[Declude.JunkMail] Wanted Spanish SPAM keywords file
Does anyone have a list of Spanish keywords that they filter on? I'd love to have one. Now that my Chinese and English language SPAM is under control, I have two users who are getting SPAMed in Spanish? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SPAMDOMAINS entry for freeserve.co.uk
Does anyone know a good spamdomains entry for the domain freeserve.co.uk? dnsstuff.com returns no mx records. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Printable manual
Is there a manual suitable for printing (not the html page) available on the website? thanks, Larry Craddock --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Printable manual
Is there a manual suitable for printing (not the html page) available on the website? The manual at http://www.declude.com/junkmail/manual.htm is the only version of the manual. It is designed to be printable. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: IMAIL domains expanding slowly.
I have been dealing with an issue for a few weeks now moving IMAIL to a BIG server. The old server is running good on dual 1.0 GIG procs. This is the basic Specs on the new server: DL380 G3 Compaq Dual 3.06 Zeon 2 Gigs factory Ram 6 Scsi drives Windows 2000 server I have done this migration by the books with 8.05 IMAIL, duplicating everything exactly. But IMAIL Administrator expands domains incredibly slow. Everything else, webmail, delivery looks fine. I have been through IMAIL support, and been through the registry checks, they are unable so far to find an answer. Has anyone else seen this or have any ideas to check on? I have tons of info to provide. Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems (813)232-4887 Ext. 112 [EMAIL PROTECTED] Managed Spam Filtering and Anti-Virus Protection for Your Internet Service - Available Today from Rapid Systems --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: IMAIL domains expanding slowly.
On-access virus scanner on the mail directory? I seem to remember av causing this symptom. Don -Original Message- From: Chris Patterson [mailto:[EMAIL PROTECTED] Sent: Monday, May 03, 2004 9:10 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] OT: IMAIL domains expanding slowly. I have been dealing with an issue for a few weeks now moving IMAIL to a BIG server. The old server is running good on dual 1.0 GIG procs. This is the basic Specs on the new server: DL380 G3 Compaq Dual 3.06 Zeon 2 Gigs factory Ram 6 Scsi drives Windows 2000 server I have done this migration by the books with 8.05 IMAIL, duplicating everything exactly. But IMAIL Administrator expands domains incredibly slow. Everything else, webmail, delivery looks fine. I have been through IMAIL support, and been through the registry checks, they are unable so far to find an answer. Has anyone else seen this or have any ideas to check on? I have tons of info to provide. Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems (813)232-4887 Ext. 112 [EMAIL PROTECTED] Managed Spam Filtering and Anti-Virus Protection for Your Internet Service - Available Today from Rapid Systems --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude HiJack: root account in hold1 folder
Hi! Does anybody know why my root account gets cought up in the hold1 folder when using Declude HiJack? Log entry: --- 05/03/2004 15:39:56 Q4bac085007e9 root is not local. --- Regards, Steinar Denne eposten er skannet og funnet fri for virus av Epost.no med Declude og FRISK F-Prot Software. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude HiJack: root account in hold1 folder
Does anybody know why my root account gets cought up in the hold1 folder when using Declude HiJack? Log entry: --- 05/03/2004 15:39:56 Q4bac085007e9 root is not local. That's probably because root isn't a valid E-mail address, and therefore is assumed to be highly suspicious. The E-mail should be addressed to [EMAIL PROTECTED] rather than just root. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude HiJack: root account in hold1 folder
This started happening just a few days ago. I have been running HiJack for 6 months now, without this being an issue. It seems to happen when Declude is sending Virus Alerts to me as the Admin. admin = root account. Where can I add the domain name to the root account? Another thing: If I set ALLOWIP 127.0.0.1 Will webmail become a spammers heaven? Thanks! Steinar -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: 3. mai 2004 15:53 To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude HiJack: root account in hold1 folder Does anybody know why my root account gets cought up in the hold1 folder when using Declude HiJack? Log entry: --- 05/03/2004 15:39:56 Q4bac085007e9 root is not local. That's probably because root isn't a valid E-mail address, and therefore is assumed to be highly suspicious. The E-mail should be addressed to [EMAIL PROTECTED] rather than just root. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Denne eposten er skannet og funnet fri for virus av Epost.no med Declude og FRISK F-Prot Software. Denne eposten er skannet og funnet fri for virus av Epost.no med Declude og FRISK F-Prot Software. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude HiJack: root account in hold1 folder
This started happening just a few days ago. I have been running HiJack for 6 months now, without this being an issue. It seems to happen when Declude is sending Virus Alerts to me as the Admin. admin = root account. Where can I add the domain name to the root account? That would be in the To: line in the \IMail\Declude\postmaster.eml file -- it should be To: [EMAIL PROTECTED] rather than To: root. Another thing: If I set ALLOWIP 127.0.0.1 Will webmail become a spammers heaven? That won't affect web messaging E-mails, as they are not counted by Declude Hijack (since those users must authenticate). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: IMAIL domains expanding slowly.
