[Declude.JunkMail] HIDETESTS not working?
Title: Message My installed.bin says = 1.77i2. My Global.cfg contains a line: HIDETESTS CATCHALLMAILS IPNOTINMX NOLEGITCONTENT WEIGHT8 WEIGHT10 WEIGHTHDR NJABL AHBL SORBS My $Default$.Junkmail contains a line: WEIGHTHDRWARNX-RBL-Warning: Failed %TESTSFAILED% [%WEIGHT%] My .EML template contains (snippet): In case your message was legitimate, we are including technical information that will assist us with reviewing the matter. Mail Server: %REMOTEIP% for %RHSBL% [%SENDERHOST%] DNS Pointer: %REVDNS% Host Name: %HELO% Triggers: %TESTSFAILED% (%WARNING%) Yet, Declude generates the following: In case your message was legitimate, we are including technical information that will assist us with reviewing the matter. Mail Server: 219.47.200.12 for verizon.net [verizon.net] DNS Pointer: YahooBB219047200012.bbtec.net Host Name: YahooBB219047200012.bbtec.net Triggers: SORBS, SORBS-DUL, BADHEADERS, SPAMROUTING, SPAMDOMAINS, WEIGHT10 (Total weight between 10 and 19.) And I just received an email with the following header: X-Declude: Triggered SORBS, WEIGHTFILTER [5] Best RegardsAndy SchmidtHM Systems Software, Inc.600 East Crescent Avenue, Suite 203Upper Saddle River, NJ 07458-1846Phone: +1 201 934-3414 x20 (Business)Fax: +1 201 934-9206http://www.HM-Software.com/
Re: [Declude.JunkMail] HIDETESTS not working?
My installed.bin says = 1.77i2. The installed.bin file isn't meant to be human-readable. Given that we don't have a record of having given out a 1.77i2, it's probably wrong. What does \IMail\Declude -diag say? HIDETESTS CATCHALLMAILS IPNOTINMX NOLEGITCONTENT WEIGHT8 WEIGHT10 WEIGHTHDR NJABL AHBL SORBS Triggers: SORBS, SORBS-DUL, BADHEADERS, SPAMROUTING, SPAMDOMAINS, WEIGHT10 (Total weight between 10 and 19.) The WEIGHT10 shouldn't have been in there -- there is a bug with 1.77 that can prevent the HIDETESTS option from working properly. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HIDETESTS not working?
Given that we don't have a record of having given out a 1.77i2, it's probably wrong. Scott: The 1.77i folder has now the version 2. The following is the header from our email. = Sender: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] X-IMAIL-SPAM-DNSBL: (BLARS,23200366,127.1.0.1) X-Declude-Sender: [EMAIL PROTECTED] [24.107.232.14] X-Declude-Spoolname: De25a0162026e458d.SMD X-Note: This E-mail was scanned filtered by Declude [1.77i2] for SPAM virus. == This is what our version says.. So 1.77i2 definitely is there. Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, December 12, 2003 10:43 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] HIDETESTS not working? My installed.bin says = 1.77i2. The installed.bin file isn't meant to be human-readable. Given that we don't have a record of having given out a 1.77i2, it's probably wrong. What does \IMail\Declude -diag say? HIDETESTS CATCHALLMAILS IPNOTINMX NOLEGITCONTENT WEIGHT8 WEIGHT10 WEIGHTHDR NJABL AHBL SORBS Triggers: SORBS, SORBS-DUL, BADHEADERS, SPAMROUTING, SPAMDOMAINS, WEIGHT10 (Total weight between 10 and 19.) The WEIGHT10 shouldn't have been in there -- there is a bug with 1.77 that can prevent the HIDETESTS option from working properly. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HIDETESTS not working?
