] [mailto:[EMAIL PROTECTED] On Behalf Of Todd
Richards
Sent: Thursday, July 10, 2008 9:16 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Overnight Spam Increase?
Thanks David. What I'm seeing is legitimate spam that while it is going
through Declude - most is marked as spam - it's
, July 10, 2008 9:11 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Overnight Spam Increase?
Looks like you are having a DNS problem, this email never scored any RBL's
yet when checking the IP it failed several.
Failed: SPAMCOP HOSTKARMA SENDERSCORE UBL UCEPROTECTL2 UCEPROTECTL3
.
David B
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd
Richards
Sent: Thursday, July 10, 2008 11:05 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Overnight Spam Increase?
Hmm, this is new to me. An internal DNS issue
Sent: Thursday, July 10, 2008 2:01 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Overnight Spam Increase?
ISSUE:
Spam is slipping past Declude that hasn't normally passed any filtering.
Spam is not being weighted high enough for actionable thresholds to take
effect.
Place your
Subject: X-IMail-SPAM RE: [Declude.JunkMail] Overnight Spam Increase?
OK, that was it. I went onto my mail server and tried to ping my DNS
server. No go. I rebooted my DNS server, flushed the cache from my
mail
server, then all was well. It looks like things are working again
We got slammed at about 9 am EST time today, causing delays, most of the
increase looks like backscatter.
David B
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd
Richards
Sent: Wednesday, July 09, 2008 11:47 AM
To: declude.junkmail@declude.com
Title: Re: [Declude.JunkMail] can't deinstall 3.1.0
Hallo Matt, that would clarify
that I have seen hundred of eMails saying: "eMail removed, the reason might be virus scan" or "The message you are looking for does not exist."
messages.
Thanks for hinting this.
Uwe
Uwe,
I think the install has been broken for a couple of years. It always
seems to drop the files in the wrong directories. I have found myself
having to go into the registry to fix things every time I install it.
If you look in the registry for where the services are defined, you
should
Hello Matt, thank you. :-)
I did that already yesterday.
I deleted almost every phrase in the registry containing Declude,
rebooted the machine. But it didn't help.
Where exactly are the services defined ?
Is there any step-by-step instruction on how
to do it ?
Uwe
Uwe,
I think the install has
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] can't deinstall 3.1.0
Uwe,
I think the install has been broken for a couple of years. It always
seems to drop the files in the wrong directories. I have found myself
having to go into the registry to fix things every time I
Hi David, thank you for your prompt help !
We did an uninstall +fresh install via command line.
Now the 4.4.0 version runs fine. :-)
Uwe
===8=== Original Nachrichtentext ===
Hello Matt, thank you. :-)
I did that already yesterday.
I deleted almost every phrase in
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] can't deinstall 3.1.0
Uwe,
I think the install has been broken for a couple of years. It always
seems to drop the files in the wrong directories. I have found myself
having to go into the registry to fix things every time I install
: 499838735
X-IMail-ThreadID: 6c7901831908
- Original Message -
From: David Barker
To: declude.junkmail@declude.com
Sent: Friday, May 16, 2008 8:39 AM
Subject: RE: [Declude.JunkMail] blocking certain character sets
Ferrell,
It would
] On Behalf Of Ferrell
Ard
Sent: Tuesday, June 24, 2008 8:09 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] blocking certain character sets - koi8
Importance: Low
David
I finally got another koi8 that my character-filter missed.
My character filter is
ANYWHERE 30 PCRE (?i
Anymore??? When were they trusted?
People that run a blacklist without a financial incentive generally are
agressive individuals that have lost their will for tollerance, and
don't want to be bothered by things like false positives. Those with
easy to maintain systems (primarily automated
I installed the 4.4.12 version when it was released and it has fixed
the TXT file orphans left in the WORK directory. But twice since
then, the decludeproc service has stopped functioning, and mail has
built up in the proc directory until I stop and start the service. It
just stopped again
:[EMAIL PROTECTED] On Behalf Of Don
Kuhwarth
Sent: Thursday, June 19, 2008 2:54 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Interim Release 4.4.12
I installed the 4.4.12 version when it was released and it has fixed
the TXT file orphans left in the WORK directory. But twice
When you have a chance, call me.
