On 2/11/2011 2:49 PM, IMail Admin wrote:
But keeping the spam down is a bigger issue right now.
You might try adding truncate to your RBLs.
http://www.gbudb.com/truncate/index.jsp
_M
--
Pete McNeil, President
MicroNeil Research Corporation
www.microneil.com
703.779.4909
x7010
---
[This
Dave,
The last column of a test is the value added or subtracted if the test is
NOT triggered. IF a test is NOT triggered it will not show up in the header.
The most common that are used like this are:
IPNOTINMX
NOLEGITCONTENT
FROMNOMATCH
David Barker
VP Operations Declude
Your Email security
and a score of 6 should have been added to the
total score?
-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: 2009-02-19 08:37
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Spam Score?
Dave,
The last column
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Spam Score?
David,
Here is the test:
CBL IP4Rcbl.abuseat.org 127.0.0.2 6 0
According to these headers:
X-RBL-Warning: CBL: Blocked - see
http://cbl.abuseat.org/lookup.cgi?ip=65.60.20.131;
X-Note: Failed Weights: CBL
Subject: RE: [Declude.JunkMail] Spam Score?
David,
Here is the test:
CBL IP4Rcbl.abuseat.org 127.0.0.2 6 0
According to these headers:
X-RBL-Warning: CBL: Blocked - see
http://cbl.abuseat.org/lookup.cgi?ip=65.60.20.131;
X-Note: Failed Weights: CBL [6], SPAMHEADERS [3], SPFPASS
WHITELIST AUTH can whitelist such spam if the user has their own address in
their webmail address book. This is the one drawback with WHITELIST AUTH.
It would be nice to be able to use this but exempt the user's address from
the whitelist.
Darin.
- Original Message -
From: Todd
: [Declude.JunkMail] Spam
WHITELIST AUTH can whitelist such spam if the user has their own address in
their webmail address book. This is the one drawback with WHITELIST AUTH.
It would be nice to be able to use this but exempt the user's address from
the whitelist.
Darin.
- Original Message -
From
this feature due to forging spam that forges
the user's email address.
Darin.
- Original Message -
From: David Barker [EMAIL PROTECTED]
To: declude.junkmail@declude.com
Sent: Wednesday, December 03, 2008 3:17 PM
Subject: RE: [Declude.JunkMail] Spam
AUTOWHITELIST ON is the address book check
Content Filters
which must be some of the PCRE that David Barker has been posting.
Gary
Original Message
From: Dave Beckstrom [EMAIL PROTECTED]
Sent: Saturday, August 04, 2007 8:45 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Spam Increase?
Sorry guys
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin
Cox
Sent: Friday, August 03, 2007 10:25 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Spam Increase?
I think we started seeing it last Saturday... pretty constant since then.
Fortunately it's almost entirely being
I actually saw it ramping up since last weekend and every day there have
been a change or 2 in the spam to keep it from being caught.
John T
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Todd Richards
Sent: Friday, August 03, 2007 2:35 PM
To:
, 2007 6:19 PM
Subject: RE: [Declude.JunkMail] Spam Increase?
I actually saw it ramping up since last weekend and every day there have
been a change or 2 in the spam to keep it from being caught.
John T
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Todd
Darin,
The CPU increase was due to the high volume of ZIP and XLS viruses,
something that has been pretty rare until recently. The Storm botnet
started sending these out on Saturday in numbers that average about one
attached virus per day per user on our system (which was a change from
To: declude.junkmail@declude.com
Sent: Saturday, August 04, 2007 12:09 AM
Subject: Re: [Declude.JunkMail] Spam Increase?
Darin,
The CPU increase was due to the high volume of ZIP and XLS viruses, something
that has been pretty rare until recently. The Storm botnet started sending
these out on Saturday
IS - Systems Eng. (Karl Drugge) wrote:
Anyone else seeing a major reduction is spam the past week ?
I usually see about 14-15k messages daily, but since Monday have
dropped off to about 8k... Did the recent arrests and law suits have a
result this early ?
*Karl Drugge*
*B.S.I.T.,
I have see about a 12% reduction in the past week.
Kevin Bilbee
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems
Eng. (Karl Drugge)
Sent: Friday, May 04, 2007 8:55 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Spam reduction ?
Anyone
The last two weekends were noticeably quiet compared to the weekdays.
