Re: [Declude.JunkMail] Spam leak?
Yep I did also. Stu At 08:47 AM 1/13/2006 -0500, you wrote: Ummm... Did anybody else get a piece of spam this morning with subject SPAMSPCE: that seems to have been relayed through Declude.com? -Dave Doherty Skywaves, Inc. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Spamdomains test
Does the Spamdomains tests use the mailfrom or the From: address to compare to the revdns. I'm betting it is the mailfrom address. Thanks Stu --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] filter files
I would definitely recommend message sniffer. Stu At 07:54 PM 3/21/2005 -0600, you wrote: Thanks to both of you. I am looking to get mostly obscene stuff, but the medical stuff would be very good to catch also. I will start with this and then adventure out on my own:D On a side note has anyone used Message Sniffer, and would it help with this type of stuff or am i looking in the wrong direction? Thanks again, Joe -- Original Message -- From: David Barker [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Mon, 21 Mar 2005 16:04:55 -0500 Joe here is a very basic filter but hopefully will help get you started: SKIPIFWEIGHT 16 MINWEIGHTTOFAIL 3 MAXWEIGHT 12 #Subject SUBJECT 3 CONTAINS Online Pharmacy #Words BODY 5 CONTAINS Meds BODY 2 CONTAINS cheap Perscriptions BODY 2 CONTAINS No prescription required BODY 2 CONTAINS No Doctor Visits #Medication BODY 2 CONTAINS codiene BODY 2 CONTAINS Codeine BODY 2 CONTAINS vicodin BODY 2 CONTAINS viagra BODY 2 CONTAINS Cialis #URBL BODY 12 CONTAINS fopq.org BODY 12 CONTAINS awayhowbad.com BODY 12 CONTAINS royalmeds.info BODY 12 CONTAINS uncompromisingmind.com BODY 12 CONTAINS simply-meds.com BODY 12 CONTAINS ritheworldofall.com BODY 12 CONTAINS medberthgood.com #Spam Indicators BODY 12 CONTAINS Cia|is BODY 12 CONTAINS Cialls Here are some good links too: http://www.mailpure.com/software/decludefilters/ http://it.farmprogress.com/declude/declude.htm http://www.declude.com/Articles.asp?ID=100 David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Raykiewicz Sent: Monday, March 21, 2005 3:44 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] filter files I am currently thinking about using a filter file to filter out some unwanted messages. Does anyone have some sample filter files that I could use as a starting point? I sure would appreciate some help getting started on this. Joe __ NOD32 1.1030 (20050319) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ___ Webmail delivered by Microlandcomputers.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Internet Usage - Monitoring and Filtering Apps
Marc, I would be interested in these keys for some of the workstaions here if you do not mind sharing them. Thanks Stu At 05:46 PM 2/15/2005 -0500, you wrote: If these are machines that the company owns and you can install them... I have some Reg Keys that a guy who works under me wrote for windows XP that blocks AOL-IM download and some others. It also prevents certain selected sites from being accessed and prevents things like my bargain buddy from being installed. Will really frustrate you average user. If you can get away with limited accounts, I can't, I wish I could, but that really makes it tough for them to screw around. If you want I can share them... Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Patrick Childers Sent: Tuesday, February 15, 2005 2:00 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] OT: Internet Usage - Monitoring and Filtering Apps Sorry for the OT but... It seems we have a lot of goofing off during the work day around here! Therefore, I am looking for recommendations for software (or hardware) based solutions for internet monitoring/filtering in a corporate setting of less than 150 users. Any suggestions? Thanks, ~Patrick --- [This E-mail scanned for viruses by Declude/McAfee] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Google and/or Earthlink failing subjectchars
Is any one seeing Google and or Earthlink failing the subjectchars test on blank subject lines or even if there is a subject typed in ? Any one know of a reason for this. Thanks Stu --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Google and/or Earthlink failing subjectchars
Du.. Thanks Bill. I now even remember making a note of this which in probably in the middle of Christmas Bills. Major brain fade today... My apologies and thanks to all Stu At 10:09 AM 1/11/2005 -0800, you wrote: - Original Message - From: [EMAIL PROTECTED] Is any one seeing Google and or Earthlink failing the subjectchars test on blank subject lines or even if there is a subject typed in ? Any one know of a reason for this. This was a know bug that I think has been fixed with the latest release. See: http://www.mail-archive.com/declude.junkmail@declude.com/msg21811.html and related tread for more info. Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Question on Tests running
Matt,
Check this out http://www.spamhaus.org/xbl/index.lasso
The sbl-xbl.spamhaus.org is a combination of both the sbl.spamhaus.org data and
xbl.spamhaus.org data
You are checking some of the same data twice.
Stu
At 02:55 PM 07/06/2004 -0400, you wrote:
Hello All,
I am new to declude and trying to figure all of this out. So far things
have been going very well.
I have been reading the mail archives and seen a few global.config
examples and have pulled a few tests out to run.
In my global.config I am running these two tests:
SBL-XBL ip4rsbl-xbl.spamhaus.org
127.0.0.2 5 0
SBL ip4rsbl.spamhaus.org *
5 0
Are these basically the same tests? If not, what are the differences
between the two?
Does anyone have any links to some global.configs that I could look at
as well to see where mine might need some adjusting?
Thanks.
