Re: [Declude.JunkMail] comments in BLACKLIST fromfile?

2002-04-01 Thread R. Scott Perry


Is it possible to put comments in the fromfile used in a BLACKLIST line?

Yes, you can.  If the first character of the line is a #, Declude will 
ignore the line.

It is not possible to add comments to an existing line.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] Relaying configuration WAS HELP: I just got listed on ORDB

2002-04-01 Thread Jim Rooth









I got a 10K zip file that contained a
readme.txt and a fpipe.exe





Family, God, and Corps...all else are mere details

Jim Rooth
http://www.usmcfew.com/3516 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Shacklett
Sent: Monday, April 01, 2002 7:42
AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Relaying
configuration WAS HELP: I just got listed on ORDB





I tried to download this
a few moments ago, and got an empty zip file. Would someone else try this and
let me know what you get, please?















-Original
Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Scott MacLean
Sent: Sunday, March 31, 2002 8:44
PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail]
Relaying configuration WAS HELP: I just got listed on ORDB

I used FPipe - it's free:

http://www.foundstone.com/knowledge/assessment.html

As far as I know, it should be able to do it for port 80 as well. I've had it
running for several months with no problems at all, with a fair amount of
traffic across it.

At 07:56 PM 03/31/2002, Timm Jasper wrote:




Scott MacLean Writes:

 I got around the SMTP filtering issue by setting up a small daemon
on my server that accepted connections on port 125 (could be any port, I 
 just picked 125) and redirects the connection to port 25. It's
multi-threaded and lets people connect directly to your server to send mail
even 
 if their port 25 is blocked by their ISP.

What was the program, and will it do the same for port 80? ie: web messaging

-- Timm Jasper
-- Systems Administrator
-- TQCi Internet
-- 301-863-6121 



___
Scott MacLean
[EMAIL PROTECTED]
ICQ: 9184011
http://www.nerosoft.com








---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.343 / Virus Database: 190 - Release Date: 3/22/2002
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.343 / Virus Database: 190 - Release Date: 3/22/2002
 


Re: [Declude.JunkMail] comments in BLACKLIST fromfile?

2002-04-01 Thread Todd Ryan

That's what I need!  Thanks Scott!

--Todd.


- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, April 01, 2002 8:44 AM
Subject: Re: [Declude.JunkMail] comments in BLACKLIST fromfile?



 Is it possible to put comments in the fromfile used in a BLACKLIST line?

 Yes, you can.  If the first character of the line is a #, Declude will
 ignore the line.

 It is not possible to add comments to an existing line.
 -Scott

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---

 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] Manual

2002-04-01 Thread Todd Holt

www.declude.com/junkmail/manual.htm

Todd

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Douglas Hardison
Sent: Monday, April 01, 2002 11:14 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Manual


Where might I find a copy of the JunkMail manual. I'm interested
in reading more about the weighting system.

Thanks

Douglas Hardison
Bits, Bytes and Pieces Internet Service
3332A-3 Airport Boulevard
Wilson, NC 27896
Voice: 252-234-7040
Fax: 252-291-2119
[EMAIL PROTECTED]
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] Manual

2002-04-01 Thread R. Scott Perry


Where might I find a copy of the JunkMail manual. I'm interested
in reading more about the weighting system.

You can find it at http://www.declude.com/junkmail/manual.htm .  If you 
have any questions about it, please let me know.  Thanks.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.JunkMail] Blacklist/Whitelist

2002-04-01 Thread Rusty Nations

[NOTE: Your mail server [208.247.235.30] is missing a reverse DNS entry. All Internet 
hosts are required to have a reverse DNS entry. The missing reverse DNS entry will 
cause your mail to be treated as spam on some servers, such as AOL.]


Scott (and everyone else),
Is it possible to create a sender blacklist that blocks everything? As well
as a sender whitelist that allows exceptions to the blacklist.

