Not knowing enough about the way WHOIS works, could a test be set up that
would heavily weight any e-mails that come from a New domain? This
would really help the pill/porn pushers
It's something that we would like to do, but automated WHOIS lookups are a
Bad Thing. Domain registrars
if you upgrade to Imail 8.1 it seems Declude will be called and run each
time an email is forwarded. i.e
(.,[EMAIL PROTECTED])
so if you forward a lot of email from one account to anther you might not
want to upgrade just yet
This was taken care of in the interim release 1.78i31 at
Scott,
I took note that the MAILFROM test was changed in version 1.68 to fail
on the FQDN, and maybe something else recently happened also, I'm not
sure. I've been noticing one to two new false positive senders recently
though from mostly larger companies, sending E-mail from addresses on
We have just released Declude JunkMail v1.79 (beta). See
http://www.declude.com/junkmail/manual.htm . Notable changes since the
last beta include:
o ALL FIX Added code to bypass IMail v8.1's duplicate scanning of
forwarded E-mails.
o JM FIX Subject filters will now work on
I took note that the MAILFROM test was changed in version 1.68 to fail on
the FQDN, and maybe something else recently happened also, I'm not
sure. I've been noticing one to two new false positive senders recently
though from mostly larger companies, sending E-mail from addresses on
http://biz.yahoo.com/prnews/040405/sfm030_1.html
Haven't read this thoroughly, but wondering if Declude can claim
to have this or already has a version of this method of qualifying
emails?
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
---
[This E-mail was scanned for viruses by Declude
http://biz.yahoo.com/prnews/040405/sfm030_1.html
Haven't read this thoroughly, but wondering if Declude can claim
to have this or already has a version of this method of qualifying
emails?
It doesn't currently, because SPF is much more popular, but will be
investigating the Yahoo and Microsoft
Did you mean WEIGHT10 COPYFILE C:\Imail\spool\weight10\?
Thanks,
Chuck Frolick
ArgoLink.net
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Monday, April 05, 2004 9:07 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Declude
I got these messages
-Dont go everywhere for all u needs
-WE have all
-Meridia Víagra Propecia Celebrex Soma
-Zyban Prozac Vioxx Penís Enlargement
-and Much more
And Declude is not detecting the word Viagra in the body.
This is my filter file(reduced..)
## Filter file Generated from:
http://crm114.sourceforge.net/
Big words but is is working ?
Benny
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe
o JM ADD COPYFILE action to copy the IMail D*.SMD and Q*.SMD
files
to a specific directory (for example, WEIGHT10 COPYTO
C:\IMail\spool\weight10\).
Did you mean WEIGHT10 COPYFILE C:\Imail\spool\weight10\?
Good catch Chuck. I guess my mistake I made originally on that rubbed off on
Did you mean WEIGHT10 COPYFILE C:\Imail\spool\weight10\?
That is correct.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
This is my filter file(reduced..)
## Filter file Generated from: Adult_words.txt
## To File: ADULT_FILTER.TXT
## On: 1/14/2004
SKIPIFWEIGHT 40
MAXWEIGHT40
SUBJECT 12 CONTAINS viagra
BODY 12 CONTAINS viagra
Any ideas why ??
Are any E-mails failing that test?
Are you
I don't know if you noticed but the Víagra is not an i it is an i acute
char(237)
The same with Penís
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Alejandro
Valenzuela
Sent: Monday, April 05, 2004 10:51 AM
To: [EMAIL PROTECTED]
I have my doubts. As with any learning system, accurate training is
paramount. Wiser heads than me have commented here on when learning systems
are a good fit.
He doesn't state how many mailboxes that he is handling and whether it is
for a vanity site, ISP, or corporate mail host. He may be
Ok, thats the problem. I didn't check on that.
Thanks!!
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
Sent: Monday, April 05, 2004 11:07 AM
To: [EMAIL PROTECTED]
Subject: SPAM:[15] RE: [Declude.JunkMail] Filter not working on Body..
I
I seem to be having issues trying to filter subject or body lines for the = symbol.
In my wordfilter file, there is a line such as:
BODY 8 CONTAINS style=font-size:1p
Is this just me, or am I really missing something.
What are the restricted characters in these files?
I checked the manual
I seem to be having issues trying to filter subject or body lines for the
= symbol.
In my wordfilter file, there is a line such as:
BODY 8 CONTAINS style=font-size:1p
I'm not aware of any problems using the = sign in filters. I believe the
only restricted characters are the % sign (which are
We are running Pro, v1.78.
There are lines after this one (the = line rules are in the middle of a hundred or
so rules).
Let me run a manual test and see what happens.I may be taking a tech's word on
something that I should have checked firsthand
Thanks
Stan Lyzak
BSEE, CISSP,
Nevermind...sorry for the wasted bandwidth. It works like it should (why did I doubt
your app Scott?).
Now pardon me, I have a tech to strangle.
;)
Stan Lyzak
BSEE, CISSP, MCSE², CCNA, Security+, A+
Network Security Engineer
ASysTech, Inc.
-Original Message-
From: [EMAIL
Scott,Is there any tests (or any chance to add in the near future)
for the message size and for the number of recepients ?Or is there something
similar in Hijack ?
Regarding declude hijack, is there a special
list, or can we post our questions here ?
Questions regarding Hijack should be
posted here.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge
Sent: Monday, April
05, 2004 5:54 PM
To: [EMAIL PROTECTED]
Subject:
I see many ways to adjust levels of logging, is there any
way to temporarily turn it off to save processing power?
Thanks,
Chris Patterson, CCNA
Network Engineer
Rapid Systems
(813)232-4887 Ext. 112
[EMAIL PROTECTED]
Managed Spam Filtering
and Anti-Virus Protection for Your
Has anybody written a filter that would detect links that present a link to
one place (ie: paypal) but actually link elsewhere (ie: some server in
Korea)?
As an example, this was clipped from a phishing expedition I received a few
minutes ago:
a
Scott, Sandy and others that might have an idea about what do to,
I've been moving towards a setup that allows me to do envelope
rejection of invalid addresses for gatewayed domains due to repeated
instances where spammers have dictionary attacked servers that accept
all valid domains without
Matt,
Let me do some research tonight; it's possible that I will have
something tomorrow that will let you forward through the incoming
envelope stuff in an x- header. (I shudder to think about the log
parsing alternative.)
--Sandy
Sanford
Sandy,
I'm eagerly awaiting the results of your research :)
Thanks,
Matt
Sanford Whiteman wrote:
Matt,
Let me do some research tonight; it's possible that I will have
something tomorrow that will let you forward through the incoming
envelope stuff in an x- header. (I shudder
1. It counts the number of recipients by
received from IP address, so one message with 20 recipients will be counted the
same as 20 messages with one recipient.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL PROTECTED]
Put the log directory to a non-existent
drive. However, I believe there is not much processing time saved in the lower
log levels MID and below.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL
31 matches
Mail list logo
