This vulnerability is widely reported to be very, very not good. There have
been unofficial workarounds out there for several days. Here's the
official MS patch:
http://www.microsoft.com/technet/security/bulletin/ms06-001.mspx
-Dave Doherty
Skywaves Inc.
---
[This E-mail was scanned for
This patch is now available on Windows Update as Security Update for Windows
XP (KB912919). Additionally, it coexists with the patch that was made
available by SANS last week. If you installed the patch from SANS, install
the M$ patch (which requires a reboot) and uninstall the one from SANS at
Does the Spamdomains tests use the mailfrom or the From: address to compare
to the revdns.
I'm betting it is the mailfrom address.
Thanks
Stu
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe,
Stu,
The spamdomains test uses the mailfrom address. Declude derives all its
sender and recipient information from the envelope, not the message headers.
David Franco-Rocha
Declude Technical / Engineering
- Original Message -
From: [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Anyone have any ideas about this? Sandy, are you around?
I can get the Declude log files to indicate negative scores, but nothing
else can happen with it. For example, as a test I set up this:
SA-TEST external nonzero
c:\imail\declude\filters\spamc32\spamc32.exe -d IP of SA server -u
and it doesn't appear anywhere in the log, though I do see SA-TEST
showing scores of -2.
That's about the most I can do -- pass negative scores back to JM.
I'm obviously confused here, or maybe SPAMC32 can't do this.
I don't think it's me, I think it's Declude. Seems Declude is not even
Sanford Whiteman wrote:
I don't think it's me, I think it's Declude. Seems Declude is not even
interpreting these as zero scores, but simply not matching them to any
test definition at all? That's a substantial bug, if so. Can anyone
else,
I cannot get neg values returned I'm running