The Symantec carrier scans cfg file has been duplicated and moved over. We are also running McAffe NetSheild, same as on old server, config settings duplicated identically. Disabling NetSheild does not help. The cslive update interface is not identical on both servers. I installed and updated with same disk originally installed on original server. Is there any way to upgrade Carrier Scan as opposed to update? Anyone else have any ideas to check? Has anyone put IMAIL on Zeon Procs? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems (813)232-4887 Ext. 112 [EMAIL PROTECTED] Managed Spam Filtering and Anti-Virus Protection for Your Internet Service - Available Today from Rapid Systems -Original Message- From: Don L. Might [mailto:[EMAIL PROTECTED] Sent: Monday, May 03, 2004 9:22 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] OT: IMAIL domains expanding slowly. On-access virus scanner on the mail directory? I seem to remember av causing this symptom. Don -Original Message- From: Chris Patterson [mailto:[EMAIL PROTECTED] Sent: Monday, May 03, 2004 9:10 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] OT: IMAIL domains expanding slowly. I have been dealing with an issue for a few weeks now moving IMAIL to a BIG server. The old server is running good on dual 1.0 GIG procs. This is the basic Specs on the new server: DL380 G3 Compaq Dual 3.06 Zeon 2 Gigs factory Ram 6 Scsi drives Windows 2000 server I have done this migration by the books with 8.05 IMAIL, duplicating everything exactly. But IMAIL Administrator expands domains incredibly slow. Everything else, webmail, delivery looks fine. I have been through IMAIL support, and been through the registry checks, they are unable so far to find an answer. Has anyone else seen this or have any ideas to check on? I have tons of info to provide. Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems (813)232-4887 Ext. 112 [EMAIL PROTECTED] Managed Spam Filtering and Anti-Virus Protection for Your Internet Service - Available Today from Rapid Systems --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude HiJack: root account in hold1 folder
This is my postmasert.eml: To: [EMAIL PROTECTED] That is strange -- that should show up as [EMAIL PROTECTED]. IMail v8 and IMail v8.10 made a number of small changes in the way that it handles E-mail sent from Declude, so it may be related to that (it sounds like it may be processing aliases). Does the postmaster alias point to just root, or does it point to [EMAIL PROTECTED]? If it is just root, it should be changed to [EMAIL PROTECTED]. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude and SPF
Is there a tutorial available to set up SPF with Declude? Do I also have to set up records at spf.pobox.com for this to work? I have look at the wizard, but I am not quite certain as of how to set up my domain correctly. Regards, Steinar Denne eposten er skannet og funnet fri for virus av Epost.no med Declude og FRISK F-Prot Software. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude HiJack: root account in hold1 folder
The alias for Postmaster in IMail Admin was root. I have now changed it to [EMAIL PROTECTED] (I believe it started after upgrading and installing v8.10 with latest hotfix) Steinar -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: 3. mai 2004 16:35 To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude HiJack: root account in hold1 folder This is my postmasert.eml: To: [EMAIL PROTECTED] That is strange -- that should show up as [EMAIL PROTECTED]. IMail v8 and IMail v8.10 made a number of small changes in the way that it handles E-mail sent from Declude, so it may be related to that (it sounds like it may be processing aliases). Does the postmaster alias point to just root, or does it point to [EMAIL PROTECTED]? If it is just root, it should be changed to [EMAIL PROTECTED]. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Denne eposten er skannet og funnet fri for virus av Epost.no med Declude og FRISK F-Prot Software. Denne eposten er skannet og funnet fri for virus av Epost.no med Declude og FRISK F-Prot Software. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude and SPF