Theory is this:
You have a blacklist that blocks:
*@* (nobody can send you mail)
*@yahoo.com (blocks all @yahoo.com accounts)
You have a whitelist that allows:
*@mydomain.com (any user from mydomain.com can send me mail)
[EMAIL PROTECTED] (only mom can send mail to me from Yahoo! and all those fake
ones get trapped)


I think I have asked this question before, but that was SEVERAL versions
ago, and prior to the sender blacklist.

So I guess I am looking for a WHITELIST file (looks like we are currently
limited to 200 entries in the global.cfg), and an * in the BLACKLIST file.
This would move it to a per user/domain check instead of a global as well.

I really feel that this would be the biggest step we could take to stop
spammers cold. AOL offers trusted accounts (where only mail that you
specify makes it to your mailbox), this would give all of us that
capability.

Thoughts?

Rusty

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] Blacklist/Whitelist

2002-04-01 Thread R. Scott Perry


Is it possible to create a sender blacklist that blocks everything? As well
as a sender whitelist that allows exceptions to the blacklist.

I believe the sender blacklists require a minimum of 2 characters per line, 
but you try something like this:

 @a
 @b
 ...
 @z
 @0
 ...
 @9

Having all 26 characters and 10 digits should block all E-mail.  The 
WHITELIST entries would then override the blacklist.

So I guess I am looking for a WHITELIST file (looks like we are currently
limited to 200 entries in the global.cfg), and an * in the BLACKLIST file.
This would move it to a per user/domain check instead of a global as well.

And that is where it would be difficult with the current release.  The 
WHITELIST entries are global (and the blacklist entries are effectively 
global, too), so it wouldn't be possible for individual users to have their 
own whitelist entries.

I really feel that this would be the biggest step we could take to stop
spammers cold. AOL offers trusted accounts (where only mail that you
specify makes it to your mailbox), this would give all of us that
capability.

We are looking into a confirmation action that would require the sender 
of the E-mail to confirm that they sent the E-mail, which would also cut 
down significantly on spam (probably 99% or so), while being slightly less 
inconvenient.  That won't definitely be added, but if enough people think 
it would be useful, we may.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] Blacklist/Whitelist

2002-04-01 Thread Bill Landry

Interesting idea--I like it!  Would confirmation only apply to those e-mail
that met a certain weight criteria and would normally be rejected without a
confirmation?

Bill

-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 01, 2002 11:08 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Blacklist/Whitelist

We are looking into a confirmation action that would require the sender 
of the E-mail to confirm that they sent the E-mail, which would also cut 
down significantly on spam (probably 99% or so), while being slightly less 
inconvenient.  That won't definitely be added, but if enough people think 
it would be useful, we may.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] Blacklist/Whitelist

2002-04-01 Thread R. Scott Perry


Interesting idea--I like it!  Would confirmation only apply to those e-mail
that met a certain weight criteria and would normally be rejected without a
confirmation?

Yes.  It would be set up as a standard test, so instead of WEIGHT10 HOLD 
you could have WEIGHT10 CONFIRM (although most mail with a weight that 
high would have confirmations bounce).
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] Confirmation Action

2002-04-01 Thread Andy Schmidt

 We are looking into a confirmation action that would require the sender
of the E-mail to confirm that they sent the E-mail, which would also cut
down significantly on spam (probably 99% or so), while being slightly less
inconvenient.  That won't definitely be added, but if enough people think
it would be useful, we may. 

Oh - now THAT is a cool feature. Too bad I didn't think about THAT myself.

This is a great solution - if we have a false positive AND the sender used a
valid email - then we don't have to get involved.  The sender can just
confirm that this was valid email and the risk of losing any
important/time-critical email will be even less of an issue.  This is 100
times better than some frustrated business partner having to contact the
postmaster and plead his case - he can STILL do that, but in the meantime,
the email is going through.

Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.JunkMail] Declude HiJack.

2002-04-01 Thread John Tolmachoff

Is there way to have an administative or postmaster message created when an IP is held 
by Declude Hijack?

This has come up because I am working remotely right now and have no way of seeing the 
console except to look through the logs or the hold directory under spool.