Matt Goodhue
CSComputing.biz
html xmlns:o=urn:schemas-microsoft-com:office:office
xmlns:w=urn:schemas-microsoft-com:office:word
xmlns:st1=urn:schemas-microsoft-com:office:smarttags
xmlns=http://www.w3.org/TR/REC-html40;
head
meta http-equiv=Content-Type content=text/html; charset=us-ascii
meta name=Generator content=Microsoft Word 11 (filtered medium)
o:SmartTagType namespaceuri=urn:schemas-microsoft-com:office:smarttags
name=PersonName/
!--[if !mso]
style
st1\:*{behavior:url(#default#ieooui) }
/style
![endif]--
style
!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:Times New Roman;}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
--
/style
/head
body lang=EN-US link=blue vlink=purple
div class=Section1
p class=MsoNormalfont size=2 face=Arialspan style='font-size:10.0pt;
font-family:Arial'Hello All,o:p/o:p/span/font/p
p class=MsoNormalfont size=2 face=Arialspan style='font-size:10.0pt;
font-family:Arial'o:pnbsp;/o:p/span/font/p
p class=MsoNormalfont size=2 face=Arialspan style='font-size:10.0pt;
font-family:Arial'I am new to declude and trying to figure all of this
out.nbsp; So far things have been going very well.
o:p/o:p/span/font/p
p class=MsoNormalfont size=2 face=Arialspan style='font-size:10.0pt;
font-family:Arial'o:pnbsp;/o:p/span/font/p
p class=MsoNormalfont size=2 face=Arialspan style='font-size:10.0pt;
font-family:Arial'I have been reading the mail archives and seen a few
global.config examples and have pulled a few tests out to
run.o:p/o:p/span/font/p
p class=MsoNormalfont size=2 face=Arialspan style='font-size:10.0pt;
font-family:Arial'o:pnbsp;/o:p/span/font/p
p class=MsoNormalfont size=2 face=Arialspan style='font-size:10.0pt;
font-family:Arial'In my global.config I am running these two
tests:o:p/o:p/span/font/p
p class=MsoNormalfont size=2 face=Arialspan style='font-size:10.0pt;
font-family:Arial'o:pnbsp;/o:p/span/font/p
p class=MsoNormalfont size=2 face=Arialspan style='font-size:10.0pt;
font-family:Arial'SBL-XBLnbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;
nbsp;nbsp;
ip4rnbsp;nbsp;nbsp;
sbl-xbl.spamhaus.orgnbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;n
bsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;
127.0.0.2nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;
5nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;
0o:p/o:p/span/font/p
p class=MsoNormalfont size=2 face=Arialspan style='font-size:10.0pt;
font-family:Arial'SBLnbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp
;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp; ip4rnbsp;nbsp;nbsp;
sbl.spamhaus.org
nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbs
p;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;
*nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nb
sp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;
5nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;
0o:p/o:p/span/font/p
p class=MsoNormalfont size=2 face=Arialspan style='font-size:10.0pt;
font-family:Arial'o:pnbsp;/o:p/span/font/p
p class=MsoNormalfont size=2 face=Arialspan style='font-size:10.0pt;
font-family:Arial'Are these basically the same tests?nbsp; If not, what are
the differences between the two?o:p/o:p/span/font/p
p class=MsoNormalfont size=2 face=Arialspan style='font-size:10.0pt;
font-family:Arial'o:pnbsp;/o:p/span/font/p
p class=MsoNormalfont size=2 face=Arialspan style='font-size:10.0pt;
font-family:Arial'Does anyone have any links to some global.configs that I
could look at as well to see where mine might need some
adjusting?o:p/o:p/span/font/p
p class=MsoNormalfont size=2 face=Arialspan style='font-size:10.0pt;
Re: [Declude.JunkMail] logfile naming
Having done this (rename, move, zip) the Declude logfiles the tricky part is dealing with the rollover of the logfile at midnight and at the end each month. Stu At 04:10 PM 06/30/2004 -0700, you wrote: You could use something like: LOGFILE spool\dec2004.log I was hoping to avoid a kludge like this. Coming from a UNIX background I don't like to manually do tasks that should be automatic (or automagical :-) and easy. I'm getting pretty good at writing scripts that run from the scheduler and do what has to be done. Thanks to all for the suggestions.. Rod -- Roderick A. Anderson Project Manager Technology Services Management Group http://www.technologyservicesmanagementgroup.com/ Spokane WA, 99202 --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. - CSOnline Technical Support Normal hours - Monday thru Saturday 8am - 12pm CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Cochranton 814-425-1696 Parker724-399-1158 GremLan 814-337-7060 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com http://www.gremlan.org - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] New Test possibility
Scott, With Declue removing the data between the in HTML messages to get the correct wording. Deasdsdasdadlude = Declude. Would a test that counts and/or totals the number of characters between a single asd or all the aaa's in a message be a viable ne test. I notice a fair amount of spam that may contain a very common phrase that may be hard to block ought right like want extra income that is broken up with a large number of characters between the Since Declude is removing the characters between the to combine the phrase possibly counting the characters and adding it as a test may help with some spam. Just a thought Stu - CSOnline Technical Support Normal hours - Monday thru Saturday 8am - 12pm CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Cochranton 814-425-1696 Parker724-399-1158 GremLan 814-337-7060 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com http://www.gremlan.org - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Next JM Release
Scott, Can you give any idea when the next full release will be out and the doccumentation updated? I'm primarly interested in the doccumentation of the new features. Searching the mail archive is ok but relying on mail-archive for information can be difficult when they are upgrading or behind. Just asking. Not trying to restart an old discussion. Thanks Stu - CSOnline Technical Support Normal hours - Monday thru Saturday 8am - 12pm CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Cochranton 814-425-1696 Parker724-399-1158 GremLan 814-337-7060 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com http://www.gremlan.org - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Surbl.org