I didn't put the 14 yet.
Stephan
-Message d'origine-
De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de David
Barker
Envoyé : 19 juin, 2008 15:23
À : declude.junkmail@declude.com
Objet : RE: [Declude.JunkMail] Interim Release 4.4.12
Hi Kathy,
Here is what I posted a week ago. Works for us...with no excessive CPU load.
However, it sounds like your problems are a deeper configuration issue since
you mention multiple scanners allowing viruses through.
Assuming the default
Scott,
Here are my thoughts..
My question is... Is/Has anyone else tried this approach If so is
impact on the amount of mail your server had to process?
Yes, I have taken this approach for the absolute worst offenders.
Mostly the most abusive senders. This however has very limited
http://www.pcre.org/pcre.txt
http://www.tote-taste.de/X-Project/regex/syntax.html
I would suggest this tool http://www.regexbuddy.com/ makes it very easy to
learn.
David B
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T
Sent: Monday, June 02, 2008 6:13 PM
To:
presente se le comunica que no debe usar, difundir, copiar
de ninguna forma, ni emprender ninguna accion en relacion con ella.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: 28 May 2008 23:32
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Mail Pre
Colbeck, Andrew wrote:
I use Alligate from Solid Oak Software, and I like it a lot.
as do I.
The really slick part is how it reduces bandwidth - it *very* accurately
distinguishes spam etal before the DATA command thereby preventing the
unwanted emails from ever being received..
, 2008 6:15 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Mail Pre-Processor recommendations
Colbeck, Andrew wrote:
I use Alligate from Solid Oak Software, and I like it a lot.
as do I.
The really slick part is how it reduces bandwidth - it *very* accurately
distinguishes
I use Alligate from Solid Oak Software, and I like it a lot.
On my primary gateway, I received just shy of 500,000 connections in the
last 24 hours, and my Declude only had to see 4% of that traffic. Yes,
4%.
I'm spending less time doing clever things in Declude, because Alligate
is
Scott,
Alligate is a good gateway to use when you have something like Declude
behind it.
The only reason that I can think of that your Barracuda box is seeing
that many messages would be because you might not be validating
addresses. Like Andrew said, you can cut your _connection_ traffic
] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck,
Andrew
Sent: Wednesday, May 28, 2008 1:52 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Mail Pre-Processor recommendations
I use Alligate from Solid Oak Software, and I like it a lot.
On my primary gateway, I received just shy
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Mail Pre-Processor recommendations
I concur with Andrew, Alligate saved our company a ton of money in upgrades
to our mail server. Our mail server CPU's were peaked 24x7. When I
inserted Alligate into the mix, CPU's peak at about 30-40% now
Hi John,
Keep us posted how you get on because I have no idea about regular expressions
and would like to see how you trun out.
:o)
Kindest Regards
Craig Edmonds
123 Marbella Internet
W: www.123marbella.net
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T
Sent: 23
(?i:allen.{0,6}\.info)
All expressions must be in parenthesis
?i:non case sensitive
.* any character
{0,6} minimum 0 characters to a maximum of 6
\. Because . can mean any character a \. means specifically use .
Hope this helps.
David B
From: [EMAIL
Thanks David.John T
eServices For You
-Original Message-
From: David Barker [EMAIL PROTECTED]
Sent 5/23/2008 8:22:11 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] PCRE check(?i:allen.{0,6}\.info) All
expressions must be in parenthesis ?i: non case sensitive
Are you referring to the ROUTING test? Or do you want to fail versus a
specific path?
Original Message
From: David Dodell [EMAIL PROTECTED]
Sent: Saturday, May 17, 2008 9:51 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Country Routing Test?
Isn't
PongJohn T
eServices For You
-Original Message-
From: Declude Junkmail [EMAIL PROTECTED]
Sent 5/14/2008 12:12:45 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Tip of the day??Ping. kinda quiet arounf
here... Anyone got any tips on blocking the business loan
I prefer
table...
tennis
- Original Message -
From: John T
To: declude.junkmail@declude.com
Sent: Saturday, May 17, 2008 12:44 AM
Subject: Re: [Declude.JunkMail] Tip of the day??
