Re: [Declude.JunkMail] Best Test for SPAM from AOL, Yahoo
Would you mind posting your global.cfg? Redact whatever you want private. With that maybe some good suggestions can be made -Nick Hayer From: TC Online Support [EMAIL PROTECTED] To: Declude.JunkMail [EMAIL PROTECTED] Subject:[Declude.JunkMail] Best Test for SPAM from AOL, Yahoo Date sent: Wed, 28 Jan 2004 15:20:42 -0600 Send reply to: [EMAIL PROTECTED] What are the best test weights to use for scanning e-mails from AOL and Yahoo. We are catching many valid e-mails and many SPAM e-mails are going through. We have been getting many complaints from customers about blocking valid e-mails that we have been temporarily whitelisted the domains. Also are there any other tests that can be done to stop the amount of SPAM sent to our uses. 80%-90% of our network traffic is incoming SPAM and much is going through. Thanks, Isaias Hernandez TC Online Internet Tech Support [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Best Test for SPAM from AOL, Yahoo
This is our global.cfg file. Isaias Hernandez -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Wednesday, January 28, 2004 3:41 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Best Test for SPAM from AOL, Yahoo Would you mind posting your global.cfg? Redact whatever you want private. With that maybe some good suggestions can be made -Nick Hayer From: TC Online Support [EMAIL PROTECTED] To: Declude.JunkMail [EMAIL PROTECTED] Subject:[Declude.JunkMail] Best Test for SPAM from AOL, Yahoo Date sent: Wed, 28 Jan 2004 15:20:42 -0600 Send reply to: [EMAIL PROTECTED] What are the best test weights to use for scanning e-mails from AOL and Yahoo. We are catching many valid e-mails and many SPAM e-mails are going through. We have been getting many complaints from customers about blocking valid e-mails that we have been temporarily whitelisted the domains. Also are there any other tests that can be done to stop the amount of SPAM sent to our uses. 80%-90% of our network traffic is incoming SPAM and much is going through. Thanks, Isaias Hernandez TC Online Internet Tech Support [EMAIL PROTECTED] # # Declude JunkMail configuration file. # # This file has the global Declude JunkMail settings, defines the tests, and lists the # actions to take on outgoing E-mail (for the Pro version; not normally used). # CODE3C3EF29C # in the LOGFILE option, if present, automatically gets replaced with the month/date. LOGFILE spool\dec.log LOGLEVELLOW HOP 0 #HOPHIGH1 # # Below are some advanced options # XINHEADER X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. XINHEADER X-Spam-Tests-Failed: %TESTSFAILED% [%WEIGHT%] #XINHEADER X-Country-Chain: %COUNTRYCHAIN% XOUTHEADER X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. XSENDER ON XSPOOLNAME OFF #XINHEADER X-Note: This E-mail was sent from %REVDNS% ([%REMOTEIP%]). #XOUTHEADER Organization: Your Name Here #IPBYPASS 127.0.0.1 WHITELIST HABEAS # # Definitions of the tests to use (do not edit unless you know what you are doing). # These must come before the actions. # # First is the name of the check, then the type of check (ip4r is a DNS lookup using # the reverse of the IP address). # # For type ip4r, 'matchstring' is the string to look for, or * for anything. # DSBLip4rlist.dsbl.org * 10 0 MONKEYFORMMAIL ip4rformmail.relays.monkeys.com * 10 0 MONKEYPROXIES ip4rproxies.relays.monkeys.com * 10 0 ORDBip4rrelays.ordb.org * 5 0 OSDIPS ip4rrelays.osirusoft.com127.0.0.3 5 0 OSFORM ip4rrelays.osirusoft.com127.0.0.8 6 0 OSLIST ip4rrelays.osirusoft.com127.0.0.7 5 0 OSPROXY ip4rrelays.osirusoft.com127.0.0.9 7 0 OSRELAY ip4rrelays.osirusoft.com127.0.0.2 4 0 OSSMART ip4rrelays.osirusoft.com127.0.0.5 5 0 OSSOFT ip4rrelays.osirusoft.com127.0.0.6 5 0 OSSRC ip4rrelays.osirusoft.com127.0.0.4 1 0 SPAMCOP ip4rbl.spamcop.net 127.0.0.2 10 0 WIREHUB-DNSBL ip4rblackholes.wirehub.net 127.0.0.2 10 0 DSN rhsbl dsn.rfc-ignorant.org127.0.0.2 5 0 NOABUSE rhsbl abuse.rfc-ignorant.org 127.0.0.4 2 0 NOPOSTMASTERrhsbl postmaster.rfc-ignorant.org 127.0.0.3 2 0 BADHEADERS badheaders x x 8 0 BASE64 base64 x x 4 0 HELOBOGUS helovalid x x 7 0 MAILFROMenvfrom x x 12 0 IPNOTINMX ipnotinmx x x 1 0 PERCENT percent x x 10 0 REVDNS revdnsexistsx x 3 0 ROUTING spamrouting x x 5 0 SPAMHEADERS spamheaders x x 5 0 #SNIFFERexternalnonzero C:\IMail\Declude\Sniffer\sniffer.exe authentication 7 0 #WEIGHT5weight x x5 0 #WEIGHT7weight x x7 0 WEIGHT10weight x x 10 0 WEIGHT15weight x x 15 0 WEIGHT20weight x x 20 0 CATCHALLMAILS catchallmails