I would be interested in your script also. Stu At 08:27 AM 04/13/2004 -0700, you wrote: I would be interested in your script until native support is added to Declude. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Roger Eriksson Sent: Tuesday, April 13, 2004 8:11 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Surbl.org However I hope to see SURBL soon as an additional Declude test. I just got caught up on this thread and checked out the website for SURBL and I agree! This would help with the stuff that passes all of the other tests. Sheldon Hi, SURBL is surprisingly effective, considering the fact that it only contains about 450-500 entries. I have written a simple command script that downloads the rbldns zone file and converts it to a body filter. I have scheduled it to run once a day. Here are yesterday's stats with 9666 hits for the SURBL test (note that the individual tests show total number of hits, while the spam summary only counts one hit per message irrespective of the number of recipients): # Declude test results -- dec0412.log AHBL-PROXY 1857 AHBL-RHSBL 835 AHBL-SOURCE 302 BADHEADERS 1610 BASE64-PLUS 412 BASE64 786 CBL 10616 COMMENTS 54 DSBL 8875 DSN 1611 FORGEDLOCAL 781 GREYLIST 5 HELOBOGUS 2616 MAILFROM 487 MAILPOLICE 554 MESSAGE OK 2294 NETBL 463 OPM 554 ORDB 24 REVDNS 3028 RSL 673 SBL 571 SNIFFER-ADULT 897 SNIFFER-CASINO 35 SNIFFER-CREDIT 1057 SNIFFER-EMAIL 8 SNIFFER-EXP 578 SNIFFER-GEN 824 SNIFFER-GREY 2 SNIFFER-INSUR 571 SNIFFER-MAL 2 SNIFFER-MEDIA 2172 SNIFFER-OBFUSC 201 SNIFFER-PHARM 5279 SNIFFER-PRINT 0 SNIFFER-RICH 840 SNIFFER-SCAM 119 SNIFFER-TOOLS 0 SNIFFER-TRAVEL 43 SNIFFER 12628 SORBS-DUHL 7512 SPAMCOP 10546 SPAMDOMAINS 3380 SPAMHEADERS 293 SPAMTRAP 121 SPFFAIL 209 SURBL 9666 URLDBL 76 WEIGHT15-19 846 WEIGHT20 11987 WHITELISTED 110 Unique messages for local delivery: 5812 Held spam: 4256 (73%) Marked spam: 455 (7%) Non-spam: 1101 (18%) Furthermore, SURBL has a rather low overlap with most other tests (only unique hits are counted here): #Test check - dec0412.log Test: SURBL Number of unique hits: 2849 Shared with SBL (421 hits): 69 (2%) Shared with DSBL (3018 hits): 1951 (68%) Shared with SPAMCOP (3673 hits): 2208 (77%) Shared with AHBL-SOURCE (261 hits): 49 (1%) Shared with CBL (3563 hits): 2232 (78%) Shared with AHBL-PROXY (683 hits): 420 (14%) Shared with OPM (200 hits): 132 (4%) Shared with RSL (240 hits): 163 (5%) Shared with ORDB (22 hits): 8 (0%) Shared with SORBS-DUHL (2510 hits): 1494 (52%) Shared with DSN (479 hits): 299 (10%) Shared with AHBL-RHSBL (346 hits): 184 (6%) Shared with MAILPOLICE (492 hits): 171 (6%) Shared with MAILFROM (161 hits): 67 (2%) Shared with BADHEADERS (682 hits): 290 (10%) Shared with HELOBOGUS (940 hits): 537 (18%) Shared with SPFFAIL (125 hits): 101 (3%) Shared with SPAMHEADERS (248 hits): 43 (1%) Shared with REVDNS (1528 hits): 645 (22%) Shared with COMMENTS (46 hits): 19 (0%) Shared with BASE64 (577 hits): 3 (0%) Shared with SNIFFER (4485 hits): 2830 (99%) Shared with SNIFFER-TRAVEL (7 hits): 7 (0%) Shared with SNIFFER-INSUR (66 hits): 44 (1%) Shared with SNIFFER-TOOLS (0 hits): 0 (0%) Shared with SNIFFER-MEDIA (360 hits): 323 (11%) Shared with SNIFFER-EMAIL (8 hits): 1 (0%) Shared with SNIFFER-PHARM (2188 hits): 1650 (57%) Shared with SNIFFER-SCAM (35 hits): 5 (0%) Shared with SNIFFER-ADULT (470 hits): 290 (10%) Shared with SNIFFER-MAL (2 hits): 0 (0%) Shared with SNIFFER-PRINT (0 hits): 0 (0%) Shared with SNIFFER-RICH (377 hits): 65 (2%) Shared with SNIFFER-CREDIT (249 hits): 172 (6%) Shared with SNIFFER-CASINO (14 hits): 5 (0%) Shared with SNIFFER-GREY (2 hits): 0 (0%) Shared with SNIFFER-OBFUSC (130 hits): 85 (2%) Shared with SNIFFER-EXP (234 hits): 108 (3%) Shared with SNIFFER-GEN (343 hits): 75 (2%) Shared with SPAMDOMAINS (970 hits): 630 (22%) Shared with SPAMTRAP (29 hits): 18 (0%) Shared with FORGEDLOCAL (330 hits): 75 (2%) Shared with NETBL (214 hits): 125 (4%) Shared with URLDBL (52 hits): 6 (0%) Shared with BASE64-PLUS (384 hits): 2 (0%) Shared with GREYLIST (5 hits): 0 (0%) Shared with WEIGHT15-19 (455 hits): 198 (6%) Shared with WEIGHT20 (4256 hits): 2519 (88%) If anyone is interested, I can make the SURBL script available for download (together with some other scripts, e.g., the log analysis and test check scripts that generated the results seen above). The best solution is of course to have the SURBL test implemented directly in Declude, especially since it is a realtime blocklist, but until then this filter will do just fine. /Roger --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
[Declude.JunkMail] Filter File processing
In an effort to try and reduce the processing needed for checking mail. With the new features in Declude to end or skip processing within a filterfile does it seem better to have. A) A small number of larger filer files vs a lot of smaller files B) Doesn't make any significant difference if you use the SKIPIFWEIGHT option at the beginning even though it would still have to open the file to check the SKIPIFWEIGHT setting. C) A small number of larger files ordered in the config file ordered from lightest processing most likely to hit to heaviest processing less likely to hit D) Alot of smaller files ordered in the config file from ordered from lightest processing most likely to hit to heaviest processing less likely to hit I would think C or D would be the best option. The last question is what, in number of lines, would be a large filter file. 500, 1000, 2000, 5000, 10,000 Stu - CSOnline Technical Support Normal hours - Monday thru Saturday 8am - 12pm CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Cochranton 814-425-1696 Parker724-399-1158 GremLan 814-337-7060 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com http://www.gremlan.org - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] GIBBERISH 2.0.1, single file filter with END functionality.