Pong
John T
eServices For You
-Original Message-
From: Declude
, 2008 3:56 PM
Subject: Re: [Declude.JunkMail] blocking certain character sets
Hi,
I have a question of strategy. Per David's message below, one can setup a
filter for a character set (such as Russian). Alternative, one could use
BANCHARSET. For a third alternative, one could use rules.ima
@declude.com
Subject: Re: [Declude.JunkMail] blocking certain character sets
When I added to my global.cfg
BANCHARSETkoi8-r
it did not do anything ( emails continued to come in with this character
set)
Putting it into a Filter DID work.
ANYWHERE 30 PCRE (?i:(charset=.{0,2}koi8-[ur
David,
Can you tell me when (what version number) the PCRE filter was introduced?
Thanks,
Ben
- Original Message -
From: David Barker
To: declude.junkmail@declude.com
Sent: Friday, May 16, 2008 8:39 AM
Subject: RE: [Declude.JunkMail] blocking certain character sets
Declude Security Suite 4.3.40 [12 March 2007]
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Imail
Admin
Sent: Friday, May 16, 2008 12:45 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] blocking certain character sets
David,
Can you tell me when
Oh, well, thanks anyway Dave. I have 4.2.20 and no current SA.
- Original Message -
From: David Barker
To: declude.junkmail@declude.com
Sent: Friday, May 16, 2008 10:00 AM
Subject: RE: [Declude.JunkMail] blocking certain character sets
Declude Security Suite 4.3.40 [12
@declude.com
Sent: Tuesday, May 06, 2008 8:14 AM
Subject: RE: [Declude.JunkMail] blocking certain character sets
For these char sets it is much easier - use the following:
ANYWHERE 10 PCRE (?i:(iso-2022-jp|unicode-1-1-utf-7))
David B
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
21, 2008 10:21 AM
Subject: RE: [Declude.JunkMail] blocking certain character sets
I am surprised that they are still coming through, I would think that should
have stopped it altogether. However add the following line to a junkmail filter:
#CYRILLIC
ANYWHERE 10
To: declude.junkmail@declude.com
Sent: Monday, April 21, 2008 10:21 AM
Subject: RE: [Declude.JunkMail] blocking certain character sets
I am surprised that they are still coming through, I would think that should
have stopped it altogether. However add the following line to a junkmail
filter:
#CYRILLIC
Ruben,
One thing you can do is create a from filter that looks for the null
sender and than do a copyfile action on it if it did not match the
backscatter filter. This way you will be able to see which messages did
not get filtered to improve the back scatter filter for your system.
I would first find out if the base64 encoding arrived in tact...this is a
link to a base64 decoder..
http://www.opinionatedgeek.com/dotnet/tools/Base64Decode/
Just copy and paste the message into the window, and if it has arrived
correctly, it should be readable. If it is readable, then there
CONTAINSX-AUTH: Yes
David Barker
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean
Lawrence
Sent: Wednesday, April 30, 2008 5:46 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] SPAMMERS using postmaster@domain
if it does not already exist.
Chuck Schick
Warp 8, Inc.
(303)-421-5140
www.warp8.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry
vanderzand
Sent: Tuesday, April 29, 2008 4:32 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail
30, 2008 10:47 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Question on mailbox action...
I am not trying to re route the messages. What I want to do is place the
email in a spam folder for each user if the message exceeds a certain
weight. The mailbox action in declude
The E-mail failed the BADHEADERS test. This means the email failed with a
violation of the RFC. This specific code indicates a incorrect Message-ID:
in the header.
David B
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave
Beckstrom
Sent: Wednesday,
The answer to your question is yes, the mailbox is created automatically.
We use it all the time.
Ben
- Original Message -
From: Chuck Schick [EMAIL PROTECTED]
To: declude.junkmail@declude.com
Sent: Wednesday, April 30, 2008 7:47 AM
Subject: RE: [Declude.JunkMail] Question on mailbox
] On Behalf Of David
Barker
Sent: Wednesday, April 30, 2008 11:55 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] BadHeaders?
The E-mail failed the BADHEADERS test. This means the email failed with a
violation of the RFC. This specific code indicates a incorrect Message-ID
: Wednesday, April 30, 2008 1:17 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] BadHeaders?
