Re: [Declude.JunkMail] Verification
I use Declude to filter emails for several domains that are behind our main email box and it has worked well. In this configuration does anyone have a quick solution for Email Account Verification for the servers behind IMail/Declude? See my sig. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] No Email Address
Whoops... that should have been AVAFTERJM ON to run Virus tests after JunkMail tests, so only messages that pass JM would be tested for viruses. F-Prot is one of the fastest scanners, but it's still slower than most Junkmail tests. One last note: You should check to see that you don't have any timeouts in the DNS tests configured in Declude. If you have DNSBL and RHSBL tests against lists that no longer exist or have been renamed, then you're wasting cycles waiting on a result that will timeout. Running a report or inspecting the log files to see your typical processing time for a single message would be a good idea. You should be in the fraction-of-a-second range per message. Darin. - Original Message - From: Richard Farris [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Tuesday, October 10, 2006 10:40 PM Subject: Re: [Declude.JunkMail] No Email Address Thank you..I will do more leg work to see what I can do...your help is appreciated.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Darin Cox [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Tuesday, October 10, 2006 7:31 PM Subject: Re: [Declude.JunkMail] No Email Address Declude is not a mail server. IMail accepts the email for valid email addresses, then passes those messages on to Declude. So if you don't have nobody aliases, then you should check to see if you are under significant dictionary attacks. If so, you can reduce the load on your mail server significantly by adding a gateway server as indicated. Are your IP blocks in Declude or Imail? As for the rest, I'd check the list archives for the order of tests for whatever version of Declude you're running. I believe it was reposted for the most recent versions within the past month... but this is all a side issue to your main load problem. One other note. Many have reported reductions in CPU load with running Sniffer in persistent mode. I'd check with Pete on the Sniffer list for the steps to run that way. Also, if you're running Virus before JunkMail, you might switch, as the JunkMail tests will typically use less CPU than virus scanning tests, so by setting AVAFTERJM OFF in your Declude config, you may save a few CPU cycles. The only drawback being you may end up with viruses in your hold queue. Darin. - Original Message - From: Richard Farris [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Tuesday, October 10, 2006 6:54 PM Subject: Re: [Declude.JunkMail] No Email Address OK, I thought Declude took over first..I know it has been said here before but what are the sequences to deliver an email to a box? Which programs activate first and so on down the line...in Imail Imail Rules IPs blocks Declude invURLB Sortmonster FProt I have all these going on... Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Darin Cox [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Tuesday, October 10, 2006 2:47 PM Subject: Re: [Declude.JunkMail] No Email Address If the address doesn't exist, then the message will bounce before it gets to Declude. Unless of course you have nobody aliases, which is an extremely bad practice these days. In that case you should remove the nobody alias, and viola, problem solved. If the attempts to deliver to nonexistent addresses still bog down the server, you should consider adding a gateway that checks for valid addresses, and only passes the email to valid addresses on to the main mail server. Darin. - Original Message - From: Richard Farris [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Tuesday, October 10, 2006 3:09 PM Subject: [Declude.JunkMail] No Email Address Is there a way to check to see if an email exists before Declude does all the testing...many accounts are gone now and I am sure there are many emails trying to be delivered to addresses that are not there..which is consuming my server...I am at 100% many times trying to process the spam... Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Mike N [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Tuesday, October 10, 2006 1:04 PM Subject: [Declude.JunkMail] Internal AVG vs Fprot CPU? Has anyone measured the difference in CPU requirements between Fprot and the internal AVG? We've upgraded to the latest Declude and turned off the internal scanner for now. We will probably migrate before the Fprot renewal under the new terms - I just wanted an idea if we have to upgrade to dual or quad processor to match the old settings. I could see that with DecludeProc it could run AVG as a service and prevent having to reload the
[Declude.JunkMail] picture spam
Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] picture spam
CommTouch catches them all, I have a filter that can add some weight to image based spam, it may be able to push it over the threshold and at least quarantine it for you. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette Sent: Wednesday, October 11, 2006 1:09 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] picture spam
Thanks Chris. CommTouch definitely seems to have promise. But for now, Id like to experiment with the filter. Is this something we can have access to? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Wednesday, October 11, 2006 10:14 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam CommTouch catches them all, I have a filter that can add some weight to image based spam, it may be able to push it over the threshold and at least quarantine it for you. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette Sent: Wednesday, October 11, 2006 1:09 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] picture spam
Sure thing, by default I think you will see the weight of 3, it pretty much will give anything imaged based this score. I would keep it to under 8 to reduce false positives, but there is room to play with the weights and even edit the filter if youd like, enjoy!! Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette Sent: Wednesday, October 11, 2006 1:24 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam Thanks Chris. CommTouch definitely seems to have promise. But for now, Id like to experiment with the filter. Is this something we can have access to? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Wednesday, October 11, 2006 10:14 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam CommTouch catches them all, I have a filter that can add some weight to image based spam, it may be able to push it over the threshold and at least quarantine it for you. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette Sent: Wednesday, October 11, 2006 1:09 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. #EXCEPTIONS TESTSFAILED END CONTAINSMXRATE-ALLOW BODYEND NOTCONTAINS cid: #IMAGES BODY3 CONTAINSsrc=3Dcid: BODY3 CONTAINSsrc=cid: BODY3 CONTAINSimg src=3Dcid: BODY3 CONTAINSsrc='cid: BODY3 CONTAINS/cid: BODY3 CONTAINSContent-Type: image/gif; --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] picture spam
