[Declude.JunkMail] OT: How to define spam and ham

2004-12-20 Thread Matt
This was the subject of a recent off-list discussion between myself and Pete where there was a perception that my definition of spam was too conservative or rather my definition of ham was too liberal. While I readily admit that in practice, I do personally wish to block many fewer things that

[Declude.JunkMail] Combo filter not working..

2004-12-20 Thread Kami Razvan
Hi; I have one filter that is killing me and it just does not make sense for it not to work. Here is an example of a message that should have triggered it but it has not. Log file === 12/20/2004 04:52:48 Qa0e1026302703444 NOT bypassing whitelisting of E-mail with weight =25 (34)

Re: [Declude.JunkMail] Combo filter not working..

2004-12-20 Thread Matt
That should work. Would you please include your Global.cfg lines for the involved tests just to see if there is an oversight there. I also noted that following the first TESTSFAILED entry, there is a tab character following [SPF.FAIL]. If that tab exists within your filter file, that would

RE: [Declude.JunkMail] Combo filter not working..

2004-12-20 Thread Kami Razvan
WOW... Matt you are a genius.. I have looked at that filter for over a week and did not even think of the tab.. YES there was a tab and that should explain it. Now lets see if it works.. Thanks again for seeing what could not be seen.. Regards, Kami -Original Message- From: [EMAIL

Re: [Declude.JunkMail] OT: How to define spam and ham

2004-12-20 Thread Bonno Bloksma
Matt, Although I agree with your reasoning, my problem would then be how do I determine who belongs to what catagorie? Overhere I see stuff getting caught which is definitely a newsletter of some sorts but I don't know whether the user requested it or not. Nor whether the user might

RE: [Declude.JunkMail] OT: How to define spam and ham

2004-12-20 Thread Markus Gufler
I'm close to finish a reporting tool that will send out a daily notification to the local recipient if new messages was hold on the mailserver with a final weight slightly above the hold weight (up to now we review this messages regulary and can find an average of one false positive each

[Declude.JunkMail] Whitelisting Issue

2004-12-20 Thread Chris Patterson
Hi all, I am having trouble with an issue where spam is getting by showing whitelisted in the header. Neither the domain or e-mail address that it is coming from is whitelisted in the global config, nor are they showing as Auth-user. However, one of the recipients (local user) is Whitelisted;

RE: [Declude.JunkMail] Whitelisting Issue

2004-12-20 Thread Kami Razvan
Chris: We were having a similar issue- Scott suggested the following: EMERGENCYBYPASS bypasswhitelist 40 2 0 0 So now if the weight passes 40 the whitelist will not work if 2 more people are in the list. You can adjust the settings per your environment. Regards, Kami

RE: [Declude.JunkMail] Whitelisting Issue

2004-12-20 Thread John Tolmachoff \(Lists\)
That is why whitelisting from or to an e-mail address is very touchy and dangerous. Why is anything for that user configured to be whitelisted? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL

RE: [Declude.JunkMail] Whitelisting Issue

2004-12-20 Thread Chris Patterson
Very Nice, Should I add anything to the default.junkmail file? EMERGENCYBYPASS WARN ?? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems -Original Message- From: Kami Razvan [mailto:[EMAIL PROTECTED] Sent: Monday, December 20, 2004 5:57 PM To:

RE: [Declude.JunkMail] Whitelisting Issue

2004-12-20 Thread Chris Patterson
He likes his spam. I am wide open to better ideas, other than teaching spammers how to be better spammers. Thanks, Chris Patterson, CCNA Network Engineer -Original Message- From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] Sent: Monday, December 20, 2004 6:09 PM To:

Re: [Declude.JunkMail] Whitelisting Issue

2004-12-20 Thread Roderick A. Anderson
Chris Patterson wrote: Hi all, I am having trouble with an issue where spam is getting by showing whitelisted in the header. Neither the domain or e-mail address that it is coming from is whitelisted in the global config, nor are they showing as Auth-user. However, one of the

RE: [Declude.JunkMail] Whitelisting Issue

2004-12-20 Thread Colbeck, Andrew
Aside from EMERGENCYBYPASS there is another compromise with JunkMail Pro: 1) Take out the WHITELIST TO statement 2) Add ALLRECIPS -100 IS [EMAIL PROTECTED] [EMAIL PROTECTED] Assuming that you have a weighted system and no tests that have HOLD or DELETE that this guy would want to see, this will

Re: [Declude.JunkMail] OT: How to define spam and ham

2004-12-20 Thread Matt
Bonno, Unfortunately 'knowing' is rarely the result of first hand experience in this case, at least without a good deal of focus and research over time. Personally, I have found that E-mail coming from the the better bulk-mail providers rarely breaks my rules. Generally if you have heard of

Re: [Declude.JunkMail] OT: How to define spam and ham

2004-12-20 Thread Matt
Markus, I have found that my users miss about 99% of the false positives using a system where I set up review accounts in Web-mail for each domain and only capture less than 2% of their blocked volume for them to review. Reprocessing and reporting the message is done with a single click using

RE: [Declude.JunkMail] Whitelisting Issue

2004-12-20 Thread John Tolmachoff \(Lists\)
If you have the PRO version, you can set up per domain and per user filtering, and configure no actions for that user. That way, scanning is done properly, nothing is white listed, and everything to that user is delivered. This is the way I do it for any one wanting all their messages, even spam.