[Declude.JunkMail] SPAMDOMAINS?
Scott I had this mail fail both SPAMDOMAINS and HELOBOGUS. The message is an OK message the syslog shows the message actually arriving from a hotmail server. Should this not have been OK or do I have something wrong? Received: from hotmail.com [65.54.169.8] by mx2.netraprise.com with ESMTP (SMTPD32-7.15) id A9BB58029C; Wed, 16 Jul 2003 11:13:47 -0500 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Wed, 16 Jul 2003 09:13:46 -0700 Received: from 204.220.153.70 by by3fd.bay3.hotmail.msn.com with HTTP; Wed, 16 Jul 2003 16:13:46 GMT X-Originating-IP: [204.220.153.70] X-Originating-Email: [EMAIL PROTECTED] From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Msg failed HELOBOGUS (Domain 204.220.153.70 has no MX or A records.). Action=WARN. Msg failed SPAMDOMAINS (Spamdomain 'msn.com' found: Address of [EMAIL PROTECTED] sent from invalid 70.reverse.microgistix.com.). David Stavert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPAMDOMAINS?
Yes indeed. Just changed it. All fixed. The problem here is with your HOP/IPBYPASS settings: Thanks David Stavert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SPAMDOMAINS
Any chance that SPAMDOMAINS can have three entries. MSN uses Qwest DSL in my neighbourhood. Is there another way to handle this? Thanks David Stavert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] argh! change!
I just started seeing junkmail that is addressed to an everyone@ the mailserver domain name. It looks like the real message was sent to an email address at a domain hosted on that mailserver and the everyone@ was added. Is this a new technique? Thanks David Stavert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Multiple actions and Weight
Scott Perhaps it would be useful to have an option that lets you list spam tests that won't appear in the X-Spam-Tests-Failed: header? That way, the weight tests could be removed, as well as the IPNOTINMX/NOLEGITCONTENT that many legitimate E-mails fail. -Scott That would be great. With ATTACH the X-Spam-Tests-Failed don't show up in the actual email. They do show up in the spamatach email headers. Putting the headers and tests failed in the spamatach body makes it much easier to sort through what happened and what is legit. So now how about a ATTACHTO action that attaches and forwards to a mailbox. Many Thanks David Stavert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Multiple actions and Weight
I use duplicated tests to perform multiple actions. In one I do and ATTACH with one and a ROUTETO to forward the mail to a central mailbox for the domain. The problem with this (or any duplicated test to accomplish multiple actions) is that the weight is cumulative so the failure is double. This is especially a problem with weight based actions but also in reporting using TESTSFAILED. Anyone figured a way around this. I would still like to see a combo ATTACH / ROUTETO action (ATTACHTO?). It is so sucessful. Mail is routed to a domain based junkmail folder as an attachment. Most domain administrators love it because it takes the mail away from users but still leaves it intact. Company principals love it because sensitive mail is at least semi-concealed from mail administrators when they forward an FP message. Thanks David Stavert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Multiple actions and Weight
There actually is an easy way around this. Instead of: BADHEADERS1 badheaders x x 8 0 BADHEADERS2 badheaders x x 8 0 you can use: BADHEADERS1 badheaders x x 8 0 BADHEADERS2 badheaders x x 0 0 I use weight or weightrange. Thanks David Stavert --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail]
Scott How about a new Manual page. The last released version was in early December and there have been a ton of new things added. It is getting harder and harder to search through the archives to find clarification on a feature. Many thanks. David --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail]
I understand but there are far too many changes between releases and many interim releases between betas. Beta is usually a set of features and fixes and then a release. With Declude there are new features with every beta. Freeze something and release it. Thanks David Stavert -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, June 30, 2003 2:45 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] How about a new Manual page. The last released version was in early December and there have been a ton of new things added. It is getting harder and harder to search through the archives to find clarification on a feature. That's exactly why we haven't updated it to reflect the new features -- they are beta features. All our customers are welcome to use beta features, but until the next released version, they won't appear in the manual. :) -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail]