--
John Tolmachoff
Network Engineer, IT Manager
RelianceSoft, Inc.
714-578-7999-104
626-651-0260
--
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] Blacklist/Whitelist

2002-04-01 Thread Tony Gray - Network Administrator

### My submission to the suggestion box :-) ###

I just recently heard about how AOL users can blacklist all but specified
recipients.  I happened to learn about it by sending an email to my uncle
(who uses it and forgot to add me to the list - at least he says he forgot)
I (and a small sampling of our users that I've run it by) think that's a
GREAT idea.

I've been working on an .asp app to allow users to modify their own per/user
junkmail/virus settings, it would be very easy to add this feature if
Declude supported it (i.e. self administration by the end user would be a
must)

It would allow those who utilized it to cut out 99.9% of spam, unless
someone was lucky enough to spoof an address they had in their 'allowed
senders' list.  What kind of spam detection can claim that type of percent?

Along with this feature should be it's own special 'bounce' email (i.e.
we're sorry, but the recipient has chosen not to receive email from
%SENDER%, if you think this is in error contact postmaster@, etc. etc.)

As for an easy way to manage it, possibly a subfolder
(\imail\declude\allowed_senders), a seperate file for each user
(user_domain_com.allowed), if a file doesn't exist for a user, then mail is
allowed normally via global junkmail/virus/hijack rules.  If file exists,
the email addresses contained in the file are the ONLY allowed senders,
anything else is bounced back to sender (or quietly deleted based on per
user settings).

The only negative I could imagine, is that the contents of the
..\allowed_senders folder would probably get pretty huge after people
adopted the cool, new feature, and declude parsing this folder all the time
could cause a decent performance hit(?)

Thanks for listening,
Tony Gray
Intouch Communications, Inc.





-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Monday, April 01, 2002 2:08 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Blacklist/Whitelist



Is it possible to create a sender blacklist that blocks
everything? As well
as a sender whitelist that allows exceptions to the blacklist.

I believe the sender blacklists require a minimum of 2 characters
per line,
but you try something like this:

 @a
 @b
 ...
 @z
 @0
 ...
 @9

Having all 26 characters and 10 digits should block all E-mail.  The
WHITELIST entries would then override the blacklist.

So I guess I am looking for a WHITELIST file (looks like we are currently
limited to 200 entries in the global.cfg), and an * in the
BLACKLIST file.
This would move it to a per user/domain check instead of a global as well.

And that is where it would be difficult with the current release.  The
WHITELIST entries are global (and the blacklist entries are effectively
global, too), so it wouldn't be possible for individual users to
have their
own whitelist entries.

I really feel that this would be the biggest step we could take to stop
spammers cold. AOL offers trusted accounts (where only mail that you
specify makes it to your mailbox), this would give all of us that
capability.

We are looking into a confirmation action that would require the sender
of the E-mail to confirm that they sent the E-mail, which would also cut
down significantly on spam (probably 99% or so), while being slightly less
inconvenient.  That won't definitely be added, but if enough people think
it would be useful, we may.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
---
[This E-mail was scanned for viruses by http://www.intouchmi.com]


---
[This E-mail was scanned for viruses by http://www.intouchmi.com]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] Declude HiJack.

2002-04-01 Thread R. Scott Perry


Is there way to have an administative or postmaster message created when 
an IP is held by Declude Hijack?

No, that is not possible.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] Blacklist/Whitelist

2002-04-01 Thread R. Scott Perry


  although most mail with a weight that high would have confirmations
bounce 

Well - obviously, you would have to detect a valid conformation queue ID in
the SUBJECT line and if found, would let confirmations PASS - even if
NORMALLY that IP address would bounce.

