>> From: "Malcolm Kynoch" <[EMAIL PROTECTED]>
>> Date: Wed, 11 Apr 2001 15:29:28 -0400

>> I'm hoping to poll declude users to find what version and configuration
there running. Also how well its catching spam. <<

Running 1.17b.  Configuration follows below.

>> I've implemented it and still am getting plowed with spam. <<

Well - that's the problem with all the Anti-Spam databases that Declude has
to rely on.  I've only been able to outright "hold" based on RBL and DUL and
OSSOFT.  Everything else I have to let pass, because the other databases are
too broad and include to many large providers with many legit users.

So I "WARN" on the other database and have my Outlook set up to filter based
on  header.  This way the mail is directed to a SPAM folder of my inbox.
Once I day I glance over the senders and subject lines to see if anything is
NOT spam before I delete the content.

I very much wish I could simply DELETE more suspected spam.  However, that
won't be possible until IF Declude had the option to either

   a) send a "SPAM Rejection" notification from <> to the sender (like it
does for detected Viri)

   b) if it was possible to hook BEFORE the SMTP process (by capturing Port
25) and dropping the connection for suspected SPAM.

The idea behind either feature would be - that the occasional "legit" sender
would be alerted that

   - the mail was not delivered,
   - (s)he should be using a different ISP that works pro-actively to
resolve spamming complaints so that they do NOT appear in those data bases.
(Go ahead, flame along <G>)


RBL             HOLD
DUL             HOLD

RSS             WARN
# RSS = false positives

ORBSALL         WARN
ORBSMAIN        WARN

ORBSMAN         WARN
# ORBSMAN = false positives

ORBSSRC         WARN
# ORBSSRV = false positives

ORBSNET         WARN

ORBSSRCNET      WARN
# ORBSSRCNET = false positives

ORBSTESTING     WARN

OSRELAY         WARN
OSDUL           HOLD
OSSRC           HOLD
OSSMART         WARN
OSSOFT          HOLD

MAILFROM        SUBJECT
# BADHEADERS      WARN
SPAMHEADER      WARN
# SPAMROUTING   WARN

HEUR            WARN


Best Regards
Andy Schmidt

Argos Networks
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-9411 x20 (Business)
Fax:    +1 201 934-9206

http://www.ArgosWeb.net/


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to