Scott I'm going to appologize again. FWIW, the reason we use this unusual beta cycle (where each beta normally both adds new features and fixes bugs, rather than having an initial beta with tons of new features and subsequent betas just fixing bugs) is because we're able to get more features in the product more quickly this way. The problem is though that there isn't a fixed release version. If a problem is discovered in a released version the only fix is to use the beta. That said, I don't think I have ever had a major heart-stopping problem with any version beta, interim or released. And certainly any problems that have been found have been fixed before you can say J A C KR O B I N S O N or whatever one says. Perhaps it's time to look at this like it was an antivirus app. If I don't work at this every day my setup is prety much toast after a month and certainly noticable after a week of neglect. There are a lot of people that spend a lot of time monitoring this list. Been here a couple of years myself. I suspect that they also spend a good deal of time working at this as well. Perhaps this can be a point of discussion: Is it time to stop calling any version of Declude beta. If the sole purpose of Declude JM is to stop JM and if between releases JM senders adopt new methods to evade detection and the solutions are only available in the latest version, isn't the most useful version of Declude the most recent. Just my thoughts Thanks David --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OFF TOPIC Internet Filters
Filtering, whether it is web or email, isn't just about letting some pretty blatant and obvious sites through. It is about what are the policies that you have set for people to follow. What are the concequences for not folowing the rules. What did they sign. What training do you provide/demand on Internet use. I don't get to the naughty sites unless I click on a link somewhere. Isn't it interesting that some people don't get strange websites or junk email. It's most often that they don't give out their email address to every site that wants it; make sure they uncheck the box that allows special offers to be sent and generally act responsibly about their Internet use. If there are no policies then the filtering etc will become more and more out of control. Thanks David Stavert -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rob Hopkins Sent: Thursday, April 03, 2003 10:37 AM To: Declude. [EMAIL PROTECTED] com Subject: [Declude.JunkMail] OFF TOPIC Internet Filters Sorry to bring this up here but I'm stuck. We're doing a great job filtering email but our web filter stinks. We proxy through netcomply.com and lately they have been letting some pretty blatant and obvious sites through. If you are having success blocking inappropriate sites I would appreciate a private email with contact information of your filter provider. Thanks in advance. Rob Hopkins Hopkins Mailing Services, Inc. 758 W Racquet Club Dr. Addison, IL 60101-4324 (630) 628-0088 Ext. 11 [EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Year 2020
Before you reset the time have a look at what the stock market is doing and make some really informed buying decisions. Perhaps, considering how things are today you might just want to stay in the future. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott MacLean Sent: Thursday, March 27, 2003 1:35 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Year 2020 The best program I have ever found that does this is D4Time. I like it so much I replaced my own home-grown written program with it. It's small, extremely accurate, and reliable. You can set it to run every xx minutes, stay resident, run only at boot and exit, whatever you want. And it's absolutely free. /plug off http://www.thinkman.com/dimension4/index.html At 02:16 PM 3/27/2003, Colbeck, Andrew wrote: I had a program that checked a time server every day to keep the time accurate. On more than one occasion I saw the date get changed to the year 2020 and the year 4040. I don't use time server programs any more. WXP has a SNTP client built in. Use: net time /setsntp:tick.ucla.edu net stop w32time net start w32time and you're in business. WNT and W2K can both use the (totally different) w32time.exe and w32time.ini from the NT Server Resource Kit. For dollars, my favourite is the inexpensive shareware Tardis2000 from HC Mingham-Smith at: http://www.kaska.demon.co.uk/ Run a NTP server internally against an internet source, and then provide it to your servers and clients, either with a time service, or by putting a net time \\server /set /yes line in your login scripts. You can also use net time in your login scripts to obtain the time from the NT Domain. DHCP also allows you to publish a time server, but Windows DHCP clients ignore that feature. And of course, tick.ucla.edu is not the only time source on the Internet. There's probably a source that is near you that is a public source. Use more than one. Here's one page that is a useful list: http://tycho.usno.navy.mil/ntp.html Andrew 8) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ___ Scott MacLean [EMAIL PROTECTED] ICQ: 9184011 http://www.nerosoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[2]: DSN:Re: Re[2]: [Declude.JunkMail] A Question of Ethics