I meant that most of the confirmation requests would bounce.  For 
example, E-mail from [EMAIL PROTECTED] (a non-existent account) 
that send spam to you would likely fail the WEIGHT10 test.  If you had 
WEIGHT10 CONFIRM after the confirmation system is set up, a confirmation 
request would be sent to [EMAIL PROTECTED], but that would bounce.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] Blacklist/Whitelist

2002-04-01 Thread Rusty Nations

[NOTE: Your mail server [208.247.235.30] is missing a reverse DNS entry. All Internet 
hosts are required to have a reverse DNS entry. The missing reverse DNS entry will 
cause your mail to be treated as spam on some servers, such as AOL.]


BRAVO

That is what I am talking about.

Tony, we are doing the same with the .asp app. perhaps we should compare
notes.

rusty

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Tony Gray -
Network Administrator
Sent: Monday, April 01, 2002 2:41 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Blacklist/Whitelist


### My submission to the suggestion box :-) ###

I just recently heard about how AOL users can blacklist all but specified
recipients.  I happened to learn about it by sending an email to my uncle
(who uses it and forgot to add me to the list - at least he says he forgot)
I (and a small sampling of our users that I've run it by) think that's a
GREAT idea.

I've been working on an .asp app to allow users to modify their own per/user
junkmail/virus settings, it would be very easy to add this feature if
Declude supported it (i.e. self administration by the end user would be a
must)

It would allow those who utilized it to cut out 99.9% of spam, unless
someone was lucky enough to spoof an address they had in their 'allowed
senders' list.  What kind of spam detection can claim that type of percent?

Along with this feature should be it's own special 'bounce' email (i.e.
we're sorry, but the recipient has chosen not to receive email from
%SENDER%, if you think this is in error contact postmaster@, etc. etc.)

As for an easy way to manage it, possibly a subfolder
(\imail\declude\allowed_senders), a seperate file for each user
(user_domain_com.allowed), if a file doesn't exist for a user, then mail is
allowed normally via global junkmail/virus/hijack rules.  If file exists,
the email addresses contained in the file are the ONLY allowed senders,
anything else is bounced back to sender (or quietly deleted based on per
user settings).

The only negative I could imagine, is that the contents of the
..\allowed_senders folder would probably get pretty huge after people
adopted the cool, new feature, and declude parsing this folder all the time
could cause a decent performance hit(?)

Thanks for listening,
Tony Gray
Intouch Communications, Inc.





-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Monday, April 01, 2002 2:08 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Blacklist/Whitelist



Is it possible to create a sender blacklist that blocks
everything? As well
as a sender whitelist that allows exceptions to the blacklist.

I believe the sender blacklists require a minimum of 2 characters
per line,
but you try something like this:

 @a
 @b
 ...
 @z
 @0
 ...
 @9

Having all 26 characters and 10 digits should block all E-mail.  The
WHITELIST entries would then override the blacklist.

So I guess I am looking for a WHITELIST file (looks like we are currently
limited to 200 entries in the global.cfg), and an * in the
BLACKLIST file.
This would move it to a per user/domain check instead of a global as well.

And that is where it would be difficult with the current release.  The
WHITELIST entries are global (and the blacklist entries are effectively
global, too), so it wouldn't be possible for individual users to
have their
own whitelist entries.

I really feel that this would be the biggest step we could take to stop
spammers cold. AOL offers trusted accounts (where only mail that you
specify makes it to your mailbox), this would give all of us that
capability.

We are looking into a confirmation action that would require the sender
of the E-mail to confirm that they sent the E-mail, which would also cut
down significantly on spam (probably 99% or so), while being slightly less
inconvenient.  That won't definitely be added, but if enough people think
it would be useful, we may.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
---
[This E-mail was scanned for viruses by http://www.intouchmi.com]


---
[This E-mail was scanned for viruses by http://www.intouchmi.com]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
[This E-mail was scanned for viruses by 

[Declude.JunkMail] Confirmation Action

2002-04-01 Thread E Perrine

Count us as an interested party.

We were talking from some guys with a product
they called 'Identiclick'. The concept was
similar to some of the Unix/Linux solutions
I have seen, but a bit more elegant. However,
we haven't heard from them in a couple of
months so I assume that the project is stalled
for some reason.

