[Declude.JunkMail] How does a reverse lookup work from a mail server?
When a message arrives at my mail server, how does the server perform the reverse lookup? Philip Butler Internal Systems Engineer Region VI ESC phone 936.435.2503 fax 936.295.1447 [EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] How does a reverse lookup work from amail server?
When a message arrives at my mail server, how does the server perform the reverse lookup? It just does. :) You can go to http://www.DNSstuff.com/info/revdns.htm for an overview of how reverse DNS lookups work. Or, you can use the Reverse DNS Lookup at http://wwwDNSstuff.com to check to see if the reverse DNS entry exists for a given IP. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] How does a reverse lookup work from a mail server?
Scott, Could you put that in layman's terms. ;)) Jim Rooth KLOTRON,INC. Office: 817.654.3018.103 Home: 972.606.6341 Mobile: 214.244.0979 [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Wednesday, October 16, 2002 11:42 To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] How does a reverse lookup work from a mail server? When a message arrives at my mail server, how does the server perform the reverse lookup? It just does. :) You can go to http://www.DNSstuff.com/info/revdns.htm for an overview of how reverse DNS lookups work. Or, you can use the Reverse DNS Lookup at http://wwwDNSstuff.com to check to see if the reverse DNS entry exists for a given IP. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] How does a reverse lookup work from a mail server?
When a message arrives at my mail server, how does the server perform the reverse lookup? It just does. :) LOL. Scott, me thinks it is time for a rest break for you. John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] How does a reverse lookup work from amail server?
When a message arrives at my mail server, how does the server perform the reverse lookup? It just does. :) LOL. Scott, me thinks it is time for a rest break for you. Hey wait a minute -- I know you -- you're that guy who keeps talking about this mythical thing called a week end, where people can just take a couple days off from work every single week, and find things to do that aren't work! If it sounds too good to be true G -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] How does a reverse lookup work from a mail server?
I get email that talks about situations like that all the time, describing mythical joys and riches beyond belief. I call it spam, and I'm looking for something that helps me control it. Do you have any suggestions? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Wednesday, 16 October 2002 1:10 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] How does a reverse lookup work from a mail server? When a message arrives at my mail server, how does the server perform the reverse lookup? It just does. :) LOL. Scott, me thinks it is time for a rest break for you. Hey wait a minute -- I know you -- you're that guy who keeps talking about this mythical thing called a week end, where people can just take a couple days off from work every single week, and find things to do that aren't work! If it sounds too good to be true G -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Way OT now!
Some VERY wise sage once opined, I have given up the search for truth and am now willing to settle for a pleasant fantasy. Doug --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Listed in Spam databases
I have found that I am listed on both Fiveteningnore and Postfixgate. I
have attempted to contact both locations several time and even tried to
contact Spamhaus (listed under Fiveteningnore) but have not received any
answers back. Fiveteningnore shows the listing because my backbone (Sprint)
is there but I have no idea why I am listed on the other.
Does anyone have any other suggestions on how to contact these people and
get removed.
Did you send E-mail to the special address at the FIVETEN site? There is
one E-mail address ('blacklist@', I think) that you can send to where they
will not block your mail.
As for Postfixgate, well... I think we're listed in there too. Needless to
say, I don't really care too much.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter Help
I included the rules below, but they never seem to trigger: BODY 10 CONTAINS http://1 BODY 10 CONTAINS http://2 BODY 10 CONTAINS http://3 BODY 10 CONTAINS http://4 BODY 10 CONTAINS http://5 BODY 10 CONTAINS http://6 BODY 10 CONTAINS http://7 BODY 10 CONTAINS http://8 BODY 10 CONTAINS http://9 BODY 10 CONTAINS http://0 Are you sure that the filter is set up properly (are other filters working properly)? That's the most likely problem. The other possibility would be if the E-mail is base64 encoded, in which case filtering won't work (but the E-mail will fail the BASE64 test). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] How does a reverse lookup work from a mail server?
