[Declude.JunkMail] COUNTRY/COUNTRIES
If a message has the folloging country-chain: X-Country-Chain: THAILAND-UNITED STATES-destination And I have a filter file containing only the entry COUNTRY 1 CONTAINSus why does this trigger the filter? As I know COUNTRY should be triggered only if the first country matches. To catch a country if somewhere in the country-chain we should use COUNTRIES. Or am I missing something? Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Spamdomains test
Thanks Bill. I checked the archives and found one from Nov.28,2003 ... just got it setup. thanks again, Larry Craddock - Original Message - From: Bill Landry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, May 28, 2004 12:34 AM Subject: Re: [Declude.JunkMail] Spamdomains test - Original Message - From: Larry Craddock [EMAIL PROTECTED] Thanks everyone. Now that I understand how to use the test, does anyone have a spamdomains.txt file that includes the entries for the domains most commonly used that they could share? Check the archives, Larry. I have posted mine to the list several times. If you cannot locate it, send me a e-mail off-list and I will send it to you. Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] COUNTRY/COUNTRIES
If a message has the folloging country-chain: X-Country-Chain: THAILAND-UNITED STATES-destination And I have a filter file containing only the entry COUNTRY 1 CONTAINSus why does this trigger the filter? Because that's how it is designed to work. The country that the E-mail came to your server from was the United States. As I know COUNTRY should be triggered only if the first country matches. To catch a country if somewhere in the country-chain we should use COUNTRIES. Or am I missing something? That's backwards -- COUNTRY will look at the last country in the list (the one that connected to your mailserver), not the first one. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] COUNTRY/COUNTRIES
That's backwards -- COUNTRY will look at the last country in the list (the one that connected to your mailserver), not the first one. Would it be possible to have an entry looking only for the country the message has started his way? Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] COUNTRY/COUNTRIES
That's backwards -- COUNTRY will look at the last country in the list (the one that connected to your mailserver), not the first one. Would it be possible to have an entry looking only for the country the message has started his way? No -- I believe the only way to do that would be using COUNTRIES (which would detect the country if it was anywhere in the country chain). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] COUNTRY/COUNTRIES
Slightly off this topic but if I have the all_list.dat file in my declude directory but I do not any COUNTRY/COUNTRIES filters then X-Country-Chain: Somewhere-Otherwhere-destination Will show up in the headers but no points will be added to the score of the e-mail. Right? Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, May 28, 2004 7:44 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] COUNTRY/COUNTRIES That's backwards -- COUNTRY will look at the last country in the list (the one that connected to your mailserver), not the first one. Would it be possible to have an entry looking only for the country the message has started his way? No -- I believe the only way to do that would be using COUNTRIES (which would detect the country if it was anywhere in the country chain). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] COUNTRY/COUNTRIES
Slightly off this topic but if I have the all_list.dat file in my declude directory but I do not any COUNTRY/COUNTRIES filters then X-Country-Chain: Somewhere-Otherwhere-destination Will show up in the headers but no points will be added to the score of the e-mail. Right? That is correct. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] COUNTRY/COUNTRIES
Great thank you Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kami Razvan Sent: Friday, May 28, 2004 9:24 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] COUNTRY/COUNTRIES Slightly off this topic but if I have the all_list.dat file in my declude directory but I do not any COUNTRY/COUNTRIES filters then Goran: Just in case it helps - attached is the country file we use. Hope the group does not mind the attachment but this question comes up every so often and perhaps it can help others. Adjust the weight for each country based on your traffic. Kami --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] DNS tests in separate file?
Is it possible to run the DNS RBL tests in a file other than the global config file? For example have them all in separate filter file that I can abort with TESTFAILED END CONTAINS Rick Davidson National Systems Manager North American Title Group 440-953-9346 - Office 440-953-0925 - Fax 440-487-7344 - Mobile [EMAIL PROTECTED] - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] COUNTRY/COUNTRIES
R. Scott Perry wrote: Would it be possible to have an entry looking only for the country the message has started his way? No -- I believe the only way to do that would be using COUNTRIES (which would detect the country if it was anywhere in the country chain). How about using a STARTSWITH filter to do that. COUNTRIES 3 STARTSWITH us Matt -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] DNS tests in separate file?