In a corporate setting a company may or may not have an Internet/email/conduct policy. If not, it may be very dificult to fire someone for conduct that they didn't agree to abide by and if it came to a lawsuit they would probably loose. In fact the company could loose twice. Once by someone who was offended by a fellow employees use of porn at the workplace and second by a wrongful termination suit by the offender. Many companies just added the Internet and email to the system without considering the concequences. Time to examine the company policies. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith Purtell Sent: Thursday, February 27, 2003 9:34 AM To: [EMAIL PROTECTED] Subject: RE: Re[2]: DSN:Re: Re[2]: [Declude.JunkMail] A Question of Ethics The term spyware refers to software whose sole purpose is to surreptitiously gather and transmit information about a user. A firewall log is a neutral record of general internet activity. Any reasonably informed adult who uses the internet should understand their actions may be logged, in the same way they understand a policeman might be watching them when they drive their car down a road. Certain parts of our daily activities are observed; that's a facet of urban life. What matters is whether the prior intent of the observation is hostile. Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Darrell L. Sent: Thursday, February 27, 2003 8:33 AM To: [EMAIL PROTECTED] Subject: RE: Re[2]: DSN:Re: Re[2]: [Declude.JunkMail] A Question of Ethics I suppose you can say that any monitoring tool or piece of software could be spyware. I know in several instances where employee's were let go or suspended due to inappropriate activity were based solely on the analysis of firewall logs that record all internet activity. In our Computer Security Policy we do not specifically say that the firewall is logging everyone's internet surfing activities. However in the computer security document it is spelled out that they are using company equipment and the company reserves the right to monitor any and all activity. Would you say in this instance that the tools (firewall logging) used would be classified as spyware? Darrell --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Opinion on bulk mailers
Content alone is not the criteria for condemning an email. I may personally dislike the message but if it is subscribed, to hands off. It is far to easy, when we control the switch, to let our own tastes, beliefs, and prejudices, influence our trigger finger. Many large companies have outsourced bulk mailings to these groups. The end user is most often the real problem. They have subscribed by not UNchecking the send me offers, and receive offers from our marketing partners box. In a rush to get FREE software these are often overlooked. By giving permission the address is fair game. To most end users junkmail is stuff they no longer want to receive. I have drastically cut down on the junkmail I personal recieve by simply unsubscribing. It took 6 months and many angry emails to customer service to finally get unsubscribed from e-week and the Ziff Davis stuff. It wasn't junk but it did cut on the offers. I am now very carefull to uncheck the subscribe me button. I think our biggest job is one of education. Don't put your email address at risk. Read the fine print (privacy policy). Try unsubscribing. Someone had a great suggestion on using 2 email addresses. One you give out to those you know and a sacrificial one that increments as it gets abused. Just my opinion David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mike K Sent: Tuesday, January 14, 2003 8:02 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Opinion on bulk mailers What is everyone's opinion on bulk mailers like flowgo, gossipflash, valoffers, quill? The joke lists, cell phone offers, travel offers, software offers, etc. The old saying one mans trash is anothers treasure comes to mind. While I as an isp admin think it's trash, and optin is the only true legit method, a user might want this stuff. Most if not all are listed on the RBLs. And has anyone successfully unsubscribed from their lists? Topica is a good example, at first they appeared to be spammers then they seemed to have cleaned up theit act. I even see some of their e-mails come through with the Habeas signature embedded. However some of the emails seem of questionable content. Mike --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] An optional web interface for Declude JunkMail?
The program alias could be used effectively if it were a web generated email message. It could be hosted on another machine/os/programming language etc if it were all handled as a program alias. Create a couple of examples and Administrators could modify to their hearts content. David Could we take a lower tech route and use the program alias capabilities? Make changing your spam settings similar to subscribing/unsubscribing from a That's what we were originally thinking of a few years back, but the problem is that end users are well... end users. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] An optional web interface for Declude JunkMail?
Not really. It could use Declude Confirm. Fill out a page add your email address. The web page mails a confirmation (make sure this is what you want) and mail it back to start the process. No login required. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Wednesday, December 18, 2002 8:13 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] An optional web interface for Declude JunkMail? How are subscribers going to log into a web interface? Won't they need a password of some type to verify they are who they say they are? Will they need another password or will they be able to use their IMail password and Declude would tap into the IMail database to verify the password? They would need to log in, but with the same username/password as they already use with IMail. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] An optional web interface for Declude JunkMail?
