RE: [Declude.JunkMail] Ignore IP4R-Tests for certain countries

2004-08-18 Thread Scott Fisher
I also recall of some problems with some fields having problems with one of the 
comparisons (endswith / startwith / notendswith) when an exact match. I thought it was 
fixed somewhere in the line.

I use the COUNTRY and IS test in my filters:
COUNTRY 1 IS US
(Since Country refers to the last in the chain it should be only two characters, I 
think IS would be the best choice, or NOTIS).
I've also used 
COUNTRY 25 NOTENDSWITH US
(I probably should convert that to a NOTIS, but it was written pre-NOTIS).

The Mailpure filters I also use use COUNTRIES and CONTAINS:
COUNTRIES 1 CONTAINS US

Since COUNTRIES may contain more than one, CONTAINS or NOTCONTAINS would be the best 
choices.


<<< [EMAIL PROTECTED]  8/18  4:06p >>>

This one was hold as spam and it was spam.
But as you can see COMBO-IP4R-ALL hasn't added points (or was ENDed
perviously?)


X-Spam-Tests-Failed: CBL, SPAMCOP, ...  WEIGHT75, WEIGHT100 [127]
X-Country-Chain: UNITED STATES->ITALY->destination


Can someone explain me how to use COUNTRY, COUNTRIES and STARTSWITH,
CONTAINS, ... ?

Thanks
Markus



 

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
> Sent: Wednesday, August 18, 2004 8:12 PM
> To: [EMAIL PROTECTED]
> Subject: [Declude.JunkMail] Ignore IP4R-Tests for certain countries
> 
> 
> I've asked several times to have CIDR-IP bypassing or as 
> alternative solution ignore IP's from a certain country.
> 
> In the meantime I've set up the following workaround:
> 
> STEP 1)
> In the global.cfg keep all IP4R-tests as they are but set the 
> weight down to
> 1 or zero.
> 
> STEP 2)
> Create a new filter test COMBO-IP4R-ALL (requires 
> Declude.Pro) At the top of the filter-file put END statements 
> for the countries you want to ignore for IP4R-tests. (for 
> example "it" Italy and "de" for Germany) Below put a 
> TESTFAILED line for each IP4R-test and assign the weight you 
> has given before in the global.cfg file
> 
> 
> COUNTRY   END STARTSWITH  it
> COUNTRY   END STARTSWITH  de
> 
> TESTSFAILED 10 CONTAINS CBL
> TESTSFAILED 10 CONTAINS DSBL
> TESTSFAILED 10 CONTAINS ORDB
> TESTSFAILED 15 CONTAINS SPAMCOP
> TESTSFAILED 10 CONTAINS INTERSIL
> 
> 
> 
> 
> 
> In theory this should assign points for IP-Blacklists only if 
> the country-chain does not start with "Italy" or "Germany"
> Looking at the logfiles shows that it's working...
> 
> ... but today there are some legit messages in the hold 
> folder with the following X-lines in the header:
> 
> 
> X-Spam-Tests-Failed: SORBS-SPAM, ... COMBO-IP4R-ALL, WEIGHT100 [135]
> X-Country-Chain: ITALY->UNITED STATES->destination
> 
> And another one 
> 
> X-Spam-Tests-Failed: FIVETEN-FREE, ... COMBO-IP4R-ALL, WEIGHT100 [128]
> X-Country-Chain: ITALY->destination
> 
> 
> So or I haven't yet understand how country-chain is working 
> or there must be some error.
> How it's possible that COMBO-IP4R-ALL can fail if it's 
> starting with  the line
> 
> COUNTRY   END STARTSWITH  it
> 
> and the country-chain for the message is "ITALY->UNITED 
> STATES->destination"
> or "ITALY->destination"  ?
> 
> 
> Markus
> 
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus 
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
> type "unsubscribe Declude.JunkMail".  The archives can be 
> found at http://www.mail-archive.com.
> 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Ignore IP4R-Tests for certain countries

2004-08-18 Thread Markus Gufler

This one was hold as spam and it was spam.
But as you can see COMBO-IP4R-ALL hasn't added points (or was ENDed
perviously?)


X-Spam-Tests-Failed: CBL, SPAMCOP, ...  WEIGHT75, WEIGHT100 [127]
X-Country-Chain: UNITED STATES->ITALY->destination


Can someone explain me how to use COUNTRY, COUNTRIES and STARTSWITH,
CONTAINS, ... ?