David,
Thank you for the explanation. I actually wrote the code that generates the
Message-ID. Do you happen to have a link to documentation that would show
the proper format for the Message-ID
Chuck
I recall for that for Declude to move the message to a spam folder for
the user based on weight,
You need to use the declude MAILBOX action. So something like
WEIGHT20 MAILBOX Spam, as you have
below. (this may only work for Imail?)
However, I think you need to, for each domain, check the
Dave,
Is there a way to specify a range of IPs in the backscatter filter? My
server has about 50 IPs and it would be nice not to have to enter all
of them. 8- )
Thanks,
Dean
On Tue, Apr 22, 2008 at 1:06 PM, David Barker [EMAIL PROTECTED] wrote:
FILTER-NOSENDER is used to see if it is an
Subject: re: [Declude.JunkMail] Undeliverable mails
Glen, this is an ongoing problem lately. Backscatter is at an all time high.
I have a filter that will stop this. Could you please send me a copy of your
global.cfg file?
_
From: Cybercorp Computers -- Glen Spidal [EMAIL PROTECTED]
Sent
It the mail box is [EMAIL PROTECTED]
And you say ROUTETO [EMAIL PROTECTED] THEN THE FOLDER SPAM GETS CREATED
AUTOMATICLY
Harry Vanderzand
NEW ADDRESS Effective Jan 24, 2008
Intown Internet
117 Ruskview Road
Kitchener, ON, N2M 4S1
519-741-1222
-Original Message-
From: [EMAIL PROTECTED]
Glen,
This is fairly normal. When spammers send out campaigns they pretty
much use spoofed addresses. Unfortunately your address as well as
others in your domain have been used thus you are receiving the back
scatter. On some of the servers I maintain for clients we have seen
waves of
Subject: Re: [Declude.JunkMail] Undeliverable mails
Glen,
This is fairly normal. When spammers send out campaigns they pretty
much use spoofed addresses. Unfortunately your address as well as
others in your domain have been used thus you are receiving the back
scatter. On some of the servers I
Hi Linda,
Yes, I will mail the file later today.
Thnaks,
-Glen Spidal
503-648-1133
_
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Linda
Pagillo
Sent: Sunday, April 27, 2008 10:48 PM
To: declude.junkmail@declude.com
Subject: re: [Declude.JunkMail
Glen, this is an ongoing problem lately. Backscatter is at an all time high. I
have a filter that will stop this. Could you please send me a copy of your
global.cfg file?
From: Cybercorp Computers -- Glen Spidal [EMAIL PROTECTED]
Sent: Sunday, April 27,
1. Dunno cause I have never operated a mail server without proper
reverse DNS (nor any server for that matter).
2. Yes I do. Proper standard should include proper reverse. As a
general rule mail servers without reverse I have encountered are sending
spam OR improperly configured and
I hold on invURIBL alone.
Dan
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom
Sent: Tuesday, April 22, 2008 7:56 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] INVURIBL WEIGHT?
Hi everyone,
I would appreciate hearing some opinions. How heavy are
1. Yes - per AOL SMTP header.
2. Yes. But if it the sending host has any pointer (match or not) then pass.
John
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom
Sent: Tuesday, April 22, 2008 9:23 AM
To: declude.junkmail@declude.com
Don't know if Declude (or anyone) can help, but we are seeing
a L O T of bounce-backs that show that the SPAMMERS are
using valid postmaster@domain (that we host) as their FROM address
and send the SPAM out thru Post Offices other than ours.
When the SPAM goes to a non-existant address, it
AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] SPAMMERS using postmaster@domain in
their FROM email
Importance: High
Don't know if Declude (or anyone) can help, but we are seeing
a L O T of bounce-backs that show that the SPAMMERS are
using valid postmaster@ mailto
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] SPAMMERS using postmaster@domain in
their FROM email
Importance: High
Don't know if Declude (or anyone) can help, but we are seeing
a L O T of bounce-backs that show that the SPAMMERS are
using valid postmaster@ mailto:[EMAIL PROTECTED
David, I have Junkmail Pro... can I use the NOSENDER filter? If so, where
can I find it? Thanks, E.