Mark, Try the same url with .zip instead of .txt Stu Matt, Thanks for the response. I did that but the newest file is just 2.0.1 I guessed you might have posted at: http://www.mailpure.com/software/decludefilters/gibberish/Gibberish_v2-1-0.t xt but that spit back a 404 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Friday, February 13, 2004 11:57 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] GIBBERISH 2.0.1, single file filter with END functionality. I shared 2.1.0 of that filter on this list along with some updates for other filters as well. I don't meant to be flippant by suggesting that you search the archives, because that's what I would probably do in order to figure it out. A good string would probably be a search of the base address software/decludefilters. Matt Mark Smith wrote: Matt, Just going through some saved items and wanted to follow up on this. Is 2.0.1 your latest version or is there a newer one? Mark -0- -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matthew Bramble Sent: Monday, December 22, 2003 9:52 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] GIBBERISH 2.0.1, single file filter with END functionality. I've made some huge leaps forward recently in terms of the processing power required to run Declude with the custom filters that I have installed. This was done by way of the SKIPIFWEIGHT functionality introduced in the latest beta, but also by way of re-ordering my filters in the Global.cfg file so that the easiest to process custom filters are run first in the hopes of avoiding the need to run more costly ones. This new version of GIBBERISH makes use of functionality introduced in the 1.77 beta, however the most recent interim release, 1.77i7, should be used in order to guarantee proper operation (initial versions would always end processing, and effectively disabled the filters). The END functionality removes the need to have ANTI filters since the filter can be stopped before it gets to the main filter matches, and it also presents another opportunity to save on the processing power required to run such things. This also makes use of the MAXWEIGHT functionality to limit the max score as well as end processing once a single hit has been scored. Note that the filter will only log (at the LOW setting) and show WARN actions when the filter is tripped and an END was not hit...which is great! No more looking at non-scoring custom filters due to counterbalances :D Please read through the file and follow these instructions if you already have GIBBERISH installed: 1) Comment out the ANTI-GIBBERISH custom filter in your Global.cfg 2) Change the score of the GIBBERISH filter to 0 in your Global.cfg. 3) Change the scoring of the filter to match your system (it is scored by default for base 10 systems). This can be done by changing the MAXWEIGHT and Main Filter lines to reflect the multiple of 10 that your system is based on. 4) Change the SKIPIFWEIGHT score to reflect your delete weight, or whatever weight you would like for the filter to be skipped if the system has already reached it before processing the filter. The file can be downloaded from the following location: http://www.mailpure.com/software/decludefilters/gibberish/Gibb erish_v2-0-1.zip Please report any issues with the new filter format. As soon as bugs stop being reported, I will move to convert the other dual file filters into single file alternatives which make use of the END functionality. Until the functionality goes into a full release, I'm going to continue to primarily provide the old style filters on my site. Matt --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = !DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.0 Transitional//EN HTMLHEADTITLE/TITLE META http-equiv=Content-Type content=text/html; charset=us-ascii META content=MSHTML 6.00.2800.1400 name=GENERATOR/HEAD BODY text=#00 bgColor=#ff DIV dir=ltr align=leftSPAN class=574265917-13022004FONT face=Arial color=#ff size=2Matt,/FONT/SPAN/DIV
RE: [Declude.JunkMail] Is the list down?
I am here, I think :) Stu At 11:13 AM 07/31/2003 -0500, you wrote: Optimists vs. Pessimists Is the list up? Or is the list down? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Pereira Sent: Thursday, July 31, 2003 10:58 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Is the list down? i had been wondering the same thing myself - Original Message - From: Sheldon Koehler [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, July 31, 2003 11:32 AM Subject: [Declude.JunkMail] Is the list down? Anyone on? Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. - CSOnline Technical Support Normal hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Summer hours - Monday thru Saturday 8am - 12pm (June - July - August) CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Cochranton 814-425-1696 Parker724-399-1158 GremLan 814-337-7060 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com http://www.gremlan.org - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] New Variable Question ?
