RE: [Declude.JunkMail] attachments ending in .text

2002-12-11 Thread R. Scott Perry


Go to your room!  This is weird.  The virus detector is catching it as it
says there is no file extension so it assumes the extension to be .exe.


Aha!


12/10/2002 11:03:03 Q1e400d65014a69ab Found file with mismatched extensions
[AR.B.S.ARB-AR.B.S.ARB]; assuming .exe


The problem here is that they are doing something funky and using 2 
different file extensions:

Content-Type: text/plain; name=AR.B.S.ARBCA2.FILE06.txt
Content-Disposition: attachment; filename=AR.B.S.ARBCA2.FILE06.TEXT


One has a .txt extension, the other has a .text extension.  The program he 
is using to send the E-mail is not working properly, and needs to be 
fixed.  Although the .txt and .text extensions are safe, Outlook has a 
vulnerability that can cause it to use the wrong extension in a case like 
this, which can cause a virus to slip through undetected (unless it is 
caught as a vulnerability).

Your customer needs to change it so that *both* instances of the filename 
use the .text extension.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] How do I know when a message is truly SPAM?

2002-12-11 Thread Timothy C. Bohen
Okay I think that our declude is working great.

But from time to time my boss will get a bunch of crap in a day and come to
me complaining about it not working.

From what I can tell he gives his email address out to anybody or anything
that asks for it.

Is there any way I can look at headers and say look boss this isn't really
spam you signed up for it, or yeah this is REAL spam.

Thanks



Timothy C. Bohen
CMSInter.Net LLC / Crystal MicroSystems LLC
===
web  : www.cmsinter.net
email: [EMAIL PROTECTED]
phone: 989.235.5100 x222
fax  : 989.235.5151

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] How do I know when a message is truly SPAM?

2002-12-11 Thread Timothy C. Bohen

Okay I think that our declude is working great.

But from time to time my boss will get a bunch of crap in a day and come to
me complaining about it not working.

From what I can tell he gives his email address out to anybody or anything
that asks for it.

Is there any way I can look at headers and say look boss this isn't really
spam you signed up for it, or yeah this is REAL spam.

Thanks



Timothy C. Bohen
CMSInter.Net LLC / Crystal MicroSystems LLC
===
web  : www.cmsinter.net
email: [EMAIL PROTECTED]
phone: 989.235.5100 x222
fax  : 989.235.5151

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] I've been reported!

2002-12-11 Thread Dan Horne
What do you do when uninformed (L)users start reporting you to spam
databases in error?  I received an email that was CC:ed to
[EMAIL PROTECTED] from some guy who got a 400 Million Email
Addresses spam with a forged, nonexistent email address on my domain in the
From: field.

Here is his message and my reply.  Anyone know about Abuse.net?  I'm gonna
start crawling their site and figure out how much damage was done.

Dan Horne


-Original Message-
From: Razook, Randy [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, December 11, 2002 4:38 AM
To: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'
Subject: [Potential SPAM]FW: 


I don't appreciate this spam on my domain. Please stop immediately.