Judging from the number and flavour of blowback bounce messages I see,
the bad guys are concentrating on fewer campaigns but at higher volumes.
The general trend is still up.
Spam volumes climbed at increasing rates up to
May 1st is a big holiday in Europe, so maybe that had some affect.
Original Message
From: Heimir Eidskrem [EMAIL PROTECTED]
Sent: Friday, May 04, 2007 12:45 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Spam reduction ?
IS - Systems Eng. (Karl
Hi Chuck,
I use Alligate. It does some very fancy stuff prior to the 'data'
command [among other things afterward] that on my system block 95%
of incoming traffic prior to receiving the email. And this is not
done with ip blacklists..
-Nick
Chuck Schick wrote:
Anyone using a spam
Chuck,
Just FYI Some of these things can be achieved with SmarterMail they are able
to block connects on the SMTP.
David
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck
Schick
Sent: Wednesday, April 11, 2007 3:27 PM
To: Declude. JunkMail
Subject:
Chuck,
For ease of use and limited gateway functionality, you might want to try
Alligate (www.getalligate.com or www.alligate.com). Alligate will apply
greylisting 'selectively' if you want it to, and that will result in far
fewer issues than full-on greylisting. Selective greylisting is at
My Imail server is behind 3 Windows 2003 servers running IIS SMTP virtual
server which are acting as a gateway. They all have ORF installed and ORF is
blocking about 75% of the spam and viruses coming in purely by simple rules
and policies.
John T
-Original Message-
From: [EMAIL
at that
time).
Chuck Schick
Warp 8, Inc.
(303)-421-5140
www.warp8.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Wednesday, April 11, 2007 2:21 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Spam gateway/proxy
: [Declude.JunkMail] Spam gateway/proxy...
David:
We have such an investment in Imail that it is not feasible for us to
switch. Migration cost would be huge. We host several hundred domains.
Actually we looked at switching about a year ago and we decided if we would
switch it would be to Merak mail (at least
someone was touting ASSP but not sure how well
that works.
ASSP is just excellent at blocking or categorizing spam and its
integration with ClamAV is great at catching those image only spams
using sanesecurity sig files. It is a single threaded Perl
application and as such probably has a
Karl, maybe your spam slowdown is because of the lame delegation of two
out of three of your DNS servers listed in your WHOIS.
http://www.dnsreport.com/tools/dnsreport.ch?domain=casselberry.org
How long have you not been using the DNS servers at twtelecom.net ?
Andrew.
: RE: [Declude.JunkMail] SPAM reductions ?
Karl, maybe your spam slowdown is because of the lame delegation of two
out of three of your DNS servers listed in your WHOIS.
http://www.dnsreport.com/tools/dnsreport.ch?domain=casselberry.org
How long have you not been using the DNS servers
: [Declude.JunkMail] SPAM reductions ?
Karl, maybe your spam slowdown is because of the lame delegation of
two out of three of your DNS servers listed in your WHOIS.
http://www.dnsreport.com/tools/dnsreport.ch?domain=casselberry.org
How long have you not been using the DNS servers
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Spam not being caught
This filter will work for targeting CMDSPACE with a gif attachment.
You might want to
SKIPIFWEIGHT 315
STOPATFIRSTHIT
BODY END NOTCONTAINS Content-Type: image/gif TESTSFAILED END NOTCONTAINS
CMDSPACE
BODY 100 CONTAINS img
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott
Fisher
Sent: Monday, November 06, 2006 11:27 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Spam not being caught
This filter will work for targeting CMDSPACE with a gif attachment.
You might want to
SKIPIFWEIGHT
ta-
X-IMAIL-SPAM-PHRASE IT'S BUD X-UIDL: 463095290
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Nick HayerSent:
Thursday, November 09, 2006 11:31 AMTo:
declude.junkmail@declude.comSubject: X-IMail-SPAM-Phrase Re:
[Declude.JunkMail] Spam not being caught
Hi Karl,Post a sample w
L PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick
Hayer
Sent: Thursday, November 09, 2006 11:31 AM
To: declude.junkmail@declude.com
Subject: X-IMail-SPAM-Phrase Re: [Declude.JunkMail] Spam not
being caught
Hi Karl,
Post a sample with full headers so we can see what the scofflaw is
se
:51
PM
Subject: Re: [Declude.JunkMail] Spam not
being caught
So far - and I have been hammered as well is they all
contain 2 "$$" and end with @debora I have a regex that hits these -
[EMAIL PROTECTED]-NickKarl Hentschel wrote:
Here are a headers
effectively with any IP4r list.