Thanks
Markus



 

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
> Sent: Wednesday, August 18, 2004 8:12 PM
> To: [EMAIL PROTECTED]
> Subject: [Declude.JunkMail] Ignore IP4R-Tests for certain countries
> 
> 
> I've asked several times to have CIDR-IP bypassing or as 
> alternative solution ignore IP's from a certain country.
> 
> In the meantime I've set up the following workaround:
> 
> STEP 1)
> In the global.cfg keep all IP4R-tests as they are but set the 
> weight down to
> 1 or zero.
> 
> STEP 2)
> Create a new filter test COMBO-IP4R-ALL (requires 
> Declude.Pro) At the top of the filter-file put END statements 
> for the countries you want to ignore for IP4R-tests. (for 
> example "it" Italy and "de" for Germany) Below put a 
> TESTFAILED line for each IP4R-test and assign the weight you 
> has given before in the global.cfg file
> 
> 
> COUNTRY   END STARTSWITH  it
> COUNTRY   END STARTSWITH  de
> 
> TESTSFAILED 10 CONTAINS CBL
> TESTSFAILED 10 CONTAINS DSBL
> TESTSFAILED 10 CONTAINS ORDB
> TESTSFAILED 15 CONTAINS SPAMCOP
> TESTSFAILED 10 CONTAINS INTERSIL
> 
> 
> 
> 
> 
> In theory this should assign points for IP-Blacklists only if 
> the country-chain does not start with "Italy" or "Germany"
> Looking at the logfiles shows that it's working...
> 
> ... but today there are some legit messages in the hold 
> folder with the following X-lines in the header:
> 
> 
> X-Spam-Tests-Failed: SORBS-SPAM, ... COMBO-IP4R-ALL, WEIGHT100 [135]
> X-Country-Chain: ITALY->UNITED STATES->destination
> 
> And another one 
> 
> X-Spam-Tests-Failed: FIVETEN-FREE, ... COMBO-IP4R-ALL, WEIGHT100 [128]
> X-Country-Chain: ITALY->destination
> 
> 
> So or I haven't yet understand how country-chain is working 
> or there must be some error.
> How it's possible that COMBO-IP4R-ALL can fail if it's 
> starting with  the line
> 
> COUNTRY   END STARTSWITH  it
> 
> and the country-chain for the message is "ITALY->UNITED 
> STATES->destination"
> or "ITALY->destination"  ?
> 
> 
> Markus
> 
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus 
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
> type "unsubscribe Declude.JunkMail".  The archives can be 
> found at http://www.mail-archive.com.
> 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Ignore IP4R-Tests for certain countries

2004-08-18 Thread Markus Gufler

> I had trouble with COUNTRY and NOTCONTAINS in some of the 
> early 1.79 alphas. I think that problem was fixed around 1.79i6.

I've running 1.79i7 and updated now to the latest interim 16.

I can only hope that this strange "interims" will NOT solve my problem!
If yes it confirms me that interims are hidden updates for errors discovered
by a single user but other users has the error again because there was no
official announcement about the discovered error.


Markus



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] JunkMail evaluation

2004-08-18 Thread Scott Fisher
A couple of thoughts. 

If your Declude is on a gateway server, you'll need your actions to be set in the 
global.cfg. If Declude sits on your final mail server the $default$.junkmail

It wouldn't hurt to check the logs. There's a couple of tools out there that analyze 
the logs, but I can't recommend any since I use my own.

As for weighting, my personal opionion is that some of the initial weights are a 
little low: CBL, SBL and SPAMCOP, I'd put at least at 50% or 10 points if you are 
holding at 20.
Maybe consider adding the fiveten or the NJABL tests too.

Held e-mail should be in imail\spool\spam.

If you have the Junkmail Pro version and have the ability to add filters, search the 
archives for the Spamcop SURBL filter. It's also a pretty effective way to catch URL's 
in the body.
Also the Mailpure filters could be run with Declude Junkmail Pro. Good learning tools 
for creating your own filters.

You could also get / create your own spamdomains files to assist in spam catching. 
Some were posted in the archive in the distant past.

If you are interested in Declude long-term, the Message Sniffer is a great add-on. It 
catches a lot of spam, t works very well here.

<<< [EMAIL PROTECTED]  8/18  1:55p >>>
We setup the JunkMail evaluation on our IMAIL server.  We currently also use
Declude AntiVirus and are very happy with its results.
We setup JunkMail evaluation right out of the box and changing only weight20
to HOLD instead of WARN.  Does it write any held emails to IMail/spool/spam
directory or where?  I can't tell that any spam filtering it going on
because it seems that all emails are being passed and none are being held.
Does anyone have their $default$.JunkMail file that I could review settings
to see what I am missing or can Declude guys take a look and see what we
have setup wrong?

---
[This E-mail scanned for viruses by Advertinet Inc. Declude Virus Software ]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Ignore IP4R-Tests for certain countries

2004-08-18 Thread Scott Fisher
Just a thought:

I had trouble with COUNTRY and NOTCONTAINS in some of the early 1.79 alphas. I think 
that problem was fixed around 1.79i6.

