We are using Declude Standard on IMAIL 7.X. Using BANEXT but it doesn't stop
any of the banned extensions from being received.
Any ideas?
Thanks,
Dan
---
This E-mail was scanned for viruses by WebHouse, Inc. http://www.webhse.com
---
[This E-mail was scanned for viruses by Declude Virus
We are using Declude Standard on IMAIL 7.X. Using BANEXT but it
doesn't stop
any of the banned extensions from being received.
BANEXT is not a Declude Junkmail feature, it is a Declude Virus feature. Do
you have Declude Virus?
-Patrick
---
[This E-mail scanned for viruses by
Can Junkmail pro filters (for msg body) use wildcards? Is there a reference?
I want to create a filter (to hold) msgs that have embedded urls with IP
addresses in them.
I can do this is my IMGate machine but want to see what I catch first.
Mike
---
[This E-mail was scanned for viruses by
We are using Declude Standard on IMAIL 7.X. Using BANEXT but it doesn't stop
any of the banned extensions from being received.
Note that the BANEXT option is only in Declude Virus, and will only work
with Declude Virus Standard or Declude Virus Pro (you can type
\IMail\Declude -diag from a
Can Junkmail pro filters (for msg body) use wildcards?
No.
Is there a reference?
The Filtering section of the manual covers the filtering. We do plan to
add a reference section to the manual like for the whitelisting/blacklisting.
I want to create a filter (to hold) msgs that have
I noticed on the declude website that the antivirus solution
doesn't carry a virus scanner with it, the user is to provide the scanner
and the declude engine attaches to it. Are you aware that this works
with Computer Assoc. InoculateIT 6.0? I do know that you can make a
scanning
Is there a limit on the number of addresses that I can blacklist within
a FROMFILE?
Thanks.
b
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL
Is there a limit on the number of addresses that I can blacklist within
a FROMFILE?
No, there is not.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
I have been using Declude for almost a year now and I thinks its the best
software ever made... I have tweak the settings and weights but I have run
into problem with the whitelisting for existing customers.
With WHITELISTING, I know there is a limit of 200 domains. Will this limit
ever be
Adam,
Thursday, November 21, 2002 you wrote:
AH With WHITELISTING, I know there is a limit of 200 domains. Will
AH this limit ever be increased? Or maybe be made into a separate
AH test like the FROMFILE where ALL domains listed in that would be
AH allowed???
AH The only other option I can
With WHITELISTING, I know there is a limit of 200 domains. Will this limit
ever be increased? Or maybe be made into a separate test like the FROMFILE
where ALL domains listed in that would be allowed???
That's something that quite a few people have requested, and we do plan to
handle
The only other option I can think of is once you hit the
whitelist limit of
200, you create a test using the FROMFILE and use a negative
weight of like
100. This would kind of do the same thing of the whitelisting,
just a little
hokey
That is kind of the way I do it. I use the
In the meantime, that would work (although it would only apply to the
weighting system, so it would prevent an E-mail from being held if you had
SPAMCOP HOLD, for example).
I think you mean it will not prevent a mail from being held with that rule,
correct?
John Tolmachoff MCSE, CSSA
IT
In the meantime, that would work (although it would only apply to the
weighting system, so it would prevent an E-mail from being held if you had
SPAMCOP HOLD, for example).
I think you mean it will not prevent a mail from being held with that rule,
correct?
You are correct.
I think I'm
A day or so ago I happened to discover that my class C was listed in
rfc-ignorant IPWHOIS. Further investigation showed that all of UUNET
was listed and since I was on UUNET I was included.
The reason for the listing has to do with the OrgTech handle (not Tech
hangel but OrgTech handle).
At 01:05 PM 11/21/2002 -0600, you wrote:
A day or so ago I happened to discover that my class C was listed in
rfc-ignorant IPWHOIS. Further investigation showed that all of UUNET
was listed and since I was on UUNET I was included.
I found since RFC-Ignorant began implementing these rules using
Is this a declude error or a virus scanner error, I started seeing a
bunch of these Couldn't move/copy data file [2]. Priority back to 32.
in my logs today.
11/21/2002 09:12:48 Qe9dc000c014e5cc2 Msg failed KFROM (
ID-20021121-000773). Action=DELETE.
11/21/2002 09:12:48 Qe9dc000c014e5cc2 Msg
Is this a declude error or a virus scanner error, I started seeing a
bunch of these Couldn't move/copy data file [2]. Priority back to 32.
in my logs today.
That error message is from Declude JunkMail, and will occur if the D*.SMD
file (the one that contains the E-mail contents) no longer
I share your pain! We've been live with Declude and HOLD actions for about
a week, and I've been beavering away at building our whitelist for 2 weeks.
In a nutshell, I'm building the whitelist because I want to keep my SPAMCOP
HOLD action (and a few others). I've established with our team that
I would suggest using a weight system and create a negative
weight for your whitelist so those on the whitelist will
not be able to get away with too much.
For example:
if you have @123.com whitelisted and someone sends spam,
it will not fail, however, if you gave them a -15
and the massage
Andrew,
Thursday, November 21, 2002 you wrote:
CA I want to keep my SPAMCOP HOLD action (and a few others). I've
CA established with our team that going to a pure weighted system is
CA probably in our future.
I have a rule that fires from a custom external filter program
that uses
One thing I am considering is using a greylist, where known solid domains
that need it will go on a weighted whitelist of say -100 and the weighted
greylist will get say -15, and I would put those domains they needed the
help but not wanting to actually whitelist.
John Tolmachoff MCSE, CSSA
IT
One thing I am considering is using a greylist, where known solid domains
that need it will go on a weighted whitelist of say -100 and the weighted
greylist will get say -15, and I would put those domains they needed the
help but not wanting to actually whitelist.
I actually use multiple
Reply to: John Tolmachoff
Re: [Declude.JunkMail] whitelisting on Thursday 5:02:56 PM
I'd like to do this. Will negative weights work for this list?
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
J One thing I am considering is using a
One particularly aggravating type of spam is where the from: is faked to be
from the recipient or the recipient's own domain.
I saw in the archive that this thread has been touched on before, but how
about once more around the mulberry bush?
I believe Scott mentioned that this behaviour counted
I'd like to do this. Will negative weights work for this list?
I don't see why not, it's working for us. You would probably
want to calculate out the total failed weight and use that
for your negative weight.
For example:
Spamcop = 15
OSSCR = 15
OTHERS = 20
Hold weight is 30
Delete
Can variables be used in filter files?
For example:
SUBJECT 2 CONTAINSmembership for %variable%
Regards,
Tom
Image`fx
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
Can variables be used in filter files?
For example:
SUBJECT 2 CONTAINSmembership for %variable%
No, that isn't currently possible. The problem is that it wouldn't allow
you to search for the % character, and which some people are using (for
example, BODY 2 CONTAINS http:// %
Is this what my Declude log file should look like I have probably almost
20-30 instances of the declude.exe process running and the only thing I can
think of that I have changed is the loggin level from MED to LOW
See snip from log file below:
11/21/2002 19:32:17 Q889d000300da3fbe
Is this what my Declude log file should look like I have probably almost
20-30 instances of the declude.exe process running and the only thing I can
think of that I have changed is the loggin level from MED to LOW
The problem is that you entered an incorrect value (MED) -- it should be
yep... your good
Thanks again,
Adam
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Thursday, November 21, 2002 7:45 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Declude log file - HELP!!!
Is this what my
31 matches
Mail list logo