-
Original Message -
From:
Nick Hayer
To:
declude.junkmail@declude.com
Sent:
Thursday, November 09, 2006 4:51 PM
Subject:
Re: [Declude.JunkMail] Spam not being caught
So far - and I have been hammered as well
Scott Fisher wrote:
I get over a 1000 spam a day from
this spammer.
If you don't have a pattern would you mind sending me off list a few of
the ones you do receive from different days? I do not recognize this
gut so I would like to see more of his product.
-Nick
This filter will work for targeting CMDSPACE with a gif attachment.
You might want to
SKIPIFWEIGHT 315
STOPATFIRSTHIT
BODY END NOTCONTAINS Content-Type: image/gif
TESTSFAILED END NOTCONTAINS CMDSPACE
BODY 100 CONTAINS img src=3Dcid:
BODY 100 CONTAINS src=3Dcid:
BODY 100 CONTAINS src=cid:
firewall if I so desire.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris
Anton
Sent: Tuesday, September 19, 2006 1:02 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Spam Spike
Darrell, We are averaging 40 to 50
A large spike hit here Monday. Spool processing lagged about 1.5 hours,
then got worse late in the night to over 9,000 files in spool and a 5-hr
delay. Had to stop SMTP and clear the spool.
I've noticed numerous D/T pairs that appear in \spool and hang there for a
long time (10-15 mins), locked
Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Glenn \
WCNet
Sent: Wednesday, September 20, 2006 3:17 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Spam Spike
A large spike hit here Monday. Spool processing lagged about 1.5 hours,
then got worse
How tricky is it to configure this? Current price I find is $300.
G.Z.
- Original Message -
From: Dave Beckstrom [EMAIL PROTECTED]
To: declude.junkmail@declude.com
Sent: Wednesday, September 20, 2006 1:08 PM
Subject: RE: [Declude.JunkMail] Spam Spike
I run Blackice Server
PROTECTED] On Behalf Of Glenn \
WCNet
Sent: Wednesday, September 20, 2006 10:15 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Spam Spike
How tricky is it to configure this? Current price I find is $300.
G.Z.
- Original Message -
From: Dave Beckstrom [EMAIL PROTECTED
Comment's inline,
Darrell
Chris Anton writes:
1) Has anyone experienced recent spikes like this? How can I reasonably handle
this?
Yes, we have very often see signifigant swings in spam. How to handle it is
a good question. That typically depends on what the spam campaign is. We
: [Declude.JunkMail] Spam Spike
Comment's inline,
Darrell
Chris Anton writes:
1) Has anyone experienced recent spikes like this? How can I reasonably
handle this?
Yes, we have very often see signifigant swings in spam. How to handle it is
a good question. That typically depends on what the spam
Darrell, We are averaging 40 to 50% on the processor. I was just surprised
because in 3 years we haven't seen a spike this large. Most of them are
dictionary style. But since they aren't from the same IP, I don't think the
imail 2006 dictionary feature would help us. Thoughts?
---
This
I say about 25% more spam yesterday than last Monday (9-11)
- Original Message -
From: Chris Anton [EMAIL PROTECTED]
To: declude.junkmail@declude.com
Sent: Tuesday, September 19, 2006 11:31 AM
Subject: [Declude.JunkMail] Spam Spike
Hi All,
We have recently gone from processing
Getting pelted here... Mostly from cinci.rr.com...
Karl Drugge
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Scott Fisher
Sent: Tuesday, September 19, 2006 2:29 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Spam Spike
Chris,
Are the bulk of your users local to the server or gatewayed?
Darrell
---
invURIBL - Stop spam at its source.. SURBL/URIBL integration with Declude.
http://www.invariantsystems.com
Chris Anton writes:
Darrell, We are averaging 40 to 50% on
Hi Darrell, 80% of our users are local, 10% are Gatewayed, 10% are remote. The
85,000 daily are inbound. -Chris
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be
Kyle,
What do the logs say? WHITELIST AUTH? Whitelisted due to a users address
book? Only the logs will say for sure.
Darrell
---
Quickly and easily review false positives with fpReview.
http://www.invariantsystems.com
Kyle Fisher writes:
I am
change the password.
Darin.
- Original Message -
From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Friday, May 26, 2006 9:59 AM
Subject: Re: [Declude.JunkMail] Spam says it was whitelisted
Kyle,
What do the logs say? WHITELIST AUTH? Whitelisted
: 8f41090ecd10
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, May 26, 2006 8:59 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Spam says it was whitelisted
Kyle,
What do the logs say
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Spam says it was whitelisted
Kyle,
What do the logs say? WHITELIST AUTH? Whitelisted due to a
users address book? Only the logs will say for sure.
Darrell
---
Quickly
]
[mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew
Sent: Friday, May 26, 2006 11:28 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Spam says it was whitelisted
And what does the Declude log show if you do a:
Find /I 8f41090ecd10 dec0526.log
Andrew 8
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Spam says it was whitelisted
And what does the Declude log show if you do a:
Find /I 8f41090ecd10 dec0526.log
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kyle
, 2006 12:42 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Spam says it was whitelisted
Well, there you go:
Skipping4 E-mail from [EMAIL PROTECTED]; whitelisted
[EMAIL PROTECTED]].
It appears that you are whitelisting your own domain or username as a
sender
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Spam says it was whitelisted
That's what I am trying to figure out. I have never
whitelisted our domain or any individual account. So if it
is whitelisting now I have a problem somewhere.
Kyle
-Original Message
PROTECTED]] On Behalf Of Colbeck, Andrew
Sent: Friday, May 26, 2006 12:42 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Spam says it was whitelisted
Well, there you go:
Skipping4 E-mail from [EMAIL PROTECTED]; whitelisted
[[EMAIL PROTECTED]].
It appear
Do you whitelist AUTH?
Darin.
- Original Message -
From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Friday, May 26, 2006 1:58 PM
Subject: Re: [Declude.JunkMail] Spam says it was whitelisted
Kyle Fisher writes:
05/26/2006 00:16:57.630
I have noticed more stuff has been getting through. I don't know whether
that represents a general increase or new spammer techniques.
-d
- Original Message -
From: Kevin Bilbee [EMAIL PROTECTED]
To: JunkMail Declude declude.junkmail@declude.com
Sent: Friday, May 19, 2006 1:33 PM
Same here
Rick
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty
Sent: Friday, May 19, 2006 12:01 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Spam
I have noticed more stuff has been getting through. I don't know
On Friday, May 19, 2006, 1:33:06 PM, Kevin wrote:
KB Has anyone else seen an increase of spam since Blue Security wet offline??
KB We have seen an increase and we did not even use the software/service.
We've noted a few bursts today but nothing completely out of the
ordinary.
_M
---
This
Subject: Re: [Declude.JunkMail] Spam
I've been seeing a lot more of that headers-at-the-bottom
stuff lately where
the message gets scanned but no action occurs. A lot of it
doesn't have
broken GIFs, just text.
-d
---
This E-mail came from the Declude.JunkMail mailing list
You might want to look at the NOCRTEST.
Thanks! I'll try it out.
-d
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
Yes, and places like SBL do in fact list the IP's of spam sites for this
very purpose. Unfortunately there is no list dedicated to this
classification of IP's and mixing in spam source IP's with website IP's
is not universally accurate so it has to be scored lower and combo'd
with other
Dave,
One of the tests in invURIBL does exactly that. Resolves the IP address and
checks them against various RBL's. You can even configure additional RBL
checks for the IP against other RBL's.
This is how invURIBL is handled that domain on our server today. (Sorry for
any wrap).
invURIBL checks the body for URLs.
John T
eServices For You
Seek, and ye shall find!
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Dave Beckstrom
Sent: Friday, May 05, 2006 11:31 AM
To: Declude.JunkMail@declude.com
Subject:
, February 27, 2006 10:33 PM
Subject: Re: [Declude.JunkMail] Spam out of 86.* 87.*
You've got a lot of European DUL space in 86.* and 87.*.
interbusiness.it , chello.pl , chello.fr, versanet.de, wanadoo.fr,
ntl.com,
btcentralplus.com.
So anything that target Zombies should help
Hi John,
What is my best bet - jack up
the score a number of points for any mail coming from 86 87? Many of the
messages hardly trip any of the regular tests.
Wouldn't hurt - use blackholes.us and maybe score 40% of your hold
weight? I would say though blocking a /8 is not a good idea.
trip the tag weight.
John
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer
Sent: Tuesday, February 28, 2006 9:22 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Spam out of 86.* 87.*
Hi John,
What is my best bet - jack up
28, 2006 10:20 AM
Subject: RE: [Declude.JunkMail] Spam out of 86.* 87.*
Thanks, will look at blackholes.us.
My real problem is time. I've written a program and spreadsheet that
extracts the domains and IP's of delivered messages and shows the unique
IP's and how many messages came from them
You've got a lot of European DUL space in 86.* and 87.*.
interbusiness.it , chello.pl , chello.fr, versanet.de, wanadoo.fr, ntl.com,
btcentralplus.com.
So anything that target Zombies should help.
- Original Message -
From: John Carter [EMAIL PROTECTED]
To:
Something like this, which was received from
X-Note: Sent with HELO [declude.com] from Reverse DNS [mail.declude.com]
From: Mireille Wood
[EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Gteat holidays?
MIME-Version: 1.0
Date: Fri, 13 Jan 2006 06:43:27 +0700
Content-Type: text/html;
Yes, I did
Harry Vanderzand
inTown Internet Computer Services
519-741-1222
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty
Sent: Friday, January 13, 2006 8:48 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Spam
Ummm... Did anybody else get a piece of spam this morning with subject
SPAMSPCE: that seems to have been relayed through Declude.com?
Yes.
Markus
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
9:04 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Spam leak?
Ummm... Did anybody else get a piece of spam this morning with subject
SPAMSPCE: that seems to have been relayed through Declude.com?
Yes.
Markus
---
[This E-mail was scanned for viruses by Declude EVA
Yep I did also.
Stu
At 08:47 AM 1/13/2006 -0500, you wrote:
Ummm... Did anybody else get a piece of spam this morning with subject
SPAMSPCE: that seems to have been relayed through Declude.com?
-Dave Doherty
Skywaves, Inc.
---
[This E-mail was scanned for viruses by Declude EVA
Ummm... Did anybody else get a piece of spam this morning with subject
SPAMSPCE: that seems to have been relayed through Declude.com?
Yes, we did.
--
Kim W. Premuda
FastWave Internet Services
San Diego, CA
--
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This
Yes I recived it also.
Jeff Kratka
On 1/13/2006, Dave Doherty [EMAIL PROTECTED] wrote:
Ummm... Did anybody else get a piece of spam this morning with subject
SPAMSPCE: that seems to have been relayed through Declude.com?
-Dave Doherty
Skywaves, Inc.
---
[This E-mail was scanned for
Just saw the CBL post on this.
Thanks
- Original Message -
From:
Todd
To: Declude.JunkMail@declude.com
Sent: Tuesday, December 06, 2005 2:04
PM
Subject: [Declude.JunkMail] Spam with gif
getting through
Quite a bit of spam has been getting though
A couple of suggestions were posted under the
subjects
CBL:Fw: news
within the last hour
- Original Message -
From:
Todd
To: Declude.JunkMail@declude.com
Sent: Tuesday, December 06, 2005 2:04
PM
Subject: [Declude.JunkMail] Spam with gif
getting through
Hi Todd,
Todd wrote:
Quite a bit of spam has been getting
though lately. IPR tests are not stopping it and it only contains gif
as the message body. I am including one of gifs. Any way to stop this?
I use three filters - 2 have to kick off for the third to fire which
Hayer
To: Declude.JunkMail@declude.com
Sent: Tuesday, December 06, 2005 3:34
PM
Subject: Re: [Declude.JunkMail] Spam with
gif getting through
Hi Todd,Todd wrote:
Quite a bit of spam has been getting though
lately. IPR tests are not stopping
Any suggestions on a similar
replacement?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])Sent: Saturday, August 13, 2005 9:11
AMTo: Declude.JunkMail@declude.comSubject: Re:
[Declude.JunkMail] Spam URI Realtime Blocklist - some
, MRTG Integration, and Log
Parsers.
- Original Message -
From:
Mark E.
Smith
To: Declude.JunkMail@declude.com
Sent: Sunday, August 14, 2005 11:05
AM
Subject: RE: [Declude.JunkMail] Spam URI
Realtime Blocklist - some mirror sites out?