Scott, Would it be possible to have a variable like the %weight% variable say %weight*% that would convert the weight into a series of stars based on a set division number with the division number possibly held in the global.cfg file. This way only one x-header can be used rather than a series of x-headers showing up if with different x-headers for each weight level. Using the weight alone is difficult because of all the combinations that can develop (3 30 33) all look the same it trying to filter on x-header contains xx 3. Using a division number of say 5 this could be represented as xxand xx ** or xx *** (depending on rounding factor) and be represented with 1 x-header instead of several depending on the weight levels defined. Stu - CSOnline Technical Support Normal hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Summer hours - Monday thru Saturday 8am - 12pm (June - July - August) CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Cochranton 814-425-1696 Parker724-399-1158 GremLan 814-337-7060 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com http://www.gremlan.org - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Custom Filter file Log question
Scott, We will investigate this possibility, after seeing what else might be possible currently. In this case, it looks like using LOGLEVEL HIGH might be all that is needed, as that will add the phrase from the filter file to the log file. The problem with log level high is that log files that can be huge now (100- 200mb) become even larger. Now adding the phrase to the mid level in conjunction or in place of the line number might work even if the phrase was limited to the first 10-15 characters. The line number would give the approx location and the first part of the phrase could narrow it down further. I think that would work. Stu - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Custom Filter file Log question
At 05:13 PM 04/01/2003 -0500, you wrote: Now adding the phrase to the mid level in conjunction or in place of the line number might work even if the phrase was limited to the first 10-15 characters. The line number would give the approx location and the first part of the phrase could narrow it down further. I think that would work. I think the best option would be to add the phrase to the warning message, which will normally appear in the logs, as well as the X-RBL-Warning: header if the WARN action is used. However, I'd like to hear if anyone may have a problem with having the phrase appear in an X-RBL-Warning: header. -Scott This would work for me as we don't use an x-header for the filter files. So anything that would cause better identification to be added to the log file would work. For those using an x-header it may not make much diffrence if it is a normal spam phrase but if it is a pornographic phrase that might create a stir. Stu - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude REVDNS test
Scott, What information / location in the e-mail headers does Declude use for the REVDNS test. Does Declude use the DNS server in the global.cfg file to make the query ? Thanks Stu - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude - Imail Logging
Scott or anyone, Looking to see if someone will confirm my thinking. In trying to compare the IMail log files to the junkmail log files for some stats. Is it Correct that in an IMail - Declude JM combination 1) The IMail log files would show 5 SMTMD lines for each email (connect, ehlo or helo, Mail From, Rcpt To and \imail\spool\D...) Curiosity question as it doesn't really matter for my main question At this point does IMail creates the Q file also but only logs the D file creation. 2) In the case of an email being intercepted by Declude JM and Deleted the IMail log file will only have the above mentioned SMTPD lines. In short IMail receives the e-mail, records the SMTPD info and hands off to Declude. If Declude deletes the E-mail (removes the D and/or the Q files) IMail never records anything else for this e-mail. If Declude passes the e-mail IMail would then record a SMTP process for the corresponding Q file. Thanks Stu - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter tests info in log
The (5) refers to the line number of the test in the filter file that failed. Stu At 12:05 PM 01/22/2003 -0500, you wrote: I wanted to see if anyone new what the number meant behind the Filter test failures when listed in the log file. For example: message failed Filter_test (5) We are trying to figure out which line in our filter test actually failed. We have logging set to LOW I know if our test fails a fromfile test it lists in the header. Thanks for any aid. ___ Keith Johnson, MCP Network Engineer Network Advocates, Inc. Tel: 502.412.1050 Fax: 502.412.1058 Email: [EMAIL PROTECTED] Good pings come in small packets !DOCTYPE HTML PUBLIC -//W3C//DTD HTML 3.2//EN HTML HEAD META HTTP-EQUIV=Content-Type CONTENT=text/html; charset=us-ascii META NAME=Generator CONTENT=MS Exchange Server version 6.0.5770.91 TITLEFilter tests info in log/TITLE /HEAD BODY !-- Converted from text/rtf format -- PFONT SIZE=2 FACE=ArialI wanted to see if anyone new what the number meant behind the Filter test failures when listed in the log file.nbsp; For example: message failed Filter_test (5)nbsp;nbsp; We are trying to figure out which line in our filter test actually failed.nbsp; We have logging set to LOWnbsp; I know if our test fails a fromfile test it lists in the header.nbsp; Thanks for any aid./FONT/P PFONT COLOR=#80 SIZE=2 FACE=Arial___/FONT /P PBIFONT COLOR=#80 SIZE=2 FACE=ArialKeith Johnson, MCP/FONT/I/BI/I BRFONT SIZE=2 FACE=ArialNetwork Engineer/FONT BRFONT SIZE=2 FACE=ArialNetwork Advocates, Inc./FONT BRFONT SIZE=2 FACE=ArialTel:nbsp;nbsp;nbsp;nbsp;nbsp;nbsp; 502.412.1050/FONT BRFONT SIZE=2 FACE=ArialFax:nbsp;nbsp;nbsp;nbsp;nbsp; 502.412.1058/FONT BRFONT SIZE=2 FACE=ArialEmail:nbsp; [EMAIL PROTECTED]/FONT /P PFONT SIZE=2 FACE=Arialquot;Good pings come in small packetsquot;/FONT /P BR /BODY /HTML - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
DSN:RE: [Declude.JunkMail] An optional web interface for DecludeJunkMail?
