RE: [Declude.JunkMail] Number of messages per day

2003-12-31 Thread Colbeck, Andrew
I don't know about the qualities of the IMail Log Analyzer, but given lines like this: 03:07 00:01 SMTP-(0E28) processing C:\IMail\spool\Q51d8530a0130f5ad.SMD 03:07 00:02 SMTPD(1A4100DE) [24.71.223.10] C:\IMail\spool\D521e1a4100de06a6.SMD 41370 You can do this: find SMTPD( sys1229.txt |

[Declude.JunkMail] Avoiding BADHEADERS using PHP (slightly OT)

2003-12-31 Thread Dave Parfrey
Does anyone have any experience using PHP to send emails from a web site? I'm using PEAR's Mail and Mail_mime classes to send the messages through my IMail server. It's working fine, except the messages always fail JunkMail's BADHEADERS and SPAMHEADERS tests. Not cool. If anyone knows how to

Re: [Declude.JunkMail] Avoiding BADHEADERS using PHP (slightly OT)

2003-12-31 Thread R. Scott Perry
Does anyone have any experience using PHP to send emails from a web site? I'm using PEAR's Mail and Mail_mime classes to send the messages through my IMail server. It's working fine, except the messages always fail JunkMail's BADHEADERS and SPAMHEADERS tests. Not cool. It sounds like PEAR doesn't

Re: [Declude.JunkMail] Avoiding BADHEADERS using PHP (slightly OT)

2003-12-31 Thread Dave Parfrey
Thanks! I'll send it off-list. Dave On Wednesday 31 December 2003 10:31 am, you wrote: Does anyone have any experience using PHP to send emails from a web site? I'm using PEAR's Mail and Mail_mime classes to send the messages through my IMail server. It's working fine, except the messages

[Declude.JunkMail] Using IPFILE to Subtract Points instead of Adding Points

2003-12-31 Thread Dan Geiser
Hello, All, Just a quick question. I use the IPFILE test to add points to messages based on a custom list of known BAD IP addresses which I have created. My entry in GLOBAL.CFG looks like this... IPFILE-BAD ipfile D:\iMail\declude\JunkMail.IPFile.Bad.txt x 12 0 If I want to the reverse of

Re: [Declude.JunkMail] Using IPFILE to Subtract Points instead of Adding Points

2003-12-31 Thread R. Scott Perry
Just a quick question. I use the IPFILE test to add points to messages based on a custom list of known BAD IP addresses which I have created. My entry in GLOBAL.CFG looks like this... IPFILE-BAD ipfile D:\iMail\declude\JunkMail.IPFile.Bad.txt x 12 0 If I want to the reverse of that and use

[Declude.JunkMail] Content repetition and weighting

2003-12-31 Thread Mike Gable
If a weight is applied to filtered content in the body of a message, does the weight accumulate if the filtered item is repeated? I have a filter thus: BODY 1 CONTAINS ;#10 Messages from some Asian country (Russia?), which looks like this: ???, leak through my filter file despite having

[Declude.JunkMail] Nigerian Filter Creator Helper

2003-12-31 Thread Dan Geiser
Hello, All, I'm looking for a type of utility that either specifically was written to do what I describe below or a utility which is a broad-based text massaging/manipulation utility which could be twisted to do the following. I would like a utility that I could feed the bodies of nigerian scam

Re: [Declude.JunkMail] Content repetition and weighting

2003-12-31 Thread R. Scott Perry
If a weight is applied to filtered content in the body of a message, does the weight accumulate if the filtered item is repeated? I have a filter thus: BODY 1 CONTAINS ;#10 Messages from some Asian country (Russia?), which looks like this: ???, leak through my filter file despite having

RE: [Declude.JunkMail] Content repetition and weighting

2003-12-31 Thread George Kulman
Mike, If you use LOGLEVEL HIGH, the actual match will show in the JunkMail log. George -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Gable Sent: Wednesday, December 31, 2003 11:59 AM To: Declude (E-mail 2) Subject: [Declude.JunkMail]

RE: [Declude.JunkMail] Nigerian Filter Creator Helper

2003-12-31 Thread George Kulman
Dan, Why not use Kami's Nigerian Filter? He's done all of the work for you. Just remember to thank him. George -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Wednesday, December 31, 2003 12:15 PM To: [EMAIL PROTECTED] Subject:

[Declude.JunkMail] Russian letters

2003-12-31 Thread Richard Farris
Is there any way to delete the Russian type spam that you cant read because it is all in Russian but it is a nuisance. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent:

[Declude.JunkMail] Test Suggestion

2003-12-31 Thread John Tolmachoff \(Lists\)
It would be great with the current options available in Declude is some one could come up with a test to see if the message came from only one hope, meaning directly from the generation source, as opposed to from a user, through their mail server, then to yours. You would exclude your user IP

[Declude.JunkMail] envfrom test

2003-12-31 Thread John Tolmachoff \(Lists\)
How come this does not fail the MAILFROM (envfrom) test? X-Declude-Sender: more [64.201.120.245] John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail

Re: [Declude.JunkMail] envfrom test

2003-12-31 Thread R. Scott Perry
How come this does not fail the MAILFROM (envfrom) test? X-Declude-Sender: more [64.201.120.245] Because Declude JunkMail automatically skips over usernames with no domains. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail

Re: [Declude.JunkMail] Russian letters

2003-12-31 Thread R. Scott Perry
Is there any way to delete the Russian type spam that you cant read because it is all in Russian but it is a nuisance. The NONENGLISH test is designed to do this. You can use it by adding a line: NONENGLISH nonenglish x x 0 0 to your

Re: [Declude.JunkMail] Russian letters

2003-12-31 Thread Doug Anderson
Careful if using NonEnglish. We have Spanish and French users - nonEnglish can catch them. Don't want to piss off our friends to the north or south. - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, December 31, 2003 1:18 PM Subject: Re:

RE: [Declude.JunkMail] Russian letters

2003-12-31 Thread Jason
Friends? :) Happy Hollidays Everyone! Jason -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Doug Anderson Sent: Wednesday, December 31, 2003 1:24 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Russian letters Careful if using

RE: [Declude.JunkMail] envfrom test

2003-12-31 Thread John Tolmachoff \(Lists\)
Then how about a test to check if the MAILFROM is syntax correct, meaning has some characters, the at sign, some characters, a period, and some more characters? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED]

Re[4]: [Declude.JunkMail] [BUMP] Files locked but not processed

2003-12-31 Thread Sanford Whiteman
Given the information, it looks like the most likely culprit here is IMail. Yes, it does seem like IMail is not calling Declude. What concerns me for everyone's sake is that while this may have been happening for a while, many people may have been deleting the orphaned files as unexplained

Re[2]: [Declude.JunkMail] envfrom test

2003-12-31 Thread Sanford Whiteman
Then how about a test to check if the MAILFROM is syntax correct, meaning has some characters, the at sign, some characters, a period, and some more characters? Seems to me that this would be appropriate to have as the default envfrom test behavior, with a LOOSENENVFROM ON option in

RE: Re[2]: [Declude.JunkMail] envfrom test

2003-12-31 Thread John Tolmachoff \(Lists\)
In this war on spam, if it is not clean, it is not presumed innocent, IMHO. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Wednesday, December 31,

[Declude.JunkMail] Nigerian scam...

2003-12-31 Thread Kami Razvan
http://www.sun-sentinel.com/news/local/florida/orl-asecnigerian23122303dec23,0,4096704.story Lesson learned? Use filters :) Sample filter attached.. Regards, Kami # #Entries after 04/07/2003 05:02:52 ? # # Version= 1.27i28: Skip the test if weight is reached SKIPIFWEIGHT 70 #

RE: [Declude.JunkMail] Nigerian scam...

2003-12-31 Thread John Tolmachoff \(Lists\)
Thanks Kami. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan Sent: Wednesday, December 31, 2003 3:10 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail]

RE: [Declude.JunkMail] Nigerian scam...

2003-12-31 Thread Fritz Squib
Kami, Congratulations, you now have the high score on my server for spam weight :) Scott, unless they have changed the math since I went to school...does this look right ? Unless Declude scanned Kami's txt attachment, I cant figure out for the life of me how it scored 4348 (no I have not looked

RE: [Declude.JunkMail] Russian letters

2003-12-31 Thread Omar K.
A big majority of our mail is actually composed of foreign email, so I use the non-English test to put a slight negative weight :) I counter this by adding weight to Chinese and Russian character sets. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of