Should be able to use "anonymous" as
theusername and your e-mail address as password.
Bill
- Original Message -
From:
Gene Head
To: [EMAIL PROTECTED]
Sent: Thursday, December 25, 2003 9:56
PM
Subject: RE: [Declude.JunkMail] GIBBERISH
2.0.1, single file filter
Have you checked the filter file to see what IP range matched?
The IP entry is: 207.217.120.0/24
In the list of participants, the 5th entry in the list of participants.
-
http://www.web-o-trust.org/browse.cgi?url=http://web-o-trust.org/everybody.t
xt
I found it here:
-
Hi
Scott:
I just did a
test..
in our filter
files we have:
BODY 20
CONTAINS Banned CD
Here is an email I
sent to myself from Hotmail. The filter is not
triggered.
==
X-OriginalArrivalTime: 26 Dec 2003 12:21:25.0569 (UTC)
Kami,
Anything in these days is a legit HTML tag unfortunately. At the
same time, most of these patterns aren't used and can be filtered for.
If this one spammer wants to keep using that one pattern, nail him with
the following:
BODY 30 CONTAINS alt=3D
I've been coding
Have you checked the filter file to see what IP range matched?
The IP entry is: 207.217.120.0/24
In the list of participants, the 5th entry in the list of participants.
-
http://www.web-o-trust.org/browse.cgi?url=http://web-o-trust.org/everybody.t
xt
I found it here:
-
I just did a test..
in our filter files we have:
BODY 20 CONTAINS Banned CD
Here is an email I sent to myself from Hotmail. The filter is not triggered.
Did you turn off decoding (DECODE OFF)? If so, E-mail with Banned CD
should get caught, but E-mail with Ban/manifestationned
Scott:
This guy is out of his mind... Look at his comments:
version: http://web-o-trust.org/1.01.html
# http://www.web-o-trust.org/ - version: correction needed in the
example ;)
# Note: comments are under their respective ip:
# Note: IPv6 addresses may or may not be supported...remains to be
I can't (nor wish) to stop my users accessing my email servers from other
than my IP addresses but I can't see how I can allow this and at the same
time fully implement the usefulness of SPF.
Ideally, you would have all your users use your mailserver.
How can you force this?
By saying People
This guy is out of his mind... Look at his comments:
# Note: These are, respectively, Earthlink, sccrmxc14.comcast.net,
rwcrmhc13.comcast.net,
ip: 207.217.120.0/24
Is this what I think it is.. He is listing the entire Earthlink.com?
This should be treated in the same way as if someone you trust
Did you turn off decoding (DECODE OFF)?
No.. I don't have any such line in the Global.cfg.
Kami
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Friday, December 26, 2003 9:10 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail]
Gene -
Does anyone have an adult phrase filter they could share? I've been
Mine is attached. [I hope its ok to send an attachment to the list.
If not pls let me know - ]
Its a compilation of others [mostly Kami] and my own.
trying to create a filter but keep running into keywords being
Looking for a solution that will filter SPAM for home and something I can
recommend to neighbors. Anyone have any experience on what integrates with
Eudora and Outlook, fairly easy to setup and has a high success rate?
Thanks
Chuck Cahill
YFCS, Inc
Visit us at
trying to create a filter but keep running into keywords being caught
in other words, like document and analog
Try IS rather than CONTAINS?
FYI, that will rarely work. For example, SUBJECT 10 IS evilword will
only catch a subject of evilword, not a subject of This subject contains
an
Kami,
This guy also links to the following:
http://users.adelphia.net/~equalizer/web-o-trust.txt
Which includes what appears to be all of Adelphia.
I'm not sure if people are paying attention, but I pointed both of these
files out when the topic first came up. Now the mistakes have
[is there another SPF list to post these to?]
There is -- http://spf.pobox.com is the official site for SPF, and there
should be a link to the list there.
Why is this an unknown?:
63.170.56.22 [EMAIL PROTECTED] [CGI]: UNKNOWN: v=spf1 +mx ptr
ip4:63.170.56.4 ?all
That's because 63.170.56.22
FYI, that will rarely work. For example, SUBJECT 10 IS evilword
will only catch a subject of evilword, not a subject of This
subject contains an evilword. BODY 10 IS ... will almost never
catch anything.
Rarity is good :)
Its is the only way I see to trap certain words which rarely occur
FYI, that will rarely work. For example, SUBJECT 10 IS evilword
will only catch a subject of evilword, not a subject of This
subject contains an evilword. BODY 10 IS ... will almost never
catch anything.
Rarity is good :)
I don't think you understand:
Its is the only way I see to trap
Chuck,
All of those products need to be trained by the user, and they work
primarily on heuristics instead of the types of things we do with
Declude, so they won't be nearly as effective, nor as reliable. I'm not
aware of a plug-in for Eudora, but Netscape and new versions of Outlook
have
Well, I can say I have not seen any legit with a subject that starts with a
space, but I have seen a number of spam that does.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf
We are seeing an intermittent Declude header added to our messages
without us using a variable for it, e.g. :
X-Declude-Date: 12/26/2003 23:11:23 [106]
Is there a reason causing this to appear? This is the interm version..
and I know it warns of 'unusual logging', but we were surprised that
this
Example:
Test called GOODAOL
---
REVDNS END NOTENDSWITH .aol.com
MAILFROM-6 ENDSWITH@aol.com
This would give a message from a @aol.com address that has a true AOL REVDNS
a counter weight for the fact that all messages from AOL
Reply to: John Tolmachoff (Lists)
Re: [Declude.JunkMail] X-Declude-Date in Header on Friday 7:18:53 PM
Thanks.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
- Copy of Original Message(s): -
J It is a temporary insertion by Declude for troubling shooting. It will be
J taken
If a test has an END listed, and a message meets that and causes the test to
end, will it be considered a pass?
Yes.
In other words, if the test is stopped by
an END statement, will the pass weight if configured be applied?
Yes. If END is reached, the test will be treated exactly the same as if
23 matches
Mail list logo