In any case, as we already have a rough, user-
specific front end in place; adding this
capability would be great. On the other hand,
I suspect it's a pretty significant undertaking.

   --- elp2

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: Monday, April 01, 2002 2:08 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Blacklist/Whitelist

[snipped]

We are looking into a confirmation action that would require the
sender 
of the E-mail to confirm that they sent the E-mail, which would also cut

down significantly on spam (probably 99% or so), while being slightly
less 
inconvenient.  That won't definitely be added, but if enough people
think 
it would be useful, we may.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] Declude HiJack.

2002-04-01 Thread Charles Frolick

I created a vbscript that is called by task scheduler that sends out an
email if either hold has messages. I attached it zipped up.

Chuck Frolick
ArgoNet, Inc.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Monday, April 01, 2002 1:44 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Declude HiJack.



Is there way to have an administative or postmaster message created when
an IP is held by Declude Hijack?

No, that is not possible.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .


__ Information from NOD32 1.238 (20020328) __

This message was checked by NOD32 for Exchange e-mail monitor.
http://www.nod32.com





held.zip
Description: application/compressed


RE: [Declude.JunkMail] Declude HiJack.

2002-04-01 Thread John Tolmachoff

I'll give that a try, thanks.

-- Original Message --
From: Charles Frolick [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date:  Mon, 1 Apr 2002 13:58:43 -0600

I created a vbscript that is called by task scheduler that sends out an
email if either hold has messages. I attached it zipped up.

Chuck Frolick
ArgoNet, Inc.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Monday, April 01, 2002 1:44 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Declude HiJack.



Is there way to have an administative or postmaster message created when
an IP is held by Declude Hijack?

No, that is not possible.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .


__ Information from NOD32 1.238 (20020328) __

This message was checked by NOD32 for Exchange e-mail monitor.
http://www.nod32.com





--
John Tolmachoff
Network Engineer, IT Manager
RelianceSoft, Inc.
714-578-7999-104
626-651-0260
--
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



DSN:RE: [Declude.JunkMail] Blacklist/Whitelist

2002-04-01 Thread smb

How would the e-mail be handled that is (I'm assuming here) be held waiting
conformation?

If a valid conformation is received back then obviously the mail would be
delivered. How long for a conformation though and if a conformation bounces,
as expected, then what? 

This idea sounds promising I'm not sure how you get by these hurdles.

my $.02

Stu




At 02:45 PM 04/01/2002 -0500, you wrote:

  although most mail with a weight that high would have confirmations
bounce 

Well - obviously, you would have to detect a valid conformation queue ID in
the SUBJECT line and if found, would let confirmations PASS - even if
NORMALLY that IP address would bounce.

I meant that most of the confirmation requests would bounce.  For 
example, E-mail from [EMAIL PROTECTED] (a non-existent account) 
that send spam to you would likely fail the WEIGHT10 test.  If you had 
WEIGHT10 CONFIRM after the confirmation system is set up, a confirmation 
request would be sent to [EMAIL PROTECTED], but that would bounce.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .


-
CSOnline Technical Support hours - Monday thru Saturday 7am - 1am 
CSOnline Technical Support Numbers Seneca814-677-2447 
   Clarion   814-227-3638  
   Meadville 814-425-1696
   Parker724-399-1158   
http://www.csonline.net  http://www.cshowcase.com  http://www.learncenter.com  
-

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: DSN:RE: [Declude.JunkMail] Blacklist/Whitelist

2002-04-01 Thread R. Scott Perry


If a valid conformation is received back then obviously the mail would be
delivered. How long for a conformation though

That could be configurable.

and if a conformation bounces, as expected, then what?

Hopefully, that could be automated (automatically removing the E-mail from 
the confirmation queue), but more likely the time limit for a 
confirmation would have to elapse before the E-mail would be deleted.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: RE: [Declude.JunkMail] Blacklist/Whitelist

2002-04-01 Thread Madscientist

How about the message is held in the usual place (spam folder)...
Cleanup is a separate function, perhaps a scheduled job to remove older
(30day +) messages from the folder. Declude would intercept a response
message and move the referenced message by queue file name either to the
spool or to nowhere (deleted).

