Re: [Declude.JunkMail] OT: Reverse DNS and 554 Denied
Thanks for reply. I am still unsure what to do. The IP ending .196 is our IIS server and with the news. Web site. All domains on server are virtual and use host headers. The vacant.compbiz.net is also used and set-up by our data center router. I thought the issue might have been via our Mail server ending .197 and our office IP I saw being insrted in the headers. -Don - Original Message - From: Dave Doherty [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, March 21, 2005 10:43 PM Subject: Re: [Declude.JunkMail] OT: Reverse DNS and 554 Denied Hi, Don- news.holisticmoms.org reports its IP address as 65.57.241.196 65.57.241.196 reports its name as vacant.compbiz.net. You should have your provider set up a reverse lookup (pointer) record for 65.57.241.196 that points to news.holisticmoms.org instead of vacant.compbiz.net -d - Original Message - From: Don Schreiner [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, March 21, 2005 10:02 PM Subject: [Declude.JunkMail] OT: Reverse DNS and 554 Denied While the AOL filter is fixed, I am now getting 554 Denied on some servers (see below). I am also getting unsolicited bulk mail undeliverable. I am using Group Mail in our office on dedicated IP authenticating SMTP to their virtual domain on our IMail server. Do I need to make an additional DNS entry of our office IP for their domain and what would I do? Again, the e-mail we are sending is here at http://news.holisticmoms.org/index_email.htm. Body of message generated response: 554 5.7.1 This message appears to be unsolicited bulk mail...reverse DNS problem with 65.57.241.197...Try plain text Original message follows. Received: from holisticmoms.org [68.209.181.166] by holisticmoms.org with ESMTP (SMTPD32-8.12) id A27353BE00EE; Mon, 21 Mar 2005 21:26:59 -0500 Message-ID: [EMAIL PROTECTED] To: HMN Members [EMAIL PROTECTED] Organization: Holistic Moms Network From: Holistic Moms News [EMAIL PROTECTED] Subject: Holistic Moms Network News March 2005 Date: Mon, 21 Mar 2005 21:25:53 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary==_NextPart_30681132292922553481 X-Declude-Sender: [EMAIL PROTECTED] [68.209.181.166] X-Declude-Spoolname: D827353be00eedffd.SMD X-Note: CompBiz scanned with Declude JunkMail X-Spam-Tests-Failed: None [-5] Organization: Abuse reports to [EMAIL PROTECTED] From: Postmaster [EMAIL PROTECTED] Save Address | Headers To : [EMAIL PROTECTED] CC : Date : Mon, 21 Mar 2005 21:28:52 -0500 Subject : Undeliverable Mail undeliverable to [EMAIL PROTECTED] Body of message generated response: 554 Denied undeliverable to [EMAIL PROTECTED] Body of message generated response: 554 Denied Original message follows. Received: from holisticmoms.org [68.209.181.166] by holisticmoms.org with ESMTP (SMTPD32-8.12) id A286418D00F0; Mon, 21 Mar 2005 21:27:18 -0500 Message-ID: [EMAIL PROTECTED] To: HMN Members [EMAIL PROTECTED] Organization: Holistic Moms Network From: Holistic Moms News [EMAIL PROTECTED] Subject: Holistic Moms Network News March 2005 Date: Mon, 21 Mar 2005 21:26:00 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary==_NextPart_1949814226871226091 X-Declude-Sender: [EMAIL PROTECTED] [68.209.181.166] X-Declude-Spoolname: D8285418d00f0e016.SMD X-Note: CompBiz scanned with Declude JunkMail X-Spam-Tests-Failed: None [-5] Organization: Abuse reports to [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- CompBiz.Net scanned for Virus' --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] COPYFILE
This will be available in the next release. :) Ralph -- -Original Message- -- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- -- [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) -- Sent: Monday, March 21, 2005 1:43 AM -- To: Declude.JunkMail@declude.com -- Subject: [Declude.JunkMail] COPYFILE -- -- Using the action COPYFILE, the copied D file does not have the Declude -- Headers. -- -- Can this be changed? -- -- John Tolmachoff -- Engineer/Consultant/Owner -- eServices For You -- -- -- -- --- -- This E-mail came from the Declude.JunkMail mailing list. To -- unsubscribe, just send an E-mail to [EMAIL PROTECTED], and -- type unsubscribe Declude.JunkMail. The archives can be found -- at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] filter files
Sniffer will be your best test. Without a doubt. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Raykiewicz Sent: Monday, March 21, 2005 8:54 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] filter files Thanks to both of you. I am looking to get mostly obscene stuff, but the medical stuff would be very good to catch also. I will start with this and then adventure out on my own:D On a side note has anyone used Message Sniffer, and would it help with this type of stuff or am i looking in the wrong direction? Thanks again, Joe -- Original Message -- From: David Barker [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Mon, 21 Mar 2005 16:04:55 -0500 Joe here is a very basic filter but hopefully will help get you started: SKIPIFWEIGHT 16 MINWEIGHTTOFAIL 3 MAXWEIGHT 12 #Subject SUBJECT 3 CONTAINS Online Pharmacy #Words BODY 5 CONTAINS Meds BODY 2 CONTAINS cheap Perscriptions BODY 2 CONTAINS No prescription required BODY 2 CONTAINS No Doctor Visits #Medication BODY 2 CONTAINS codiene BODY 2 CONTAINS Codeine BODY 2 CONTAINS vicodin BODY 2 CONTAINS viagra BODY 2 CONTAINS Cialis #URBL BODY 12 CONTAINS fopq.org BODY 12 CONTAINS awayhowbad.com BODY 12 CONTAINS royalmeds.info BODY 12 CONTAINS uncompromisingmind.com BODY 12 CONTAINS simply-meds.com BODY 12 CONTAINS ritheworldofall.com BODY 12 CONTAINS medberthgood.com #Spam Indicators BODY 12 CONTAINS Cia|is BODY 12 CONTAINS Cialls Here are some good links too: http://www.mailpure.com/software/decludefilters/ http://it.farmprogress.com/declude/declude.htm http://www.declude.com/Articles.asp?ID=100 David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Raykiewicz Sent: Monday, March 21, 2005 3:44 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] filter files I am currently thinking about using a filter file to filter out some unwanted messages. Does anyone have some sample filter files that I could use as a starting point? I sure would appreciate some help getting started on this. Joe __ NOD32 1.1030 (20050319) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ___ Webmail delivered by Microlandcomputers.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] bounce unwanted email - should be interesting....
Spamming spammers?Report: IBM to offer service to bounce unwanted e-mail back to the computers that sent them.March 22, 2005: 7:00 AM EST NEW YORK (CNN/Money) - IBM is set to unveil a service Tuesday that will send unwanted e-mail back to the spammers who send them, according to a published report Tuesday. http://money.cnn.com/2005/03/22/technology/ibm_spam/index.htm?cnn=yes
Re: [Declude.JunkMail] filter files
I use Message Sniffer. It is very effective. It catches about 96% of all the spam messages that come in here (and about 2% of what's left is spam in Chinese). - Original Message - From: Joe Raykiewicz [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, March 21, 2005 7:54 PM Subject: RE: [Declude.JunkMail] filter files Thanks to both of you. I am looking to get mostly obscene stuff, but the medical stuff would be very good to catch also. I will start with this and then adventure out on my own:D On a side note has anyone used Message Sniffer, and would it help with this type of stuff or am i looking in the wrong direction? Thanks again, Joe -- Original Message -- From: David Barker [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Mon, 21 Mar 2005 16:04:55 -0500 Joe here is a very basic filter but hopefully