Received: from kmrmail.kmr.ll.mit.edu ([172.22.10.5]) by 
msnexch1.kmr.ll.mit.edu with SMTP (Microsoft Exchange 
Internet Mail Service Version 5.5.2653.13)
  id XFCK7CVS; Wed, 11 Dec 2002 21:35:06 +1200
Received: from vgw.kmr.ll.mit.edu (vgw [172.22.10.22])
  by kmrmail.kmr.ll.mit.edu (8.9.3+Sun/8.9.3) with SMTP 
id VAA03148
  for [EMAIL PROTECTED]; Wed, 11 Dec 2002 
21:44:02 +1200
(GMT)
Received: from group33.kmr.ll.mit.edu ([172.21.100.12])
 by vgw.kmr.ll.mit.edu (NAVGW 2.5.2.9) with SMTP id 
M2002121121362317939  for [EMAIL PROTECTED]; 
Wed, 11 Dec 2002 21:36:40 +1200
Received: from newlink.kmr.ll.mit.edu 
(mailhost.kmr.ll.mit.edu [172.20.0.2])
  by group33.kmr.ll.mit.edu (8.8.4/8.8.4) with ESMTP
id EAA27542 for [EMAIL PROTECTED]; Wed, 11 Dec 
2002 04:42:22 -0500
Received: from newlink.kmr.ll.mit.edu (root@localhost)
  by newlink.kmr.ll.mit.edu with ESMTP id EAA15759
  for [EMAIL PROTECTED]; Wed, 11 Dec 2002 04:42:21 
-0500 (EST)
Received: from 80.56.162.148 (f162148.upc-f.chello.nl [80.56.162.148])
  by newlink.kmr.ll.mit.edu with SMTP id EAA15741
  for [EMAIL PROTECTED]; Wed, 11 Dec 2002 04:41:22 
-0500 (EST)
Message-Id: [EMAIL PROTECTED]
Received: from 87.15.78.89 ([87.15.78.89]) by pet.vosn.net 
with local; Dec, 11 2002 4:27:25 AM -0200
Received: from 11.139.74.233 ([11.139.74.233]) by 
n7.groups.yahoo.com with NNFMP; Dec, 11 2002 3:38:03 AM +1100
Received: from [42.47.39.56] by mta6.snfc21.pbi.net with 
SMTP; Dec, 11 2002 2:16:59 AM +1200
From: drmsTiffany DeMille Reese [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: 
Subject: 
Sender: drmsTiffany DeMille Reese [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Date: Wed, 11 Dec 2002 04:40:55 -0500
X-Mailer: Microsoft Outlook Express 6.00.2600.

-Original Message-
From: drmsTiffany DeMille Reese [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, December 11, 2002 9:41 PM
To: [EMAIL PROTECTED]
Subject: 



400 MILLION Email Addresses in a 3 volume, 5-disk set

** Complete package only $139!! **
--EDIT:  Standard SPAM Message Cut Out---

---Begin My Reply---

This email did not come from my domain.  In fact, a simple glance at the
headers would have confirmed that it never even touched my domain.  This
message entered your mail system from a server in the Netherlands, as
evidenced by the following:

Received: from 80.56.162.148 (f162148.upc-f.chello.nl [80.56.162.148])
by newlink.kmr.ll.mit.edu with SMTP id EAA15741
for [EMAIL PROTECTED]; Wed, 11 Dec 2002 04:41:22
-0500 (EST)

Furthermore, the site it is directing you to visit is located in China.  

Reporting us to abuse.net is not going to do anything to reduce your level
of spam, it will only disrupt our business practices.  A spammer could just
as easily use [EMAIL PROTECTED] as their return address.  Does that mean
you should be reported to abuse.net?  If I go into my account properties in
Outlook, I can easily set my return address to anything I want.  A *VERY*
quick glance at abuse.net provided this little nugget (and I quote): If
you're complaining about junk e-mail, the From: header on spam is almost
always forged, so you need to look at other header information to figure out
who's responsible. (http://www.abuse.net/howwork.html)

Answer me this:  Why would a travel agency attempt to sell you 400 Million
Email addresses?

I implore you, the next time you report someone to Abuse.net make sure you
are reporting the correct person.  Now, because of you, I have to figure out
how to let abuse.net know that I am not a spammer.  That wastes my time and
resources.

Dan Horne
Systems Administrator
Wilcox Travel Agency, Inc.
[EMAIL PROTECTED]




---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] I've been reported!

2002-12-11 Thread R. Scott Perry


What do you do when uninformed (L)users start reporting you to spam
databases in error?


That's usually easy to deal with.

If they submitted you to a spam database that requires proof of spamming, 
you need to fix the problem that caused the spam to get out.

If they submitted you to a spam database that doesn't require any proof of 
spamming, don't worry about it; anyone using such a test will lose a lot of 
their mail.

I received an email that was CC:ed to
[EMAIL PROTECTED] from some guy who got a 400 Million Email
Addresses spam with a forged, nonexistent email address on my domain in the
From: field.


This you don't have to worry about.  It's impossible to list your domain in 
standard spam databases; only IPs get listed (with a few rare exceptions).