RE: [Declude.JunkMail] Best Test for SPAM from AOL, Yahoo
Isaias: You did not say what weights you hold and delete on. But here are a few things. You need to really clean up your global.cfg file 1.) osirusoft.com is dead I believe - you may want to replace these with SORBs 2.) Monkeys.com is also dead 3.) Wirehub is also dead. 4.) IPNOTINMX should be a negative weight (Scott can confirm this). I like using NJABL, spamhaus and mail-police bulk for blacklist. If you have the pro version you can do reverse DNS filter tests to give negative weights to Hotmail, aol and Yahoo servers. Chuck Schick Warp 8, Inc. 303-421-5140 www.warp8.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of TC Online Support Sent: Wednesday, January 28, 2004 2:55 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Best Test for SPAM from AOL, Yahoo This is our global.cfg file. Isaias Hernandez -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Wednesday, January 28, 2004 3:41 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Best Test for SPAM from AOL, Yahoo Would you mind posting your global.cfg? Redact whatever you want private. With that maybe some good suggestions can be made -Nick Hayer From: TC Online Support [EMAIL PROTECTED] To: Declude.JunkMail [EMAIL PROTECTED] Subject: [Declude.JunkMail] Best Test for SPAM from AOL, Yahoo Date sent:Wed, 28 Jan 2004 15:20:42 -0600 Send reply to:[EMAIL PROTECTED] What are the best test weights to use for scanning e-mails from AOL and Yahoo. We are catching many valid e-mails and many SPAM e-mails are going through. We have been getting many complaints from customers about blocking valid e-mails that we have been temporarily whitelisted the domains. Also are there any other tests that can be done to stop the amount of SPAM sent to our uses. 80%-90% of our network traffic is incoming SPAM and much is going through. Thanks, Isaias Hernandez TC Online Internet Tech Support [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Best Test for SPAM from AOL, Yahoo
Isaias, I suggest you start with a fresh global cfg.. many tests you have listed are now dead. http://www.declude.com/Release/177/GLOBAL.CFG [I am assuming you are running the latest beta] Add in your filters that you had created and I believe you will see a great improvement. -Nick Hayer From: TC Online Support [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject:RE: [Declude.JunkMail] Best Test for SPAM from AOL, Yahoo Date sent: Wed, 28 Jan 2004 15:55:08 -0600 Send reply to: [EMAIL PROTECTED] This is our global.cfg file. Isaias Hernandez -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Wednesday, January 28, 2004 3:41 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Best Test for SPAM from AOL, Yahoo Would you mind posting your global.cfg? Redact whatever you want private. With that maybe some good suggestions can be made -Nick Hayer From: TC Online Support [EMAIL PROTECTED] To: Declude.JunkMail [EMAIL PROTECTED] Subject: [Declude.JunkMail] Best Test for SPAM from AOL, Yahoo Date sent:Wed, 28 Jan 2004 15:20:42 -0600 Send reply to:[EMAIL PROTECTED] What are the best test weights to use for scanning e-mails from AOL and Yahoo. We are catching many valid e-mails and many SPAM e-mails are going through. We have been getting many complaints from customers about blocking valid e-mails that we have been temporarily whitelisted the domains. Also are there any other tests that can be done to stop the amount of SPAM sent to our uses. 80%-90% of our network traffic is incoming SPAM and much is going through. Thanks, Isaias Hernandez TC Online Internet Tech Support [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
