[Declude.JunkMail] RE: Various Greeting Card messages

2007-07-12 Thread Kornitz, David
Has anyone found (or come up with) an effect filter for all of the
greeting card messages floating around.  I have been playing with them,
but in doing so, I end up blocking legitimate cards.   Any suggestions
would be greatly appreciated.

Davud


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] RE: Various Greeting Card messages

2007-07-12 Thread David Barker
I have seen these if this is what you referring to the second line is
looking for an IP. You could try this in a filter:

BODYEND NOTCONTAINS SEEING YOUR CARD
BODY20  PCRE
(http://((?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9
]|[01]?[0-9][0-9]?)/)

David

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kornitz,
David
Sent: Thursday, July 12, 2007 3:35 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] RE: Various Greeting Card messages

Has anyone found (or come up with) an effect filter for all of the
greeting card messages floating around.  I have been playing with them,
but in doing so, I end up blocking legitimate cards.   Any suggestions
would be greatly appreciated.

Davud


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] RE: Various Greeting Card messages

2007-07-12 Thread Brian Milburn


This one is a little faster:

(http://\b(?:[0-9]{1,3}\.){3}[0-9]{1,3}\b)

David Barker wrote:

I have seen these if this is what you referring to the second line is
looking for an IP. You could try this in a filter:

BODYEND NOTCONTAINS SEEING YOUR CARD
BODY20  PCRE
(http://((?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9
]|[01]?[0-9][0-9]?)/)

David

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kornitz,
David
Sent: Thursday, July 12, 2007 3:35 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] RE: Various Greeting Card messages

Has anyone found (or come up with) an effect filter for all of the
greeting card messages floating around.  I have been playing with them,
but in doing so, I end up blocking legitimate cards.   Any suggestions
would be greatly appreciated.

Davud


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



  




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] RE: Various Greeting Card messages

2007-07-12 Thread Brian Milburn
Yes, technically, it would match 0.0.0.0 through 999.999.999.999 but 
with HTTP:// it wouldn't really matter and it is very efficient.


David Barker wrote:

Correct it is however would also match on numbers outside the IP range like
256.256.256.256, but considering you looking for the http:// as well it
should be fine.

David

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian
Milburn
Sent: Thursday, July 12, 2007 4:42 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] RE: Various Greeting Card messages


This one is a little faster:

(http://\b(?:[0-9]{1,3}\.){3}[0-9]{1,3}\b)

David Barker wrote:
  

I have seen these if this is what you referring to the second line is
looking for an IP. You could try this in a filter:

BODYEND NOTCONTAINS SEEING YOUR CARD
BODY20  PCRE



(http://((?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9
  

]|[01]?[0-9][0-9]?)/)

David

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of


Kornitz,
  

David
Sent: Thursday, July 12, 2007 3:35 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] RE: Various Greeting Card messages

Has anyone found (or come up with) an effect filter for all of the
greeting card messages floating around.  I have been playing with them,
but in doing so, I end up blocking legitimate cards.   Any suggestions
would be greatly appreciated.

Davud


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



  





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



  




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] AntiVirus Recommendations

2007-07-12 Thread Todd

How long ago did you try the Clan AV?  I know they released a newer version
a while back that was supposed to run more efficiently under windows and
reduce resource utilization.  

I am old school about AV, I think multiple virus scanners are a must.  But
then I have run multiple scanners for years and I always find virus detected
by the second scanner that shouldn't have gotten past the first.  Its kind
of enlightening when you think you are covered and then you add a second
scanner and see its catch things that should be there.  


Todd Hunter
Progressive Systems




-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don
Schreiner
Sent: Thursday, July 05, 2007 8:23 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] AntiVirus Recommendations

We have been using F-Prot for several years with great success. Their new
mail server licensing change is too expensive. We tried the free Clam AV,
but with heavy volume CPU was reaching 100%. I know Declude has built-in
Virus Scanner, but we have always run F-Prot in addition. It seems necessary
for extra protection, but perhaps now overkill? What are others using or
recommend?  What is best Virus scanner to keep the CPU cycles reasonable? We
are running IMail 8.22, Declude 4.X, Message Sniffer, and invURI. Thanks.

-Don 
 

 
Sent via CompBiz.net


 
   


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.