_
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Tuesday, April 22, 2008 11:32 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail
Hi,
I score it at 25% of my hold weight. A mail may contain a bad link for what
ever reason.
I might increase this in the near future but never more then 50%. I would never
hold on any one test, that's the power of Declude.
Having said that, I do hold on certain Sniffer results alone like
David,
I never added your backscatter, should I do it.
What does it do exactly.
Stephan
_
De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de David
Barker
Envoyé : 22 avril, 2008 11:32
À : declude.junkmail@declude.com
Objet : RE: [Declude.JunkMail] SPAMMERS using
12:52 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] SPAMMERS using postmaster@domain in
their FROM email
David,
I never added your backscatter, should I do it.
What does it do exactly.
Stephan
_
De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la
Your MX record should be changed to the new Alligate IP address.
Alligate will send mail to imail server
No change needed in Imail as far as I recall
Harry Vanderzand
NEW ADDRESS Effective Jan 24, 2008
Intown Internet
117 Ruskview Road
Kitchener, ON, N2M 4S1
519-741-1222
From:
Hi Harry,
Thanks for that. I will try it!
Kindest Regards
Craig Edmonds
123 Marbella Internet
W: www.123marbella.net
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry
vanderzand
Sent: 22 April 2008 21:12
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail
Point your mx record to your new serverlike MX 10
gateway.123marbella.net.
Then point gateway.123marbella.net. to the IP address of your new alligate
server.
Imail should not need any changes.
To really tighten things up have your users authenticate on port 587 and
block all IPs to port
1) If a mail server is configured without a reverse DNS pointer, is
enough to prevent email from reaching AOL, Yahoo, Hotmail, etc?
AOL indicates they will do this, on occasion I have seen this, but not
all the time.
2) Do you block email coming from mail servers with no reverse DNS?
No,
=?koi8-r?B?58/S0d3JxSDQ1dTF18vJIQ==?=
Thanks very much
Ferrell Ard
- Original Message -
From: David Barker
To: declude.junkmail@declude.com
Sent: Tuesday, April 08, 2008 10:12 AM
Subject: RE: [Declude.JunkMail] Need help in setting up filter please
You can use the settings
mailto:declude.junkmail@declude.com
*Sent:* Tuesday, April 08, 2008 10:12 AM
*Subject:* RE: [Declude.JunkMail] Need help in setting up filter please
You can use the settings in Declude.cfg to stop certain character sets.
David B
*From:* [EMAIL PROTECTED] mailto
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell
Ard
Sent: Monday, April 21, 2008 7:55 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] blocking certain character sets
David
Thanks very much.
I added to the Declude.cfgBANCHARSETkoi8-r
after I upgraded
an active service agreement.
David B
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Hardrick
Sent: Saturday, April 19, 2008 10:13 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Reasons to renew
How many pairs of eyes does it take.
I gave remote
Yes that is correct... changes to declude.cfg require a restart.
David B
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Monday, April 21, 2008 8:52 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail
@declude.com
Subject: RE: [Declude.JunkMail] Reasons to renew
Mike,
Your service agreement expired in 31 Aug 2007, so I don’t know if the issue you
are having is recent, but from our records it seems you are 7 months behind on
releases. There could certainly have been a fix for your specific
PROTECTED] *On Behalf Of
*Craig Edmonds
*Sent:* Thursday, April 03, 2008 3:37 PM
*To:* declude.junkmail@declude.com
*Subject:* RE: [Declude.JunkMail] Reasons to renew
I second that.
I am not trying to brown nose or anything here but without declude we
would be completely screwed.
In 3
Craig Edmonds
123 Marbella Internet
W: www.123marbella.net
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: 19 April 2008 15:33
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Reasons to renew
Michael
Edmonds
Sent: Saturday, April 19, 2008 11:17 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Reasons to renew
Hi Michael,
I am sorry to hear you are having a struggle, but I am running mine on HP
servers also and have had no real problems at all in fact I have not had to
reboot my
] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: 19 April 2008 15:33
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Reasons to renew
Michael,
Judging by that screen cap you are having a rough time to say the least.