will help get you started: SKIPIFWEIGHT 16 MINWEIGHTTOFAIL 3 MAXWEIGHT 12 #Subject SUBJECT 3 CONTAINS Online Pharmacy #Words BODY 5 CONTAINS Meds BODY 2 CONTAINS cheap Perscriptions BODY 2 CONTAINS No prescription required BODY 2 CONTAINS No Doctor Visits #Medication BODY 2 CONTAINS codiene BODY 2 CONTAINS Codeine BODY 2 CONTAINS vicodin BODY 2 CONTAINS viagra BODY 2 CONTAINS Cialis #URBL BODY 12 CONTAINS fopq.org BODY 12 CONTAINS awayhowbad.com BODY 12 CONTAINS royalmeds.info BODY 12 CONTAINS uncompromisingmind.com BODY 12 CONTAINS simply-meds.com BODY 12 CONTAINS ritheworldofall.com BODY 12 CONTAINS medberthgood.com #Spam Indicators BODY 12 CONTAINS Cia|is BODY 12 CONTAINS Cialls Here are some good links too: http://www.mailpure.com/software/decludefilters/ http://it.farmprogress.com/declude/declude.htm http://www.declude.com/Articles.asp?ID=100 David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Raykiewicz Sent: Monday, March 21, 2005 3:44 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] filter files I am currently thinking about using a filter file to filter out some unwanted messages. Does anyone have some sample filter files that I could use as a starting point? I sure would appreciate some help getting started on this. Joe __ NOD32 1.1030 (20050319) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ___ Webmail delivered by Microlandcomputers.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] filter files
Joe, Sniffer well definitely add a lot of value to scanning content. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Raykiewicz Sent: Monday, March 21, 2005 8:54 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] filter files Thanks to both of you. I am looking to get mostly obscene stuff, but the medical stuff would be very good to catch also. I will start with this and then adventure out on my own:D On a side note has anyone used Message Sniffer, and would it help with this type of stuff or am i looking in the wrong direction? Thanks again, Joe -- Original Message -- From: David Barker [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Mon, 21 Mar 2005 16:04:55 -0500 Joe here is a very basic filter but hopefully will help get you started: SKIPIFWEIGHT 16 MINWEIGHTTOFAIL 3 MAXWEIGHT 12 #Subject SUBJECT 3 CONTAINS Online Pharmacy #Words BODY 5 CONTAINS Meds BODY 2 CONTAINS cheap Perscriptions BODY 2 CONTAINS No prescription required BODY 2 CONTAINS No Doctor Visits #Medication BODY 2 CONTAINS codiene BODY 2 CONTAINS Codeine BODY 2 CONTAINS vicodin BODY 2 CONTAINS viagra BODY 2 CONTAINS Cialis #URBL BODY 12 CONTAINS fopq.org BODY 12 CONTAINS awayhowbad.com BODY 12 CONTAINS royalmeds.info BODY 12 CONTAINS uncompromisingmind.com BODY 12 CONTAINS simply-meds.com BODY 12 CONTAINS ritheworldofall.com BODY 12 CONTAINS medberthgood.com #Spam Indicators BODY 12 CONTAINS Cia|is BODY 12 CONTAINS Cialls Here are some good links too: http://www.mailpure.com/software/decludefilters/ http://it.farmprogress.com/declude/declude.htm http://www.declude.com/Articles.asp?ID=100 David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Raykiewicz Sent: Monday, March 21, 2005 3:44 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] filter files I am currently thinking about using a filter file to filter out some unwanted messages. Does anyone have some sample filter files that I could use as a starting point? I sure would appreciate some help getting started on this. Joe __ NOD32 1.1030 (20050319) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ___ Webmail delivered by Microlandcomputers.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1031 (20050321) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] IPFILE question