<<< [EMAIL PROTECTED]  8/18  1:15p >>>

I've asked several times to have CIDR-IP bypassing or as alternative
solution ignore IP's from a certain country.

In the meantime I've set up the following workaround:

STEP 1)
In the global.cfg keep all IP4R-tests as they are but set the weight down to
1 or zero.

STEP 2)
Create a new filter test COMBO-IP4R-ALL (requires Declude.Pro)
At the top of the filter-file put END statements for the countries you want
to ignore for IP4R-tests. (for example "it" Italy and "de" for Germany)
Below put a TESTFAILED line for each IP4R-test and assign the weight you has
given before in the global.cfg file


COUNTRY END STARTSWITH  it
COUNTRY END STARTSWITH  de

TESTSFAILED 10 CONTAINS CBL
TESTSFAILED 10 CONTAINS DSBL
TESTSFAILED 10 CONTAINS ORDB
TESTSFAILED 15 CONTAINS SPAMCOP
TESTSFAILED 10 CONTAINS INTERSIL





In theory this should assign points for IP-Blacklists only if the
country-chain does not start with "Italy" or "Germany"
Looking at the logfiles shows that it's working...

... but today there are some legit messages in the hold folder with the
following X-lines in the header:


X-Spam-Tests-Failed: SORBS-SPAM, ... COMBO-IP4R-ALL, WEIGHT100 [135]
X-Country-Chain: ITALY->UNITED STATES->destination

And another one 

X-Spam-Tests-Failed: FIVETEN-FREE, ... COMBO-IP4R-ALL, WEIGHT100 [128]
X-Country-Chain: ITALY->destination


So or I haven't yet understand how country-chain is working or there must be
some error.
How it's possible that COMBO-IP4R-ALL can fail if it's starting with  the
line

COUNTRY END STARTSWITH  it

and the country-chain for the message is "ITALY->UNITED STATES->destination"
or "ITALY->destination"  ?


Markus


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] spam review

2004-08-18 Thread Darin Cox
We've tried several times, last one two months ago, to no avail.  We decided
to give up and are planning to write one ourselves to include much of the
needed functionality to manage white and blacklists better via context menu,
and extract additional info into columns for sorting...like spamweight and
sending mail server HELO/IP.

Darin.


- Original Message - 
From: "John Shacklett" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, August 18, 2004 2:59 PM
Subject: RE: [Declude.JunkMail] spam review


http://www.mail-archive.com/[EMAIL PROTECTED]/msg17568.html

I remember this conversation vividly, but I think it crashed on the rocks
quickly. Maybe we need a posse of VB types delegated with the charge of
trying to contact Tom again and see if his offer is still good.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Wednesday, August 18, 2004 10:56 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] spam review


>Scott, do you know anything about this as a possible addition to your
>product/tools line?

It is something that we were looking into, but I do not believe that we
ended up with the source code.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.co
m)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] spam review

2004-08-18 Thread John Shacklett
http://www.mail-archive.com/[EMAIL PROTECTED]/msg17568.html

I remember this conversation vividly, but I think it crashed on the rocks
quickly. Maybe we need a posse of VB types delegated with the charge of
trying to contact Tom again and see if his offer is still good. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Wednesday, August 18, 2004 10:56 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] spam review


>Scott, do you know anything about this as a possible addition to your 
>product/tools line?

It is something that we were looking into, but I do not believe that we
ended up with the source code.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Second mail server

2004-08-18 Thread Sharyn Schmidt
Title: Second mail server






Scott,


Am I to assume that if I configure a backup mailserver I will need to purchase another full license for the Declude products?

Thanks,

Sharyn





[Declude.JunkMail] JunkMail evaluation

2004-08-18 Thread Bryan Weaver
We setup the JunkMail evaluation on our IMAIL server.  We currently also use
Declude AntiVirus and are very happy with its results.
We setup JunkMail evaluation right out of the box and changing only weight20
to HOLD instead of WARN.  Does it write any held emails to IMail/spool/spam
directory or where?  I can't tell that any spam filtering it going on
because it seems that all emails are being passed and none are being held.
Does anyone have their $default$.JunkMail file that I could review settings
to see what I am missing or can Declude guys take a look and see what we
have setup wrong?

---
[This E-mail scanned for viruses by Advertinet Inc. Declude Virus Software ]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Ignore IP4R-Tests for certain countries

2004-08-18 Thread Markus Gufler

I've asked several times to have CIDR-IP bypassing or as alternative
solution ignore IP's from a certain country.

In the meantime I've set up the following workaround:

STEP 1)
In the global.cfg keep all IP4R-tests as they are but set the weight down to
1 or zero.

