I posted a message last week about this. Yes, for some odd reason this test does not run, and the header get added, until after Declude has passed the message back to IMail for delivery. However, it appears that other IMail spam tests get run, and headers added, before IMail passes the message to Declude.
Bill ----- Original Message ----- From: "Harry Vanderzand" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, June 19, 2003 5:43 AM Subject: RE: [Declude.JunkMail] DSBL Tests - results > Is it possible to have declude do a test on the following: > > HEADERS 20 CONTAINS X-IMAIL-SPAM-STATISTICS: 1.0000 > > I have tried this but do cannot get it working. > > Is this put into the headers after declude is finished? > > Harry Vanderzand > inTown Internet & Computer Services > 11 Belmont Ave. W. > Kitchener, ON > N2M 1L2 > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan > > Sent: Tuesday, June 10, 2003 4:51 PM > > To: [EMAIL PROTECTED] > > Subject: RE: [Declude.JunkMail] DSBL Tests - results > > > > > > If you want IMail to do these tests then simply create a > > filter file and add it to your Global statement. > > > > FILTER-HEADER-XMAIL filter > > C:\IMail\Declude\IMail_Filter_Header_XHeader.txt x 0 0 > > > > Our header file: IMail_Filter_Header_XHeader.txt has the > > following entries: > > > > ========================================================== > > HEADERS 5 CONTAINS X-IMAIL-SPAM-DNSBL: > > (BHOLE-BRAZIL > > HEADERS 5 CONTAINS X-IMAIL-SPAM-DNSBL: > > (BHOLE-BROADWING > > HEADERS 5 CONTAINS X-IMAIL-SPAM-DNSBL: > > (BHOLE-CN-KR > > HEADERS 5 CONTAINS > > X-IMAIL-SPAM-DNSBL: (BHOLE-CW > > HEADERS 5 CONTAINS X-IMAIL-SPAM-DNSBL: > > (BHOLE-INFLOW > > HEADERS 5 CONTAINS X-IMAIL-SPAM-DNSBL: > > (BHOLE-JAPAN > > HEADERS 5 CONTAINS X-IMAIL-SPAM-DNSBL: > > (BHOLE-KOREA > > HEADERS 1 CONTAINS X-IMAIL-SPAM-DNSBL: > > (BHOLE-LEVEL3 > > HEADERS 5 CONTAINS X-IMAIL-SPAM-DNSBL: > > (BHOLE-YIPES > > HEADERS 5 CONTAINS > > X-IMAIL-SPAM-DNSBL: (BLARS > > HEADERS 1 CONTAINS > > X-IMAIL-SPAM-DNSBL: (DELINK > > HEADERS 5 CONTAINS > > X-IMAIL-SPAM-DNSBL: (DSBL > > HEADERS 1 CONTAINS > > X-IMAIL-SPAM-DNSBL: (DSBLALL > > HEADERS 1 CONTAINS > > X-IMAIL-SPAM-DNSBL: (fiveten > > HEADERS 5 CONTAINS > > X-IMAIL-SPAM-DNSBL: (INTERSIL > > HEADERS 1 CONTAINS X-IMAIL-SPAM-DNSBL: > > (KUNDENSERVER > > HEADERS 5 CONTAINS > > X-IMAIL-SPAM-DNSBL: (NJABL > > HEADERS 9 CONTAINS > > X-IMAIL-SPAM-DNSBL: (ORDB > > HEADERS 5 CONTAINS X-IMAIL-SPAM-DNSBL: > > (SORBS-HTTP > > HEADERS 10 CONTAINS > > X-IMAIL-SPAM-DNSBL: (SpamCop > > HEADERS 8 CONTAINS > > X-IMAIL-SPAM-DNSBL: (SPAMHAUS > > HEADERS 5 CONTAINS X-IMAIL-SPAM-DNSBL: > > (WIREHUB-DNSBL > > HEADERS 5 CONTAINS X-IMAIL-SPAM-DNSBL: (ybl > > HEADERS 8 CONTAINS X-IMAIL-SPAM-VALFROM: > > HEADERS 5 CONTAINS X-IMAIL-SPAM-VALHELO: > > HEADERS 12 CONTAINS X-IMAIL-SPAM-VALREVDNS > > ============================================================ > > > > Hope this helps. Remember that the text search we do is > > based on our definitions. For example (WIREHUB-DNSBL is what > > we are calling the test in IMail. > > > > Regards, > > Kami > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of > > Frederick Samarelli > > Sent: Tuesday, June 10, 2003 4:20 PM > > To: [EMAIL PROTECTED] > > Subject: Re: [Declude.JunkMail] DSBL Tests - results > > > > > > After I and these checks into the Antispam part of IMAIL 8 > > what needs to be done to have Delude know they have failed. > > > > > > > > ----- Original Message ----- > > From: Kami <mailto:[EMAIL PROTECTED]> Razvan > > To: [EMAIL PROTECTED] > > Sent: Tuesday, June 10, 2003 2:32 PM > > Subject: [Declude.JunkMail] DSBL Tests - results > > > > Hi; > > > > Just reporting on a finding to-date. We have included all of > > the ip4r tests on the Declude's site in the IMail 8 IP4r spam section. > > > > Since May 18 the following are the only tests that are > > triggered. We just ran a script on spam log file and the > > following unique tests are identified. > > > > BHOLE-CN-KR:*:cn-kr.blackholes.us > > BHOLE-CYPERCON:*:cybercon.blackholes.us > > WIREHUB-DYNA:*:dynablock.easynet.nl > > BHOLE-CHINA:*:china.blackholes.us > > WIREHUB-DNSBL:*:blackholes.easynet.nl > > BHOLE-SKYNETWEB:*:skynetweb.blackholes.us > > SORBS-HTTP:*:dnsbl.sorbs.net > > BHOLE-KOREA:*:korea.blackholes.us > > ybl:*:ybl.megacity.org > > BHOLE-CW:*:cw.blackholes.us > > COMPU:*:blackhole.compu.net > > BLARS:*:block.blars.org > > DSBL:*:list.dsbl.org > > NJABL:*:dnsbl.njabl.org > > SpamCop:*:bl.spamcop.net > > fiveten:*:blackholes.five-ten-sg.com > > BHOLE-VERIO:*:verio.blackholes.us DSBLALL:*:unconfirmed.dsbl.org > > > > We are not counting how many of each, I guess we can add that > > easily. For now the above are the results of almost 3 weeks. > > > > Regards, > > Kami > > > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