A collection of comedians... :) Thanks for the reference scott. Philip Butler Internal Systems Engineer Region VI ESC phone 936.435.2503 fax 936.295.1447 [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Wednesday, October 16, 2002 12:10 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] How does a reverse lookup work from a mail server? When a message arrives at my mail server, how does the server perform the reverse lookup? It just does. :) LOL. Scott, me thinks it is time for a rest break for you. Hey wait a minute -- I know you -- you're that guy who keeps talking about this mythical thing called a week end, where people can just take a couple days off from work every single week, and find things to do that aren't work! If it sounds too good to be true G -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter Help
An Asside - Watch out for false positives with this one. We tried a rule that captured all numeric-only web links as they are a favorite for porn spammers and mortgage folks. Unfortunately we discovered that a number of legitimate news services also do this sometimes so we were forced to begin entering specific numbered web links. Hope this helps. _M | -Original Message- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]] On Behalf Of Karen Oland | Sent: Wednesday, October 16, 2002 2:24 PM | To: [EMAIL PROTECTED] | Subject: [Declude.JunkMail] Filter Help | | | Is there any way to check for references to web sites that | only have domain names? | | I included the rules below, but they never seem to trigger: | | BODY 10 CONTAINS http://1 | BODY 10 CONTAINS http://2 | BODY 10 CONTAINS http://3 | BODY 10 CONTAINS http://4 | BODY 10 CONTAINS http://5 | BODY 10 CONTAINS http://6 | BODY 10 CONTAINS http://7 | BODY 10 CONTAINS http://8 | BODY 10 CONTAINS http://9 | BODY 10 CONTAINS http://0 | | I don't want to block using IMAIL, as we have a vendor that | sends us email that has a web site with a real name that | starts with a 101. However, we do want to have enough | weight to this type of a rule, that any other violation will | result in the message being sorted into our spam box. | | Karen Oland | | --- | [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter Help
The test appears to be set up correctly. I checked my declude log - there are entries for the spamtext.txt file (which contains the below) triggering on line 12 (one line below this particular block) and entries for the base64 test being triggered. I pulled a random message out of my delete box that should have been flagged and checked the headers. This is what I got: Received: from mx3.finehost.net [66.205.220.31] by staffingtech.com (SMTPD32-7.13) id AB80F410120; Wed, 16 Oct 2002 01:39:12 -0400 X-Priority: 3 Return-Path: [EMAIL PROTECTED] From: Cash Online [EMAIL PROTECTED] To: [EMAIL PROTECTED] Received: from mx3.finehost.net by 2ER93A05EK4L1M.mx3.finehost.net with SMTP for [EMAIL PROTECTED]; Tue, 15 Oct 2002 13:40:42 -0500 Date: Tue, 15 Oct 2002 13:40:42 -0500 Subject: Get up to $500 today! Message-Id: 5CU72GH.BCTT9X79.Cash Online [EMAIL PROTECTED] X-Mailer: YDH_optin_v1.2 X-Encoding: MIME MIME-Version: 1.0 X-MSMail-Priority: Normal Content-Type: multipart/alternative; boundary==_NextPart_24_30472442 X-RBL-Warning: SPAMCOP: Blocked - see http://spamcop.net/bl.shtml?66.205.220.31 X-Declude-Sender: [EMAIL PROTECTED] [66.205.220.31] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SPAMCOP X-RCPT-TO: [EMAIL PROTECTED] Status: U X-UIDL: 300488074 So, the message does not appear to be base64. It does contain some html code, but in the clear portion at the bottom, there is the usual unsubscribe junk: While visiting a partner website, you opted-in to receive special online offers. To end your membership, click reply and send this email or click http://66.163.246.29/unsubscribe.php?[EMAIL PROTECTED] This is the same as what appears if you open the message (which also then displays their ad in living color). This is the entry in the global.cfg: SPAMTEXTfilter c:\imail\declude\spamtext.txt x 0 0 and the entry for the above msg and one that did fail the spamtext rule in the declog: 10/16/2002 01:39:16 Qfb800f410120c136 Msg failed SPAMCOP (Blocked - see http://spamcop.net/bl.shtml?66.205.220.31). 10/16/2002 14:27:18 Qaf8311c10120f2ab Msg failed SPAMTEXT (Message failed SPAMTEXT test (12)). I also cut and pasted the raw html sourc into a program to count characters -- a total of 2438, including all spaces. Karen -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Wednesday, October 16, 2002 2:26 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Filter Help I included the rules below, but they never seem to trigger: BODY 10 CONTAINS http://1 BODY 10 CONTAINS http://2 BODY 10 CONTAINS http://3 BODY 10 CONTAINS http://4 BODY 10 CONTAINS http://5 BODY 10 CONTAINS http://6 BODY 10 CONTAINS http://7 BODY 10 CONTAINS http://8 BODY 10 CONTAINS http://9 BODY 10 CONTAINS http://0 Are you sure that the filter is set up properly (are other filters working properly)? That's the most likely problem. The other possibility would be if the E-mail is base64 encoded, in which case filtering won't work (but the E-mail will fail the BASE64 test). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter Help
Yes, we know. that is why we wanted to use a weighted rule in Declude, rather than an absolute rule in IMAIL. The problem with specific addresses (and we have a few (ok, a lot) of those, is that the spammers simply move every so often, but we keep blocking the old IP addresses forever. And they can get new addresses faster than we can add them to the list. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Madscientist Sent: Wednesday, October 16, 2002 2:55 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Filter Help An Asside - Watch out for false positives with this one. We tried a rule that captured all numeric-only web links as they are a favorite for porn spammers and mortgage folks. Unfortunately we discovered that a number of legitimate news services also do this sometimes so we were forced to begin entering specific numbered web links. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter Help
Am I understanding correctly from this ... Karen Oland wrote: While visiting a partner website, you opted-in to receive special online offers. To end your membership, click reply and send this email or click http://66.163.246.29/unsubscribe.php?[EMAIL PROTECTED] This is the same as what appears if you open the message (which also then displays their ad in living color). This is the entry in the global.cfg: SPAMTEXTfilter c:\imail\declude\spamtext.txt x 0 0 and the entry for the above msg and one that did fail the spamtext rule in the declog: 10/16/2002 01:39:16 Qfb800f410120c136 Msg failed SPAMCOP (Blocked - see http://spamcop.net/bl.shtml?66.205.220.31). 10/16/2002 14:27:18 Qaf8311c10120f2ab Msg failed SPAMTEXT (Message failed SPAMTEXT test (12)). ... that I could do a filter to block all messages using that opt-in statement by: 1. putting While visiting a partner website, you opted-in to receive special online offers. in a text file called optin.txt 2. copying optin.txt to HARDDISK:\IMAIL\DECLUDE\OPTIN.TXT 3. Modifying global.cfg to include the following line: OPTIN filter harddisk:\imail\declude\optin.txt x V 0 where V = some value for my weighting system Is that correct? I really like the idea of this type of filter vs. having to be in the first x number of bytes with IMail's filter. This can be found anywhere in the message. Assuming all of that to be true, my system holds anything with a weight greater than 15 ... I see a lot of things go through that have 11's and 12's, so my first thought is to try 5 for the weight on this test. Good idea? Bad idea? Thanks in advance for your input, John --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] declude errors?
we have noticed over the last day or 2 that some messages are getting marked with our WEIGHT 10 Header mark of [SPAM ??] even though the message didn;t fail any tests - the header says it failed WEIGHT 10, but WEIGHT 10 is not a test is it? just a tier level of sorts, correct? Anyone have any idea what could be causing this? We are battling the typical (at least what I feel is typical) spool sluggish-nish of IMail during peak times of the day, but that's for another list... here's the headers of one of those emails.(email of sender has been changed to protect the innocent) Message-ID: 005601c2752a$aba6b260$8d82d043@desktop From: Tori B. [EMAIL PROTECTED] To: Randy Armbrecht [EMAIL PROTECTED] Subject: [SPAM ??]sample page Date: Wed, 16 Oct 2002 11:42:43 -0400 Organization: Domain2, Inc. MIME-Version: 1.0 Content-Type: multipart/alternative; boundary==_NextPart_000_0053_01C27509.23CBA7E0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600. X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600. X-Declude-Sender: [EMAIL PROTECTED] [207.217.120.122] X-Note: Scanned by Declude JunkMail sent from pintail.mail.pas.earthlink.net ([207.217.120.122]). X-Spam-Tests-Failed: WEIGHT10 sent from pintail.mail.pas.earthlink.net ([207.217.120.122]). X-RCPT-TO: [EMAIL PROTECTED] Status: U X-UIDL: 327984042 SYS Log shows: 10:16 11:44 SMTPD(096300D8) [207.217.120.122] MAIL FROM:[EMAIL PROTECTED] 10:16 11:44 SMTPD(096300D8) [207.217.120.122] RCPT TO:[EMAIL PROTECTED] 10:16 11:44 SMTPD(096300D8) [207.217.120.122] C:\IMAIL\spool\D8963096300d8b474.SMD 3196 10:16 11:44 SMTP-(0CB4) processing C:\IMAIL\spool\Q8963006f00f0b36a.SMD 10:16 11:44 SMTP-(0CB4) finished C:\IMAIL\spool\Q8963006f00f0b36a.SMD status=1 Declude log shows: 10/16/2002 11:44:41 Q8963096300d8b474 Msg failed WEIGHT10 (Weight of 0 reaches or exceeds the limit of 0.) Any thoughts? Thanks! Sincerely, Randy Armbrecht Global Web Solutions®, Inc. 804-346-5300 x102 877-800-GLOBAL (4562) x102 - Original Message - From: John Tolmachoff [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 16, 2002 1:26 PM Subject: RE: [Declude.JunkMail] Way OT now! I get email that talks about situations like that all the time, describing mythical joys and riches beyond belief. I call it spam, and I'm looking for something that helps me control it. Do you have any suggestions? Now see what I started. ;) Sheesh. John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [Scanned for viruses on GlobalWeb.net's system using Declude/F-Prot AV] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude errors?
we have noticed over the last day or 2 that some messages are getting marked with our WEIGHT 10 Header mark of [SPAM ??] even though the message didn;t fail any tests - the header says it failed WEIGHT 10, but WEIGHT 10 is not a test is it? just a tier level of sorts, correct? WEIGHT10 is a pseudo test -- Declude JunkMail treats it as if it were a test, but since it relies on the results of other tests, it isn't really a test by itself. Declude log shows: 10/16/2002 11:44:41 Q8963096300d8b474 Msg failed WEIGHT10 (Weight of 0 reaches or exceeds the limit of 0.) What else does the Declude JunkMail log file show for this E-mail (the other lines with 8963096300d8b474 in them)? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter Help
I also cut and pasted the raw html sourc into a program to count characters -- a total of 2438, including all spaces. Did you check the raw HTML source to see if it had http://6; in it? Are there any spaces after the http://6; in the c:\imail\declude\spamtext.txt file (which would require the space(s) in the E-mail)? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude errors?
that is the puzzling part - that is the only line shown in declude logs. Sincerely, Randy Armbrecht Global Web Solutions®, Inc. 804-346-5300 x102 877-800-GLOBAL (4562) x102 - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 16, 2002 3:59 PM Subject: Re: [Declude.JunkMail] declude errors? we have noticed over the last day or 2 that some messages are getting marked with our WEIGHT 10 Header mark of [SPAM ??] even though the message didn;t fail any tests - the header says it failed WEIGHT 10, but WEIGHT 10 is not a test is it? just a tier level of sorts, correct? WEIGHT10 is a pseudo test -- Declude JunkMail treats it as if it were a test, but since it relies on the results of other tests, it isn't really a test by itself. Declude log shows: 10/16/2002 11:44:41 Q8963096300d8b474 Msg failed WEIGHT10 (Weight of 0 reaches or exceeds the limit of 0.) What else does the Declude JunkMail log file show for this E-mail (the other lines with 8963096300d8b474 in them)? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [Scanned for viruses on GlobalWeb.net's system using Declude/F-Prot AV] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude errors?
that is the puzzling part - that is the only line shown in declude logs. In that case, I'm guessing that the WEIGHT10 test isn't set up correctly (something was changed from the default). If you E-mail me your \IMail\Declude\global.cfg file, I should be able to figure out what the problem is. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Listed in Spam databases
Hi Scott,
Yes I did send to [EMAIL PROTECTED] 2 different times. it just
becomes annoying that you can be listed without being notified.
Jeff
*
TymeWyse Internet
P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417
tel/fax: (541) 839-6027 - [EMAIL PROTECTED]
*
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Wednesday, October 16, 2002 10:38 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Listed in Spam databases
I have found that I am listed on both Fiveteningnore and Postfixgate. I
have attempted to contact both locations several time and even tried to
contact Spamhaus (listed under Fiveteningnore) but have not received any
answers back. Fiveteningnore shows the listing because my backbone (Sprint)
is there but I have no idea why I am listed on the other.
Does anyone have any other suggestions on how to contact these people and
get removed.
Did you send E-mail to the special address at the FIVETEN site? There is
one E-mail address ('blacklist@', I think) that you can send to where they
will not block your mail.