STEP 2)
Create a new filter test COMBO-IP4R-ALL (requires Declude.Pro)
At the top of the filter-file put END statements for the countries you want
to ignore for IP4R-tests. (for example "it" Italy and "de" for Germany)
Below put a TESTFAILED line for each IP4R-test and assign the weight you has
given before in the global.cfg file


COUNTRY END STARTSWITH  it
COUNTRY END STARTSWITH  de

TESTSFAILED 10 CONTAINS CBL
TESTSFAILED 10 CONTAINS DSBL
TESTSFAILED 10 CONTAINS ORDB
TESTSFAILED 15 CONTAINS SPAMCOP
TESTSFAILED 10 CONTAINS INTERSIL





In theory this should assign points for IP-Blacklists only if the
country-chain does not start with "Italy" or "Germany"
Looking at the logfiles shows that it's working...

... but today there are some legit messages in the hold folder with the
following X-lines in the header:


X-Spam-Tests-Failed: SORBS-SPAM, ... COMBO-IP4R-ALL, WEIGHT100 [135]
X-Country-Chain: ITALY->UNITED STATES->destination

And another one 

X-Spam-Tests-Failed: FIVETEN-FREE, ... COMBO-IP4R-ALL, WEIGHT100 [128]
X-Country-Chain: ITALY->destination


So or I haven't yet understand how country-chain is working or there must be
some error.
How it's possible that COMBO-IP4R-ALL can fail if it's starting with  the
line

COUNTRY END STARTSWITH  it

and the country-chain for the message is "ITALY->UNITED STATES->destination"
or "ITALY->destination"  ?


Markus


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] spam review

2004-08-18 Thread Dean Lawrence
Thanks John,

So basically for 2000 you just removed the Bootstrap settings? I'll try
running this on a sample machine to make sure it doesn't cause any issues.

Dean

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff
(Lists)
Sent: Wednesday, August 18, 2004 12:53 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] spam review


USE AT YOUR OWN RISK!
(And watch for line wraps)

I think this is what the setup.lst file needs to be for Windows Server 2003:
_
[Bootstrap]
SetupTitle=Install
SetupText=Copying Files, please stand by.
CabFile=SpamReview.CAB
Spawn=Setup1.exe
Uninstal=st6unst.exe
TmpDir=msftqws.pdw
Cabs=1

[Bootstrap Files]
[EMAIL PROTECTED],$(WinSysPathSysFile),,,3/26/99 1:00:00
AM,101888,6.0.84.50

[IconGroups]
Group0=Spam Review
PrivateGroup0=-1
Parent0=$(Programs)

[Spam Review]
Icon1="SpamReview.exe"
Title1=Spam Review
StartIn1=$(AppPath)

[Setup]
Title=Spam Review
DefaultDir=$(ProgramFiles)\Spam Review
AppExe=SpamReview.exe
AppToUninstall=SpamReview.exe

[Setup1 Files]
[EMAIL PROTECTED],$(AppPath),,,3/21/02 2:49:00 PM,94208,1.0.0.0
[EMAIL PROTECTED],$(AppPath),,,5/18/02 7:39:11 AM,380928,1.0.0.39
___

I think this is what the setup.lst file should be for Windows 2000 server:

___
[Bootstrap]
SetupTitle=Install
SetupText=Copying Files, please stand by.
CabFile=SpamReview.CAB
Spawn=Setup1.exe
Uninstal=st6unst.exe
TmpDir=msftqws.pdw
Cabs=1

[Bootstrap Files]

[IconGroups]
Group0=Spam Review
PrivateGroup0=-1
Parent0=$(Programs)

[Spam Review]
Icon1="SpamReview.exe"
Title1=Spam Review
StartIn1=$(AppPath)

[Setup]
Title=Spam Review
DefaultDir=$(ProgramFiles)\Spam Review
AppExe=SpamReview.exe
AppToUninstall=SpamReview.exe

[Setup1 Files]
[EMAIL PROTECTED],$(AppPath),,,3/21/02 2:49:00 PM,94208,1.0.0.0
[EMAIL PROTECTED],$(WinSysPath),$(DLLSelfRegister),$(Shared),1/6/99
1:18:14 AM,1057552,6.1.83.41
[EMAIL PROTECTED],$(AppPath),,,5/18/02 7:39:11 AM,380928,1.0.0.39
_


John Tolmachoff
Engineer/Consultant/Owner
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Dean Lawrence
> Sent: Wednesday, August 18, 2004 9:07 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] spam review
>
> That would be great John.
>
> Thanks,
>
> Dean
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff
> (Lists)
> Sent: Wednesday, August 18, 2004 12:00 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] spam review
>
>
> Some what known issue. What you have to do is delete a number of lines in
> the install ini file, those related to vb and such. I do not remember
> exactly, but I can find out.
>
> John Tolmachoff
> Engineer/Consultant/Owner
> eServices For You
>
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > [EMAIL PROTECTED] On Behalf Of Dean Lawrence
> > Sent: Wednesday, August 18, 2004 6:50 AM
> > To: [EMAIL PROTECTED]
> > Subject: RE: [Declude.JunkMail] spam review
> >
> > Did anyone have any problem installing Spam Review?
> > I'm trying to install it on a Windows 2000 Server and it tells
> > me that it needs to update files first and the system needs to
> > reboot before setup can run. I let it update the files, manually
> > restart the system and try to run setup again. Setup then tells
> > me the exact same thing, that it needs to update files first.
> > Am I missing something? Is the fact that I did not let the program
> > restart the system have an affect?
> >
> > Thanks,
> >
> > __
> > Dean Lawrence, CIO/Partner
> > Internet Data Technology
> > 888.GET.IDT1 ext. 701 * fax: 888.438.4381
> > http://www.idatatech.com/ 
> > Corporate Internet Development and Marketing Specialists
> >
> >
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] Behalf Of Jeff Pereira
> > Sent: Wednesday, August 18, 2004 9:33 AM
> > To: [EMAIL PROTECTED]
> > Subject: Re: [Declude.JunkMail] spam review
> >
> >
> > What would be the best way to do the below :
> >
> > I've solved this be marking the subject line of all hold messages with
> > "[spam %weight%]"
> > Now you can sort in spamreview by sibject line and it will show all hold
> > messages in weighted order.
> >
> >
> > ---
> > [This E-mail scanned for viruses by Declude Virus]
> >
> > ---
> > [This E-mail was scanned for viruses by Declude Virus
> > (http://www.declude.com)]
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.

RE: [Declude.JunkMail] spam review

2004-08-18 Thread John Tolmachoff \(Lists\)
USE AT YOUR OWN RISK! 
(And watch for line wraps)

I think this is what the setup.lst file needs to be for Windows Server 2003:
_
[Bootstrap]
SetupTitle=Install
SetupText=Copying Files, please stand by.
CabFile=SpamReview.CAB
Spawn=Setup1.exe
Uninstal=st6unst.exe
TmpDir=msftqws.pdw
Cabs=1

[Bootstrap Files]
[EMAIL PROTECTED],$(WinSysPathSysFile),,,3/26/99 1:00:00
AM,101888,6.0.84.50

[IconGroups]
Group0=Spam Review
PrivateGroup0=-1
Parent0=$(Programs)

[Spam Review]
Icon1="SpamReview.exe"
Title1=Spam Review
StartIn1=$(AppPath)

[Setup]
Title=Spam Review
DefaultDir=$(ProgramFiles)\Spam Review
AppExe=SpamReview.exe
AppToUninstall=SpamReview.exe

[Setup1 Files]
[EMAIL PROTECTED],$(AppPath),,,3/21/02 2:49:00 PM,94208,1.0.0.0
[EMAIL PROTECTED],$(AppPath),,,5/18/02 7:39:11 AM,380928,1.0.0.39
___

I think this is what the setup.lst file should be for Windows 2000 server:

___
[Bootstrap]
SetupTitle=Install
SetupText=Copying Files, please stand by.
CabFile=SpamReview.CAB
Spawn=Setup1.exe
Uninstal=st6unst.exe
TmpDir=msftqws.pdw
Cabs=1

[Bootstrap Files]

[IconGroups]
Group0=Spam Review
PrivateGroup0=-1
Parent0=$(Programs)

[Spam Review]
Icon1="SpamReview.exe"
Title1=Spam Review
StartIn1=$(AppPath)

[Setup]
Title=Spam Review
DefaultDir=$(ProgramFiles)\Spam Review
AppExe=SpamReview.exe
AppToUninstall=SpamReview.exe

[Setup1 Files]
[EMAIL PROTECTED],$(AppPath),,,3/21/02 2:49:00 PM,94208,1.0.0.0
[EMAIL PROTECTED],$(WinSysPath),$(DLLSelfRegister),$(Shared),1/6/99
1:18:14 AM,1057552,6.1.83.41
[EMAIL PROTECTED],$(AppPath),,,5/18/02 7:39:11 AM,380928,1.0.0.39
_


John Tolmachoff
Engineer/Consultant/Owner
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Dean Lawrence
> Sent: Wednesday, August 18, 2004 9:07 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] spam review
> 
> That would be great John.
> 
> Thanks,
> 
> Dean
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff
> (Lists)
> Sent: Wednesday, August 18, 2004 12:00 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] spam review
> 
> 
> Some what known issue. What you have to do is delete a number of lines in
> the install ini file, those related to vb and such. I do not remember
> exactly, but I can find out.
> 
> John Tolmachoff
> Engineer/Consultant/Owner
> eServices For You
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > [EMAIL PROTECTED] On Behalf Of Dean Lawrence
> > Sent: Wednesday, August 18, 2004 6:50 AM
> > To: [EMAIL PROTECTED]
> > Subject: RE: [Declude.JunkMail] spam review
> >
> > Did anyone have any problem installing Spam Review?
> > I'm trying to install it on a Windows 2000 Server and it tells
> > me that it needs to update files first and the system needs to
> > reboot before setup can run. I let it update the files, manually
> > restart the system and try to run setup again. Setup then tells
> > me the exact same thing, that it needs to update files first.
> > Am I missing something? Is the fact that I did not let the program
> > restart the system have an affect?
> >
> > Thanks,
> >
> > __
> > Dean Lawrence, CIO/Partner
> > Internet Data Technology
> > 888.GET.IDT1 ext. 701 * fax: 888.438.4381
> > http://www.idatatech.com/ 
> > Corporate Internet Development and Marketing Specialists
> >
> >
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] Behalf Of Jeff Pereira
> > Sent: Wednesday, August 18, 2004 9:33 AM
> > To: [EMAIL PROTECTED]
> > Subject: Re: [Declude.JunkMail] spam review
> >
> >
> > What would be the best way to do the below :
> >
> > I've solved this be marking the subject line of all hold messages with
> > "[spam %weight%]"
> > Now you can sort in spamreview by sibject line and it will show all hold
> > messages in weighted order.
> >
> >
> > ---
> > [This E-mail scanned for viruses by Declude Virus]
> >
> > ---
> > [This E-mail was scanned for viruses by Declude Virus
> > (http://www.declude.com)]
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> >
> > ---
> > [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> 
> ---
> [This E-mail was scanned f

RE: [Declude.JunkMail] spam review

2004-08-18 Thread Evans Martin
If it is written in VB, then VB needs to have service packs applied and
then recompile the app and recreate the install package.  I had this
problem with IBP in the past.

Evans Martin
http://www.martekware.com


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Dean Lawrence
> Sent: Wednesday, August 18, 2004 8:50 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] spam review
> 
> Did anyone have any problem installing Spam Review?
> I'm trying to install it on a Windows 2000 Server and it tells
> me that it needs to update files first and the system needs to
> reboot before setup can run. I let it update the files, manually
> restart the system and try to run setup again. Setup then tells
> me the exact same thing, that it needs to update files first.
> Am I missing something? Is the fact that I did not let the program
> restart the system have an affect?
> 
> Thanks,
> 
> __
> Dean Lawrence, CIO/Partner
> Internet Data Technology
> 888.GET.IDT1 ext. 701 * fax: 888.438.4381
> http://www.idatatech.com/ 
> Corporate Internet Development and Marketing Specialists
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Jeff Pereira
> Sent: Wednesday, August 18, 2004 9:33 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [Declude.JunkMail] spam review
> 
> 
> What would be the best way to do the below :
> 
> I've solved this be marking the subject line of all hold messages with
> "[spam %weight%]"
> Now you can sort in spamreview by sibject line and it will show all
hold
> messages in weighted order.
> 
> 
> ---
> [This E-mail scanned for viruses by Declude Virus]
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> ---
> [This E-mail scanned for viruses by Declude Virus]
> 



---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] spam review

2004-08-18 Thread Dean Lawrence
That would be great John.

Thanks,

Dean

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff
(Lists)
Sent: Wednesday, August 18, 2004 12:00 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] spam review


Some what known issue. What you have to do is delete a number of lines in
the install ini file, those related to vb and such. I do not remember
exactly, but I can find out.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Dean Lawrence
> Sent: Wednesday, August 18, 2004 6:50 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] spam review
>
> Did anyone have any problem installing Spam Review?
> I'm trying to install it on a Windows 2000 Server and it tells
> me that it needs to update files first and the system needs to
> reboot before setup can run. I let it update the files, manually
> restart the system and try to run setup again. Setup then tells
> me the exact same thing, that it needs to update files first.
> Am I missing something? Is the fact that I did not let the program
> restart the system have an affect?
>
> Thanks,
>
> __
> Dean Lawrence, CIO/Partner
> Internet Data Technology
> 888.GET.IDT1 ext. 701 * fax: 888.438.4381
> http://www.idatatech.com/ 
> Corporate Internet Development and Marketing Specialists
>
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Jeff Pereira
> Sent: Wednesday, August 18, 2004 9:33 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [Declude.JunkMail] spam review
>
>
> What would be the best way to do the below :
>
> I've solved this be marking the subject line of all hold messages with
> "[spam %weight%]"
> Now you can sort in spamreview by sibject line and it will show all hold
> messages in weighted order.
>
>
> ---
> [This E-mail scanned for viruses by Declude Virus]
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] spam review

