On 6 Oct 2004 at 18:52, Sanford Whiteman wrote:
[ Don't worry, I'll cool off the cheerleading the moment a lot of
SPAMC32 support posts come in. :) ]
Cheers and more cheers from me. Simply Excellent!
-Nick Hayer
---
[This E-mail was scanned for viruses by Declude Virus
It's taken me a while to get back to this but returned I have.
Ok, I'm not really understanding this.
for example:
I have 3 domains on my Imail server, which resides in Chicago.
abc.com, 123.com, and video.com
the abc 123 domains are in the US, but the video domain is in Africa.
I want to apply
Hello,
we have a customer with a nobody Alias.
And he get's a lot of spam :), we told him to disable the nobody, but he
want's it still.
Is it possible to create a kind of disabled account for bad adresses? Just
to avoid the spam for this adress? Or can I move all to
[EMAIL PROTECTED] to
On my personal Declude Junkmail wishlist, SURBL support is number one...
-Bill,
Excellent catch on the PRESCAN and phishing detection too. I nominate you
for post of the week.
- Original Message -
From: Bill Landry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, October 06,
We add a header via DJM to display the intended recipient so we can track
who reported it as spam in AOL, however, this doesn't work for lists except
to identify the list.
Once we've identified the user or list we contact the user or list owner to
let them know of the problem, and that if they do
Scott Fisher wrote:
On my personal Declude Junkmail wishlist, SURBL support is number one...
What number would turning off individual vulnerabilities in Declude
Virus get on your list?
:)
--
=
MailPure custom filters for Declude JunkMail
Thanks for the tip Darin. We've only been blacklisted for about 4 hours
once before. I don't know the exact threshold either for when they
start blocking unfortunately. Second level AOL techs couldn't tell me
either when I contacted them.
Steve
-Original Message-
From: [EMAIL
Yep... route mail for [EMAIL PROTECTED] to [EMAIL PROTECTED]
Darin.
- Original Message -
From: Hirthe, Alexander [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 07, 2004 10:30 AM
Subject: [Declude.JunkMail] Howto disable a user?
Hello,
we have a customer with a
Well, that is specifically why I prefaced it Declude Junkmail not Declude...
I have received my first messages that were rejected by vulnerabilities this
month.
A couple due to partial and a couple due to Outlook CR vulnerability.
It's mighty tough to tell a user he didn't get the pictures
I haven't had it happen, but I've been told that with the feedback loop in
place they send you a warning when you near the threshold for being
blacklisted. I imagine those thresholds are dynamic and/or adjustable,
which is probably why they can't tell you what they are.
Darin.
- Original
Hello Matt,
M What number would turning off individual vulnerabilities in Declude
M Virus get on your list?
M :)
or per domain control of this feature? #1 Biggest problem is
vulnerabilities caught from TigerDirect receipts and United Airlines
confirmations.
--
Best regards,
David
It's taken me a while to get back to this but returned I have.
Ok, I'm not really understanding this.
for example:
I have 3 domains on my Imail server, which resides in Chicago.
abc.com, 123.com, and video.com
the abc 123 domains are in the US, but the video domain is in Africa.
I want to apply
What number would turning off individual vulnerabilities in Declude Virus
get on your list?
FWIW, yesterday I thought up what may be a compromise (I haven't run it by
the new management to see if it can be included in an upcoming release, but
felt it would be worth mentioning). Instead of
What is the default action in Junkmail?
Is there a way to defaine a default action?
For example, all but 3 of my tests use the action WARN but I specify 50
tests with the action WARN.
Rather than 'syncing' all of these tests in GLOBAL and DEFAULT it would be
easier to just omit and use the
What is the default action in Junkmail?
The default action is IGNORE.
Is there a way to defaine a default action?
For example, all but 3 of my tests use the action WARN but I specify 50
tests with the action WARN.
Rather than 'syncing' all of these tests in GLOBAL and DEFAULT it would be
easier
Thanks Scott,
I understood the last part, of putting the test in the global.cfg file and
creating the file,
I'm still lost on the creating the actual test skipping rule.
Isn't there a way where in my per domain configuration, I can have a set
list of tests
to run for the one domain, but still
Hi,
I subscribed to this list yesterday afternoon at
3:40pm and have not received a single message from anyone. Is there nobody
on this list??
Thanks,
Melissa
The list gets 4-12 messages a day, sometimes goes a couple
of days with nothing.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Melissa
SheldonSent: Thursday, October 07, 2004 1:50 PMTo:
[EMAIL PROTECTED]Subject: [Declude.JunkMail]
Question
Hi,
I
This would be why she's not seeing
anything...LOL
Darin.
-
Content violation found in email message.From: [EMAIL PROTECTED]To: [EMAIL PROTECTED]Subject:
Re: [Declude.JunkMail] QuestionMatching Subject: *junk*
-
- Original
We wrote an external program that
1. Works with Declude as an external filter,
2. reads the email and picks out the subject line,
3. reads a very short list of words from a text file,
4. looks for the words in the subject line, then
5. strips all of the non-alpha characters out of the subject
One of the most common misspellings I see is v1agra. According to your
logic, this wouldn't get caught, would it?
Perhaps amend the test to do some standard replacements of numbers with
letters? For example,
0 - o
1 - i
3 - e
5 - s
8 - a
Darin.
- Original Message -
From: Paul
I approach it this way with my external test.
1. I attempt to base64 decode the subject if it is encoded.
2. Test 1 = I substitute foreign letters (accented vowels and such) with
their English counterpart. Then all non A-Z are removed.
3. Test 2 = Foreign substitute, then @ to A, 0 to O, 5 and $
... If you're going to go nuts on this, I'd also suggest the accented
characters, and case folding e.g.
Ò - o
Á - a
Andrew 8)
-Original Message-
From: Darin Cox [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 07, 2004 12:34 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail]
Markus,
Great idea, we will add this to the ongoing wish list.
Obviously we want to plan this design and implementation carefully and that
is not going to happen overnight.
I have asked one of our folks to look at both short and longer term
solutions and one of the immediate suggestions was to
A dozen users in my domain have received a fake invitation to pick up a
postcard from postcards.com since 8 PM PDT. It came from a clean ADSL IP,
so it didn't get caught.
It's actually an HTML page with a URL that says one thing and takes the user
somewhere different (another dynamic IP, and yet
Isn't every e-mail going to pass one of the two NOTENDSWITH revdns and cause
the test to end?
REVDNS END NOTENDSWITH .nmsrv.com
REVDNS END NOTENDSWITH .postcards.com
- Original Message -
From: Colbeck, Andrew [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 07, 2004
Yes, it does get caught.
Our filtered word list includes vagra
If the program does not see vagra before stripping non-alpha characters, but
does after stripping, the subject line fails.
We have only 38 words in our list, here's the last of it:
valium
valum
Vcodin
vagra
viagr
viagra
Vicdin
Hmmm...so, looking at vicodin, why wouldn't you have
vicodn
vcdin
vcodn
vicdn
vcdn
Seems like there might be some permutations missing...there should be eight
permutations of vicodin with replacements for the i's and o's. 1P3, 2P3,
3P3, and 0P3 to complete the octet symmetry.
Darin.
-
28 matches
Mail list logo
