You should also prefix custom header names with X-,
eg: X-CustomHeaderName: %TESTNAME%... Etc
Matt wrote on Wednesday, January 04, 2006 11:35 PM:
These are the text records returned from the blacklist. It might
also be Declude inserting the full lookup in the place of a text
record
and the colon that follows it?
Original Message
From: Dan Horne [EMAIL PROTECTED]
Sent: Thursday, January 05, 2006 9:53 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] RBL warning
You should also prefix custom header names with X-,
eg: X-CustomHeaderName
Original Message
From: "Dan Horne" [EMAIL PROTECTED]
Sent: Thursday, January 05, 2006 9:53 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] RBL warning
You should also prefix custom header names with "X-",
eg: X-CustomHeade
Original Message
From: "Dan Horne" [EMAIL PROTECTED]
Sent: Thursday, January 05, 2006 9:53 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] RBL warning
You should also prefix custom header names with "X-",
eg: X-CustomHeade
Thanks Matt.
Original Message
From: Matt [EMAIL PROTECTED]
Sent: Thursday, January 05, 2006 9:59 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] RBL warning
One other thing. The link that you definied probably won't work
properly
Where does the message Blocked - see
http://cbl.abuseat.org/lookup.cgi?ip=222.173.57.68; or
68.57.173.222.blacklist.spambag.org come from? Is this something
that comes from the blacklist, or is it defined by Declude?
It's a DNS text (TXT) record
These are the text records returned from the blacklist. It might also
be Declude inserting the full lookup in the place of a text record when
none is present. This behavior is created when you set an action on a
test to WARN in the appropriate JunkMail file like so:
CBL WARN
You can
Would adding the following in the global.cfg cause Declude any problems?
What I'm trying to achieve is to use the same 'rule name' in all the per
domain configs for the multiple responses, with some exclusions (like
DUL - Note 127.0.0.2 is not listed among the FIVETEN's and 127.0.0.10 is
not
for a given email.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Lyndon Eaton
Sent: Monday, March 15, 2004 10:26 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] RBL PTR responses
Would adding the following in the global.cfg
First, I should point out that RBL is a trademark of MAPS, and only refers
to their RBL spam test. PTR refers to DNS records that map an IP address
to a hostname. So DNSBL responses might make for a better subject.
Would adding the following in the global.cfg cause Declude any problems?
All mail from our domain is failing with the following message:
X-RBL-Warning: DSN: Not supporting null originator (DSN) how do I get this
cleaned up. Our server is accepting null senders??
That test is not run in real time (as it would be wasteful of
resources). You can go to
http://www.rfc-ignorant.org/tools/detail.php?domain=lakesnet.netsubmitted=1
070148902table=dsn
This is why, although I was able to send to your postmaster account with a
null sender from the command line.
- Tony
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf
Any one using this yet, and is it helping?
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Andy Schmidt
Sent: Friday, December 26, 2003 10:27 PM
To: [EMAIL PROTECTED]
871.54%
NJABLSOURCES..3786.70%
Best Regards
Andy
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
(Lists)
Sent: Friday, January 02, 2004 01:30 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] RBL - which
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
(Lists)
Sent: Saturday, December 27, 2003 02:34 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] RBL - which DNS Server
Contributing would be an action. Declude is only testing.
First
If you read the site, you'll see that by changing the name of the zone, a
Declude QUERY (test) will result in an ACTION by the NJABL site. Thus, it
will pick up new relays very quickly so that subsequent mails by the same
IP
may be blocked within minutes.
Did read the site, including the
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
(Lists)
Sent: Saturday, December 27, 2003 03:03 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] RBL - which DNS Server
If you read the site, you'll see that by changing the name
Thus, the DNS server used would need to be the Imail server itself.
Well - since Declude replaces/intercepts a process of the Imail Server, I
think it qualifies as SMTPd in the context of their specs.
I guess you would have to ask them.
BTW, shouldn't we both be sawing ZZZs by now? ;)
I'm assessing http://www.njabl.org/contribute.html.
Where does Declude fit into this? When declude looks up black lists, does
it connect DIRECTLY to each black-lists DNS server - or does it query
through the Imail (or Declude) DNS server?
Declude JunkMail will connect to your local DNS server
Please excuse me if this have been discussed before but I wanted to find
out what it would take for the Declude users to develop there own RBL of
some sort?