Is there a tutorial available to set up SPF with Declude? Do I also have to set up records at spf.pobox.com for this to work? I have look at the wizard, but I am not quite certain as of how to set up my domain correctly. There are two separate pieces: [1] Setting up your domain with an SPF record. To do this, all you need to do is add a TXT record for your domain. If your domain is example.com, and you want to say that E-mail from @example.com should only come from an IP in the MX record of example.com, you would add a TXT record for example.com of v=spf1 +mx -all. You can use the wizard to help you generate the correct SPF string. [2] Using SPF to help detect spam. To do this, you can use the latest beta of Declude JunkMail, and add the following lines to your \IMail\Declude\global.cfg file: SPFPASS spf passx -5 0 SPFFAIL spf failx 8 0 -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] IPBYPASS and HELO
If in the Global.cfg, If I have IPBYPASS and the IP of my backup MX, does that affect HELO in a filter test? Example, I have IPBYPASS and my backup MX. In a filter file for headers and such, I have a line HELO 5 CONTAINS backupmx.example.com. However, when a message comes through my backup MX, it never fails that test. John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] IPBYPASS and HELO
If in the Global.cfg, If I have IPBYPASS and the IP of my backup MX, does that affect HELO in a filter test? Yes. Declude JunkMail will then see the HELO of the server that connected to your backup MX record. Example, I have IPBYPASS and my backup MX. In a filter file for headers and such, I have a line HELO 5 CONTAINS backupmx.example.com. However, when a message comes through my backup MX, it never fails that test. Correct. That is the intended behavior. If you want to detect your backup mailserver in a filter, you could use HEADERS 5 CONTAINS backupmx.example.com. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude and SPF
Hi again, Scott! I really appreciate your help! The following part I can manage: [2] Using SPF to help detect spam. To do this, you can use the latest beta of Declude JunkMail, and add the following lines to your \IMail\Declude\global.cfg file: SPFPASS spf passx -5 0 SPFFAIL spf failx 8 0 But this part I do not quite understand. Can you give it to me with a teaspoon? :-) [1] Setting up your domain with an SPF record. To do this, all you need to do is add a TXT record for your domain. If your domain is example.com, and you want to say that E-mail from @example.com should only come from an IP in the MX record of example.com, you would add a TXT record for example.com of v=spf1 +mx -all. You can use the wizard to help you generate the correct SPF string. Where do I actually add the TXT Record for my domain, on my own server or at http://spf.pobox.com? Sorry, Steinar -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Denne eposten er skannet og funnet fri for virus av Epost.no med Declude og FRISK F-Prot Software. Denne eposten er skannet og funnet fri for virus av Epost.no med Declude og FRISK F-Prot Software. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude Products Training
Does Declude offer some kind of training for their products? With things in the virus/spam world getting out of control, it would be great to get into some kind of training to be sure I am doing all that I can. No, we do not currently offer any training courses. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Products Training
Nothing like OJT, as far as I'm concernedthough the bad sometimes outweighs the good when it comes to this spam/virus stuff. -Original Message- Does Declude offer some kind of training for their products? With things in the virus/spam world getting out of control, it would be great to get into some kind of training to be sure I am doing all that I can. No, we do not currently offer any training courses. [AUTOMATED NOTE: Your mail server [66.196.248.34] is missing a reverse DNS entry. All Internet hosts are required to have a reverse DNS entry. The missing reverse DNS entry will cause your mail to be treated as spam on some servers, such as AOL.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Products Training
I do not think so, at least not yet. However, there are some of us on this list that can offer to help get things going and such. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Bridges, Samantha Sent: Monday, May 03, 2004 11:53 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Declude Products Training Hi Scott - Does Declude offer some kind of training for their products? With things in the virus/spam world getting out of control, it would be great to get into some kind of training to be sure I am doing all that I can. Samantha Bridges Communications Technician Macomb Intermediate School District 44001 Garfield Road Clinton Township MI 48038-1100 (586) 228-3300 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Blocking Sender