For security, a one-time hash of somekind would be encoded into the
prompt message and would have to be received in the response. Bad
control messages would have to prompt somebody in order to catch hack
attempts.

_M

| -Original Message-
| From: [EMAIL PROTECTED] 
| [mailto:[EMAIL PROTECTED]] On Behalf Of 
| [EMAIL PROTECTED]
| Sent: Monday, April 01, 2002 3:58 PM
| To: [EMAIL PROTECTED]
| Subject: DSN:RE: [Declude.JunkMail] Blacklist/Whitelist
| 
| 
| How would the e-mail be handled that is (I'm assuming here) 
| be held waiting conformation?
| 
| If a valid conformation is received back then obviously the 
| mail would be delivered. How long for a conformation though 
| and if a conformation bounces, as expected, then what? 
| 
| This idea sounds promising I'm not sure how you get by these hurdles.
| 
| my $.02
| 
| Stu
| 
| 
| 
| 
| At 02:45 PM 04/01/2002 -0500, you wrote:
| 
|   although most mail with a weight that high would have 
|   confirmations
| bounce 
| 
| Well - obviously, you would have to detect a valid 
| conformation queue 
| ID in the SUBJECT line and if found, would let confirmations PASS - 
| even if NORMALLY that IP address would bounce.
| 
| I meant that most of the confirmation requests would bounce.  For
| example, E-mail from [EMAIL PROTECTED] (a 
| non-existent account) 
| that send spam to you would likely fail the WEIGHT10 test.  
| If you had 
| WEIGHT10 CONFIRM after the confirmation system is set up, 
| a confirmation 
| request would be sent to [EMAIL PROTECTED], but that 
| would bounce.
|  -Scott
| 
| ---
| [This E-mail was scanned for viruses by Declude Virus 
| (http://www.declude.com)]
| 
| ---
| 
| This E-mail came from the Declude.JunkMail mailing list.  To 
| unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
| unsubscribe Declude.JunkMail.  You can E-mail [EMAIL PROTECTED] 
| for assistance.  You can visit our web site at 
http://www.declude.com .



-
CSOnline Technical Support hours - Monday thru Saturday 7am - 1am 
CSOnline Technical Support Numbers Seneca814-677-2447 
   Clarion   814-227-3638  
   Meadville 814-425-1696
   Parker724-399-1158   
http://www.csonline.net  http://www.cshowcase.com
http://www.learncenter.com  

-

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  You can E-mail [EMAIL PROTECTED] for
assistance.  You can visit our web site at http://www.declude.com .


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.JunkMail] DNSSTUFF broken again?

2002-04-01 Thread Andy Schmidt

Is the IP4r lookup broken again.  I'm getting no lookup responses for
virtually ANY of the Spam databases -  even after 10 retries:

http://www.dnsstuff.com/tools/ip4r.ch?ip=216.129.91.35


Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.JunkMail] Spam Database Lookup.htm

2002-04-01 Thread Andy Schmidt

 There don't seem to be any problems from this end.  Have there been
issues
before?  When I go there, it shows a couple of timeouts (UIB/UIBOK), but
the rest return something. 

Here is what I see:

Shouldn't I AT LEAST be seeing Not Listed?


