Re: [Declude.JunkMail] logfile naming

2004-07-01 Thread Bonno Bloksma
Hi, Get the UnixTools for Windows http://unxutils.sourceforge.net/ and use all the Unix commands you've always wanted in a Windows environment. ;-) Met vriendelijke groet, Bonno Bloksma - Original Message - From: Roderick A. Anderson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent:

[Declude.JunkMail] Latest Versions question.

2004-07-01 Thread Chris Patterson
I am currently running declude v1.76 and want to upgrade. I only see v1.75 and beta v1.79 available, anyone know if there is a better full blown version of declude available. I have updated my global.cfg $default$.junkmail to add some additional ip4r tests, cmdspace and WHITELIST

[Declude.JunkMail] Fake IP Test

2004-07-01 Thread Todd
We are seeing more spam getting throughtriggering very few test. We have a secondary spam system and it has a test called RCVD_FAKE_IP that is rated at 80% ofits hold weight. Does Declude have something similar to this that I amnot familiar with it? Here is the header from an email that

[Declude.JunkMail] A happy conclusion to hours spent setting up SPF

2004-07-01 Thread Sharyn Schmidt
Thanks for everyone's help yesterday and the day before with all my SPF questions and issues. The bottom line is, the email I have attached, failed the tests it was supposed to fail, including the spf test, as this particular email did NOT come from my mail server or my domain. Matter of fact,

RE: [Declude.JunkMail] Latest Versions question.

2004-07-01 Thread John Tolmachoff \(Lists\)
The web site shows the correct versions available. To see what was added for each beta version, read the release notes linked at the bottom of the manual. Declude is trying hard to get a new release version out, hopefully soon. John Tolmachoff Engineer/Consultant/Owner eServices

Re: [Declude.JunkMail] logfile naming

2004-07-01 Thread Roderick A. Anderson
Yeah a real pain. My concern is mostly last July's logs getting written over or blended with this years. If they are uniquely named then no issue. A dribble of the previous days data in the next or previous days data isn't an issue for me. Thanks for the thoughts. Rod -- Roderick A.

Re: [Declude.JunkMail] logfile naming

2004-07-01 Thread Roderick A. Anderson
Thanks. I've been looking at them but since I have perl on the systems most everything I need it there. Bonno Bloksma wrote: Hi, Get the UnixTools for Windows http://unxutils.sourceforge.net/ and use all the Unix commands you've always wanted in a Windows environment. ;-) Met vriendelijke

RE: [Declude.JunkMail] Latest Versions question.

2004-07-01 Thread Chris Patterson
Thanks for the reply John, I guess I must have a beta version as well, anyone know if CMDSPACE and/or WHITELIST AUTH will work with 1.76? C:\IMaildeclude -diag Declude 1.76b (C) Copyright 2000-2003 Computerized Horizons. All Rights Reserve d. Diagnostics ON (Declude v1.76b).

RE: [Declude.JunkMail] Latest Versions question.

2004-07-01 Thread Scott Fisher
From the release notes: cmdspace in the 1.78 Whitelist auth in the 1.76 (IMail v8 and later). Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 07/01/04 12:22PM Thanks for the reply John, I guess I must have a beta version as well, anyone know if CMDSPACE and/or

RE: [Declude.JunkMail] Fake IP Test

2004-07-01 Thread Andy Schmidt
Title: Message Hi Todd: It's this line that the other test is checking: Received: from 65.16.167.134 ([211.249.122.134]) It discovers that the other side was using YOUR servers IP address in its own HELO string. I'm pretty certain that the "HELOVALID" test in declude will catch that.

RE: [Declude.JunkMail] Fake IP Test

2004-07-01 Thread Kevin Bilbee
HELO 4STARTSWITH [ You do not want to apply weight if the HELO string is an IP address the helo string being in the format of [xxx.xxx.xxx.xxx] is a vaild helo as long as it is the ip address of the sending server. HELO 8STARTSWITH 65.16.167. I would definitly suggest doing

Re: [Declude.JunkMail] Fake IP Test

2004-07-01 Thread Rick Davidson
I hold mail if the HELO matches my servers IP address, is there a situation I am overlooking where this would be a bad idea? Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Kevin Bilbee [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday,

Re: [Declude.JunkMail] Fake IP Test

2004-07-01 Thread Matt
I'm with you 100%. Sorry for the confusion, that was actually Andy's filter line and I didn't mean to say it was wrong, just not how I approach it. There is software out there for sending bulk-mail, primarily from PC's I believe and some server scripts that will bracket the IP as the HELO. I