Hi;
I am going to remove HGH. Actually I think we should not list 3 character
words but this one is just used too often to ignore.
It is removed.
Regards,
Kami
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Goran
JovanovicSent: Monday, July 05, 2004 11:07 PMTo:
[EMAIL
07/05/2004 10:57:51 Q6c682c190080ebdc Triggered CONTAINS filter
FILTER-VIAGRA-RX on HGH [weight-5; hgh SmtznGNrlFJahEpSe0JKcyEpUh].
So my questions:
Did it really fail on hgh with a trailing space?
Can you have a space in the encoding?
If the above is true then do you have any idea on how
I have a line in my per-domain whitelist file
WHITELISTFILE D:\IMail\Declude\unicity.ca\whitelist.txt
And in that whitelist.txt file there is a line that says (and there is no
trailing space)
gojit.com
That line should be either @gojit.com or .gojit.com (or both). If the
line does not start
Markus,
The particular article that you pointed to
is regarding preceding and not trailing spaces. To do preceding spaces is much
more complicated since Scott would have to implement some sort of delimiter
which then gives the problem of how would you look for the delimiters
themselves.
I believe what happened here is that Declude JunkMail's processing of
the
E-mail caused this to occur. Specifically, Declude JunkMail will turn
carriage returns into spaces, so that you can filter on a phrase such
as
this has more than one word, and it will catch the E-mail even if
one
line
Kami,
And after I went to the trouble to be able
to update your filters with a batch file that gets called automatically J. My CleanFilter gets
called right after the download batch file.
I am attaching the batch file (just rename
it to .cmd) and the two control files if anyone out
Oopps
OK thanks I will have to fix that little oversight.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Tuesday, July 06, 2004 7:18 AM
To: [EMAIL PROTECTED]
So if the MIME encoding line ended with ...hgh, it could be seen as
...hgh ..., with a space there.
So does JunkMail make everything in the BODY into one line (for
filtering purposes) with only one CFLR at the end of it?
Correct.
Are there exceptions to this?
Yes -- it will also appear in its
I have been seeing more spam where the subject line is a single space.
Feature request, add something like this;
SUBJECT 15 STARTSWITHSPACE
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
I see a small amount of valid e-mail that starts with a space.
Perhaps
SUBJECT 15 ISSPACE
Similiar to the ISBLANK option?
Scott Fisher
Director of IT
Farm Progress Companies
[EMAIL PROTECTED] 07/06/04 10:59AM
I have been seeing more spam where the subject line is a single space.
Feature
Unfortunately, I see many uneducated people sending real mail without
anything in the subject line. Note sure if that would translate into a
blank or a null subject line.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
I'd really like to see Declude implement full support of the SURBL URL blacklists.
SURBL.org now has several new lists available that I think would make very effective
tests.
Unfortunately they are not available for http download like the Spamcop SURBL list is.
Some would also have too many
The problem with ISSPACE is the spammers will then use 2 spaces, or a space
and then a character.
However, with STARTSWITHSPACE, that will always catch it as either that will
be an error on the senders part, which wont matter as the message will not
have enough weight anyways, or be a spammer.
I messed around with this and found you can do the following
HEADERS 0 CONTAINS Subject: -- with two spaces after it
The header formating is Subject: with one space after it so theoreticly
add a second space in your filter rule and it will do what you want.
Rick Davidson
National Systems
AH, interesting work around. Thanks, I will try that.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Rick Davidson
Sent: Tuesday, July 06, 2004 10:11 AM
To: [EMAIL
yea it works, but I have been running a test with that today and havent
caught a single spam message but have caught over 30 legit messages...
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To:
Hello All,
I am new to declude and trying to figure all of this
out. So far things have been going very well.
I have been reading the mail archives and seen a few
global.config examples and have pulled a few tests out to run.
In my global.config I am running these two tests:
SBLl is a subset of SBL-XBL
sbl-xbl return code 127.0.0.2 = SBL
sbl-xbl return-code 127.0.0.6 = XBL from Blitzed-all
sbl-xbl return-code 127.0.0.4 = XBL from CBL
The blitzedall + CBL are referred to as the XBL
I use some of the ideas laid out by Matt with his configuration. He posted it in early
Matt,
Check this out http://www.spamhaus.org/xbl/index.lasso
The sbl-xbl.spamhaus.org is a combination of both the sbl.spamhaus.org data and
xbl.spamhaus.org data
You are checking some of the same data twice.
Stu
At 02:55 PM 07/06/2004 -0400, you wrote:
Hello All,
I am new to
I would be interested to know why the legit messages have a subject line
that starts with a space.
One of the servers I maintain is for a real estate company.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL PROTECTED]
I have received messages from friends with blank subject lines. I guess
they're lazy.
G.Z.
- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, July 06, 2004 2:46 PM
Subject: RE: [Declude.JunkMail] SPACE character
I would be
A blank line is different from a space. Presumably, in a good email (ie:
person-to-person), the space would have to have been specifically inserted
in a client by clicking in the subject field and pressing the spacebar.
Bad emails could originate from poorly written mass-mailers that start
EVERY
most of them look like web mailers or automated systems that have the
subject coded incorrectly with an extra leading space.
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
We get a fair amount of SPACE subjects from our webmail users. Imail's
webmail interface gets upset if you try and send an email with both a blank
subject and a blank body [for example, an unsubscribe message to an address
that does all of the processing based on the To: address alone], so a
I have been seeing more spam where the subject line is a single space.
Really?
From over 20.000 messages in the last 2 days I can see only two (legit!)
messages having an initial space in the subject line.
Markus
---
[This E-mail was scanned for viruses by Declude Virus
I had a client that we use the attach action for his domain. He received an
email with attachments that was labeled as spam. It appears the original
attachment was stripped from the email, is this standard with the attach
action?
Chuck Schick
Warp 8, Inc.
303-421-5140
www.warp8.com
---
[This
At the same volume level, I see thirty times more legitimate messages with a
leading space in the subject message. Most are from users, with one to
three leading spaces. Three different legitimate news alerts are using up
to 6 leading spaces, presumably to make their subject line stand out in
I had a client that we use the attach action for his domain. He received an
email with attachments that was labeled as spam. It appears the original
attachment was stripped from the email, is this standard with the attach
action?
Declude JunkMail will include the original E-mail as an RFC822
Declude-Spoolname: D09600158013a67d3.SMD
Precedence: bulk
Sender: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
X-Declude-Sender: [EMAIL PROTECTED] [63.246.13.90]
X-Declude-Sender: [EMAIL PROTECTED] [63.246.13.90]
X-Spam-Tests-Failed: IPNOTINMX, REVDNS, WEIGHT10, WEIGHT12, WEIGHT15,
WEIGHT16 [16]
29 matches
Mail list logo