See http://www.declude.com/junkmail/support/ip4rinfo.htm for information on
how a DNS-based spam database is set up (FYI, RBL is a
Hi,
Wich are the most effichient test that declude can check and have high
rate of spam ?
Also what do you think about combining declude power and Imail rules for
keyword to check all the e-maisl that declude detected ( weight 0 ).
For eg a suspecious mail with a subject Viagra is a 99.99% spam
PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] RBL Question
Doesn't this announcement mean that as of Aug 11, SPAMHAUS will have to be
checked directly and will NO LONGER provide info to osirusoft? That
appeared to be the gist of the announcement.
From: Colbeck, Andrew
Keith, you
-Original Message-
From: Keith Johnson [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 07, 2003 8:36 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] RBL Question
I saw the below message on the forum:
-BEGIN QUOTE---
For a long time the SBL has been available either
Doesn't this announcement mean that as of Aug 11, SPAMHAUS will have to be
checked directly and will NO LONGER provide info to osirusoft? That
appeared to be the gist of the announcement.
From: Colbeck, Andrew
Keith, you don't need to do anything. The RBL providers will do the work.
What
-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]]
In addition, I think that both Reserved space (IANA and RFC1918)
should get blackholed when hop 0 and inbound from the Internet.
That should not be a problem -- that would only happen if the spammer
forges their IP
I have the log set to Mid and all of the RBL+ tests configured the
same as your sample congif file, i.e.
RBL
DUL
RBL+DUL
etc.
The tests run in order of appearance (RBL, then DUL, etc.) right?
Correct.
If an e-mail fails RBL, DUL and RBL+DUL, would all three of them
appear in the log as failed
The long and short is that there is a problem with MAPS and using
HOP/HOP High.
HOP 0
HOPHIGH 1
08/02/2002 16:36:26 Qfb50142 Msg failed RBL (This E-mail came from
1.4.11.75, a potential spam source listed in RBL.).
Headers:
Received: from B2BWeb1.Resource.MH2.Com
All three tests are not shown in the log. Here's an example:
I searched Declude logs from 7/1 - today and did NOT find failed tests
for: RBL+DUL, RBL+RSS and MAPSALL.
That's probably not unusual. For example, RBL+DUL (and MAPSALL) would only
catch mail from a dialup line that also happened
I realize the primary problem is with the sending server's
configuration. I haven't been very effective at convincing people to
change something on their end, when they say that the only place their
mail doesn't get delivered is here. Most don't know how to spell DNS,
either.
Does MAPS return
Saturday, August 3, 2002, 7:03:30 PM, R. Scott Perry [EMAIL PROTECTED] wrote:
[SNIP]
This is only a potential problem when checking beyond HOP 0
against RBL and RBL+.
RSP ... and any other spam test that blacklists those IPs (I don't know offhand
RSP if any do, but it is likely).
O.K. It is
I upgraded to 1.57 Beta, but I'm still getting the invalid IP
addresses.
Can you type \IMail\Declude -diag from a command prompt (exactly like
that) to see if you really are running 1.57? I was able to reproduce the
problem with 1.56, but not 1.57 using the same E-mail.
It appears as though
It is 1.57. It sounds like what you fixed impacted all tests.
However, this problem appears to only be associated with the RBL
test.
Declude (C) Copyright 2000-2002 Computerized Horizons. All Rights Reserved.
Diagnostics ON (Declude v1.57).
[SNIP]
End of diagnostics.
Thursday, August 1,
It is 1.57. It sounds like what you fixed impacted all tests.
However, this problem appears to only be associated with the RBL
test.
In that case, I'll need to see a new set of headers to determine the problem.
-Scott
---
[This E-mail was scanned for viruses by
If I change my osirusoft listing in the global.cfg to be:
==
OSIRUSOFT ip4rrelays.osirusoft.com* 5 0
==
Would that all me to make just one query and accept and be able to identify
all responses from osirusoft?
Yes, that would work fine.
We
Okay, how about if I want to accept all responses except one? For example,
I would like to use all of blackholes.five-ten-sg.com responses except
127.0.0.7, since it is way to agressive. Is that currently possible?
No, that isn't possible.
-Scott
---
[This E-mail was
35 matches
Mail list logo
