[Declude.JunkMail] PDF in Header Problem
Hi all, I have a BYPASS.TXT filter with checks for a bunch of different attachments on an e-mail. In particular: BODY 0 CONTAINS Content-Type: application/pdf Now I have an e-mail that had a PDF with it but for the headers it had: --_=_NextPart_002_01C50ABC.84EA3C80 Content-Type: application/octet-stream; name=050204_081927_0021.pdf Content-Transfer-Encoding: base64 Content-Description: 050204_081927_0021.pdf Content-Disposition: attachment; filename=050204_081927_0021.pdf So my filters were not skipped and they triggered on something from the encoded text. Can someone explain to me why this email would not have had the correct header that I am checking for. Also does anyone have a better way to check for attached PDFs? Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] PDF in Header Problem
Well, Goran, why is a big question. The answer is essentially that the MIME format does not require any particular adherence to the encoding for any particular file type. The application/octet-stream format you're seeing is very very common for binary attachments (i.e. not plain text). The rationale for why the MTA application programmers did that is anybody's guess. It is just that way. For example, Microsoft has at least two encodings for sending .pdf files and why they use application/pdf sometimes and application/octet-stream others, I dunno. You can check the list for an earlier post by me of my SkipAttach.txt test which was inspired by a post by Rick Davidson [EMAIL PROTECTED] back in, I think, June 2004. You might find that doing a combination filter on your BYPASS.TXT with Matt or Scott's external Size test will accomplish what you're after. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, February 04, 2005 8:37 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] PDF in Header Problem Hi all, I have a BYPASS.TXT filter with checks for a bunch of different attachments on an e-mail. In particular: BODY 0 CONTAINS Content-Type: application/pdf Now I have an e-mail that had a PDF with it but for the headers it had: --_=_NextPart_002_01C50ABC.84EA3C80 Content-Type: application/octet-stream; name=050204_081927_0021.pdf Content-Transfer-Encoding: base64 Content-Description: 050204_081927_0021.pdf Content-Disposition: attachment; filename=050204_081927_0021.pdf So my filters were not skipped and they triggered on something from the encoded text. Can someone explain to me why this email would not have had the correct header that I am checking for. Also does anyone have a better way to check for attached PDFs? Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] PDF in Header Problem
Andrew, Thanx. Would it be smart to add the following to my BYPASS filter? BODY 0 CONTAINS .pdf I will look for your previous post and see if I can add something to my BYPASS filter. I was thinking about the SIZE external test a while ago but never got around to it. Maybe this is the push that I have been needing. :) Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Friday, February 04, 2005 12:13 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] PDF in Header Problem Well, Goran, why is a big question. The answer is essentially that the MIME format does not require any particular adherence to the encoding for any particular file type. The application/octet-stream format you're seeing is very very common for binary attachments (i.e. not plain text). The rationale for why the MTA application programmers did that is anybody's guess. It is just that way. For example, Microsoft has at least two encodings for sending .pdf files and why they use application/pdf sometimes and application/octet-stream others, I dunno. You can check the list for an earlier post by me of my SkipAttach.txt test which was inspired by a post by Rick Davidson [EMAIL PROTECTED] back in, I think, June 2004. You might find that doing a combination filter on your BYPASS.TXT with Matt or Scott's external Size test will accomplish what you're after. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, February 04, 2005 8:37 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] PDF in Header Problem Hi all, I have a BYPASS.TXT filter with checks for a bunch of different attachments on an e-mail. In particular: BODY 0 CONTAINS Content-Type: application/pdf Now I have an e-mail that had a PDF with it but for the headers it had: --_=_NextPart_002_01C50ABC.84EA3C80 Content-Type: application/octet-stream; name=050204_081927_0021.pdf Content-Transfer-Encoding: base64 Content-Description: 050204_081927_0021.pdf Content-Disposition: attachment; filename=050204_081927_0021.pdf So my filters were not skipped and they triggered on something from the encoded text. Can someone explain to me why this email would not have had the correct header that I am checking for. Also does anyone have a better way to check for attached PDFs? Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] PDF in Header Problem
Would it be smart to add the following to my BYPASS filter? BODY 0 CONTAINS .pdf Then every spammer will just start inserting that some one and then... John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] PDF in Header Problem