Best Regards
Andy Schmidt

Title: Spam Database Lookup


Testing 216.129.91.35Generated by www.DNSstuff.com

 Test NameResultDetailsTTLTime
 PTR
 ABL
 BLARSBL
 BLITZEDHTTP
 BLITZEDSOCKS
 BLITZEDWINGATE
 COMPU
 COMPU-PM0
 DEVNULL
 DEWS
 DORKS
 DORKZTL
 DSBL
 DSBLALL
 FABELSOURCES
 FIVETENSRC
 FIVETENDUL
 FIVETENOPTIN
 FIVETENMULTI
 FIVETENSINGLE
 FIVETENIGNORE
 FIVETENWEBFORM
 FIVETENOTHER
 FLOWGO
 INTERSIL
 IPWHOIS
 KITHRUP
 LNSGDUL
 LNSGSRC
 LNSGBULK
 LNSGOR
 LNSGMULTI
 LNSGBLOCK
 MAPS-DUL
 MAPS-NML
 MAPS-RBL
 MAPS-RBLPLUS
 MAPS-RSS
 MONKEYFORMMAIL
 MONKEYPROXIES
 NJABL
 NJABLDUL
 ORBZIN
 ORBZOUT
 ORDB
 OSRELAY
 OSDUL
 OSSRC
 OSSMART
 OSSOFT
 OSLIST
 OSFORM
 OSPROXY
 POSTFIXGATE
 RSL
 SPAMBAG
 SPAMCOP
 SPAMHAUS
 SPAMTR
 SUMMIT
 WIREHUB-DNSBL
 WIREHUB-DYNA
 XBL
 JIPPG-DUL
 JIPPG-DULJP
 JIPPG-ABUSE
 DEWS
 UIBOK
 UIB


Legend:

Rows with a RED background indicate a problem (listed in a spam database).
To contact one of theses spam databases or for more information on them, see http://www.declude.com/junkmail/support/ip4r.htm.
TTL is the number of seconds that data should be cached, according to the spam database.  A TTL of 0 means that data should not be cached, which increases network traffic.  A TTL of 86400 seconds is 1 day, meaning that it could take up to a day before you find out about a new listing.
TIME is the approximate amount of time it took for us to get a response (0ms indicates that our DNS server had a cached answer)







(C) Copyright 2000-2002 Computerized Horizons


Re: [Declude.JunkMail] Spam Database Lookup.htm

2002-04-01 Thread Matt Robertson

That almost-blank page is what I get when testing my own mail IP.  A couple of 
timeouts, one ''not listed'' return and everything else empty.

Just passing the info along,

---
Matt Robertson[EMAIL PROTECTED]
MSB Designs, Inc., www.mysecretbase.com
---


-- Original Message --
From: Andy Schmidt [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date: Mon, 1 Apr 2002 17:21:12 -0500

 There don't seem to be any problems from this end.  Have there been
issues
before?  When I go there, it shows a couple of timeouts (UIB/UIBOK), but
the rest return something. 

Here is what I see:

Shouldn't I AT LEAST be seeing Not Listed?


Best Regards
Andy Schmidt


 
 
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] Spam Database Lookup.htm

2002-04-01 Thread R. Scott Perry


Shouldn't I AT LEAST be seeing Not Listed?

That's what I see here:

ABL Not listed Primary NS = ns1.gcu-squad.org. 172800 seconds 0 ms
BLARSBL Not listed Primary NS = ns.blars.org. 86400 seconds 0 ms
...

Note that some browsers may not display the results properly (IE may just 
have blank cells, may not show the Not listed lines, etc.).  However, 
IE5.5 and IE6.0 here both display the correct results.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re[2]: [Declude.JunkMail] Spam Database Lookup.htm

2002-04-01 Thread Smart Business Lists

I'm using 5.5 too and after a short delay I se one line down near
the bottom of the table and a couple of timeout rows at the very
bottom.

I also get a JavaScript error on the front page:
   Line 6
   Error: 'document.fm.domain' is null or not an object

I've used this before and don't remember this error or results.
   
Terry Fritts

Monday, April 1, 2002 you wrote:

AS Scott,

AS I'm using IE 5.5 - just open the HTML attachment from my prior message and
AS you'll see that the browser version makes no difference.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] Spam Database Lookup.htm

2002-04-01 Thread R. Scott Perry


Here is the HTML code that your CGI generates - makes no difference WHAT
browser you use to view it. If you are generating nothing but nbsp - then
ANY browser in the world will display BLANKS:

The nbsp; is used as a placeholder, since some browsers will mangle table 
cells that don't have any data, whereas they will display them properly if 
there is a nbsp; in there.