As for Postfixgate, well... I think we're listed in there too. Needless to
say, I don't really care too much.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter Help
ARRGGHHH spaces after the 6!!! and the same on all but one of the rules. All found and fixed (and several more rules later on with spaces. (but, yes, there was an http://6 in the raw source). Thanks for the help, Karen -Original Message- From:R. Scott Perry I also cut and pasted the raw html sourc into a program to count characters -- a total of 2438, including all spaces. Did you check the raw HTML source to see if it had http://6; in it? Are there any spaces after the http://6; in the c:\imail\declude\spamtext.txt file (which would require the space(s) in the E-mail)? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter Help
Also, filters only work with the Pro version of Declude, I believe. -Original Message- From: R. Scott Perry ... that I could do a filter to block all messages using that opt-in statement by: 1. putting While visiting a partner website, you opted-in to receive special online offers. in a text file called optin.txt It would need to be set up as a filter, using a line such as BODY 10 CONTAINS While visiting a partner website, you opted-in to receive special online offers., rather than just the text by itself. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] More fun with logs
What is the interpretation of these lines in my dec1016.log file? 10/16/2002 16:38:28 Qce29136 R1 Message OK 10/16/2002 16:38:28 Qce29136 R2 Message OK 10/16/2002 16:38:28 Qce29136 R3 Message OK 10/16/2002 16:38:28 Qce29136 R4 Message OK 10/16/2002 16:38:28 Qce29136 R5 Message OK 10/16/2002 16:38:28 Qce29136 R6 Message OK 10/16/2002 16:38:28 Qce29136 L7 Message OK They only show up sporadically. I'm using a LOGLEVEL MID setting. I know I've read the answer before and I can't seem to find the right search term to unearth the answer in the archives. -- John Shacklett www.continentaloffice.com [EMAIL PROTECTED] [EMAIL PROTECTED] I'll keep it short and sweet. Family. Religion. Friendship. These are the three demons you must slay if you wish to succeed in business. - Charles Montgomery Burns --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] More fun with logs
What is the interpretation of these lines in my dec1016.log file? 10/16/2002 16:38:28 Qce29136 R1 Message OK 10/16/2002 16:38:28 Qce29136 R2 Message OK 10/16/2002 16:38:28 Qce29136 R3 Message OK 10/16/2002 16:38:28 Qce29136 R4 Message OK 10/16/2002 16:38:28 Qce29136 R5 Message OK 10/16/2002 16:38:28 Qce29136 R6 Message OK 10/16/2002 16:38:28 Qce29136 L7 Message OK The Message OK log file entries occur when an E-mail doesn't fail any spam tests. The R refers to a remote recipient (outgoing E-mail), the L refers to a local recipient (incoming E-mail), and the number is the recipient number (in this case there were 7 recipients). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] send headers
Hi, When I put an XOUTHEADER in my global.cfg file it won't be put in my email when I use the imail webmail to send it. (Yes it works when I use my imail server as smtp server in outlook) Emiel. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] send headers
When I put an XOUTHEADER in my global.cfg file it won't be put in my email when I use the imail webmail to send it. (Yes it works when I use my imail server as smtp server in outlook) That is correct -- IMail usually sends web messaging E-mail directly to IMail1.exe, bypassing Declude. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Customizing filters
I'm stumpted... How can I apply a weight system to the filter list? I am trying to create a word filter that will flag out Subject: Monday's Motivation from a certain user. Yet, be okay from another user using that subject. I am just testing the word monday's in the subject. Total weight=4. It rejects because of the Filters HOLD in $default.junkmail. Good... Now i remove FILTERS HOLD, and everything passes.. How can I apply a weight system to the filter list? Thanks in advance... Eddie :) == Filter.txt SUBJECT 3 CONTAINS Monday's SUBJECT 3 CONTAINS Motivation MAILFROM5 IS [EMAIL PROTECTED] edited == Global.cfg FILTERS filter D:\IMail\Declude\filter.txt X1 0 WEIGHT10 weight xx 10 0 WEIGHT20 weight xx 20 0 CATCHALLMAILS catchallmails xx 0 0 == $default$.junkmail FILTERS HOLD WEIGHT10 HOLD WEIGHT20 HOLD == Declude log 10/16/2002 15:37:58 Q1474081900e8abf4 FILTERS:4 . Total weight = 4 10/16/2002 15:37:58 Q1474081900e8abf4 Msg failed FILTERS (Message failed FILTERS test (1)). 10/16/2002 15:37:58 Q1474081900e8abf4 Subject: monday's 10/16/2002 15:37:58 Q1474081900e8abf4 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] edited --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Customizing filters
How can I apply a weight system to the filter list? That's easy -- the definition of the test (MYFILTER filter filename x 10 0) will determine the generic weight that will be added to the E-mail if the E-mail fails the test, and then each entry in the filter file (SUBJECT 5 CONTAINS Monday's Motivation) will include another weight that will get added to the E-mail. I am trying to create a word filter that will flag out Subject: Monday's Motivation from a certain user. Yet, be okay from another user using that subject. That will be a bit trickier, since there isn't any boolean logic in the filters (such as 'subject contains xyz and sender is abc'). I am just testing the word monday's in the subject. Total weight=4. It rejects because of the Filters HOLD in $default.junkmail. Good... Now i remove FILTERS HOLD, and everything passes.. How can I apply a weight system to the filter list? If you change the weight to 10, the WEIGHT10 test would fail, and the WEIGHT10 test could be set to HOLD. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