Here is his message and my reply.  Anyone know about Abuse.net?  I'm gonna
start crawling their site and figure out how much damage was done.


abuse.net is just a 'clearinghouse' of abuse@ addresses, nothing more, as 
far as I know.  The [EMAIL PROTECTED] address simply re-routes 
the E-mail to [EMAIL PROTECTED] (or another address, if you have a 
different address registered there).

We have a canned response we send to people who send us complaints where 
the E-mail didn't originate from us (we have one domain that for some 
reason gets occasional abuse@ complaints like the one you saw).
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] I've been reported!

2002-12-11 Thread John Tolmachoff
We have a canned response we send to people who send us
complaints where 
the E-mail didn't originate from us (we have one domain that for some 
reason gets occasional abuse@ complaints like the one you saw).

Would you care to share your response with us please? :))

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] I've been reported!

2002-12-11 Thread R. Scott Perry


We have a canned response we send to people who send us
complaints where
the E-mail didn't originate from us (we have one domain that for some
reason gets occasional abuse@ complaints like the one you saw).

Would you care to share your response with us please? :))


The one we have is in the format:

---
Thank you for sending E-mail to [EMAIL PROTECTED]  However, after 
reviewing the E-mail that you sent, it appears that it was not sent from 
any users of [organization name], and never went through any of our 
servers.  If you feel that our analysis was in error, please re-send the 
E-mail and explain why you think that example.com was involved.  Thank you.
---

This is for a domain that often gets abuse@ complaints that for E-mails 
that don't even have any IP/domain in them that are associated with our 
domain (the abuse@ address has accidentally been listed some places as a 
generic abuse@ address), so it may not be appropriate for all 
situations.  I'm sure someone could come up with a more detailed canned 
response that would help explain why a spam with 'example.com' in the 
headers probably has nothing to do with example.com.
   -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Declude JunkMail v1.65 (release)released

2002-12-11 Thread John Tolmachoff
 Ah nice n easy.. I know it's working because I can see the actions in
the logs.

I thing I make a habit of now is as soon as I go to the new version, I run
declude -diag from within the directory it is in so as to check that it is
correct.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Declude JunkMail v1.65 (release)released

2002-12-11 Thread paul
 I thing I make a habit of now is as soon as I go to the new version, I run
 declude -diag from within the directory it is in so as to check that it is
 correct.

Ah, ok John, I see that now. Thanks! I'll make a note of that myself.

Paul


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] IBM article about spam and telemarketers

2002-12-11 Thread Charles Frolick
This is a very naive approach.  If it deals with billing, it will need
lots of legislation, tax law consideration, it will cause the owner of
the phone number or email to deal with taxes for the collected income.
Not to mention the crack pots that will say it is $10,000 to place an
unwanted call or email to them.  Plus it will involve a major evolution
in call handling software, and header insertion is not a feature of most
mail clients, especially web based clients.  It's an interesting idea,
but not as simple as the author would like you to think.

Thanks,
Chuck Frolick
ArgoNet, Inc.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Keith Purtell
Sent: Wednesday, December 11, 2002 12:18 PM
To: Declude JunkMail (E-mail)
Subject: [Declude.JunkMail] IBM article about spam and telemarketers


This link goes to an interesting article about spam and telemarketers
...

http://www.research.ibm.com/journal/sj/414/forum.pdf

Keith Purtell, Web/Network Administrator
VantageMed Operations (Kansas City)
Email:  [EMAIL PROTECTED]


CONFIDENTIALITY NOTICE: This email message, including any attachments,
is for the sole use of the
intended recipient(s) and may contain confidential and privileged
information. Any unauthorized
review, use, disclosure or distribution is prohibited. If you are not
the intended recipient, please
contact the sender by reply email and destroy all copies of the original
message.

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] Weird Message in headers?

2002-12-11 Thread Grant Griffith
Can anyone explain this?  Not sure when I began receiving it, but can not
find what is causing this.  The message caught is actually from this list.

