|
After reading
archives for the past two hours, I still do not understand why this is
happening. I completely removed BOUNCE from $default$.junkmail and
global.cfg. I changed it to delete.
As is evidenced
by the lines below, WEIGHT40 is set to LOG and WEIGHT50=IGNORE. But in my
cfg files I have them both set to DELETE. Redundant, I realize but I am
going bald right now trying to figure this out.
I believe this
file should have been deleted with a weight of 60. Am I wrong in this
belief and if so, how do I make it so?
03/05/2004 07:26:33 Q800304f9037efdbb SBL:20 SPAMHEADERS:20 FLOWGO:20
. Total weight = 60. 03/05/2004 07:26:33 Q800304f9037efdbb Warning:
misconfiguration in following line in configuration file (bounce is not an
ACTION). May be a duplicate test definition? 03/05/2004 07:26:33
Q800304f9037efdbb L1 Message OK 03/05/2004 07:26:33 Q800304f9037efdbb
Subject: *^*^*^ Good Morning !!*^*^*^*3/5/04 03/05/2004 07:26:33
Q800304f9037efdbb From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
IP: 12.129.205.75 ID: h9208m03u7o6 03/05/2004 07:26:33 Q800304f9037efdbb
Tests failed [weight=60]: SBL=IGNORE SPAMHEADERS=WARN WEIGHT40=LOG
WEIGHT50=IGNORE CATCHALLMAILS=IGNORE FLOWGO=WARN
$default$.junkmail
DSBL WARN
ORDB WARN
OSDUL WARN
OSFORM WARN
OSLIST WARN
OSRELAY WARN
OSSMART WARN
OSSOFT
WARN
OSSRC
WARN
SPAMCOP WARN
SPAMSUBJ
WARN
DSN WARN
NOABUSE WARN
NOPOSTMASTER WARN
MYFILTER WARN
BADHEADERS WARN
HELOBOGUS WARN
MAILFROM
WARN
PERCENT WARN
REVDNS WARN
ROUTING WARN
SPAMHEADERS WARN
#SNIFFER WARN
WEIGHT20 WARN
WEIGHT30 WARN
WEIGHT40 DELETE
WEIGHT50 DELETE
MAILTO WARN
KFROM WARN
COUNTRY WARN
COMMENTS20 WARN
COMMENTS40 WARN
COMMENTS60 WARN
COMMENTS80 WARN
COMMENTS100 WARN
COMMENTS120 WARN
global.cfg
DSBL WARN
ORDB WARN
#OSDUL WARN
OSFORM WARN
OSLIST WARN
OSRELAY WARN
OSSMART WARN
OSSOFT
WARN
OSSRC
WARN
SPAMCOP WARN
DSN WARN
NOABUSE WARN
NOPOSTMASTER WARN
BADHEADERS WARN
HELOBOGUS WARN
KFROM WARN
MAILFROM
WARN
MAILTO WARN
PERCENT WARN
REVDNS WARN
ROUTING WARN
SPAMHEADERS WARN
SPAMSUBJ WARN
#SNIFFER WARN
WEIGHT10 WARN
WEIGHT20 WARN
WEIGHT40 DELETE
WEIGHT50 DELETE
Jim
Rooth
Clotron,
Inc
[EMAIL PROTECTED]
214.244.0979
“If
you can read this…thank a teacher
If you
are reading this in English, thank a veteran!”
Jim,
It's
the fact that administrators bounce spam or unaddressable E-mail accepted by
gateways for large sites like AOL and Yahoo that have completely ruined the
use of the nobody alias for my domains because this forged stuff is constantly
hitting my server, bounced from someone like you or someone like Yahoo and
AOL. I've had a single person get over 200 bounce messages a day for
things they didn't receive. As a result of this, I now have to score
system notifications from other servers high in order to hopefully catch them
on a single bit of content returned that I also sometimes false positive on
legitimate bounces. If people stopped bouncing trash, none of this would
be necessary.
As far as your customer goes, allowing them to tell you
to bounce spam is the equivalent of telling you to spam for them IMO. I
will not bounce for my customers, I will capture in an account and they can go
through that account looking for false positives if they wish, but being to
lazy to want to bother is no excuse to bounce.
It doesn't matter if you
only get 100 spams a day, you just shouldn't bounce. The same thing goes
for virus notifications IMO. Don't send me notices for any virus to my
postmaster address, and please don't send notices to my customers...reason
being, 99.9% of them are from forged addresses these days, and this causes 100
times more harm than good.
Matt
Jim Rooth wrote:
Heck, I thought they had 10 gears but the 10th and 9th were reversed to
give you a great overdrive. Shows what I know. I will check the
archives again and see if I can find something that tells me different
than don't use BOUNCE! That would be the simplest solution...
Jim Rooth
Clotron, Inc
[EMAIL PROTECTED]
214.244.0979
"If you can read this.thank a teacher
If you are reading this in English, thank a veteran!"
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff
(Lists)
Sent: Thursday, March 04, 2004 6:17 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Bounce not an action??
Jim Jim Jim. What can I say. Sometimes, it is hard to use that new
fangled transmission that only has 9 gears instead of 13.
Check the current JunkMail manual and archives, and you will be
surprised.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED]] On Behalf Of Jim Rooth
Sent: Thursday, March 04, 2004 4:12 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Bounce not an action??
Not because I want to, that's for sure. But I have my largest
customer who wants all mail to be sent back so the sender can see
their email didn't go through. They average 900 emails a day just
from bounces! The overhead caused by it is extremely detrimental but
they pay the bill like clockwork.
I just went through and I lied to you. It started yesterday at 1311
which is when I loaded the v178.i9 on the server.
Jim Rooth
Clotron, Inc
[EMAIL PROTECTED]
214.244.0979
"If you can read this.thank a teacher
If you are reading this in English, thank a veteran!"
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott
Perry
Sent: Thursday, March 04, 2004 5:58 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Bounce not an action??
I have WEIGHT40 set to bounce in the global.cfg.
I know you're looking for an answer, but before I give it to you, can
I ask why you are using "WEIGHT40 BOUNCE"?
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail
mailservers since 2000. Declude Virus: Catches known viruses and is
the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
---
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
---
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
--
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================
|
