RE: [Declude.JunkMail] Blacklist Based on TO Address?

2008-10-30 Thread David Barker
No there is not. If you want to blacklist I would suggest using your mail
server functionality to do this as the earlier you can stop a message the
better. Secondly if you really want Declude to do this you can see the
section Your own sender blacklists in the online manual
http://www.declude.com/searchresults.asp?Cat=109

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William
Stillwell
Sent: Thursday, October 30, 2008 8:45 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Blacklist Based on TO Address?

Is there a way to Blacklist based on TO/SUBJECT (Just like WHITELIST) 

William Stillwell
Systems Architect

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Blacklist Based on TO Address?

2008-10-30 Thread Darin Cox
Instead of blacklisting, why not just create a TO/SUBJECT filter that adds a 
large weight.  That would serve the same purpose as blacklisting.

Darin.


- Original Message - 
From: David Barker [EMAIL PROTECTED]
To: declude.junkmail@declude.com
Sent: Thursday, October 30, 2008 9:02 AM
Subject: RE: [Declude.JunkMail] Blacklist Based on TO Address?


No there is not. If you want to blacklist I would suggest using your mail
server functionality to do this as the earlier you can stop a message the
better. Secondly if you really want Declude to do this you can see the
section Your own sender blacklists in the online manual
http://www.declude.com/searchresults.asp?Cat=109

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William
Stillwell
Sent: Thursday, October 30, 2008 8:45 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Blacklist Based on TO Address?

Is there a way to Blacklist based on TO/SUBJECT (Just like WHITELIST)

William Stillwell
Systems Architect

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Blacklist Based on TO Address?

2008-10-30 Thread Nick Hayer
Not sure if this is what you are asking -  you could do something like 
this for a particular recip subject pairing:

ALLRECIPS END NOTCONTAINS   x
SUBJECT END NOTCONTAINS xx
REVDNS delete weight CONTAINS  .

-Nick


David Barker wrote:

No there is not. If you want to blacklist I would suggest using your mail
server functionality to do this as the earlier you can stop a message the
better. Secondly if you really want Declude to do this you can see the
section Your own sender blacklists in the online manual
http://www.declude.com/searchresults.asp?Cat=109

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William
Stillwell
Sent: Thursday, October 30, 2008 8:45 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Blacklist Based on TO Address?

Is there a way to Blacklist based on TO/SUBJECT (Just like WHITELIST) 


William Stillwell
Systems Architect

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



  



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Blacklist Based on TO Address?

2008-10-30 Thread William Stillwell
I don't see where you can do [TO] in the filters.. I will probably just
filter by this header:  X-Originating-IP: [98.130.1.155] , and add negative
weight., I also have to remove whitelist from my gateway mail scanner, and
create a rule, as IPBYPASS doesn't support Subnets.

I must of forgot something, because I can't seem to understand any of the
doc's on decludes website.

Ie, In global.cfg:

FILTER-MYFILTER filter  d:\imail\declude\filters\myfilter.txt   x   y
z

What does column x, y, and z  signify?

and I assume in myfilter.txt

Column #1 is Test Type? Where is a list of available Tests?
Column #2 is Wieght to add / delete? So, END = Cancel Test?
Column #3/4 is obvouse..

REVDNS  END PCRE(?i:\(timeout\))
BODY10  PCRE(http://.*\.doc\.exe)







William Stillwell
Systems Architect
Professional Staffing-ABTS,Inc
d/b/a Able Body Labor
ph. 727.724.2610
fx. 727.724.2680
cl. 727.638.6208


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin
Cox
Sent: Thursday, October 30, 2008 9:43 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Blacklist Based on TO Address?

Instead of blacklisting, why not just create a TO/SUBJECT filter that adds a

large weight.  That would serve the same purpose as blacklisting.

Darin.


- Original Message - 
From: David Barker [EMAIL PROTECTED]
To: declude.junkmail@declude.com
Sent: Thursday, October 30, 2008 9:02 AM
Subject: RE: [Declude.JunkMail] Blacklist Based on TO Address?


No there is not. If you want to blacklist I would suggest using your mail
server functionality to do this as the earlier you can stop a message the
better. Secondly if you really want Declude to do this you can see the
section Your own sender blacklists in the online manual
http://www.declude.com/searchresults.asp?Cat=109

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William
Stillwell
Sent: Thursday, October 30, 2008 8:45 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Blacklist Based on TO Address?

Is there a way to Blacklist based on TO/SUBJECT (Just like WHITELIST)

William Stillwell
Systems Architect

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Blacklist Based on TO Address?

2008-10-30 Thread Darin Cox
There are no TO, CC, or BCC variables available, so you have to use 
ALLRECIPS for that.

In your filter example, x is a placeholder, y is the weight to add if the 
test triggers/matches, and z is the weight to add if the test does not 
trigger/match.  In most cases, z is set to zero.  Also note that y can be a 
positive or negative number.  If positive it adds to the aggregate weight 
for the message, if negative it subtracts (i.e. counterweight).  The latter 
is what I was recommending to you for your TO/SUBJECT test.

The list of test types for filters is a table in the documentation.  There's 
a section called Tests that is dedicated to this.

End means end the test, passing the weight back to be added to the aggregate 
weight for the message.

Darin.


- Original Message - 
From: William Stillwell [EMAIL PROTECTED]
To: declude.junkmail@declude.com
Sent: Thursday, October 30, 2008 9:58 AM
Subject: RE: [Declude.JunkMail] Blacklist Based on TO Address?


I don't see where you can do [TO] in the filters.. I will probably just
filter by this header:  X-Originating-IP: [98.130.1.155] , and add negative
weight., I also have to remove whitelist from my gateway mail scanner, and
create a rule, as IPBYPASS doesn't support Subnets.

I must of forgot something, because I can't seem to understand any of the
doc's on decludes website.

Ie, In global.cfg:

FILTER-MYFILTER filter d:\imail\declude\filters\myfilter.txt x y
z

What does column x, y, and z  signify?

and I assume in myfilter.txt

Column #1 is Test Type? Where is a list of available Tests?
Column #2 is Wieght to add / delete? So, END = Cancel Test?
Column #3/4 is obvouse..

REVDNS END PCRE (?i:\(timeout\))
BODY 10 PCRE (http://.*\.doc\.exe)







William Stillwell
Systems Architect
Professional Staffing-ABTS,Inc
d/b/a Able Body Labor
ph. 727.724.2610
fx. 727.724.2680
cl. 727.638.6208


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin
Cox
Sent: Thursday, October 30, 2008 9:43 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Blacklist Based on TO Address?

Instead of blacklisting, why not just create a TO/SUBJECT filter that adds a

large weight.  That would serve the same purpose as blacklisting.

Darin.


- Original Message - 
From: David Barker [EMAIL PROTECTED]
To: declude.junkmail@declude.com
Sent: Thursday, October 30, 2008 9:02 AM
Subject: RE: [Declude.JunkMail] Blacklist Based on TO Address?


No there is not. If you want to blacklist I would suggest using your mail
server functionality to do this as the earlier you can stop a message the
better. Secondly if you really want Declude to do this you can see the
section Your own sender blacklists in the online manual
http://www.declude.com/searchresults.asp?Cat=109

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William
Stillwell
Sent: Thursday, October 30, 2008 8:45 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Blacklist Based on TO Address?

Is there a way to Blacklist based on TO/SUBJECT (Just like WHITELIST)

William Stillwell
Systems Architect

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.