However, I did go back and check the attachment to the previous E-mail, and 
there definitely appears to have been a problem with the data that was 
returned.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: RE: [Declude.JunkMail] Blacklist/Whitelist

2002-04-01 Thread Todd Holt

You would somehow need to handle bounce messages that are undeliverable. I
would expect most of the SPAM I receive to not have a valid sender address,
and hence the bounce would be undeliverable.

Todd

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Madscientist
Sent: Monday, April 01, 2002 3:02 PM
To: [EMAIL PROTECTED]
Subject: RE: RE: [Declude.JunkMail] Blacklist/Whitelist


How about the message is held in the usual place (spam folder)...
Cleanup is a separate function, perhaps a scheduled job to remove older
(30day +) messages from the folder. Declude would intercept a response
message and move the referenced message by queue file name either to the
spool or to nowhere (deleted).

For security, a one-time hash of somekind would be encoded into the
prompt message and would have to be received in the response. Bad
control messages would have to prompt somebody in order to catch hack
attempts.

_M

| -Original Message-
| From: [EMAIL PROTECTED]
| [mailto:[EMAIL PROTECTED]] On Behalf Of
| [EMAIL PROTECTED]
| Sent: Monday, April 01, 2002 3:58 PM
| To: [EMAIL PROTECTED]
| Subject: DSN:RE: [Declude.JunkMail] Blacklist/Whitelist
|
|
| How would the e-mail be handled that is (I'm assuming here)
| be held waiting conformation?
|
| If a valid conformation is received back then obviously the
| mail would be delivered. How long for a conformation though
| and if a conformation bounces, as expected, then what?
|
| This idea sounds promising I'm not sure how you get by these hurdles.
|
| my $.02
|
| Stu
|
|
|
|
| At 02:45 PM 04/01/2002 -0500, you wrote:
| 
|   although most mail with a weight that high would have
|   confirmations
| bounce 
| 
| Well - obviously, you would have to detect a valid
| conformation queue
| ID in the SUBJECT line and if found, would let confirmations PASS -
| even if NORMALLY that IP address would bounce.
| 
| I meant that most of the confirmation requests would bounce.  For
| example, E-mail from [EMAIL PROTECTED] (a
| non-existent account)
| that send spam to you would likely fail the WEIGHT10 test.
| If you had
| WEIGHT10 CONFIRM after the confirmation system is set up,
| a confirmation
| request would be sent to [EMAIL PROTECTED], but that
| would bounce.
|  -Scott
| 
| ---
| [This E-mail was scanned for viruses by Declude Virus
| (http://www.declude.com)]
| 
| ---
| 
| This E-mail came from the Declude.JunkMail mailing list.  To
| unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
| unsubscribe Declude.JunkMail.  You can E-mail [EMAIL PROTECTED]
| for assistance.  You can visit our web site at
http://www.declude.com .



-
CSOnline Technical Support hours - Monday thru Saturday 7am - 1am
CSOnline Technical Support Numbers Seneca814-677-2447
   Clarion   814-227-3638
   Meadville 814-425-1696
   Parker724-399-1158
http://www.csonline.net  http://www.cshowcase.com
http://www.learncenter.com

-

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  You can E-mail [EMAIL PROTECTED] for
assistance.  You can visit our web site at http://www.declude.com .


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.JunkMail] ADULT Filter Progress?

2002-04-01 Thread John David M . Miller


Has there been any progress on the
Adult filter? I reviewed the archive
entries I could find and did not see
anything. 

Sincerely,
John David M. Miller

SAMnet
2785 Boston Road
Wilbraham MA, 01095
Tel: (413) 596-2050
Fax: (413) 599-1771
http://www.samnet.net

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] ADULT Filter Progress?

2002-04-01 Thread R. Scott Perry


Has there been any progress on the
Adult filter? I reviewed the archive
entries I could find and did not see
anything.

That's an undocumented and unsupported test.  :)
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .