering subscribing for our outgoing e-mail newsletter, but before I do, want to k

RE: [Declude.JunkMail] Habeas

2003-06-24 Thread Robert Grosshandler
June 24, 2003 1:37 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Habeas >Anybody using it to send mail? Anybody seeing mail with Habeas >headers? I'm not using it, but have seen a handful of E-mails using it (typically from the "computer geek" types, not the

RE: [Declude.JunkMail] Habeas

2003-06-24 Thread Jerod Bennett
osshandler Sent: Tuesday, June 24, 2003 11:46 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Habeas Sorry, didn't make myself clear. Whitelisting Habeas works from a programmatic viewpoint - I use it here. But I've never noticed any mail bearing Habeas Headers, so I'm wonderin

Re: [Declude.JunkMail] WHITELIST Syntax

2001-05-22 Thread R. Scott Perry
>What is the WHITELIST syntax? It's the word "WHITELIST", followed by "IP", "FROM", or "ANYWHERE", followed by the text to look for. For example, "WHITELIST IP 127.0.0.1" would whitelist any E-mails coming from the IP address 127.0.0.1. You could also use "WHITELIST IP 127.0.0." to whitelis

RE: [Declude.JunkMail] WHITELIST Syntax

2001-05-22 Thread Madscientist
Isn't the BLACKLIST essentially, anything that fails a test? my $0.02 | -Original Message- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry | Sent: Tuesday, May 22, 2001 4:55 PM | To: [EMAIL PROTECTED] | Subject: Re: [Declude.JunkMail] WHITELIST S

RE: [Declude.JunkMail] WHITELIST Syntax

2001-05-22 Thread R. Scott Perry
>Isn't the BLACKLIST essentially, anything that fails a test? WHITELIST will force an E-mail to pass all tests, based on the IP address it came from, or text within the From: address or message headers/body. So, even if one of those E-mails fails one of the spam tests, it will go through as

Re: [Declude.JunkMail] WHITELIST Syntax

2001-05-23 Thread R. Scott Perry
>Actually what I wanted to know more was more about the syntax. >For instance I know WHITELISTIP n.n.n.n - but is there a way to specify >a range of ip's or use a wild card in the IP address? Gotcha. It's all text based, and Declude searches for whatever is after the "IP", "FROM", or "ANY

Re: [Declude.JunkMail] Virus Stats

2001-07-29 Thread Jim Jones, Jr.
How'd you do that ? Jim - Original Message - From: "Andy Schmidt" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, July 28, 2001 10:22 PM Subject: [Declude.JunkMail] Virus Stats > Viri caught by Declude and McAfee in July. > > W32/SirCam@MM (ED) 761 > W32/Hybris.gen@MM 48 >

RE: [Declude.JunkMail] Virus Stats

2001-07-29 Thread Andy Schmidt
I run a little MS Access project that scans the Declude Vir*.log files and then tallies them up by virus type, mail-from and mail-to. Best Regards Andy Schmidt Argos Networks 600 East Crescent Avenue Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-9411 x20 (Business) Fax:+1 2

RE: [Declude.JunkMail] Virus Stats

2001-07-29 Thread Terrence Koeman
On Behalf Of Andy Schmidt > Sent: Sunday, July 29, 2001 16:10 > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Virus Stats > > > I run a little MS Access project that scans the Declude Vir*.log files > and then tallies them up by virus type, mail-from and mail-to. &g

Re: [Declude.JunkMail] filtering option?

2001-08-09 Thread R. Scott Perry
>Is there an option to stop testing for other types of filtering methods if a >previous one is marked to DELETE... maybe even to HOLD. This would save on >CPU and processing time. No, this is not possible (although it is already on the suggestion list). However, Declude JunkMail doesn't usuall

Re: [Declude.JunkMail] BADHEADERS customization

2001-08-21 Thread R. Scott Perry
>Is there anything we can do to customize the way BADHEADERS tests? If there >are several tests that it does, I would like to be able to turn on or off >those components that give us false positives but be able to use this test >for components that always find spam. SPAMHEADERS also? Well, reme

Re: [Declude.JunkMail] heuristic test

2001-08-24 Thread R. Scott Perry
>Can anyone shine some light on this test? It's a seemingly "forever in beta" test. In our tests, it detected about 85% of all spam, with virtually no false positives. But, outside of the confines of a test lab, it seems to have too high of a false positive rate to be very useful. The prob

RE: [Declude.JunkMail] MX Fail

2001-09-05 Thread Smart Business Lists
I want to thank Scott for helping me fix this problem. It actually turned out to be my DNS server was set to disallow recursion except from my ip ranges. The only thing was that when I set up the ip range my IMAIL server was on I mistyped that range. So the only MX records that it was finding w

RE: [Declude.JunkMail] [Declude.Virus] Headers?