2004-08-18 Thread John Tolmachoff \(Lists\)
Some what known issue. What you have to do is delete a number of lines in
the install ini file, those related to vb and such. I do not remember
exactly, but I can find out.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Dean Lawrence
> Sent: Wednesday, August 18, 2004 6:50 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] spam review
> 
> Did anyone have any problem installing Spam Review?
> I'm trying to install it on a Windows 2000 Server and it tells
> me that it needs to update files first and the system needs to
> reboot before setup can run. I let it update the files, manually
> restart the system and try to run setup again. Setup then tells
> me the exact same thing, that it needs to update files first.
> Am I missing something? Is the fact that I did not let the program
> restart the system have an affect?
> 
> Thanks,
> 
> __
> Dean Lawrence, CIO/Partner
> Internet Data Technology
> 888.GET.IDT1 ext. 701 * fax: 888.438.4381
> http://www.idatatech.com/ 
> Corporate Internet Development and Marketing Specialists
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Jeff Pereira
> Sent: Wednesday, August 18, 2004 9:33 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [Declude.JunkMail] spam review
> 
> 
> What would be the best way to do the below :
> 
> I've solved this be marking the subject line of all hold messages with
> "[spam %weight%]"
> Now you can sort in spamreview by sibject line and it will show all hold
> messages in weighted order.
> 
> 
> ---
> [This E-mail scanned for viruses by Declude Virus]
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] spam review

2004-08-18 Thread R. Scott Perry

Scott, do you know anything about this as a possible addition to your
product/tools line?
It is something that we were looking into, but I do not believe that we 
ended up with the source code.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] added test on Declude site

2004-08-18 Thread R. Scott Perry

I'd like an extra test on the Declude site where I can send an email with 
all three "problems" in them. Reason I'm asking is I sometimes want to 
test what happens when I'n reaching the weight where I change the subject 
or something else. Having just one test fail won't get me there. ;-)
That's a good idea -- I'll see if we can add that.
   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] spam review

2004-08-18 Thread Darin Cox
We asked for the source a couple of times, but a couple of months ago when I
last talked to them they were talking to Computerized Horizons about taking
it over.

We have a significant list of feature requests as well...

Scott, do you know anything about this as a possible addition to your
product/tools line?

Darin.


- Original Message - 
From: "Markus Gufler" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, August 18, 2004 8:30 AM
Subject: RE: [Declude.JunkMail] spam review



1.) It's much easier to reply if the original message is in PLAIN -TEXT


> Is Spam Review still being maintained?

As I know it's not more maintained by the initial developer, but he has
offered to give the source to someone who is interrested to maintain it in
the future.


> 1) When I have a look at spam the Junk Mail Wanings
> windows only shows the lines starting with X-RBL-Warning:.

Is this a bug? Maybe the developer intended this exactly in this manner.


> 2) Maybe related to 1) But the Weight at the top of the
> Junk Mail Warnings window is allways empty.

See next answer...


> 3) Feature request (if possible)
> I would like to sort on this weight. That way I could pay more
> attention to the messages barely failing my review weight and merely
> glance at those almost reaching my delete weight.

I've solved this be marking the subject line of all hold messages with
"[spam %weight%]"
Now you can sort in spamreview by sibject line and it will show all hold
messages in weighted order.



> 4) Feature request (if possible)
> If 2) is related to 1) maybe it wouldbe possible to have
> a list of headers to show in the Junk Mail Warnings window.
> Something like: X-Note:
> X-Spam-Tests-Failed:
> where X-RBL-Warning: and/or X-RBL: are included by default.

Not a bad idea. However there was multiple feature requests in the past
(like keeping a copy of every requeued message in a separate folder for
future review and performance tuning, or having a context-menu für adding
certain email-contents like IP-Adresses, mailfrom, keywords,... to different
filter lists)


Markus

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] spam review

2004-08-18 Thread Markus Gufler

> What would be the best way to do the below :
> 
> I've solved this be marking the subject line of all hold 
> messages with "[spam %weight%]"

For example we hold on 100 points and mark any message above 75 points in
the subject line.

So we have in the $default$.junkmail file

WEIGHT75SUBJECT [spam %WEIGHT%]
WEIGHT100   HOLD

And in the global.cfg file

WEIGHT75weight  x   x   75  0
WEIGHT100   weight  x   x   100 0


Simply replace "75" and "100" with whatever you want.

Markus


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] spam review

2004-08-18 Thread Dean Lawrence
Did anyone have any problem installing Spam Review?
I'm trying to install it on a Windows 2000 Server and it tells
me that it needs to update files first and the system needs to
reboot before setup can run. I let it update the files, manually
restart the system and try to run setup again. Setup then tells
me the exact same thing, that it needs to update files first.
Am I missing something? Is the fact that I did not let the program
restart the system have an affect?

