[Declude.JunkMail] False Email Address on Spam

2003-11-06 Thread Hank Townsend

A user of mine has recently started receiving postmaster rejection notices
(mailbox full, no such user, etc.) on Spam messages that he did not send
out. Someone has used his email address as the return.

Is there anything that can be done about this short of finding the offending
person and chopping off his/her fingers?

Does anyone have any suggestions? I don't want out server reported to the
spam gods because of this.

Thanks.

Hank

---
[This E-mail has been scanned for viruses.]
[MGT of America, Inc.]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Osirusoft Blacklists The World

2003-08-27 Thread Hank Townsend
Scott:
 
The message below came over the Imail discussion board. Should I be removing
the lines:
 
OSDIPS  ip4r relays.osirusoft.com  127.0.0.3 5 0
OSFORM  ip4rrelays.osirusoft.com 127.0.0.8 5 0
OSLIST  ip4rrelays.osirusoft.com 127.0.0.7 5 0
OSPROXY  ip4r relays.osirusoft.com  127.0.0.9 7 0
OSRELAY  ip4rrelays.osirusoft.com 127.0.0.2 5 0
OSSMART  ip4rrelays.osirusoft.com 127.0.0.5 5 0
OSSOFT  ip4rrelays.osirusoft.com 127.0.0.6 5 0
OSSRC  ip4rrelays.osirusoft.com 127.0.0.4 6 0
 
from my Global.cfg?? Looks like I should but I would like the opinion of the
guru.
 
Thanks.
 
Hank
 
=
 
 

FYI. May affect some of you.

 

Osirusoft Blacklists The World 

 

As of today, Osirusoft, distributer of the SPEWS and open relay 

blocklists, among others, is no longer operational. Servers using these 

lists (including the FTC) are currently rejecting ALL email 

 

We contacted Mr. Jared by phone who informed us that 'everyone needs to 

stop using Osirusoft and that he's going to be shutting the service down.' 

Then he says he's going to blacklist 'the world' (aka, ban *.*.*.*) to get 

his point across. Later on this evening, he apparently went ahead and did 

just that 

 

http://slashdot.org/articles/03/08/27/0214238.shtml?tid=111
http://slashdot.org/articles/03/08/27/0214238.shtml?tid=111tid=126
tid=126 

 

 

 




[Declude.JunkMail] Blacklists

2002-07-11 Thread Hank Townsend

Is it more efficient to have a single, large Blacklist file or multiple
small ones? Right now I have a single one but it is getting rather
large.

Thanks.

Hank

---
[This E-mail has been scanned for viruses.]
[MGT of America, Inc.]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.JunkMail] F-Prot Updater

2002-05-09 Thread Hank Townsend

I have F-Prot Updater set to run daily. Everytime it runs, it stays
open. I have to go to the server daily and close it or the next time
it's scheduled, it won't run. Is there a way to schedule the Updater and
force it to close itself when completed?

Thanks.

Hank

---
[This E-mail has been scanned for viruses.]
[MGT of America, Inc.]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.JunkMail] F-Prot Updater

2002-05-09 Thread Hank Townsend


Damn. I just sent this to the wrong list. Sorry guys. Meant to send it
to the Virus side.

Hank



I have F-Prot Updater set to run daily. Everytime it runs, it stays
open. I have to go to the server daily and close it or the next time
it's scheduled, it won't run. Is there a way to schedule the Updater and
force it to close itself when completed?

Thanks.

Hank

---
[This E-mail has been scanned for viruses.]
[MGT of America, Inc.]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.JunkMail] Spam Statistics

2002-05-02 Thread Hank Townsend

I'm not getting any spam tests other than SPAMHEADERS, BADHEADERS, and
ROUTING to work. If I set the log level to HIGH, I start to notice the
following log entries:

05/02/2002 09:52:42 Q4445122 NOTE: Did not succeed in getting MX/A
record for mgtamer.com.

mgtamer.com is my domain but there is also a similar entry in the log
file for any other domain.

What is not setup correctly?

Thanks.

Hank

---
[This E-mail has been scanned for viruses.]
[MGT of America, Inc.]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] Spam Statistics

2002-05-02 Thread Hank Townsend


Thanks Scott. Changed Imail DNS entry and it works like a charm.

Hank




-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: Thursday, May 02, 2002 10:08 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Spam Statistics



I'm not getting any spam tests other than SPAMHEADERS, BADHEADERS, and 
ROUTING to work.

That likely means that there is a DNS problem (since the internal
Declude 
tests are working, but the external DNS-based tests are not).

If I set the log level to HIGH, I start to notice the following log 
entries:

05/02/2002 09:52:42 Q4445122 NOTE: Did not succeed in getting MX/A 
record for mgtamer.com.

mgtamer.com is my domain but there is also a similar entry in the log 
file for any other domain.

What is not setup correctly?

It sounds like the DNS is not set up correctly.  Most likely, IMail is
set 
up to use 2 DNS servers, one of which is refusing requests.  Declude
uses 
the first DNS server listed in the IMail SMTP settings, but it sounds
like 
it isn't working.

The best option would be to change the settings in IMail, and get rid of

the DNS server that isn't working.  That way, IMail won't have to keep 
trying the DNS server that isn't working.

The other option would be to hard-code a DNS server for Declude to use,
by 
adding a line in the format DNS 127.0.0.1 to the 
\IMail\Declude\global.cfg file (replacing 127.0.0.1 with the IP
address 
of your DNS server).
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  You can E-mail [EMAIL PROTECTED] for
assistance.  You can visit our web site at http://www.declude.com .
---
[This E-mail has been scanned for viruses.]
[MGT of America, Inc.]


---
[This E-mail has been scanned for viruses.]
[MGT of America, Inc.]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] Config Junk FILES

2002-04-16 Thread Hank Townsend


I'd like to see the KFROM file.

Thanks.

Hank






-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Tom
Sent: Monday, April 15, 2002 9:22 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Config  Junk FILES



If anyone is curious, we have been using the following setup without
catching any legitimate messages for more than 2 months. We have
reviewed every single message on HOLD and found each one to be SPAM. (at
least by our standards)  Feel free to cut and 
paste any of the following information provided below.

Keep in mind that the following methods we chose do not eliminate 100%
percent of the spam, but it certainly takes a load off.


Sample CFG file
---
OSSRC   ip4r  relays.osirusoft.com  127.0.0.4
5   0
OSSMART ip4r  relays.osirusoft.com  127.0.0.5   5
0
SPAMCOP ip4rbl.spamcop.net  127.0.0.2
5   0

MAILFROMenvfrom x   x   5   0
BADHEADERS  badheaders  x   x   5   0
SPAMHEADERS spamheaders x   x   5   0

KFROM   fromfiled:\imail\declude\fromfile.txt   x
5   0

WEIGHT10weight  x   x   10  0 
---

Sample Junk file
---
WEIGHT10HOLD or DELETE (your preference)
OSSRC   WARN
OSSOFT  WARN
SPAMCOP WARN
MAILFROMWARN
BADHEADERS  WARN
SPAMHEADERS WARN
PERCENT HOLD
KFROM   HOLD
---


If you need a list of addresses for the KFROM file, just let me know and
I will post it in another e-mail.

Regards,
Tom
Image`fx
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  You can E-mail [EMAIL PROTECTED] for
assistance.  You can visit our web site at http://www.declude.com .
---
[This E-mail has been scanned for viruses.]
[MGT of America, Inc.]


---
[This E-mail has been scanned for viruses.]
[MGT of America, Inc.]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .