Re: [Declude.JunkMail] ALLRECIPS CONTAINS END not ending?

2004-05-13 Thread R. Scott Perry
You are correct -- I'll see if I can get a new interim release online which will take care of this. There is a new interim release 1.79i7 at http://www.declude.com/version/interim . It takes care of the issue of the ALLRECIPS filter not working properly.

Re: [Declude.JunkMail] ALLRECIPS CONTAINS END not ending?

2004-05-13 Thread Russ Uhte \(Lists\)
At 11:00 AM 5/13/2004, R. Scott Perry wrote: You are correct -- I'll see if I can get a new interim release online which will take care of this. There is a new interim release 1.79i7 at http://www.declude.com/version/interim . It takes care of the issue of the ALLRECIPS filter not working

Re: [Declude.JunkMail] ALLRECIPS CONTAINS END not ending?

2004-05-13 Thread Matt
Scott, Is this just for the ALLRECIPS bug, or does this also cover some other more recent and less serious ones like the combination subjects and the addition of the NOTCONTAINS functionality? Thanks, Matt R. Scott Perry wrote: You are correct -- I'll see if I can get a new interim

[Declude.JunkMail] OT: critical vuln in Symantec firewalls

2004-05-13 Thread Colbeck, Andrew
http://www.eeye.com/html/Research/Advisories/AD20040512A.html and Symantec's patch: http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.ht ml which can be downloaded and installed via LiveUpdate. Unlike the BlackIce worm, there is no report of malware in the wild but the

RE: [Declude.JunkMail] OT: Outlook HTML Question

2004-05-13 Thread Daniel Handley
If you are using outlook 2003 you can add the reg key HKLU Software\Microsoft\Office\10.0\Outlook\Options\Mail READASPLAIN REG_DWORD 0x1 All html mail will be show as text. Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: 13 May

Re: [Declude.JunkMail] DNSSTUFF

2004-05-13 Thread R. Scott Perry
What happened to this valuable site? I get a server not found? It crashed last night -- it's back up now, though. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable

Re: [Declude.JunkMail] Not receiving messages - sometimes..

2004-05-13 Thread R. Scott Perry
I am unable to receive from @fiberlinkinc.com if the message is sent from them and is new. However, if I send a message to @fiberlinkinc.com and they Reply to the message I sent, then I am able to receive from them. Therefore only on Replied messages am I able to receive mail from this company.

RE: [Declude.JunkMail] OT: Outlook HTML Question

2004-05-13 Thread Andy Schmidt
Open the message (not preview) and then right click in the message body to access the context menu. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Daniel

Re: [Declude.JunkMail] Injunction against SpamCop

2004-05-13 Thread Bill Landry
Temporary restraining order against SpamCop reversed: http://biz.yahoo.com/prnews/040512/sfw083_1.html Bill - Original Message - From: Matt [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, May 12, 2004 9:20 AM Subject: [Declude.JunkMail] Injunction against SpamCop Maybe if

RE: [Declude.JunkMail] ALLRECIPS CONTAINS END not ending?

2004-05-13 Thread Kami Razvan
There is a new interim release 1.79i7 at :) Scott... Now was that real hard :) ... Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, May 13, 2004 12:00 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail]

RE: [Declude.JunkMail] ALLRECIPS CONTAINS END not ending?

2004-05-13 Thread Colbeck, Andrew
Don't poke the bear, Kami. Andrew 8) -Original Message- From: Kami Razvan [mailto:[EMAIL PROTECTED] Sent: Thursday, May 13, 2004 10:36 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] ALLRECIPS CONTAINS END not ending? There is a new interim release 1.79i7 at :) Scott... Now

[Declude.JunkMail] OT: Antivirus companies muting false alarms

2004-05-13 Thread Colbeck, Andrew
Title: Message http://zdnet.com.com/2100-1104_2-5210796.html?tag=zdfd.newsfeed Quote: They were wrong, and they were annoying, so now they've been stopped. With a new version of Symantec's SMTP (Simple Mail Transfer Protocol) e-mail security product, the antivirus company is trying to

RE: [Declude.JunkMail] ALLRECIPS CONTAINS END not ending?

2004-05-13 Thread John Tolmachoff \(Lists\)
Don't poke the bear, Kami. But don't you know, Kami likes living on the edge. ;) John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To

RE: [Declude.JunkMail] OT: Antivirus companies muting false alarms

2004-05-13 Thread John Tolmachoff \(Lists\)
Title: Message It is a start. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Thursday, May 13, 2004 10:56 AM To: '[EMAIL PROTECTED]' Subject:

RE: [Declude.JunkMail] I'm going to be away next week

2004-05-13 Thread John Tolmachoff \(Lists\)
Just so people on this list are aware, I'm going to be away next week. What, Scott taking time off? Unheard of! What is this world coming to? ;-) John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

Re: [Declude.JunkMail] Not receiving messages - sometimes..

2004-05-13 Thread Sanford Whiteman
I am unable to receive from @fiberlinkinc.com if the message is sent from them and is new. However, if I send a message to @fiberlinkinc.com and they Reply to the message I sent, then I am able to receive from them. Therefore only on Replied messages am I able to receive

[Declude.JunkMail] Using RHSBL's for reverse DNS entries

2004-05-13 Thread Matt
Scott, I've been thinking about this for a while as a way to increase spam detection and do things that are otherwise more difficult to do, and then the other day I found that MailPolice was actually promoting their RHSBL's for use on both the Mail From and the reverse DNS entry, and now they

Re: [Declude.JunkMail] Using RHSBL's for reverse DNS entries

2004-05-13 Thread Russ Uhte \(Lists\)
At 03:38 PM 5/13/2004, Matt wrote: Scott, I've been thinking about this for a while as a way to increase spam detection and do things that are otherwise more difficult to do, and then the other day I found that MailPolice was actually promoting their RHSBL's for use on both the Mail From and

Re: [Declude.JunkMail] Using RHSBL's for reverse DNS entries

2004-05-13 Thread R. Scott Perry
Is there any shot of you enabling a different type of test built to do RHS lookups from the reverse DNS value? Actually, you can use something like: BULK-REVDNS dnsbl %REVDNS%.bulk.rhs.mailpolice.com* x 0 -Scott ---

Re: [Declude.JunkMail] Using RHSBL's for reverse DNS entries

2004-05-13 Thread Matt
Currently, to the best of my knowledge, 'rhsbl' tests in Declude only work on the Mail From and not the reverse DNS value. I'm interested in the reverse DNS value to be added. BTW, there are a couple of additional tests that MailPolice added at the end of April that weren't on that list:

Re: [Declude.JunkMail] Using RHSBL's for reverse DNS entries

2004-05-13 Thread Nick Hayer
On 13 May 2004 at 16:57, R. Scott Perry wrote: Scott, For the test type below you have dnsbl ; I have only been using rhsbl and ip4r - are these just names to flag the type of test in global.cfg or are different actions taken on each? [Hope I am somewhat clear on this..] -Nick Hayer

Re: [Declude.JunkMail] Using RHSBL's for reverse DNS entries

2004-05-13 Thread Russ Uhte \(Lists\)
At 04:01 PM 5/13/2004, Matt wrote: Currently, to the best of my knowledge, 'rhsbl' tests in Declude only work on the Mail From and not the reverse DNS value. I'm interested in the reverse DNS value to be added. Aha... I figured it was something obvious... -Russ --- [This E-mail scanned for

Re: [Declude.JunkMail] Using RHSBL's for reverse DNS entries

2004-05-13 Thread Matt
That would be awesome if it really does work. I'll give it a try this evening! Am I also to assume that this will work with the %HELO% as well? That would rock :) Just a note of caution to others, if you use MailPolice Bulk on the Mail From, and you try this technique, you probably don't

Re: [Declude.JunkMail] Using RHSBL's for reverse DNS entries

2004-05-13 Thread R. Scott Perry
For the test type below you have dnsbl ; I have only been using rhsbl and ip4r - are these just names to flag the type of test in global.cfg or are different actions taken on each? [Hope I am somewhat clear on this..] That is correct. ip4r will take the IP address that the E-mail came from,

Re: [Declude.JunkMail] Using RHSBL's for reverse DNS entries

2004-05-13 Thread Matt
Scott, I think that beats the 8 minute feature request :) Thanks again, Matt R. Scott Perry wrote: For the test type below you have dnsbl ; I have only been using rhsbl and ip4r - are these just names to flag the type of test in global.cfg or are different actions taken on each? [Hope I

Re: [Declude.JunkMail] Using RHSBL's for reverse DNS entries

2004-05-13 Thread Nick Hayer
On 13 May 2004 at 17:16, R. Scott Perry wrote: kool - thanks! -Nick For the test type below you have dnsbl ; I have only been using rhsbl and ip4r - are these just names to flag the type of test in global.cfg or are different actions taken on each? [Hope I am somewhat clear on

Re: [Declude.JunkMail] Using RHSBL's for reverse DNS entries

2004-05-13 Thread Don Brown
So in the global we'd have: First the actual tests with no value for failure MAILPOLICE-BULK-REVDNS dnsbl %REVDNS%.bulkk.rhs.mailpolice.com * 0 0 MAILPOLICE, etc. Then the Filter (Using the example construct below) with a weight MAILPOLICE filter X:\imail\declude\MailPolice.txt x 10 0 Is that

[Declude.JunkMail] accept email ONLY from white listed senders

2004-05-13 Thread Paul Fuhrmeister
Cross post from Imail list: We set up a domain (IMGate / Declude / Imail 8.11) at an IP Number. We want it to accept email ONLY from white listed senders using Imail's anti-spam feature so the customer can maintain the white list. Has anyone done this? Does anyone have any ideas how to do it?

[Declude.JunkMail] accept email ONLY from white listed senders

2004-05-13 Thread Paul Fuhrmeister
Cross post from Imail list: We set up a domain (IMGate / Declude / Imail 8.11) at an IP Number. We want it to accept email ONLY from white listed senders using Imail's anti-spam feature so the customer can maintain the white list. Has anyone done this? Does anyone have any ideas how to do it?

[Declude.JunkMail] dynamic.rhs.mailpolice.com config

2004-05-13 Thread Matt
Here's a working config for MailPolice's dynamic test (PPP/DSL/cable) that test's both the reverse DNS entry and the HELO entry (zombie spamware often uses the reverse DNS entry for the HELO). MAILPOLICE-DYNA-REVDNSdnsbl %REVDNS%.dynamic.rhs.mailpolice.com127.0.0.200

Re: [Declude.JunkMail] Using RHSBL's for reverse DNS entries

2004-05-13 Thread R. Scott Perry
That would be awesome if it really does work. I'll give it a try this evening! Am I also to assume that this will work with the %HELO% as well? That would rock :) Yes, it will also work with %HELO%. :) You can also use %MAILFROMBL%, which turns [EMAIL PROTECTED] into user.example.com, for

Re: [Declude.JunkMail] Using RHSBL's for reverse DNS entries

2004-05-13 Thread Matt
R. Scott Perry wrote: You can also use %MAILFROMBL%, which turns [EMAIL PROTECTED] into user.example.com, for spam databases that work on the full E-mail address rather than just the domain. You know Scott, that was on my list of things to ask for but I was holding back :) What a bunch of

[Declude.JunkMail] Invalid XINHEADER: error

2004-05-13 Thread Peter Lowish
My declude logs has the following error on most messages coming in Invalid XINHEADER: X-Note - Total spam weight of this E-mail is %WEIGHT%. My global.cfg XINHEADER appears XINHEADER X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. XINHEADER

Re: [Declude.JunkMail] Using RHSBL's for reverse DNS entries

2004-05-13 Thread Bill Landry
- Original Message - From: R. Scott Perry [EMAIL PROTECTED] That would be awesome if it really does work. I'll give it a try this evening! Am I also to assume that this will work with the %HELO% as well? That would rock :) Yes, it will also work with %HELO%. :) You can also

Re: [Declude.JunkMail] Invalid XINHEADER: error

2004-05-13 Thread R. Scott Perry
My declude logs has the following error on most messages coming in Invalid XINHEADER: X-Note - Total spam weight of this E-mail is %WEIGHT%. XINHEADER X-Note - Total spam weight of this E-mail is %WEIGHT%. If you change that line to: XINHEADER X-Note: Total spam weight of this

Re: [Declude.JunkMail] Using RHSBL's for reverse DNS entries

2004-05-13 Thread R. Scott Perry
You can also use %MAILFROMBL%, which turns [EMAIL PROTECTED] into user.example.com, for spam databases that work on the full E-mail address rather than just the domain. Scott, are there any such lists that use the full e-mail address that you know of? These are some nice additional features.

RE: [Declude.JunkMail] Invalid XINHEADER: error

2004-05-13 Thread Peter Lowish
Cool - thanks for your quick response. Enjoy your time away' P -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, 14 May 2004 12:13 p.m. To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Invalid XINHEADER: error My

[Declude.JunkMail] Not receiving messages - sometimes..

2004-05-13 Thread Bridges, Samantha
Hello All - Here is the situation. I am unable to receive from @fiberlinkinc.com if the message is sent from them and is new. However, if I send a message to @fiberlinkinc.com and they Reply to the message I sent, then I am able to receive from them. Therefore only on Replied messages am I