RE: [Declude.JunkMail] country chain

2008-10-08 Thread Andy Schmidt
I believe the routing test looks for emails hopping back and forth across major regions. So, if the email was sent from the U.S. to China and then back to the U.S., it should trigger. But, if a multinational company has I/T resources (or registered IP addresses) south or north of the border, or if

RE: [Declude.JunkMail] country chain

2008-10-08 Thread Harry vanderzand
Anybody have any idea why the ROUTING test is not adding to my weight. Here is another sample of where the ROUTING test should have added to the score X-Country-Chain: UNITED STATES-EL SALVADOR-CANADA-destination X-Spam-Tests-Failed: UCEPROTECT-LEVEL2-, NOABUSE, NOPOSTMASTER, FILTER-COUNTRY [6]

RE: [Declude.JunkMail] country chain

2008-10-08 Thread David Barker
If we look at the definition of the ROUTING Test. This test will analyze the route that an E-mail takes, and look for highly inefficient routing that is very common in spam. For example, an E-mail might get caught if it is sent from a dialup in the U.S. to another account in the U.S., but is

RE: [Declude.JunkMail] country chain

2008-10-08 Thread Andy Schmidt
Hi, I think that counting countries is not necessarily helpful - specially if you think of other continents. In Europe, many AOL IP blocks are registered to the U.K. Knowing that an email went through two or three countries before reaching you does not really imply anything, specially for

RE: [Declude.JunkMail] country chain

2008-10-08 Thread David Barker
Yup I tend to agree. Although just a quick comment. We have currently decided against domain keys as it is CPU intensive and we do not believe it adds that much value. Besides, SM supports domain keys. Sniffer API is on the development schedule right now. OCR is CPU intensive. Our main focus

Re: [Declude.JunkMail] country chain

2008-10-08 Thread Nick Hayer
Hi David, David Barker wrote: We may want to create a new test which would trigger if multiple countries are in the routing. Any thoughts would be welcome. I do not think it would add much value For example I have a Russian company that send all their email via Hong Kong. I suspect there

Re: [Declude.JunkMail] DNS Changes

2008-10-08 Thread Darrell ([EMAIL PROTECTED])
The diags.txt file is created as infomation whent he declude proc service is restarted. One thign you need to check is do you have a DNSOVERRIDE set in your declude.cfg file? Declude by default (as long as there is no DNSOVERRIDE) will use the IP of the DNS server in Imail Admin interface.

RE: [Declude.JunkMail] DNS Changes

2008-10-08 Thread Todd Richards
Hi Darrell - I do not have a DNSOVERRIDE in my declude.cfg file. I did change the DNS in the IMail Admin panel (under SMTP) to reflect my two new local DNS servers. Again, this will change as soon as I move my mail server to its new home. So at that point, I will need to make DNS changes again.

Re: [Declude.JunkMail] DNS Changes

2008-10-08 Thread Gary Steiner
Is there any documentation for DNSOVERRIDE? It doesn't seem to be mentioned on the Declude web site. The only reference I could find to it is http://www.mail-archive.com/declude.junkmail@declude.com/msg24658.html Gary Original Message From: Darrell ([EMAIL PROTECTED])

RE: [Declude.JunkMail] DNS Changes

2008-10-08 Thread David Barker
DNSSOVERIDE was only really applicable to Declude version 2.0 David B -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Wednesday, October 08, 2008 11:26 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] DNS Changes Is

Re[2]: [Declude.JunkMail] DNS Changes

2008-10-08 Thread Sanford Whiteman
Also, we suggest that you use the following DNS server with Declude 208.67.220.220. This is an OpenDNS server and it is extremely reliable. Sorry to be meddlesome, but recommending that a single, remote, uncontrolled DNS server always be used for Declude's RBL lookups kinda flies in

re: Re[2]: [Declude.JunkMail] DNS Changes

2008-10-08 Thread Linda Pagillo
Sandy, we suggest that you use the one that we recommend because 95% of issues with declude are related to in-house DNS servers not working to do recursive lookups correctly causing problems for our customers. I'm sure Todd has the skills to support his own DNS server as well, but that has

RE: Re[2]: [Declude.JunkMail] DNS Changes

2008-10-08 Thread Kevin Bilbee
I would have to agree with sandy. I use Open DNS at home as an extra step to keep my kids off of unwanted web site, I also use other measures. Two week ago we had no DNS services for an hour from OpenDNS. This would definitely cause issues with a mail server. I would place a CACHIND DNS software

RE: Re[2]: [Declude.JunkMail] DNS Changes

2008-10-08 Thread Linda Pagillo
Kevin, in our experience, the two OpenDNS servers (208.67.220.220 and 208.67.222.222) that we suggest be used with Declude, work wonderfully and the uptime is excellent. Like i said earlier, we here in support see a lot of problems from our customer's in-house DNS servers failing to do

Re[4]: [Declude.JunkMail] DNS Changes

2008-10-08 Thread Sanford Whiteman
Kevin, in our experience, the two OpenDNS servers (208.67.220.220 and 208.67.222.222) that we suggest be used with Declude, work wonderfully and the uptime is excellent. Uptime should be 100% on DNS servers. It's 2008! This should not even be a consideration. No matter how