2001-09-06 Thread R. Scott Perry
>I just upgrade to 1.25a, and I received this a broken e-mail: There was a problem with v1.25 (and, if you received an interim version, that would be affected as well) that could cause this. You can upgrade to v1.25a to fix the problem. -Scott

Re: [Declude.JunkMail] ByPassing IP's

2001-09-18 Thread R. Scott Perry
> This may be a stupid question but I can't figure it out. I would like >Declude to bypass a certain amount of IP addresses. These are mostly >feedbacks and e-mail forms coming from some web pages I host. When people >receive the forms it fails the SPAMHEADERS test and gets a note. I attempted >

Re: [Declude.JunkMail] MISSING_REVERSE_DNS:Whitelist syntax

2001-10-01 Thread Travis Sullivan
> Our internal web forms cause every emails produced to trigger SPAMHEADERS. > To avoid that I would like to put our IP addresses in white list what is the > exact syntax to list all the address on 192.168.1.0 ? is it 192.168.1.* ? > like: > > WHITELIST IP 192.168.1.* Just leave off the * and y

Re: [Declude.JunkMail] MISSING_REVERSE_DNS:SPAM filterrecommendations?

2001-10-27 Thread R. Scott Perry
>Can anyone recommend some good (free) test/filters s that I can run to >catch SPAM? I am using only the OSSRC filter, but a lot of SPAM is still >getting through. Hopefully, some other people will answer too, but there is a new test that I recently found out about that *will* be a pay service

Re: [Declude.JunkMail] Spam Settings?

2001-10-29 Thread Travis Sullivan
Well, first of all, you are doing anything to "catch" spam. You either need to "hold" or "delete" spam. I only recomend these two actions on a few of the tests. This depends on how much spam you get and how many users are on your domain. If you are like me, email is important but not that impo

Re: [Declude.JunkMail] Subject Setting?

2001-10-31 Thread R. Scott Perry
> We have had junkmail running for a few months now, but am just really >beginning to start using it to its full potential. I have created a >per-user check for my email to check everything and it is set to SUBJECT. >When something is caught it appears it is just putting SPAM in the head

Re: [Declude.JunkMail] MISSING_REVERSE_DNS:Hijack emailnotifications

2001-11-01 Thread R. Scott Perry
>Are there any email notifications for Declude Hijack similiar to Declude >virus? Is there a way to notify customers that they are trying to send too >much mail or at least let them know that their email did not go because >they went over the Hijack threshhold? No, it is not currently possible

Re: [Declude.JunkMail] Heur Cumulative?

2001-11-04 Thread R. Scott Perry
>a) are HEUR tests cumulative, e.g.: > >HEUR10 heuristics 10 x 4 0 >HEUR9 heuristics 9 x 4 0 >HEUR8 heuristics 8 x 3 0 >HEURheuristics > >If the HEUR value is 0., will the weight be: > >3 for

RE: [Declude.JunkMail] Heur Cumulative?

2001-11-04 Thread Andy Schmidt
Scott, >> if the value is 0., only the HEUR10 test would be triggered << Not to be argumentative, but your sample doesn't quite fit my experiences. a) a value of 0. doesn't seem to trigger HEUR10 - but triggers HEUR9? So it doesn't seem as if you are using a "CEILING" test (or rounding)

RE: [Declude.JunkMail] Heur Cumulative?

2001-11-04 Thread R. Scott Perry
> >> if the value is 0., only the HEUR10 test would be triggered << > >Not to be argumentative, but your sample doesn't quite fit my experiences. > >a) a value of 0. doesn't seem to trigger HEUR10 - but triggers HEUR9? >So it doesn't seem as if you are using a "CEILING" test (or rounding)

Re: [Declude.JunkMail] Postfixgate usage?

2001-11-09 Thread R. Scott Perry
>If I joing postfixgate do I get a kill file with addresses/domains that >becomes my kill.lst file? Or does it become another test for Junkmail to >attach to? If its the latter, how do I set it up? You get the files from postfixgate, and it becomes another test in Declude. All you need to do

RE: [Declude.JunkMail] Postfixgate usage?