Hi Scott: The WEIGHT10 shouldn't have been in there -- there is a bug with 1.77 Okay, but what about SORBS, that appears even though it's included in the HIDETESTS. Given that we don't have a record of having given out a 1.77i2, it's probably wrong. Huh? Where do you think I downloaded it from? Declude 1.77i2 (C) Copyright 2000-2003 Computerized Horizons. NoMaxQueProc Diagnostics ON (Declude v1.77i2). Declude JunkMail: Config file found (D:\IMAIL\Declude\global.CFG). Declude Virus: Config file found (D:\IMAIL\Declude\Virus.CFG). WARNING: Could not delete eicar.com file [2]! Declude Hijack:Not installed (no D:\IMAIL\Declude\Hijack.CFG file). Declude Confirm: Not installed (no D:\IMAIL\Declude\Confirm.CFG file). 64 spam tests defined: BYPASSWHITELIST BYPASSMULTIRECP DSBL DSBLMULTI ORDB KUNDE NSERVER SPAMCOP BLITZEDALL NJABL NJABLRELAYS NJABLDUL NJABLSOURCES NJABLMULTI NJ ABLFORMMAIL NJABLPROXIES AHBL AHBLRELAYS AHBLPROXIES AHBLSOURCES AHBLPSSL AHBLFO RMMAIL AHBLENDUSER AHBLEXEMPT SORBS SORBS-HTTP SORBS-SOCKS SORBS-MISC SORBS-SMTP SORBS-WEB SORBS-BLOCK SORBS-ZOMBIE SORBS-DUL SPAMHAUS CBL BONDEDSENDER WEB-O-TR UST RDNSBL AHBLDOMAINS SORBS-BADCONF SORBS-NOMAIL MAILPOLICE-PORN MAILFROM PERCE NT BADHEADERS BASE64 HELOBOGUS IPNOTINMX REVDNS SPAMROUTING SPAMHEADERS NOLEGITC ONTENT COMMENTS BCC4 BCC6 BCC8 HEUR10 HEUR9 HEUR8 SPAMDOMAINS WEIGHTFILTER WEIGH TKILL WEIGHT10 WEIGHT8 WEIGHTHDR IMail reports Official Host Name as: Maywood-IS-0002.Webhost.HM-Software.com. IMail's SendName registry seems OK: D:\IMAIL\Declude.exe. DNS Server: 63.107.174.65 Declude JunkMail Status: PRO version registered. Declude Virus Status:Pro Version Registered. Declude Hijack Status: NOT REGISTERED: No activation code. End of diagnostics. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, December 12, 2003 10:43 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] HIDETESTS not working? My installed.bin says = 1.77i2. The installed.bin file isn't meant to be human-readable. Given that we don't have a record of having given out a 1.77i2, it's probably wrong. What does \IMail\Declude -diag say? HIDETESTS CATCHALLMAILS IPNOTINMX NOLEGITCONTENT WEIGHT8 WEIGHT10 WEIGHTHDR NJABL AHBL SORBS Triggers: SORBS, SORBS-DUL, BADHEADERS, SPAMROUTING, SPAMDOMAINS, WEIGHT10 (Total weight between 10 and 19.) The WEIGHT10 shouldn't have been in there -- there is a bug with 1.77 that can prevent the HIDETESTS option from working properly. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HIDETESTS not working?
Given that we don't have a record of having given out a 1.77i2, it's probably wrong. The 1.77i folder has now the version 2. The following is the header from our email. This is exactly why there was such a big issue with interim releases last month. We only have a record of giving out the URL to the interim release to one of our customers. I just checked the stats for our web site, and it seems that 25 people have downloaded it. Perhaps next time, we'll need to come out with an interim release that does something creative to help people realize that interim releases are ONLY supposed to be downloaded when there is a specific feature or fix that is needed. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HIDETESTS not working?
The WEIGHT10 shouldn't have been in there -- there is a bug with 1.77 Okay, but what about SORBS, that appears even though it's included in the HIDETESTS. The HIDETESTS option requires an exact match. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HIDETESTS not working?
The HIDETESTS option requires an exact match. Yes - I understand that... Let's try this one more time G: As per my original bug report, my Global.cfg contains the line: HIDETESTS CATCHALLMAILS IPNOTINMX ... NJABL AHBL SORBS ^ My variable is replaced with Triggers: SORBS, SORBS-DUL, BADHEADERS, SPAMROUTING, ^ Notice how the first test listed is SORBS, which matches my last HIDETESTS SORBS character by character? And, no, there is not an extra space behind SORBS in my HIDETESTS - it's the end of the line. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HIDETESTS not working?
Notice how the first test listed is SORBS, which matches my last HIDETESTS SORBS character by character? That is part of the bug I was referring to. I had not noticed that you had a generic SORBS test. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HIDETESTS not working?
Okay - thanks. Just wanted to make sure that you were aware that the bug was not related to WEIGHT... tests only. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