You should note that this doesn't just catch image spam, but all email with images. So, the weight should be extremely low, if used at all, due to the large % of false positives seen by this filter. Darin. - Original Message - From: chris To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 1:31 PM Subject: RE: [Declude.JunkMail] picture spam Sure thing, by default I think you will see the weight of 3, it pretty much will give anything imaged based this score. I would keep it to under 8 to reduce false positives, but there is room to play with the weights and even edit the filter if youd like, enjoy!! Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free978.499.2933office978.477.8930 e-fax[EMAIL PROTECTED]www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave MarchetteSent: Wednesday, October 11, 2006 1:24 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] picture spam Thanks Chris. CommTouch definitely seems to have promise. But for now, Id like to experiment with the filter. Is this something we can have access to? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chrisSent: Wednesday, October 11, 2006 10:14 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] picture spam CommTouch catches them all, I have a filter that can add some weight to image based spam, it may be able to push it over the threshold and at least quarantine it for you. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free978.499.2933office978.477.8930 e-fax[EMAIL PROTECTED]www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave MarchetteSent: Wednesday, October 11, 2006 1:09 PMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] picture spam
Use commtouch if your not hindered by the license Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Wednesday, October 11, 2006 1:39 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam You should note that this doesn't just catch image spam, but all email with images. So, the weight should be extremely low, if used at all, due to the large % of false positives seen by this filter. Darin. - Original Message - From: chris To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 1:31 PM Subject: RE: [Declude.JunkMail] picture spam Sure thing, by default I think you will see the weight of 3, it pretty much will give anything imaged based this score. I would keep it to under 8 to reduce false positives, but there is room to play with the weights and even edit the filter if youd like, enjoy!! Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette Sent: Wednesday, October 11, 2006 1:24 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam Thanks Chris. CommTouch definitely seems to have promise. But for now, Id like to experiment with the filter. Is this something we can have access to? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Wednesday, October 11, 2006 10:14 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam CommTouch catches them all, I have a filter that can add some weight to image based spam, it may be able to push it over the threshold and at least quarantine it for you. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette Sent: Wednesday, October 11, 2006 1:09 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] picture spam
Exactly !! Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Wednesday, October 11, 2006 1:39 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam You should note that this doesn't just catch image spam, but all email with images. So, the weight should be extremely low, if used at all, due to the large % of false positives seen by this filter. Darin. - Original Message - From: chris To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 1:31 PM Subject: RE: [Declude.JunkMail] picture spam Sure thing, by default I think you will see the weight of 3, it pretty much will give anything imaged based this score. I would keep it to under 8 to reduce false positives, but there is room to play with the weights and even edit the filter if youd like, enjoy!! Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette Sent: Wednesday, October 11, 2006 1:24 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam Thanks Chris. CommTouch definitely seems to have promise. But for now, Id like to experiment with the filter. Is this something we can have access to? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Wednesday, October 11, 2006 10:14 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam CommTouch catches them all, I have a filter that can add some weight to image based spam, it may be able to push it over the threshold and at least quarantine it for you. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette Sent: Wednesday, October 11, 2006 1:09 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
Re: [Declude.JunkMail] picture spam
I combo thegraphics hit (jpg, gif or png) with: 1. bad DNS - None or timeout 2. bad language (eastern European iso-8859-2) or Cyrillic (koi8-r or iso-8859-5), etc 3. cmdspace 4. good DUL IP lists/tests 5. having forged your local domain. I still get 5-10 a day. It is a pain. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 12:08 PM Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] picture spam
Thanks all for the various suggestions. Agreed- combo is the way to use that test, for sure. A bit OT, but what is the popular and accurate DUL database these days? How accurate is fiveten at DUL lookups? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, October 11, 2006 12:49 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam I combo thegraphics hit (jpg, gif or png) with: 1. bad DNS - None or timeout 2. bad language (eastern European iso-8859-2) or Cyrillic (koi8-r or iso-8859-5), etc 3. cmdspace 4. good DUL IP lists/tests 5. having forged your local domain. I still get 5-10 a day. It is a pain. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 12:08 PM Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
Re: [Declude.JunkMail] picture spam
Sorbs-DUL and NJABL Dynablock look to be the best. Although they miss lots. 5-10's has been discontinued. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 3:53 PM Subject: RE: [Declude.JunkMail] picture spam Thanks all for the various suggestions. Agreed- combo is the way to use that test, for sure. A bit OT, but what is the popular and accurate DUL database these days? How accurate is fiveten at DUL lookups? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott FisherSent: Wednesday, October 11, 2006 12:49 PMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] picture spam I combo thegraphics hit (jpg, gif or png) with: 1. bad DNS - None or timeout 2. bad language (eastern European iso-8859-2) or Cyrillic (koi8-r or iso-8859-5), etc 3. cmdspace 4. good DUL IP lists/tests 5. having forged your local domain. I still get 5-10 a day. It is a pain. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 12:08 PM Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
