RE: [Declude.JunkMail] OT: Fraud Alert

2003-06-19 Thread John Tolmachoff \(Lists\)
Filter file for BODY your-instant-credit-reporter.org without the quotes. Can some one post the full headers? John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED]

Re: [Declude.JunkMail] OT: Fraud Alert

2003-06-19 Thread J Porter
Ask and ye shall receive... whether you want it or not.. ) ~Header~ Received: from attbi.com [24.131.138.246] by mail.hnb.com (SMTPD32-7.03) id AE3F48EA013A; Wed, 18 Jun 2003 16:48:47 -0500 Received: from h00036d13b375.ne.client2.attbi.com (h00036d13b375.ne.client2.attbi.com

Re: [Declude.JunkMail] OT: Fraud Alert

2003-06-19 Thread Dan Patnode
I eventually got 4 copies from 3 IPs, 24.x.x.x plus: 68.82.235.252 81.202.170.237 No relaying. Interestingly, 3 of them got caught. Dan On Wednesday, June 18, 2003 23:24, J Porter [EMAIL PROTECTED] wrote: Ask and ye shall receive... whether you want it or not.. ) ~Header~ Received:

[Declude.JunkMail] legit test CONSISTFROM?

2003-06-19 Thread Markus Gufler
Hi Scott, Could it be a new test that gives negative points if tested positive? See the header below: Received: from smtp2.us.dell.com [143.166.85.133] by mail.zcom.it with ESMTP (SMTPD32-7.15) id AB43793010C; Thu, 19 Jun 2003 04:09:07 +0200 Received: from AUSSTOPROCESS02

[Declude.JunkMail] Declude Console ??

2003-06-19 Thread Jeff Pereira
What is the Declude Console ?? Jeff --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED],

[Declude.JunkMail] Yahoo

2003-06-19 Thread Kami Razvan
Hi; We are having problem with Yahoo emails. Are there others having the same problem? What is going on with Yahoo? X-IMAIL-SPAM-DNSBL: (YBL,72549026,127.0.0.2) X-IMAIL-SPAM-DNSBL: (BLARS,72549026,127.1.0.97) X-IMAIL-SPAM-DNSBL: (BHOLE-CW,72549026,127.0.0.2) X-RBL-Warning: NOABUSE: Not

Re: [Declude.JunkMail] legit test CONSISTFROM?

2003-06-19 Thread R. Scott Perry
Could it be a new test that gives negative points if tested positive? See the header below: Received: from smtp2.us.dell.com [143.166.85.133] by mail.zcom.it with ESMTP (SMTPD32-7.15) id AB43793010C; Thu, 19 Jun 2003 04:09:07 +0200 Received: from AUSSTOPROCESS02 (ausstoprocess02.us.dell.com

Re: [Declude.JunkMail] Declude Console ??

2003-06-19 Thread R. Scott Perry
What is the Declude Console ?? It's a console (window) that can be used with the Declude programs. It was originally designed for Declude Hijack, but can be used with Declude JunkMail or Declude Virus as well. It displays basic information about E-mail that is being scanned. To use it, you

RE: [Declude.JunkMail] DSBL Tests - results

2003-06-19 Thread Harry Vanderzand
Is it possible to have declude do a test on the following: HEADERS 20 CONTAINSX-IMAIL-SPAM-STATISTICS: 1. I have tried this but do cannot get it working. Is this put into the headers after declude is finished? Harry Vanderzand inTown Internet Computer Services 11 Belmont

RE: [Declude.JunkMail] [Declude.Virus] Updating Declude Junk Mail

2003-06-19 Thread R. Scott Perry
Can I just download the update from the website? Is their instructions or anything out of the ordinary that I need to do? You can download the latest version from http://www.declude.com/junkmail/manual.htm (if you're covered by a Service Agreement, either if you have ordered in the past year,

[Declude.JunkMail] FROM TESTS

2003-06-19 Thread paul
Sorry for not trying to search this more first, but it's not an ultimate MUST know, just a can it do this? type question: Is there a test that checks the FROM and X-DECLUDE SENDER lines to see if they match? Is that even possible? Granted, when I see a [EMAIL PROTECTED] mail that has a DECLUDE

Re: [Declude.JunkMail] DSBL Tests - results

2003-06-19 Thread Bill Landry
I posted a message last week about this. Yes, for some odd reason this test does not run, and the header get added, until after Declude has passed the message back to IMail for delivery. However, it appears that other IMail spam tests get run, and headers added, before IMail passes the message

RE: [Declude.JunkMail] [Declude.Virus] Updating Declude Junk Mail

2003-06-19 Thread R. Scott Perry
Just replacing the Declude.exe file will upgrade the whole thing? That will upgrade Declude to the latest version. I don't have to make any changes to the Global.cfg file or the $default$.JunkMail? To take advantage of the latest tests, you may occasionally want to upgrade your

[Declude.JunkMail] Serveral RBL Tests reading from same database

2003-06-19 Thread Rick Davidson
Here is something I just noticed. This spam message failed 3 blacklist tests however two of them are reading from spamhaus.org so basicly it held the message based on SBLs info alone (each test weighted 5, i hold at 14) X-RBL-Warning: OSSOFT: http://spamhaus.org/SBL/sbl.lasso?query=SBL8887

Re: [Declude.JunkMail] [Declude.Virus] Updating Declude JunkMail

2003-06-19 Thread R. Scott Perry
To take advantage of the latest tests, you may occasionally want to upgrade your \IMail\Declude\global.cfg file... So I would replace my global.cfg file with yours and then add/replace my stuff? That's one way (the other would be to add any changes to your global.cfg file). Do I need 1.70 for

RE: [Declude.JunkMail] [Declude.Virus] Updating Declude Junk Mail

2003-06-19 Thread Robert Grosshandler
Does the global.cfg/default.junkmail files that are distributed with the releases include the suggested new tests? To take advantage of the latest tests, you may occasionally want to upgrade your \IMail\Declude\global.cfg file (and possibly the \IMail\Declude\$default$.JunkMail file as well).

[Declude.JunkMail] SPAMDOMAINS workaround question

2003-06-19 Thread Nick Hayer
Is there a way to use this test on domains that receive forwarded email? Ex someone from AOL sends an email to a server that automatically forwards the email to the server that is running DJM. Since the sending server DJM sees is not aol.com/netscape.net in this example the email incorrectly

Re[4]: [Declude.JunkMail] DSBL Tests - results

2003-06-19 Thread Sanford Whiteman
Yep, but it's still a shame that we cannot track this header and add weight with JM when it's found because of this. You're right; that's where stock needs to be placed in Sniffer, CyberSitter, and perhaps Declude's upcoming prob tests. -Sandy