To those that are reporting this issue, are you running Hijack? John T eServices For You
"Seek, and ye shall find!" > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Kevin > Sent: Tuesday, April 25, 2006 2:09 PM > To: [email protected] > Subject: RE: [Declude.JunkMail] Emails not be scanned by Declude > > Hi, > > We are seeing this on our system too. Some emails are not being > processed by Declude. > > Kevin > > At 08:53 AM 4/25/2006, you wrote: > >I'm also interested in this problem. I have left our system on IMail 8.15 > >and Declude 1.82 because of this. It doesn't seem to happen on this version. > >I would really like to find a workaround so I can upgrade. > > > >-----Original Message----- > >From: [EMAIL PROTECTED] > >[mailto:[EMAIL PROTECTED] On Behalf Of John Olden > >Sent: Tuesday, April 25, 2006 8:54 AM > >To: [email protected] > >Subject: Re: [Declude.JunkMail] Emails not be scanned by Declude > > > >These types have become an increasing menace to our system also. It does > >fail some of our Declude tests but it does not get scanned by Spamchk > >which would have put them over the hold limit. > >Has anyone come up with an alternative test for this? We've just > >recently switched over to the Pro version of Declude so I'm not familiar > >with filters yet. > > > >On a side note, we subject tag all messages over the hold level with > >their spam score. When using Spam Review, there are a bunch of messages > >that were held but the subject is listed as one of the header fields. > >Usually the ones that are from Yahoo or Hotmail and have > >"To:MIME-Version..." or "To:In-Reply-To:MIME-Version..." in the Spam > >Review Subject column are legitimate message (false positives) while the > >ones that have "X-complaints-To::Content-Transfer-Encoding;" are all spam. > >All other Spam Review columns are correct. Anyone have a test/remedy for > >this? > > > >John Olden > >Systems Administrator > >Champaign Park District > > > > > > > > > >Michael Thomas - Mathbox wrote: > > > Hi, > > > > > > You might want to look at the entire typical file, in Notepad or Dump it > > > contents as hex values. I have noticed a similar percentage of spam that > >has > > > no carriage returns. Which means that the Declude headers get added to the > > > end of the file, rather than after the headers. If you also happen to run > > > invURIBL, you will note that the currently available version does not > >parse > > > the message, apparently because at most there is only one "line" in the > > > message. Don't know if this is your issue, but thought I would point it > >out > > > as a possiblity. If that is the case, it was fairly simple to write a test > > > for it. > > > > > > Mike > > > > > > > >--- > >This E-mail came from the Declude.JunkMail mailing list. To > >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >type "unsubscribe Declude.JunkMail". The archives can be found > >at http://www.mail-archive.com. > > > >--- > >This E-mail came from the Declude.JunkMail mailing list. To > >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >type "unsubscribe Declude.JunkMail". The archives can be found > >at http://www.mail-archive.com. > > > > > >__________ NOD32 1.1507 (20060425) Information __________ > > > >This message was checked by NOD32 antivirus system. > >http://www.eset.com > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