Does the IPFile option work on any IP number listed in the headers or last hop? I was thinking it was the last hop IP (sender) address. Until I see an early address hit on an ham IPFile that I have... Received: from kcc-mail-av1.fsc.usda.gov [199.155.156.191] by imail.Farmprogress.com with ESMTP (SMTPD32-8.15) id ACF554850142; Mon, 21 Mar 2005 18:55:17 -0600Received: from dns1.ne.nrcs.usda.gov(199.155.156.191) by kcc-mail-av1.fsc.usda.gov via csmap id 0edb3c7e_9a6d_11d9_9e6c_0002b3ec9b6e_17043;Mon, 21 Mar 2005 18:55:18 -0600 (CST)Received: from ftc-mail-edge1.fsc.usda.gov (ftc-mail-edge1.fsc.usda.gov [199.141.13.70])by dns1.ne.nrcs.usda.gov () with ESMTP id j2LNMc1i003111;Mon, 21 Mar 2005 17:22:55 -0600Received: from ftc-mail-av1.fsc.usda.gov (200-206-253-232.dsl.telesp.net.br [200.206.253.232])by ftc-mail-edge1.fsc.usda.gov (8.12.8/8.12.8) with SMTP id j2M0BI71002073;Mon, 21 Mar 2005 17:11:20 -0700Message-Id: [EMAIL PROTECTED]Received: from 200-206-253-232.dsl.telesp.net.br(200.206.253.232) by ftc-mail-av1.fsc.usda.gov via csmap id ea1481da_9a66_11d9_8e86_00304824a5af_3895;Mon, 21 Mar 2005 17:11:22 -0700 (MST) X-RBL-Warning: MAILFROM-IP-HAMIP: 199.141.13.64/26
RE: [Declude.JunkMail] filter files
I would definitely recommend message sniffer. Stu At 07:54 PM 3/21/2005 -0600, you wrote: Thanks to both of you. I am looking to get mostly obscene stuff, but the medical stuff would be very good to catch also. I will start with this and then adventure out on my own:D On a side note has anyone used Message Sniffer, and would it help with this type of stuff or am i looking in the wrong direction? Thanks again, Joe -- Original Message -- From: David Barker [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Mon, 21 Mar 2005 16:04:55 -0500 Joe here is a very basic filter but hopefully will help get you started: SKIPIFWEIGHT 16 MINWEIGHTTOFAIL 3 MAXWEIGHT 12 #Subject SUBJECT 3 CONTAINS Online Pharmacy #Words BODY 5 CONTAINS Meds BODY 2 CONTAINS cheap Perscriptions BODY 2 CONTAINS No prescription required BODY 2 CONTAINS No Doctor Visits #Medication BODY 2 CONTAINS codiene BODY 2 CONTAINS Codeine BODY 2 CONTAINS vicodin BODY 2 CONTAINS viagra BODY 2 CONTAINS Cialis #URBL BODY 12 CONTAINS fopq.org BODY 12 CONTAINS awayhowbad.com BODY 12 CONTAINS royalmeds.info BODY 12 CONTAINS uncompromisingmind.com BODY 12 CONTAINS simply-meds.com BODY 12 CONTAINS ritheworldofall.com BODY 12 CONTAINS medberthgood.com #Spam Indicators BODY 12 CONTAINS Cia|is BODY 12 CONTAINS Cialls Here are some good links too: http://www.mailpure.com/software/decludefilters/ http://it.farmprogress.com/declude/declude.htm http://www.declude.com/Articles.asp?ID=100 David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Raykiewicz Sent: Monday, March 21, 2005 3:44 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] filter files I am currently thinking about using a filter file to filter out some unwanted messages. Does anyone have some sample filter files that I could use as a starting point? I sure would appreciate some help getting started on this. Joe __ NOD32 1.1030 (20050319) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ___ Webmail delivered by Microlandcomputers.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Automated blacklisting
I'm looking for suggestions on how to automate the blacklisting process. IE: User gets an email that slipped through Declude, user forwards that email somewhere, somehow the email gets blacklisted. Currently it is a manual process where we review each email and either tweak Declude or directly blacklist sending email, IP, revdns, etc... The problem is that we can't devote a full-time employee to this task, but we get so much it would take a full-time employee to do it. With over 1200 users, just one per user per day is too much to handle. So my question is, is there any way this can be automated? Does anyone currently do something along these lines? If not, how do you handle this issue? Thanks, Dan Horne --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