Well, let's put it this way. I don't bypass based on that a generic text string that is so small. A small negative weight though... that may be useful to you. Size will be more useful, and a combo test of size and your bypass.txt file, that will definitely be useful. If you want to be a little more clever and spend some cpu cycles, you could use Sandy's tip for running egrep or find as an external test, and look for: name=.*\.pdf\$ I just wrote that string off type of my head, so it may be flawed. This is still not bulletproof, because testing one string this way doesn't account for it appearing (or not) in a well-formatted MIME segment. It could just be a bit of text. That's why I stuck the $ at the end of the text to match, because that implies the end of line. Likewise, you could use one of the other 3rd party tools that will let you do a regexp query. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, February 04, 2005 12:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] PDF in Header Problem Andrew, Thanx. Would it be smart to add the following to my BYPASS filter? BODY 0 CONTAINS .pdf I will look for your previous post and see if I can add something to my BYPASS filter. I was thinking about the SIZE external test a while ago but never got around to it. Maybe this is the push that I have been needing. :) Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Friday, February 04, 2005 12:13 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] PDF in Header Problem Well, Goran, why is a big question. The answer is essentially that the MIME format does not require any particular adherence to the encoding for any particular file type. The application/octet-stream format you're seeing is very very common for binary attachments (i.e. not plain text). The rationale for why the MTA application programmers did that is anybody's guess. It is just that way. For example, Microsoft has at least two encodings for sending .pdf files and why they use application/pdf sometimes and application/octet-stream others, I dunno. You can check the list for an earlier post by me of my SkipAttach.txt test which was inspired by a post by Rick Davidson [EMAIL PROTECTED] back in, I think, June 2004. You might find that doing a combination filter on your BYPASS.TXT with Matt or Scott's external Size test will accomplish what you're after. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, February 04, 2005 8:37 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] PDF in Header Problem Hi all, I have a BYPASS.TXT filter with checks for a bunch of different attachments on an e-mail. In particular: BODY 0 CONTAINS Content-Type: application/pdf Now I have an e-mail that had a PDF with it but for the headers it had: --_=_NextPart_002_01C50ABC.84EA3C80 Content-Type: application/octet-stream; name=050204_081927_0021.pdf Content-Transfer-Encoding: base64 Content-Description: 050204_081927_0021.pdf Content-Disposition: attachment; filename=050204_081927_0021.pdf So my filters were not skipped and they triggered on something from the encoded text. Can someone explain to me why this email would not have had the correct header that I am checking for. Also does anyone have a better way to check for attached PDFs? Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To
[Declude.JunkMail] Subject: Declude 2.0 Update
We have been developing fixes designed to address the issues reported in the last few days and comprehensive testing will continue through the weekend. The results will be reviewed and further information will be released on Monday. Thanks for your patience. Declude Engineering --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] PDF in Header Problem
Yeah not a good idea from that point of view Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, February 04, 2005 3:36 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] PDF in Header Problem Would it be smart to add the following to my BYPASS filter? BODY 0 CONTAINS .pdf Then every spammer will just start inserting that some one and then... John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] PDF in Header Problem
I am going to look into the combo filter thing. I think Scott Fisher has a link the the SIZE program on his Declude Helper Site. Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Friday, February 04, 2005 3:43 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] PDF in Header Problem Well, let's put it this way. I don't bypass based on that a generic text string that is so small. A small negative weight though... that may be useful to you. Size will be more useful, and a combo test of size and your bypass.txt file, that will definitely be useful. If you want to be a little more clever and spend some cpu cycles, you could use Sandy's tip for running egrep or find as an external test, and look for: name=.*\.pdf\$ I just wrote that string off type of my head, so it may be flawed. This is still not bulletproof, because testing one string this way doesn't account for it appearing (or not) in a well-formatted MIME segment. It could just be a bit of text. That's why I stuck the $ at the end of the text to match, because that implies the end of line. Likewise, you could use one of the other 3rd party tools that will let you do a regexp query. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, February 04, 2005 12:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] PDF in Header Problem Andrew, Thanx. Would it be smart to add the following to my BYPASS filter? BODY 0 CONTAINS .pdf I will look for your previous post and see if I can add something to my BYPASS filter. I was thinking about the SIZE external test a while ago but never got around to it. Maybe this is the push that I have been needing. :) Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Friday, February 04, 2005 12:13 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] PDF in Header Problem Well, Goran, why is a big question. The answer is essentially that the MIME format does not require any particular adherence to the encoding for any particular file type. The application/octet-stream format you're seeing is very very common for binary attachments (i.e. not plain text). The rationale for why the MTA application programmers did that is anybody's guess. It is just that way. For example, Microsoft has at least two encodings for sending .pdf files and why they use application/pdf sometimes and application/octet-stream others, I dunno. You can check the list for an earlier post by me of my SkipAttach.txt test which was inspired by a post by Rick Davidson [EMAIL PROTECTED] back in, I think, June 2004. You might find that doing a combination filter on your BYPASS.TXT with Matt or Scott's external Size test will accomplish what you're after. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, February 04, 2005 8:37 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] PDF in Header Problem Hi all, I have a BYPASS.TXT filter with checks for a bunch of different attachments on an e-mail. In particular: BODY 0 CONTAINS Content-Type: application/pdf Now I have an e-mail that had a PDF with it but for the headers it had: --_=_NextPart_002_01C50ABC.84EA3C80 Content-Type: application/octet-stream; name=050204_081927_0021.pdf Content-Transfer-Encoding: base64 Content-Description: 050204_081927_0021.pdf Content-Disposition: attachment; filename=050204_081927_0021.pdf So my filters were not skipped and they triggered on something from the encoded text. Can someone explain to me why this email would not have had the correct header that I am checking for. Also does anyone have a better way to check for attached PDFs? Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
Re: [Declude.JunkMail] Subject: Declude 2.0 Update
I'm still running 1.81 and don't plan on changing that until all this ruckus gets settled down. :-) - Original Message - From: Ralph Krausse [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, February 04, 2005 4:11 PM Subject: [Declude.JunkMail] Subject: Declude 2.0 Update We have been developing fixes designed to address the issues reported in the last few days and comprehensive testing will continue through the weekend. The results will be reviewed and further information will be released on Monday. Thanks for your patience. Declude Engineering --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Subject: Declude 2.0 Update
Thank you for the update. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Ralph Krausse Sent: Friday, February 04, 2005 2:11 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Subject: Declude 2.0 Update We have been developing fixes designed to address the issues reported in the last few days and comprehensive testing will continue through the weekend. The results will be reviewed and further information will be released on Monday. Thanks for your patience. Declude Engineering --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT - Outsourcing email
Can anyone recommend any email outsourcing companies other then everyone.net? TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] PDF in Header Problem
I credit some weight back for emails over 200 KB. Spam 200 KB or over is very rare... in my case it tends to be a couple of spams a month in Chinese. Spam over 50 KB are rare, I had about 112 last month. I also skip body filters on these larger emails (200 KB or higher) - Original Message - From: Goran Jovanovic [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, February 04, 2005 4:18 PM Subject: RE: [Declude.JunkMail] PDF in Header Problem I am going to look into the combo filter thing. I think Scott Fisher has a link the the SIZE program on his Declude Helper Site. Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Friday, February 04, 2005 3:43 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] PDF in Header Problem Well, let's put it this way. I don't bypass based on that a generic text string that is so small. A small negative weight though... that may be useful to you. Size will be more useful, and a combo test of size and your bypass.txt file, that will definitely be useful. If you want to be a little more clever and spend some cpu cycles, you could use Sandy's tip for running egrep or find as an external test, and look for: name=.*\.pdf\$ I just wrote that string off type of my head, so it may be flawed. This is still not bulletproof, because testing one string this way doesn't account for it appearing (or not) in a well-formatted MIME segment. It could just be a bit of text. That's why I stuck the $ at the end of the text to match, because that implies the end of line. Likewise, you could use one of the other 3rd party tools that will let you do a regexp query. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, February 04, 2005 12:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] PDF in Header Problem Andrew, Thanx. Would it be smart to add the following to my BYPASS filter? BODY 0 CONTAINS .pdf I will look for your previous post and see if I can add something to my BYPASS filter. I was thinking about the SIZE external test a while ago but never got around to it. Maybe this is the push that I have been needing. :) Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Friday, February 04, 2005 12:13 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] PDF in Header Problem Well, Goran, why is a big question. The answer is essentially that the MIME format does not require any particular adherence to the encoding for any particular file type. The application/octet-stream format you're seeing is very very common for binary attachments (i.e. not plain text). The rationale for why the MTA application programmers did that is anybody's guess. It is just that way. For example, Microsoft has at least two encodings for sending .pdf files and why they use application/pdf sometimes and application/octet-stream others, I dunno. You can check the list for an earlier post by me of my SkipAttach.txt test which was inspired by a post by Rick Davidson [EMAIL PROTECTED] back in, I think, June 2004. You might find that doing a combination filter on your BYPASS.TXT with Matt or Scott's external Size test will accomplish what you're after. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, February 04, 2005 8:37 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] PDF in Header Problem Hi all, I have a BYPASS.TXT filter with checks for a bunch of different attachments on an e-mail. In particular: BODY 0 CONTAINS Content-Type: application/pdf Now I have an e-mail that had a PDF with it but for the headers it had: --_=_NextPart_002_01C50ABC.84EA3C80 Content-Type: application/octet-stream; name=050204_081927_0021.pdf Content-Transfer-Encoding: base64 Content-Description: 050204_081927_0021.pdf Content-Disposition: attachment; filename=050204_081927_0021.pdf So my filters were not skipped and they triggered on something from the encoded text. Can someone explain to me why this email would not have had the correct header that I am checking for. Also does anyone have a better way to check for attached PDFs? Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came
Re: [Declude.JunkMail] Subject: Declude 2.0 Update
I'd upgrade to 1.82 if you use the spamheaders test. It's broken in 1.81. It's the only change between 1.81 and 1.82. - Original Message - From: Glenn \ WCNet [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, February 04, 2005 4:28 PM Subject: Re: [Declude.JunkMail] Subject: Declude 2.0 Update I'm still running 1.81 and don't plan on changing that until all this ruckus gets settled down. :-) - Original Message - From: Ralph Krausse [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, February 04, 2005 4:11 PM Subject: [Declude.JunkMail] Subject: Declude 2.0 Update We have been developing fixes designed to address the issues reported in the last few days and comprehensive testing will continue through the weekend. The results will be reviewed and further information will be released on Monday. Thanks for your patience. Declude Engineering --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Outsourcing email
Well, being that some of us on this list provide e-mail services to clients, what exactly do you mean? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Danny Sent: Friday, February 04, 2005 2:42 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT - Outsourcing email Can anyone recommend any email outsourcing companies other then everyone.net? TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT - Outsourcing email
Try MailPure. I hear that they are the absolute best, and their president is a wonderful person :) Seriously though...what did you expect? Matt Danny wrote: Can anyone recommend any email outsourcing companies other then everyone.net? TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Subject: Declude 2.0 Update
I have that test disabled for the duration. - Original Message - From: Scott Fisher [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, February 04, 2005 4:50 PM Subject: Re: [Declude.JunkMail] Subject: Declude 2.0 Update I'd upgrade to 1.82 if you use the spamheaders test. It's broken in 1.81. It's the only change between 1.81 and 1.82. - Original Message - From: Glenn \ WCNet [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, February 04, 2005 4:28 PM Subject: Re: [Declude.JunkMail] Subject: Declude 2.0 Update I'm still running 1.81 and don't plan on changing that until all this ruckus gets settled down. :-) - Original Message - From: Ralph Krausse [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, February 04, 2005 4:11 PM Subject: [Declude.JunkMail] Subject: Declude 2.0 Update We have been developing fixes designed to address the issues reported in the last few days and comprehensive testing will continue through the weekend. The results will be reviewed and further information will be released on Monday. Thanks for your patience. Declude Engineering --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Outsourcing email
Yeah, but a little birdie told me that the president can get a little hot some times. ;) John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Matt Sent: Friday, February 04, 2005 3:11 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] OT - Outsourcing email Try MailPure. I hear that they are the absolute best, and their president is a wonderful person :) Seriously though...what did you expect? Matt Danny wrote: Can anyone recommend any email outsourcing companies other then everyone.net? TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT - Outsourcing email
Looking for a email provider that includes email services, spam, virus detection, all in one package that has an excellent up time, and excellent data recovery network and excellent tech support. I need to know the cost per mailbox but with which allows multiple domains. John Tolmachoff (Lists) wrote: Well, being that some of us on this list provide e-mail services to clients, what exactly do you mean? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED]] On Behalf Of Danny Sent: Friday, February 04, 2005 2:42 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT - Outsourcing email Can anyone recommend any email outsourcing companies other then everyone.net? TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT - Outsourcing email
When I go to http://www.mailpure.com/ I don't see any information on services. Matt wrote: Try MailPure. I hear that they are the absolute best, and their president is a wonderful person :) Seriously though...what did you expect? Matt Danny wrote: Can anyone recommend any email outsourcing companies other then everyone.net? TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Outsourcing email