2001-11-09 Thread Todd Holt
Is this worth the money ($125/yr.)? Is it a good test? Does it have a lot of false positives? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Friday, November 09, 2001 1:29 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail

RE: [Declude.JunkMail] 1.28 - CRASH

2001-11-06 Thread Andy Schmidt
The DECLUDE.GP* files only contain a few garbled characters - but may be the debug log helps zooming in? (PS: Never let me test ) 11/06/2001 19:07:16 CFG: Setting LOG_OK level to NONE 11/06/2001 19:07:16 CFG: Set hop to 0 and hophigh to 0. 11/06/2001 19:07:16 Console turned OFF 11/06/2001 19:

RE: [Declude.JunkMail] Digital Signatures

2001-11-07 Thread Andy Schmidt
-- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of John Tolmachoff Sent: Wednesday, November 07, 2001 09:02 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] 1.28 - SwitchRecip not effective? Andy, please do not use digital signatures when posting. This causes system delays wh

Re: [Declude.JunkMail] junkmail Actions

2001-11-14 Thread R. Scott Perry
>Is there any plan or possibility to allow for multiple actions for one test? There are no immediate plans to directly support multiple actions per test (IE having the MAILFROM test add a warning to the headers and have the subject altered), although it can be done (by defining two identical t

Re: [Declude.JunkMail] junkmail Actions

2001-11-14 Thread George Peace
Aha!! That's exactly what I was missing. Thanks! >If you want, you can have two different tests defined in the global.cfg file: > > WEIGHT10weight x x 10 0 > WEIGHT30weight x x 30 0 --- This E-mail came from the Declude.JunkM

RE: [Declude.JunkMail] Whitelist entry?

2001-11-29 Thread Smart Business Lists
Scott, I would really like the whitelist entries to be in the domain junkmail cfg file. Is that something that could be done eventually? Terry --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.J

Re: [Declude.JunkMail] Whitelist entry?

2001-11-29 Thread R. Scott Perry
>Does it matter where the Whitelist entry is located in the Global.cfg file? >I made a couple of entries as below and they are still being caught. > >WHITELIST FROM @domain.com They can go anywhere in the global.cfg file. One thing to look out for is to make sure that there are no spaces at th

RE: [Declude.JunkMail] Whitelist entry?

2001-11-29 Thread R. Scott Perry
>I would really like the whitelist entries to be in the domain junkmail >cfg file. >Is that something that could be done eventually? It's something that we are considering, but haven't made any plans to start yet. -Scott --- This E-mail came from the Declude

RE: [Declude.JunkMail] Whitelist entry?

2001-11-29 Thread Grant Griffith
T LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 ||-Original Message- ||From: [EMAIL PROTECTED] ||[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry ||Sent: Thursday, November 29, 2001 9:26 AM ||To: [EMAIL PROTECTED] ||Subject: Re: [Declude.JunkMail] White

RE: [Declude.JunkMail] Whitelist entry?

2001-11-29 Thread R. Scott Perry
>OK, Maybe I am trying to use this wrong. I am wanting to allow emails >coming FROM these accounts to get to my users. For example the domain >@freemerchant.com is being caught by Declude Junkmail and I don't want it to >be caught. It is an message showing an order for a customer. With the >f

Re: [Declude.JunkMail] Help please

2001-12-01 Thread Andy Schmidt
Adolfo: Here an excerpt of my GLOBAL.CFG file RBL ip4rblackholes.mail-abuse.org 127.0.0.2 DUL ip4rdialups.mail-abuse.org 127.0.0.3 RSS ip4rrelays.mail-abuse.org 127.0.0.2 OSRELAY ip4rrelays.osirusoft.com127.0.0

Re: [Declude.JunkMail] Help please

2001-12-01 Thread Webmaster Oilfield Directory
urday, December 01, 2001 1:32 PM Subject: Re: [Declude.JunkMail] Help please > Adolfo: > > Here an excerpt of my GLOBAL.CFG file > > RBL ip4rblackholes.mail-abuse.org 127.0.0.2 > DUL ip4rdialups.mail-abuse.org 127.0.0.3 > RSS ip4rrelays.mail-abuse.org 1

RE: [Declude.JunkMail] Help please

2001-12-01 Thread Andy Schmidt
riginal Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Webmaster Oilfield Directory Sent: Saturday, December 01, 2001 09:33 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Help please How did you feel this configuration worked, did you have any complaints

Re: [Declude.JunkMail] Newbie question

2001-12-17 Thread R. Scott Perry
>My question is, can you pick and choose which tests you want Declude to >perform, or are they all done by default? Yes, you can pick and choose. By default, all the tests that Declude has defined are run, except for the ones that require a subscription or normally would not be used for some

Re: [Declude.JunkMail] Variable %HeaderCode% ?

2001-12-17 Thread R. Scott Perry
>Is there a variable such as %HeaderCode% so that my email notifications or >WARNING headers can include a string such as: > >XRBL-Warning: %WARNING% >http://www.declude.com/tools/header.php?code=%HeaderCode% No, but that will be available in the next release.

RE: [Declude.JunkMail] SPAMROUTING Broken

2001-12-17 Thread Andy Schmidt
U X-UIDL: 601 Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Monday, December 17, 2001 12:42 PM To: [EMAIL PROTECTED] Subject: Re: [Declu

<    1   2   3   4   5   6   7   8   9   10   >