Is it safe to simply delete an email flagged with spamcop?
We weight SpamCop pretty high, but don't delete on it alone. We hold
on 10, delete on 30, and give SpamCop a 12. We were deleting on 20,
but as we tune the weights we find we need to bump that up to ensure
we didn't push the filters
Is it safe to simply delete an email flagged with spamcop?
We weight SpamCop pretty high, but don't delete on it alone. We hold
on 10, delete on 30, and give SpamCop a 12. We were deleting on 20,
but as we tune the weights we find we need to bump that up to ensure
we didn't push the filters
There's a new trojan floating around with the subject of Osama bin
Laden Captured and a link to photos which is actually a trojan. So far
easy enough to filter with JunkMail, but this has hit a number of law
enforcement agencies and is apparently very tempting, a number of
users have opened
Is there a way to make two tests linked together?
In this case the
SUBJECT 0 CONTAINSOsama bin Laden Captured
And a
BODY 0 CONTAINSlink to pictures (whatever the
link is)
So for the test to trip both conditions would have to be true? In
The easy answer to this is to use your own DNS servers -- if you do
(and
they are decent DNS servers; BIND is preferred), you won't be
subject
to
the restrictions of ATT, Sprint, and others that block spam
database lookups.
Since we are running IMail (ie Windows) what is the
Unless it already exists and I didn't notice... :)
How about a log option to display the actual line of a filter file that
triggered, not just the line number? I may dink around with a filter file
enough times during testing that the logs don't match the actual file by
the time I review
How about a log option to display the actual line of a filter file
that triggered, not just the line number?
Actually, at LOGLEVEL HIGH with the latest beta you should see the
text that caused the E-mail to fail the filter.
Thank you. :)
I should have realized you'd have thought of any
Subject: Re: Brochure
X-RBL-Warning: SUBJECTFILTER: Message failed SUBJECTFILTER test
(332)
If you look at line 332 in the subjectfilter.txt file, it should have
the text that caused the SUBJECTFILTER test to be triggered.
This is whats on line 332
SUBJECT 30 CONTAINS room
I would
Seems that there is a lot of chatter on the mailing list right now
with tests etc that are not in the manual. I am curious will a new
manual be released, or does anyone have any good explanations of some
of these tests on their sites?
The general rule of thumb is that the manual is updated
Why not use Kami's Nigerian Filter? He's done all of the work for
you. Just remember to thank him.
That sounds interesting, how about a pointer to Kami's site/email/etc.?
(Or am I just too far out of it and missed the obvious location
somehwere...?)
Thanks, and in advance, thanks to Kami
Okay, we've been using Declude quite successfully for some time, and
we're finally trying to clean up all the original mistakes and misuses
and misconfigurations. :)
I'm looking for suggestions on how others handle some situations and
setup.
Currently we use a WORDFILTER to delete messages
Is anyone else seeing mails come through with a document_9446.pif.htm
attachments intact?
No. But then I do a delete using a WORD FILTER for
document_9446. :)
I also block attachments in iMail, so we trap a number of these types
there as well as in JunkMail.
Jeff
---
[This E-mail scanned
Apparently, this means Generic Viagra as revealed in the Declude Log
file:
=?iso-8859-1?B?R2VuZXJpYyBWaWFncmE=?=
What can you do about obfuscated subjects using ISO character sets? I
was thinking of filtering them based on partial string, like this:
SUBJECT 30 CONTAINS =?iso-8859
I have a situation where email from a particular mailing list is
failing a test for which I HOLD. I can't whitelist the domain or
address as the domain provides plenty of SPAM and the address changes
(they use a bounce FROM address on the list that includes the
receipient's account). But
I didn't think of that solution, thanks. Though I may have an issue from
one of the mailing lists, since we HOLD from that domain, but it may
work on other issues I have.
Jeff
Also, if you have the PRO version, you can set up a filter file and
then filter on SUBJECT -50 CONTAINS ?
I have a situation where email from a particular mailing list is failing a
test for which I HOLD. I can't whitelist the domain or address as the
domain provides plenty of SPAM and the address changes (they use a
bounce FROM address on the list that includes the receipient's
account). But the
Discussion being continued off-list unless anyone else is interested..
I'd be interested, but could be included off-list if nobody else is...
Jeff Cochran
City of Naples, Florida
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus
SpamChk takes care of this.
There is a parameter FakedHTMLComments that searches for repeated
html-comments like !--xyz-- where xyz is even the same. This
should not trigger html-comments in certain newsletters.
Caught this late, what is SpamChk...?
Additional SpamChk removes all HTML-Tags
That is exactly what we do... But we don't delete weight20, we route
it to a mail box, that way if a customer calls, we can retrieve the
email, look at all the test it failed, if it needs whitelisted, we can
do that, and then forward the message on... We've had 0 problems with
it!! -Russ
We are a small ISP in Southeastern Massachusetts. We presently use
IMail as our mail server platform. Would be interested to here from
some folks who've used Declude's JunkMail software (Opinions). Any
feedback would be appreciated.
Phenomenal. After some tuning and testing, we now delete
Would it not be great if we could assign an e-Mail or a number of
e-Mails that if someone sends a message to they will automatically
get blacklisted? This would immediately save all the junk they will
manage to send through.
It is a good idea. The question though is what to block -- the
Now that I'm getting a handle on Declude, when I have email on
hold in the Spam folder, can I just move the file in Windows
Explorer to the \\Imail\spool folder to have it delivered? I have a few
items that are getting caught while I adjust the test processes that
I need to send back out.
Now that I'm getting a handle on Declude, when I have email on
hold in the Spam folder, can I just move the file in Windows
Explorer to the \\Imail\spool folder to have it delivered?
Yes -- but you need to make sure to copy both files (the D*.SMD file
that has the contents of the E-mail,
23 matches
Mail list logo