I want to block anything sent from onlinelifetime.com. I could use BLACKLIST fromfile C:\iMail\Declude\blacklist.txt x 50 0 Or BLOCKSENDER filter C:\IMail\Declude\BlockSender.txt x 0 0 ( BlockSender.txt: HEADERS 50 CONTAINS @onlinelifetime.com HEADERS 50 CONTAINS .onlinelifetime.com ) It seems to me the second way would work better, catching anything the first filter would catch, and anything sent through onlinelifetime servers, even if they change the reply-to address. Why would one use a blacklist fromfile instead of a headers filter file? Is there a performance or CPU difference? Paul Fuhrmeister [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Blocking Sender
One thought: You'd have to use Blacklist if you didn't have JunkMail Pro. Only Pro has filtering. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 05/03/04 02:26PM I want to block anything sent from onlinelifetime.com. I could use BLACKLIST fromfile C:\iMail\Declude\blacklist.txt x 50 0 Or BLOCKSENDER filter C:\IMail\Declude\BlockSender.txt x 0 0 ( BlockSender.txt: HEADERS 50 CONTAINS @onlinelifetime.com HEADERS 50 CONTAINS .onlinelifetime.com ) It seems to me the second way would work better, catching anything the first filter would catch, and anything sent through onlinelifetime servers, even if they change the reply-to address. Why would one use a blacklist fromfile instead of a headers filter file? Is there a performance or CPU difference? Paul Fuhrmeister [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Blocking Sender
I want to block anything sent from onlinelifetime.com. I could use BLACKLIST fromfile C:\iMail\Declude\blacklist.txt x 50 0 Or BLOCKSENDER filter C:\IMail\Declude\BlockSender.txt x 0 0 ( BlockSender.txt: HEADERS 50 CONTAINS @onlinelifetime.com HEADERS 50 CONTAINS .onlinelifetime.com ) Either of those would work, although the first way is more efficient (since it just has to check the return address, rather than all the headers). It seems to me the second way would work better, catching anything the first filter would catch, and anything sent through onlinelifetime servers, even if they change the reply-to address. Correct. Why would one use a blacklist fromfile instead of a headers filter file? Is there a performance or CPU difference? Several reasons. One is anti-spam programs typically have a sender blacklist in them, whereas they typically do not have filters. So people are more used to sender blacklists than filters. Another is that filtering is only available in Declude JunkMail Pro. Finally, there is the CPU issue, since filtering the headers is a bit more CPU intensive. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Products Training
Are you one of the us? Please contact me off-list for more information. I really wish that Declude would offer some kind of training or conference. Even though Declude is a easy to understand app, it would be helpful to know if I am setting up and properly maintaining my declude products. Not everything to learn and know can be accomplished from a forum alone. These are very complex times with viruses and spam and such... A bit more support would be great. I know I am not the only one who does more than just email. Network security, application training, user support, 43 server to maintain (web servers, exchange servers, altiris servers, routers, switches, . And the list goes on. The point is, I don't always have time to read all the forum information. Scott does a wonderful job with his support online, but call me old schoolI Like To TALK To Humans When Need Be...I'll even pay for it too! [EMAIL PROTECTED] Thanks -Original Message- From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] Sent: Monday, May 03, 2004 3:09 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude Products Training I do not think so, at least not yet. However, there are some of us on this list that can offer to help get things going and such. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Bridges, Samantha Sent: Monday, May 03, 2004 11:53 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Declude Products Training Hi Scott - Does Declude offer some kind of training for their products? With things in the virus/spam world getting out of control, it would be great to get into some kind of training to be sure I am doing all that I can. Samantha Bridges Communications Technician Macomb Intermediate School District 44001 Garfield Road Clinton Township MI 48038-1100 (586) 228-3300 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Can you block this?