We would be interested in this and currently are looking a putting something like this together. User goes to a web page enters e-mail address and selects filtering level E-mail is sent to entered e-mail address for conformation User just hits reply and sends an e-mail back System process and adds correct lines to database At regular intervals or immediately a new $default$.junknmail or other text file is created and could be copied or written directly to the mail server. The whole process could run on an independent IS system or the mail server and the e-mail conformation deals with user login and password lookup issue. Not as slick as it could be but should work. Stu At 01:12 PM 12/17/2002 -0500, you wrote: Could we take a lower tech route and use the program alias capabilities? Make changing your spam settings similar to subscribing/unsubscribing from a mailing list. That's what we were originally thinking of a few years back, but the problem is that end users are well... end users. For example, there are even some knowledgeable IMail admins who still don't know how to quote E-mail (most often mixing in their reply with the original E-mail, with nothing to separate the two). We even have some IMail admins who can't subscribe to the mailing lists (and all of them have access to the full help system of IMail). I'm guessing that a lot of people could have troubles with such a system. I picture something along the lines of sending a change request to [EMAIL PROTECTED] I get back a form where I can change the settings and reply. It's not nearly as slick as a web interface, but it would work for everyone (except maybe Imail gateway users) and not require adding any web server apps to the mail server. Is this something that others would find useful? It definitely would be easier for us to implement. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] DSN:Variables, Lists and Testing
Scott, Would it be possible to add a feature that would create a separate temp debug log while maintaining the default log file. Something likeLOGLEVELMID copy loglevel filename Where if copy (or some key name) follows the primary settings a test logfile would be created using the loglevel set for that setting. Or simply a second loglevel line like LOGLEVELTEST loglevelfilename The JM logfiles (mine at least) can be quite large, a couple of hundred meg or more and growing. When looking for a possible problem, testing a new feature, filter file or whatever rather than searching a large log file or renaming/copying/whatever the current log file several times to get snippets during this testing then keeping track of these separate files to maintain a good logfile. Being able to get a separate test log file would help a lot. my $.02 Stu - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] DSN:Declude JM in gateway setting
Scott, Rather than setting up diffrent domains on the gateway server is it possible to get Declude to use the/a default (imail\declude\$default$.junkmail) file. When set up without the specific domain all mail gets forwarded without JM checking. With a domain configured (imail\declude\domain\$default$.junkmail) it works fine. Even tried the settings in the global.cfg for outgoing mail. Is this an IMail thing or am I missing something ? Stu - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
DSN:Re: [Declude.JunkMail] list of beta features?
You are almost right on the HELOBOGUS test The format for the HELOBOGUS test is HELOBOGUS helovalid x x Y 0 Where Y = the weight Stu At 01:42 PM 07/11/2002 -0500, you wrote: I know all the beta enhancements don't make it to the manual and you can find by digging through the threads here, but is there a beta manual I can use for reference for adding some of the new features? I have read numerous threads regaurding the wordfile helobogus tests, and didnt decide to implement them until today... But now I cant find the threads. What is the sytax for defining the HELOBOGUS test and the external wordfile? ( better yet a URL to a list of beta features that havn't made it to the manual yet) --- After typing this I looked at my global.cfg, I'm guessing from whats already there helobogus would be HELOBOGUS helobogus x x Y 0 where Y = weight ? searching for that wordfile thread !DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.0 Transitional//EN HTMLHEAD META HTTP-EQUIV=Content-Type CONTENT=text/html; charset=us-ascii TITLEMessage/TITLE META content=MSHTML 6.00.2716.2200 name=GENERATOR/HEAD BODY DIVSPAN class=168253218-11072002FONT color=#80 size=2I know all the beta enhancements don't make it to the manual and you can find by digging through the threads here,/FONT/SPAN/DIV DIVSPAN class=168253218-11072002FONT color=#80 size=2but is there a beta manual I can use for reference for adding some of the new features?/FONT/SPAN/DIV DIVSPAN class=168253218-11072002FONT color=#80 size=2/FONT/SPANnbsp;/DIV DIVSPAN class=168253218-11072002FONT color=#80 size=2I have read numerous threads regaurding the wordfile amp; helobogus tests, and didnt decide to implement them until today.../FONT/SPAN/DIV DIVSPAN class=168253218-11072002FONT color=#80 size=2But now I cant find the threads./FONT/SPAN/DIV DIVSPAN class=168253218-11072002FONT color=#80 size=2/FONT/SPANnbsp;/DIV DIVSPAN class=168253218-11072002FONT color=#80 size=2What is the sytax for defining the HELOBOGUS test and the external wordfile?/FONT/SPAN/DIV DIVSPAN class=168253218-11072002FONT color=#80 size=2( better yet a URL to a list of beta features that havn't made it to the manual yet)/FONT/SPAN/DIV DIVSPAN class=168253218-11072002/SPANSPAN class=168253218-11072002FONT color=#80 size=2/FONT/SPANnbsp;/DIV DIVSPAN class=168253218-11072002FONT color=#80 size=2---/FONT/SPAN/DIV DIVSPAN class=168253218-11072002FONT color=#80 size=2After typing this I looked at my global.cfg,/FONT/SPAN/DIV DIVSPAN class=168253218-11072002FONT color=#80 size=2I'm guessing from whats already there helobogus would be/FONT/SPAN/DIV DIVSPAN class=168253218-11072002FONT color=#80 size=2HELOBOGUS helobogus x x Y 0/FONT/SPAN/DIV DIVSPAN class=168253218-11072002FONT color=#80 size=2where Y = weight ?/FONT/SPAN/DIV DIVSPAN class=168253218-11072002FONT color=#80 size=2/FONT/SPANnbsp;/DIV DIVSPAN class=168253218-11072002FONT color=#80 size=2searching for that wordfile thread/FONT/SPAN/DIV/BODY/HTML - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
DSN:Re: [Declude.JunkMail] How many Exchange users out there?