You could have them assigned with a 0 weight in the global.cfg. You can then use your filters to assign weights as described below. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 05/28/04 10:05AM Is it possible to run the DNS RBL tests in a file other than the global config file? For example have them all in separate filter file that I can abort with TESTFAILED END CONTAINS Rick Davidson National Systems Manager North American Title Group 440-953-9346 - Office 440-953-0925 - Fax 440-487-7344 - Mobile [EMAIL PROTECTED] - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Feature Request
Unless this already exists and I haven't seen it... :) The possibility to filter on SUBJECT where the mailbox/account appears. We use accounts that are first initial/last name, and any mail that has that combination in the subject is virtually always SPAM. So, since I'm jcochran, subjects like these would get filtered on: Good News for jcochran! jcochran approved for credit Mortgages availble for the jcochran household Attn: jcochran Just a thought, unless someone has a filter available to do this. I realize I could use a WORDFILTER and list all my accounts, but this would need to be maintained where a filter on the account name wouldn't normally need much maintenance. Thanks, Jeff --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Filter / Log idea
I run my logs at high, and they are full of filter skipped with a current weight, set max weight, set min weight lines. I could run at a lower level, but I do like most of the data available in the high level logs. My idea is to have a filter command line that can be added to filters to control logging. No line (leaves logs as is) LOGMATCHONLY would only log the lines that matched on the filters. This would not log maxweight, minweight, skipifweight or END matches. My thinking is that more log information is needed when creating and testing a new filter. When a filter becomes mature, only the match line is needed to be logged. And with the proposed command line, I would have the ability to control which filters would need more log information. Dropping these undesired lines from mature filters would really decrease log sizes. Less logging would also help minimize the log corruption during peak times (dictionary attacks). Scott Fisher Director of IT Farm Progress Companies --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Feature Request
The possibility to filter on SUBJECT where the mailbox/account appears. We use accounts that are first initial/last name, and any mail that has that combination in the subject is virtually always SPAM. So, since I'm jcochran, subjects like these would get filtered on: This is something that we have been considering. The problem, though, is that false positives will vary tremendously depending on the account. For example, [EMAIL PROTECTED] is likely to get E-mails with a subject of I have a sales question, and the poor real estate agent with [EMAIL PROTECTED] would have lots of his mail fail the test. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] DNS tests in separate file?
o the simplicity of it all :-) Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Scott Fisher [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, May 28, 2004 11:21 AM Subject: Re: [Declude.JunkMail] DNS tests in separate file? You could have them assigned with a 0 weight in the global.cfg. You can then use your filters to assign weights as described below. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 05/28/04 10:05AM Is it possible to run the DNS RBL tests in a file other than the global config file? For example have them all in separate filter file that I can abort with TESTFAILED END CONTAINS Rick Davidson National Systems Manager North American Title Group 440-953-9346 - Office 440-953-0925 - Fax 440-487-7344 - Mobile [EMAIL PROTECTED] - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] New Tests
This question has probably already been posted before. Is there a list anywhere that lists all the new tests in the beta versions that aren't listed in the manual of the release? For example DOW and SPF. Is there any easier way to find the documentation for these test other than looking through the archives? Are there any other tests that have been included and how would I find out about them? Thanks. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] New Tests
This question has probably already been posted before. Is there a list anywhere that lists all the new tests in the beta versions that aren't listed in the manual of the release? For example DOW and SPF. Is there any easier way to find the documentation for these test other than looking through the archives? Are there any other tests that have been included and how would I find out about them? Thanks. You can find out about tests in the latest beta either directly in the release notes at http://www.declude.com/relnotes.htm , or indirectly through this list. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