Any suggestions
Mark,
They (SURBL) stopped updating that file in
January.
http://lists.surbl.org/pipermail/announce/2005-January/000113.html
The sites that still contain the file is most
likely a very old file.
Darrell
---Check out http://www.invariantsystems.com
Title: Message
Here's an example
~
@paypal.com
.paypal.citibank.com.ssmb.comfleet.com.bkb.comwellsfargo.com.norwest.com.ebay.com
.emailebay.com@ebay.com .ebay.com~
incomming emails has to
match mailfrom and revdns
The optional second column
is an
Richard Farris wrote:
Is there a box I can put in front of my Imail server that will help take
some of the load off of the spam filtering that Declude is doing
IMGate. http://imgate.meiway.com/
I'm seeing a reduction in rejected messages with no reduction in
delivered mail.
This
Richard Farris wrote:
Is there a box I can put in front of
my Imail server that will help take some of the load off of the spam
filtering that Declude is doing
Hi Richard -
One method is to put ORF in front of your IMail box and via its
recipients blacklist feature refuse
@declude.com
Subject: Re: [Declude.JunkMail]
Spam box
Richard Farris wrote:
Is there a box I can put in front of my Imail server
that will help take some of the load off of the spam filtering that Declude is
doing
Hi Richard -
One method is to put ORF in front of your IMail box and via its
Goran Jovanovic
The LAN Shoppe
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On
Behalf Of Nick Hayer
Sent: Thursday, August
04, 2005
1:43 PM
To: Declude.JunkMail@declude.com
Subject: Re:
[Declude.JunkMail]
Spam box
Richard Farris wrote
- Original Message -
From:
Goran
Jovanovic
To: Declude.JunkMail@declude.com
Sent: Thursday, August 04, 2005 2:10
PM
Subject: RE: [Declude.JunkMail] Spam
box
I have a question
about these boxes that go in front of Declude, be they IMGATE or ORF
the
equivalent address list is for their internal mail. I've no suggestion for
that.
Andrew 8)
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill
LandrySent: Thursday, August 04, 2005 2:27 PMTo:
Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Spam
Thanx
Goran Jovanovic
The LAN Shoppe
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On
Behalf Of Nick Hayer
Sent: Thursday, August
04, 2005
1:43 PM
To: Declude.JunkMail@declude.com
Subject: Re:
[Declude.JunkMail]
Spam box
Richard Farris wrote:
Is t
solution - depending on the circumstance.
-Nick
Andrew 8)
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Bill
Landry
Sent: Thursday, August 04, 2005 2:27 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Spam box
next build of Declude Junkmail 2.x that will co-exist happily with
IMail 8.2x
Andrew 8)
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
MattSent: Thursday, August 04, 2005 2:58 PMTo:
Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Spam
box
Goran a
ubject: Re:
[Declude.JunkMail]
Spam box
Richard Farris wrote:
Is there a box I can put
in front of my Imail server
that will help take some of the load off of the spam filtering that
Declude is
doing
Hi Richard -
One method is to put ORF in front of your
:
[Declude.JunkMail]
Spam box
- Original Message -
From: Goran
Jovanovic
To: Declude.JunkMail@declude.com
Sent: Thursday,
August 04, 2005 2:10 PM
Subject: RE:
[Declude.JunkMail] Spam box
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On
Behalf Of Nick Hayer
Sent: Thursday, August
04, 2005
6:10 PM
To: Declude.JunkMail@declude.com
Subject: Re:
[Declude.JunkMail]
Spam box
Hi Andrew -
Colbeck, Andrew wrote:
Also,
I'd be a little skeptical
- Original Message -
From:
Matt
To: Declude.JunkMail@declude.com
Sent: Thursday, August 04, 2005 3:18
PM
Subject: Re: [Declude.JunkMail] Spam
box
One other note to add to this.ORF plugs-into MS SMTP. I
have unfortunately found that MS SMTP doesn't appear
attachments.
Matt
Bill Landry wrote:
- Original Message -
From:
Matt
To:
Declude.JunkMail@declude.com
Sent:
Thursday, August 04, 2005 3:18 PM
Subject:
Re: [Declude.JunkMail] Spam box
One other note to add to this.
ORF plugs
1 - 100 of 329 matches
Mail list logo