This is the knowledge base file for using IMail as a gateway. http://support.ipswitch.com/kb/IM-19980116-DM01.htm Stu At 08:03 PM 06/18/2002 -0700, you wrote: Mark, I was actually thinking about doing this. How is your Imail system configured? I have never setup Imail as a gateway before. -- Original Message -- From: Mark Smith [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Tue, 18 Jun 2002 19:41:40 -0400 I'm curious to see how many people are using iMail with Junkmail as a gateway for their Exchange system? We're currently using it because I just can't find anything better than Junkmail. The problem is that I'm having a hard time convincing others to buy iMail just to be a SMTP gateway for SPAM filtering. Just conducting a little poll. Thanks! --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
DSN:Re: [Declude.JunkMail] Bounce strategies?
Scott, Maybe I misunderstood your comment but Eudora and Pegasus will filter on an X-Header. Outlook and Outlook Express do not seem to allow for this. At least I have not figured out how to do it. Eudor does not include this as a default but you can add it. At least it works with my version of Eudora and I know someone doing this with Pegasus. Stu What is really sad is that there has been a de-facto standard for identifying spam for many years now (the X-RBL-Warning: header), yet I'm not aware of a single mail client that detects it. -Scott - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
DSN:RE: [Declude.JunkMail] Blacklist/Whitelist
How would the e-mail be handled that is (I'm assuming here) be held waiting conformation? If a valid conformation is received back then obviously the mail would be delivered. How long for a conformation though and if a conformation bounces, as expected, then what? This idea sounds promising I'm not sure how you get by these hurdles. my $.02 Stu At 02:45 PM 04/01/2002 -0500, you wrote: although most mail with a weight that high would have confirmations bounce Well - obviously, you would have to detect a valid conformation queue ID in the SUBJECT line and if found, would let confirmations PASS - even if NORMALLY that IP address would bounce. I meant that most of the confirmation requests would bounce. For example, E-mail from [EMAIL PROTECTED] (a non-existent account) that send spam to you would likely fail the WEIGHT10 test. If you had WEIGHT10 CONFIRM after the confirmation system is set up, a confirmation request would be sent to [EMAIL PROTECTED], but that would bounce. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
DSN:Re: [Declude.JunkMail] ORBZ gone
So who's right and who's wrong here? ORBZ for not changing the test or Lotus for not fixing a bug in their software? In either case we loose another decent blacklist not because of some junk mailer fighting for the right to send junk but a software issue in one program. This would seem be a Lotus Domino problem that should have been corrected. As far as I can see the problem still exists. Just that ORBZ testing is not now affecting a large number of systems. Stu - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] DSN:Store and Forward JM Filtering
Scott, I have a customer using Exchange that would like us to do the JM filtering for them. We do DNS for them so changing MX records and IMail relaying won't be a problem and they have a 24x7 connection. The questions is since the E-mail does come into IMail first am I correct that Declude would pick this up before IMail forwards this to their server. Thanks Stu - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
DSN:RE: [Declude.JunkMail] Spamcop issue
Tom, Using weight test(s) works very well for us. You can have more than 1 weight test and at any weight. For give me for stating the obvious if you already knew this. Everybody has their own system and own ideas. One of the more common methods is to have multiple weight tests with different actions for each such as Warn for the lower weights, Subject for middle weights and Hold for the higher weights. What weight you give to each blacklist test will probably take some experimenting till you reach a comfort level for your situation. In our analyzing of our log files and e-mail in our spam trap we are seeing the same situation you mentioned. Spamheaders and another test is in a high percentage of the junk e-mail. Stu At 03:50 AM 03/02/2002 -0500, you wrote: After careful consideration to everyone's views, I have elected to use the weight10 test to help define spam. I have been looking through thousands of messages and logs to figure out what the best method would be for cutting down spam. Most spam will fail more than one test. Usually a message considered spam will also fail the Spamheader test. Using the Declude weight test I can now set Declude to hold just that message and let the other messages through with a warning. If you take a look at the following example, you will see that there are messages that fail more than one test; OSSRC: Jackpot.com spam SPAMHEADERS: This E-mail has headers consistent with spam So if both of these tests have a value of 5 then this mail would fail based on the weight10 test. Any thoughts? Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
DSN:Re: [Declude.JunkMail] Common actions for Declude Junkmail
Scott, The rest of the mail clients can filter on the X-RBL-Warning: header, if the user sets it up. We have done this with Eudora and Pegasus but have yet to find an option for Outlook Express to do this. If you know this can be done with Outlook Express I would be interested in the information we have been missing. Thanks Stu Note that some mail clients should be able to automatically filter the spam without any changes in the settings (the X-RBL-Warning: header is a de-facto standard that has been around for years). The rest of the mail clients can filter on the X-RBL-Warning: header, if the user sets it up. Blocking the E-mail is more convenient for the end users, although you may have to do some tweaking to make sure that legitimate mail can still get through. - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] DSN:Number of custom user.junkmail files
Scott, What ahould the affect be on Declude if there were a large number (hundreds, thousands) of individual user.junkmail files. Thanks Stu - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
DSN:Re: [Declude.JunkMail] Undisclosed Recipients