X-RBL-Warning: SUMMIT: Your mail bounced because the server you sent it to
is using a blocklist which no longer exists (blackholes.2mbit.com)
X-RBL-Warning: SNIFFER: Message failed SNIFFER: 45.

Sincerely,
Grant Griffith, Vice President
EI8HT LEGS Web Management Co., Inc.
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Wednesday, December 11, 2002 1:59 PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Declude JunkMail v1.65 (release) released


We have just released Declude JunkMail v1.65 (release).  See
http://www.declude.com/junkmail/manual.htm .  For full details on additions
and changes since the last released version, see
http://www.declude.com/relnotes.htm .

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Weird Message in headers?

2002-12-11 Thread Grant Griffith
Weird, not all of them had the message and the text was commented out.  If
it is commented out, it still does some checking?

Sincerely,
Grant Griffith, Vice President
EI8HT LEGS Web Management Co., Inc.
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Wednesday, December 11, 2002 5:41 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Weird Message in headers?



Can anyone explain this?  Not sure when I began receiving it, but can not
find what is causing this.  The message caught is actually from this list.

X-RBL-Warning: SUMMIT: Your mail bounced because the server you sent it to
is using a blocklist which no longer exists (blackholes.2mbit.com)

Actually, all your E-mail will have that message.  :)

The SUMMIT test died out a few months ago.  If you remove all lines in your
Declude JunkMail configuration files that begin with SUMMIT, the problem
will disappear.
   -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] External test

2002-12-11 Thread John Tolmachoff
On an external test, for the returnvalue field, is it possible to accept a
range?

Example: 1-20   21-40   41-60   61-80   81-100

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] External test

2002-12-11 Thread R. Scott Perry


On an external test, for the returnvalue field, is it possible to accept a
range?

Example: 1-20   21-40   41-60   61-80   81-100


No, you can only match a single return code.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] Filter processing time.

2002-12-11 Thread John Tolmachoff
While do some testing with Junkmail in DEBUG mode, I noticed about 3 lines
for each filter line in a filter test.

How effective is Declude in doing say a 50 line filter test as compared to a
program that is doing a filter test of the same configuration?

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Declude JunkMail v1.65 (release) released

2002-12-11 Thread John Tolmachoff
Scott, I do not see it in the release notes, did the ISBLANK option of
SUBJECT in a filter make it in?

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Declude JunkMail v1.65 (release) released

2002-12-11 Thread Kami Razvan
I wonder if using

SUBJECT 5   IS  

Catch the blank subject..?

Regards,
Kami


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff
Sent: Wednesday, December 11, 2002 6:33 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Declude JunkMail v1.65 (release) released


Scott, I do not see it in the release notes, did the ISBLANK option of
SUBJECT in a filter make it in?

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com



---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Declude JunkMail v1.65 (release)released

2002-12-11 Thread R. Scott Perry


Scott, I do not see it in the release notes, did the ISBLANK option of
SUBJECT in a filter make it in?


Yes, it did.  :)
   -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Declude JunkMail v1.65 (release) released

2002-12-11 Thread John Tolmachoff
Yes, it did.  :)

Thanks

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Filter processing time.

2002-12-11 Thread R. Scott Perry


While do some testing with Junkmail in DEBUG mode, I noticed about 3 lines
for each filter line in a filter test.

How effective is Declude in doing say a 50 line filter test as compared to a
program that is doing a filter test of the same configuration?


If you are using the debug mode, it will be very ineffective.  :)

The debug will occasionally work differently than the standard logging (for 
example, it will start AV processes in a way that they will be visible), 
and will often include lines that appear to indicate a problem when there 
really is no problem.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Filter processing time.

2002-12-11 Thread John Tolmachoff
If you are using the debug mode, it will be very ineffective.

Not in debug mode, but general. I only noticed it in debug.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Filter processing time.

2002-12-11 Thread Sanford Whiteman
John,

 How  effective  is  Declude  in  doing  say a 50 line filter test as
 compared  to  a  program  that  is  doing  a filter test of the same
 configuration?

A little vague, no?

How  good  is  IMail  at  SMTP deliveries, compared to my proprietary
MTA?

-Sandy

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.