Date: %CURRENT_DATE_TIME I see this in tons of spam that gets blocked. Anyone try to block this? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems (813)232-4887 Ext. 112 [EMAIL PROTECTED] Managed Spam Filtering and Anti-Virus Protection for Your Internet Service - Available Today from Rapid Systems --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] NJABL:NJABL Open Relay / Dynamic IP Conflict
That is exactly right, Darin. It seems to me that any organization that knows that certain addresses are dynamic would want to expire the open proxy records on those IPs as quickly as possible. NJABL did respond to my query, basically by saying they keep open proxy records forever, but that anybody can delist an open proxy, so apparently they do not consider it a problem. I pointed out that I did initiate a delisting of the IP, but only after I lost mail, and that their handling of this situation diluted the accuracy and value of the open proxy test. No reply. -Dave - Original Message - From: Darin Cox [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, May 01, 2004 9:23 AM Subject: Re: [Declude.JunkMail] NJABL:NJABL Open Relay / Dynamic IP Conflict This is a common occurrence with dynamic IPs. Some spammer sends while he has it or it's an open proxy, then someone else gets the IP and is penalized for the previous activity. I think what you're suggesting is that there needs to be some sort of age-out mechanism for blocks against dynamic IPs, to remove them from open proxy or spam blocks after a certain time if no further activity is recorded. Can't be perfect, but might help of BLs implemented it. Obviously the IP would remain in DYNABLOCK. Darin. - Original Message - From: Dave Doherty [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, May 01, 2004 12:13 AM Subject: [Declude.JunkMail] NJABL:NJABL Open Relay / Dynamic IP Conflict Hi, all- I have a cable modem in my apartment with a dynamic IP. I sent a couple of emails tonight to others at my domain. These messages FP'd. They were caught by NJABL, which has my current address listed as an open proxy, with a listing date in January. This address is also listed (correctly) in DYNABLOCK. But if it's a dynamic address, the IP of whatever open proxy existed in January has certainly changed. Does anyone else see the illogic in NJABL's lists, or am I crazy? Anyway, I am adjusting the weights of the NJABL tests so that no combination can result in a hold weight. -DaveDoherty Skywaves, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] NJABL:NJABL Open Relay / Dynamic IP Conflict
Scott- Any chance of getting an AND / AND NOT kind of test so we could set up different weights for an open proxy depending on whether it shows up on a DUL or DYNA list? Like this: OPENPROXY and DYNABLOCK 3 OPENPROXY and not DYNABLOCK 5 I think we might define the tests (with weight zero) in global.cfg and run this in $default$.junkmail. It would require that $default$.junkmail be abkle to add weight, though... I htink this functionality has been requested before, but in a different context. I cannot recall what that was. -Dave - Original Message - From: Dave Doherty [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, May 03, 2004 11:32 PM Subject: Re: [Declude.JunkMail] NJABL:NJABL Open Relay / Dynamic IP Conflict That is exactly right, Darin. It seems to me that any organization that knows that certain addresses are dynamic would want to expire the open proxy records on those IPs as quickly as possible. NJABL did respond to my query, basically by saying they keep open proxy records forever, but that anybody can delist an open proxy, so apparently they do not consider it a problem. I pointed out that I did initiate a delisting of the IP, but only after I lost mail, and that their handling of this situation diluted the accuracy and value of the open proxy test. No reply. -Dave - Original Message - From: Darin Cox [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, May 01, 2004 9:23 AM Subject: Re: [Declude.JunkMail] NJABL:NJABL Open Relay / Dynamic IP Conflict This is a common occurrence with dynamic IPs. Some spammer sends while he has it or it's an open proxy, then someone else gets the IP and is penalized for the previous activity. I think what you're suggesting is that there needs to be some sort of age-out mechanism for blocks against dynamic IPs, to remove them from open proxy or spam blocks after a certain time if no further activity is recorded. Can't be perfect, but might help of BLs implemented it. Obviously the IP would remain in DYNABLOCK. Darin. - Original Message - From: Dave Doherty [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, May 01, 2004 12:13 AM Subject: [Declude.JunkMail] NJABL:NJABL Open Relay / Dynamic IP Conflict Hi, all- I have a cable modem in my apartment with a dynamic IP. I sent a couple of emails tonight to others at my domain. These messages FP'd. They were caught by NJABL, which has my current address listed as an open proxy, with a listing date in January. This address is also listed (correctly) in DYNABLOCK. But if it's a dynamic address, the IP of whatever open proxy existed in January has certainly changed. Does anyone else see the illogic in NJABL's lists, or am I crazy? Anyway, I am adjusting the weights of the NJABL tests so that no combination can result in a hold weight. -DaveDoherty Skywaves, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