I am sure you have exhausted a ton of options, but have you turned off
PROTECTED]
Sent 4/18/2008 8:44:05 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Reasons to renew
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
Greetings All,I hate to be a “Naysayer”, but I
: Saturday, April 19, 2008 6:31 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Reasons to renew
Michael, in cases such as yours, it may be a good idea to get an outside pair
of eyes on the server.
Many of us are running multiple servers with no problems what so ever
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig
Edmonds
Sent: Thursday, April 03, 2008 3:37 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Reasons to renew
I second that.
I am not trying to brown nose or anything here but without declude
] On Behalf Of Darin
Cox
Sent: Thursday, April 10, 2008 9:04 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] form spam filter
Hi Matt,
Parsing CAPTCHA essentially means OCR. OCR in general would be
CPU-intensive. Spammers are using such techniques for Yahoo, Hotmail
This is from memory, but I think this would work.
ALLRECIPS END NOTCONTAINS [EMAIL PROTECTED]
TESTSFAILED END NOTCONTAINS SPAMCANNIBAL
MAILFROM10 IS xyx.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert
Sorry I am not thinking very well today.
Zipping them up worked
Harry Vanderzand
NEW ADDRESS Effective Jan 24, 2008
Intown Internet
117 Ruskview Road
Kitchener, ON, N2M 4S1
519-741-1222
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry
vanderzand
Sent: Friday,
@declude.com
Subject: re: [Declude.JunkMail] Version 4.4.0 leaving some trash?
We have been made aware of this and are currently looking into the cause, it
seems to be AVG that is the source, if used in combination with a 3rd party
scanner. We are trying to replicate the issue to have it resolved
overall effectiveness, I
still believe CAPTCHA is the single best method to secure a public form.
Darin.
- Original Message -
From: Matt
To: declude.junkmail@declude.com
Sent: Wednesday, April 09, 2008 1:04 PM
Subject: Re: [Declude.JunkMail] form spam filter
Note that I'm not claiming
Since forms all use different emailers, and the form content is different as
well, your only hope is content filtering based on what the spammer
submitted... like SURBL filtering or REGEX on the spammer submission.
These days, web-based form processing pages should minimally check that the
The form spammers are smarter than to go directly to the mail script.
They will hit for the form submission page with what appears to be IE
and submit the form. They even handle cookies correctly.
The trick for form spam is to take fields like your Name and E-mail and
rename the variables
To: declude.junkmail@declude.com
Sent: Wednesday, April 09, 2008 8:55 AM
Subject: Re: [Declude.JunkMail] form spam filter
The form spammers are smarter than to go directly to the mail script. They
will hit for the form submission page with what appears to be IE and submit the
form. They even handle cookies
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin
Cox
Sent: 09 April 2008 15:09
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] form spam filter
Hi Matt,
Some do, some don't. I've seen both methods used on some customer sites.
Setting session variables
, April 09, 2008 9:22 AM
Subject: RE: [Declude.JunkMail] form spam filter
Thanks people for the comments.
I will stick with captchas for now but it would be great if declude could
figure a nice filter to deal with it, at the end of the day its still incoming
spam.
Kindest Regards
Craig
Here's a filter I use:
# attack Yahoo spammers
SKIPIFWEIGHT315
MAXWEIGHT 150
#
# exclude the big emails and those with good attachments
TESTSFAILED END CONTAINSMPPT-SIZE-L
TESTSFAILED END CONTAINSMPPT-SIZE-XL
TESTSFAILED END CONTAINS
:[EMAIL PROTECTED]
*To:* declude.junkmail@declude.com mailto:declude.junkmail@declude.com
*Sent:* Wednesday, April 09, 2008 8:55 AM
*Subject:* Re: [Declude.JunkMail] form spam filter
The form spammers are smarter than to go directly to the mail script.
They will hit for the form submission page
:24 AM
Subject: Re: [Declude.JunkMail] form spam filter
Darin,
I think you missed what I was saying exactly. If the form spammer fills out
the fields that are hidden by DIV's, the E-mail wouldn't be sent by the mailer
script and it would pretend to have been successful.
Spammers use programs
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Wednesday, April 09, 2008 4:24 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] form spam filter
Darin,
I think you missed what I was saying exactly. If the form spammer fills out
the fields that are hidden
801 - 900 of 21924 matches
Mail list logo