To be professionally honest, that kind of information would be provided as part of a proposal process, informal or formal. Being that you are representing an ISP, cost information would require an open channel of communication and information, one that would be done off a public list. If you are interested in outsourcing your e-mail services, both Matt and myself (as well as I am sure others) would be willing to discuss this off list. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Danny Sent: Friday, February 04, 2005 3:27 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] OT - Outsourcing email Looking for a email provider that includes email services, spam, virus detection, all in one package that has an excellent up time, and excellent data recovery network and excellent tech support. I need to know the cost per mailbox but with which allows multiple domains. John Tolmachoff (Lists) wrote: Well, being that some of us on this list provide e-mail services to clients,what exactly do you mean?John TolmachoffEngineer/Consultant/OwnereServices For You -Original Message-From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-[EMAIL PROTECTED]] On Behalf Of DannySent: Friday, February 04, 2005 2:42 PMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] OT - Outsourcing emailCan anyone recommend any email outsourcing companies other theneveryone.net?TIA---[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be foundat http://www.mail-archive.com. ---[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be foundat http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Outsourcing email
Really you want to pick someone who doesn't waste all their time posting to some geeky listserv. I :-D (just kidding. But Danny, why don't you tell us how many mailboxes/domains you need. I'm sure you'll get some private responses) At 06:20 PM 2/4/2005, you wrote: Yeah, but a little birdie told me that the president can get a little hot some times. ;) John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Matt Sent: Friday, February 04, 2005 3:11 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] OT - Outsourcing email Try MailPure. I hear that they are the absolute best, and their president is a wonderful person :) Seriously though...what did you expect? Matt Danny wrote: Can anyone recommend any email outsourcing companies other then everyone.net? TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail http://www.cayugacomputers.com/ccvds.htmlscanned for viruses 02/04/2005 18:21:11] --- htmlfont size=1[This E-mail a href=http://www.cayugacomputers.com/ccvds.html;scanned for viruses/a 02/04/2005 19:02:54]/font/html --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT - Outsourcing email
John Tolmachoff (Lists) wrote: Yeah, but a little birdie told me that the president can get a little hot some times. Where's that birdie located? I'll shoot it if it has been saying bad things about me :) Matt -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] OT - Outsourcing email
On Friday, February 4, 2005, 7:06:04 PM, Matt wrote: M John Tolmachoff (Lists) wrote: Yeah, but a little birdie told me that the president can get a little hot some times. M Where's that birdie located? I'll shoot it if it has been saying bad M things about me :) You have to keep the birdies in their favorite bird seed - that's the trick. _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] OT - Outsourcing email
There are a bunch in this list I think... http://www.sortmonster.com/MessageSniffer/Referrals.html _M On Friday, February 4, 2005, 6:27:07 PM, Danny wrote: D Looking for a email provider that includes email services, D spam, virus detection, all in one package that has an excellent up D time, and excellent data recovery network and excellent tech D support. I need to know the cost per mailbox but with which allows D multiple domains. D John Tolmachoff (Lists) wrote: D Well, being that some of us on this list provide e-mail services to clients, D what exactly do you mean? D John Tolmachoff D Engineer/Consultant/Owner D eServices For You D -Original Message- D From: [EMAIL PROTECTED] D [mailto:[EMAIL PROTECTED] On Behalf Of Danny D Sent: Friday, February 04, 2005 2:42 PM D To: [EMAIL PROTECTED]: [Declude.JunkMail] OT - Outsourcing email D Can anyone recommend any email outsourcing companies other then D everyone.net? D TIA D --- D [This E-mail was scanned for viruses by Declude Virus D (http://www.declude.com)] D --- D This E-mail came from the Declude.JunkMail mailing list. To D unsubscribe, just send an E-mail to [EMAIL PROTECTED], and D type unsubscribe Declude.JunkMail. The archives can be found D at http://www.mail-archive.com. D --- D [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] D --- D This E-mail came from the Declude.JunkMail mailing list. To D unsubscribe, just send an E-mail to [EMAIL PROTECTED], and D type unsubscribe Declude.JunkMail. The archives can be found D at http://www.mail-archive.com. D --- [This E-mail was scanned for viruses by Declude Virus D (http://www.declude.com)] --- This E-mail came from the D Declude.JunkMail mailing list. To unsubscribe, just send an E-mail D to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. D The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Subject problem
Scott. Any response to this. Fred It shows this way in Spam Review and the Subject Line test also catches this. It was fixed in the 2.03b but after I installed the production 2.0 released by Barry it is now broken again. Fred - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, February 03, 2005 2:04 PM Subject: Re: [Declude.JunkMail] Subject problem I am running the latest version (newly released 2.0) and the subject is showing =?iso-8859? The subject shouldn't appear that way in the E-mail itself. For Declude JunkMail usage, it may appear that way with the Subject starting with a colon issue, which has been fixed in the latest 2.0. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Subject problem
Scott. Any response to this. There should be a new release Monday that covers the issues from this week. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