Thanks,

__
Dean Lawrence, CIO/Partner
Internet Data Technology
888.GET.IDT1 ext. 701 * fax: 888.438.4381
http://www.idatatech.com/ 
Corporate Internet Development and Marketing Specialists


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Jeff Pereira
Sent: Wednesday, August 18, 2004 9:33 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] spam review


What would be the best way to do the below :

I've solved this be marking the subject line of all hold messages with
"[spam %weight%]"
Now you can sort in spamreview by sibject line and it will show all hold
messages in weighted order.


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] spam review

2004-08-18 Thread Jeff Pereira
What would be the best way to do the below :

I've solved this be marking the subject line of all hold messages with
"[spam %weight%]"
Now you can sort in spamreview by sibject line and it will show all hold
messages in weighted order.


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] added test on Declude site

2004-08-18 Thread Bonno Bloksma



Hi,
 
I'd like an extra test on the Declude site where I 
can send an email with all three "problems" in them. Reason I'm asking is I 
sometimes want to test what happens when I'n reaching the weight where I change 
the subject or something else. Having just one test fail won't get me there. 
;-)
 
Of course I can wait until the next virus comes 
along that does reach my subject weight but does *not* reach my delete weight. 
However, the point of having a test available isto catch any problem before it 
is a problem right? ;-)
 
Groetjes,
 
Bonno Bloksma
 
 


RE: [Declude.JunkMail] spam review

2004-08-18 Thread Markus Gufler

1.) It's much easier to reply if the original message is in PLAIN -TEXT
 

> Is Spam Review still being maintained? 

As I know it's not more maintained by the initial developer, but he has
offered to give the source to someone who is interrested to maintain it in
the future.

 
> 1) When I have a look at spam the Junk Mail Wanings 
> windows only shows the lines starting with X-RBL-Warning:. 

Is this a bug? Maybe the developer intended this exactly in this manner.

 
> 2) Maybe related to 1) But the Weight at the top of the 
> Junk Mail Warnings window is allways empty.

See next answer...

 
> 3) Feature request (if possible)
> I would like to sort on this weight. That way I could pay more 
> attention to the messages barely failing my review weight and merely 
> glance at those almost reaching my delete weight.

I've solved this be marking the subject line of all hold messages with
"[spam %weight%]"
Now you can sort in spamreview by sibject line and it will show all hold
messages in weighted order.


 
> 4) Feature request (if possible)
> If 2) is related to 1) maybe it wouldbe possible to have 
> a list of headers to show in the Junk Mail Warnings window. 
> Something like: X-Note:
> X-Spam-Tests-Failed:
> where X-RBL-Warning: and/or X-RBL: are included by default.

Not a bad idea. However there was multiple feature requests in the past
(like keeping a copy of every requeued message in a separate folder for
future review and performance tuning, or having a context-menu für adding
certain email-contents like IP-Adresses, mailfrom, keywords,... to different
filter lists)


Markus

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] spam review

2004-08-18 Thread Bonno Bloksma



Hi,
 
Is Spam Review still being maintained? I have been 
able to retrieve an update in the past few months (now using 1.0.48) but 
there is still a bug in there which I would have expected to be fixed 
by now.
 
1) When I have a look at spam the Junk Mail Wanings 
windows only shows the lines starting with X-RBL-Warning:. Ok however, that does 
not include several other Declude headers. Not a real bug but a minor point, 
meaning I have to look at all headers (at the end) to see what Declude 
added.
 
2) Maybe related to 1) But the Weight at the top of 
the Junk Mail Warnings window is allways empty.
 
3) Feature request (if possible)
I would like to sort on this weight. That way I 
could pay more attention to the messages barely failing my review weight and 
merely glance at those almost reaching my delete weight.
 

4) Feature request (if 
possible)If 2) is related to 1) 
maybe it wouldbe possible to have a list of headers to show in the Junk Mail 
Warnings window. Something like:
X-Note:
X-Spam-Tests-Failed:
where X-RBL-Warning: and/or X-RBL: are included by 
default.
 
I have sent a feature request to the author of spam 
review al long time ago about the Message Body window. Unfortunately I never got 
a answer but in case someone who knows more about it reads this
5) Feature request (if 
possible)

It would be nice if the Message Body window had a third option, beside 
Text and HTML, Stipped HTML where all HTML code, and anything that pretends to 
be so, would be stipped and only the bare tekst (in the HTML section) would 
be shown. That way it is a lot easier to see whether something is Spam without 
activating any hidding features spammers like to use to identifi active e-mail 
accounts.
I seems something which can be verry quickly added as most code is allready 
there, al that is needed is stripping any   stuff right? 
Or am I missing something?
 
Groetjes,
 
Bonno Bloksma