I'll add my .02 for a request of a to: (and or cc:) blacklist test similar to the current From blacklist test. Stu At 03:26 PM 02/16/2002 -0500, you wrote: Any way to add weight points to emails with To: Undisclosed Recipients as the recipient? No, there is not any way to do that currently. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
DSN:Re: [Declude.JunkMail] MISSING_REVERSE_DNS:BadHeaders testfails on a hotmail acct
Mike, Have you looked at the error code returned by the badheaders test in the logs ? You can enter this code at http://www.declude.com/tools/header.php and get an explanation of why the e-mail failed. Stu At 04:33 PM 02/13/2002 -0500, you wrote: Can you tell me what the BadHeaders test actually looks at? There is a certain Hotmail acct. ([EMAIL PROTECTED]) that triggers the BadHeaders test to fail. I don't have any problem recieving from other hotmail accounts. Thanks Mike Bartolotta - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] %WEIGHT% Variable
Should the %WEIGHT% Variable work with the SUBJECT action in 1.35a or 1.36. I know it works other places but when I tried it in the sbject action it didn't work. Thanks Stu - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
DSN:Re: [Declude.JunkMail] %WEIGHT% Variable
I used it with 1.35a WEIGHT15SUBJECT Junkmail Wt:%WEIGHT% (Yes the quotes are part of the subject tag line) The result was exactly that Junkmail Wt:%WEIGHT%Viagra is Great Stu At 04:06 PM 02/01/2002 -0500, you wrote: Should the %WEIGHT% Variable work with the SUBJECT action in 1.35a or 1.36. I know it works other places but when I tried it in the sbject action it didn't work. It should work with 1.36, but was just added and has not been thoroughly tested yet. What happens when you try using it? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] DSN:Naming body headers
How about BODYHEADER BODYFOOTER Stu At 08:44 AM 01/31/2002 -0500, you wrote: The HEADER action is misleading - it does not add a message to the header, it adds it to the beginning of the body of the message. Your setup is actually working as it was designed to. The manual is clear on this, but the name chosen is misleading. Good catch -- that's the problem. By the way, can anyone think of a better names than HEADER/FOOTER when dealing with text added to the body of the E-mail? That *is* very confusing (especially when trying to explain it The HEADER action adds a header (no, not a real header...). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
DSN:Re: [Declude.JunkMail] ETRN
Harvy, No you don't need to subscribe to MAPS to get Declude Junk Mail to work. The decision on using MAPS (pay) vs the Free blacklists and/or Declude's built in testing, Badheaders Spamheaders and so forth, is a matter of personal decision and results of your testing. I do not use MAPS and am very satisfied with the very high level of junk mail caught. Stu At 03:54 PM 12/11/2001 -0500, you wrote: Do I need to subscribe to MAPS to get the Junkmail to work properly? At 03:26 PM 1/29/2002 -0500, you wrote: The only configuration we have in the Imail server is the IP address and hostname in the hosts file. The DNS points the MX record to our mail server. THE QUESTION: Does the mail that is sent to these servers run through the Declude program? Yes. Declude scans all E-mail that arrives via SMTP, so immediately after IMail receives the E-mail, it gets scanned by Declude. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . Harvey Rench Network Engineer Clayton Homes, Inc. 865-380-3000 Visit us at www.Clayton.net --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
DSN:Re: [Declude.JunkMail] MISSING_REVERSE_DNS:Newbie questions onfilters charging
Chris, Using the weighting system in Declude JM (depending on how you set it up) you should find in most cases anything failing 3-4 or more tests should give you a very high degree of confindence it is spam in the 70-80% range you mentioned. Stu At 08:36 PM 01/26/2002 -0500, you wrote: Hello. I'm a new user to declude's products, so sorry if I'm asking things that were asked recently. We're trying to build some good filters that will eliminate real junk without blocking valid messages. I'm guessing this might cover 70-80% of the junk without blocking most valid messages. Does this sound reasonable? Is there a sample setting file that people start with (besides with the default which does not block anything)? A second question - is anyone charging a premium for AntiVirus and AntiSpam email, and if so, how much? Per email account? Per domain? Thanks Chris Ulrich [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] DSN:Question on missed Junk Mail
Scott, I don't think it was checked. I located the Q file in the IMail Logs but it is not in the Declude log file. I am checking the logs of some of the others that seem to have acted the same way. So far at least one other Q file is listed in IMail but not in the Declude logs. Stu At 09:49 AM 01/18/2002 -0500, you wrote: Any reason why Declude JM would not pick up this as junk mail and a few others. The IP 65.139.68.226 by http://www.dnsstuff.com lists this is one of the lesser (for lack of a bettr term) spam databases. The IP 207.124.149.2 is listed in several of the spam databases. ... Received: from whntwebsvr.WHSYSTEMS.COM [207.124.149.2] by ... Received: from fmx2.freemail.hu=0 ([65.139.68.226]) by... Unless you are using the HOP settings, Declude JunkMail will only scan the 207.124.149.2 address. Have you checked your Declude JunkMail log file for this E-mail to see which tests it says the E-mail failed? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
DSN:RE: [Declude.JunkMail] Sequence of Tests?
Is it a correct assumption that if 4 weight tests are defined (weight5, weight10, weight15, weight20) and the total weight is 18 only the weight15 test would get triped. Stu And, obviously, the WEIGHT test must somehow be postponed - because if it was at the beginning of the globa.cfg file it would otherwise execute before all the weighted tests were even evaluted? The WEIGHT test is automatically performed after all the other tests are finished. -Scott - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: DSN:RE: [Declude.JunkMail] Sequence of Tests?
As usual when I assume something I am wrong :) Stu At 02:39 PM 01/16/2002 -0500, you wrote: Is it a correct assumption that if 4 weight tests are defined (weight5, weight10, weight15, weight20) and the total weight is 18 only the weight15 test would get triped. No. If the total weight is 18, the WEIGHT5 test, WEIGHT10 test and WEIGHT15 tests will all get triggered. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