Several contributors to this list have talked about or have shown preliminary tools. We started working on something as well a few wekks ago as well. It might be worthwhile to pool the work already begun or take something that has a promissing start. David Is this something that is important enough that it would be worthwhile? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] EzMTS
Scott This is a message that arrives from the EzMTS mailserver to IMail/Declude. David I have a customer that uses EzMTS, a Windows freeware mailserver. When ever a message goes through that server and Declude all the Xheaders added by Declude show up in the body of the mail. Can I assure him that it's his problem (EzMTS). That's actually not a problem with EzMTS -- EzMTS does that by design. The X- headers that Declude adds to E-mails are just standard headers. Most mail clients will not display them by default, but it seems that EzMTS does. Most likely, EzMTS has an option to disable that, so the headers won't be visible. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] EzMTS
I have a customer that uses EzMTS, a Windows freeware mailserver. When ever a message goes through that server and Declude all the Xheaders added by Declude show up in the body of the mail. Can I assure him that it's his problem (EzMTS). David --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] move to different user
We have used a combination of WEIGHT10ATTACH WEIGHT10a ROUTETO [EMAIL PROTECTED] The combination sends the junkmail as an attachment. The real value with this is that the original TO address is maintained in the attached message. If it is legitimate then the email with the attachment can be forwarded to the intended recipient. The recipient can open the attachment and reply as usual. Most people don't look at the return address. I was tired of getting replys to postmaster from mail I retreived and forwarded on to the intended recipient. David -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner;declude.com]On Behalf Of Bill B Sent: Tuesday, November 05, 2002 11:24 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] move to different user WEIGHT20 ROUTETO junkmail@%LOCALHOST% Bill -Original Message- From: Robert Shubert Sent: Tue, 05 Nov 2002 12:10:14 -0500 Subject: [Declude.JunkMail] move to different user Is there a way to have declude change the destination address of the email when it's marked as spam? I have several users at a domain: [EMAIL PROTECTED] and [EMAIL PROTECTED] The administrator of the domain wants spam to be just sent into [EMAIL PROTECTED] for all the users of the domain. I didn't see that I could do a processing rule in IMail that would move mail between users. Can I have declude do this for me? Robert Shubert Tronics --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Fighting the Menace of Unwanted E-Mail
Perhaps this list might be a way to set up test account exchanges?? David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Charles Frolick Sent: Tuesday, September 17, 2002 10:01 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Fighting the Menace of Unwanted E-Mail I always figured since my hotmail profile says I'm male and over 21 that's why it gets about 160 spam mails (that don't fail their spam filters) per week. Don't they do the same thing Juno mail does and pay for the service by selling the address to 'Advertising Partners'? My 17 year old sister in law get no adult spam to her hotmail address at all, and 99% of mine is, that says target marketing to me. I only have the address as a remote test account, to validate mail routing to my domain hosting customers, and rarely even then. If it were not a free mail account then I would say it would be a lot of work to get it listed, but I know there are only two ways to pay for a service, you pay or the advertisers pay. Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Tuesday, September 17, 2002 8:38 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Fighting the Menace of Unwanted E-Mail Gosh I'd like to know how he made that account and got it spammed so quickly. That knowledge would be quite a tool. By this: | A few days ago I created a new e-mail account, and within 24 | hours I had received over 25 unsolicited commercial e-mail | messages, otherwise known as spam. He means A few days ago I created an account on Hotmail that had once existed, but since I just created it, it's a new E-mail account. Unless he was extremely active in trying to receive spam, I can't think of any other way that it could have happened. Or, he may have used his poetic license to count the number of spams he received. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Encoded Email... how?
Mark Any help on nuclear fusion would be helpful as well. But only if you have time! ;) David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mark Smith Sent: Thursday, September 05, 2002 7:19 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Encoded Email... how? You could create a filter that looks for these types of links. If there is NOT a http://x.x.x.x regular expression then it would most likely be spam. FWIW, here's how you create them: To convert an IP to integer: Note that the % is the standard C arithmetic operator ((2^24)*A)+((2^16)*B)+((2^8)*C)+D = integer value of an IP address Where A, B, C, D are the individual octets in the IP address: A.B.C.D To convert the Integer to IP: Take the integer value of the number divided by 16777216 (2^24) that's the first octet. Octet 1 = int(number / 16777216) or int(1/162777216) = 5 Take the integer value of the number divided by 65536 (2^16) that's the second octet. Octet 2 = int(number / 65536) or int(1/65536) = 245 Take the integer value of the number divided by 256 (2^8) that's the third octet. Octet 3 = int(number / 256) or int(1/256) = 225 Take the integer value of the number % 256 that's the fourth octet. Octet 4 = number % 256 or 1 % 256 = 0 5.245.225.0 Mark Also what we are finding is they are turning the links and addresses into binary numbers, therefore making it impossible to detect the links and trap them... Such as majority of porn-sites. We get links like: http://0111010101010101010101010101010... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kami Razvan Sent: Wednesday, September 04, 2002 5:10 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Encoded Email... how? We are actually finding more more SPAM are coming that way. We are only catching them when they put interesting words in the subject. Also what we are finding is they are turning the links and addresses into binary numbers, therefore making it impossible to detect the links and trap them... Such as majority of porn-sites. We get links like: http://0111010101010101010101010101010... How I have no clue? Regards, Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Rick Davidson Sent: Wednesday, September 04, 2002 4:43 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Encoded Email... how? Howdy, This one has me baffled. This email (spam) showed up as what appeared to be an html formatted message. When I view the raw message it appears as an encoded attachment making it impossible to filter on any body content. How are they doing it and how do we stop it? Have a great day! Rick Davidson Buckeye Internet Services www.buckeyeweb.com 440-953-1900 - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by F-Proto Virus Scanner] --- [This E-mail scanned for viruses by F-Proto Virus Scanner] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Processing order?
Scott That little list would be perfect in the manual. It's come up many times. Worth a cut and paste just as it is. Thanks David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Tuesday, August 27, 2002 1:54 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Processing order? I'm sorry if this has been covered before, but I wasn't having any luck finding it in the list archives. I was wondering if declude junkmail processes mail first or if Imail's control access and killfiles do. Here is the order: [1] IMail's Control Access file [2] IMail's Kill List [3] Declude Virus [4] Declude Junkmail [5] IMail rules -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] I was spammed by myself
Do you have WHITELISTTO postmaster? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Greg Foulks Sent: Thursday, June 27, 2002 12:50 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] I was spammed by myself What is the HELOBOGUS test? I've not seen that one. You say that the spam headers would detect... why didn't it? In fact it did not fail one test. greg -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Thursday, June 27, 2002 1:13 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] I was spammed by myself I get this email that say that it was sent from myself to myself. However I see some other interesting things in the header. What can I use in this header to keep this from happening again? Received: from $domain [80.16.228.101] by mail.nfti.com (SMTPD32-6.06) id AB048501B4; Thu, 27 Jun 2002 12:19:16 -0400 Here's the first key that it is spam: $domain. The HELOBOGUS and SPAMHEADERS tests will detect that; a custom filter could be used too with the latest beta. What else do you see in the headers that is interesting? There is a good chance that we will add a test that will look for the same To/From addresses, which is becoming more and more popular (even though it is common to see in legitimate mail, too). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] I was spammed by myself
Scott Would the WHITELIST nfti.com be cause for this to NOT fail no mater what. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Greg Foulks Sent: Thursday, June 27, 2002 1:11 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] I was spammed by myself No but I do WHITELIST my domain.. greg -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of David Stavert Sent: Thursday, June 27, 2002 2:08 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] I was spammed by myself Do you have WHITELISTTO postmaster? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Greg Foulks Sent: Thursday, June 27, 2002 12:50 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] I was spammed by myself What is the HELOBOGUS test? I've not seen that one. You say that the spam headers would detect... why didn't it? In fact it did not fail one test. greg -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Thursday, June 27, 2002 1:13 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] I was spammed by myself I get this email that say that it was sent from myself to myself. However I see some other interesting things in the header. What can I use in this header to keep this from happening again? Received: from $domain [80.16.228.101] by mail.nfti.com (SMTPD32-6.06) id AB048501B4; Thu, 27 Jun 2002 12:19:16 -0400 Here's the first key that it is spam: $domain. The HELOBOGUS and SPAMHEADERS tests will detect that; a custom filter could be used too with the latest beta. What else do you see in the headers that is interesting? There is a good chance that we will add a test that will look for the same To/From addresses, which is becoming more and more popular (even though it is common to see in legitimate mail, too). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail]
I still find it very easy to get the X-RCPT-TO: pick up a chunk of the $junkmail file as in this header when I use ROUTETO. Thanks David Received: from hotmail.com [216.33.241.15] by mx2.netraprise.com with ESMTP (SMTPD32-7.10) id A7A8A201FE; Thu, 20 Jun 2002 18:39:20 -0500 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Thu, 20 Jun 2002 16:34:33 -0700 Received: from 209.18.231.160 by lw8fd.law8.hotmail.msn.com with HTTP; Thu, 20 Jun 2002 23:34:33 GMT X-Originating-IP: [209.18.231.160] Reply-To: [EMAIL PROTECTED] From: David Stavert [EMAIL PROTECTED] To: [EMAIL PROTECTED] Date: Thu, 20 Jun 2002 23:34:33 + Mime-Version: 1.0 Content-Type: text/plain; format=flowed Message-ID: [EMAIL PROTECTED] X-OriginalArrivalTime: 20 Jun 2002 23:34:33.0246 (UTC) FILETIME=[080393E0:01C218B3] X-RBL Warning: Failed BODYTEXT1 test X-Note: Inbound queue: D67a800a201fec2bf.SMD (1) X-Note: This E-mail was sent from f15.law8.hotmail.com. ([216.33.241.15]). X-Note: SMTP Real From: [EMAIL PROTECTED] X-Note: SMTP Real To: [EMAIL PROTECTED] X-RCPT-TO: WARN X-RBL Status: U X-UIDL: 323838201 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Odd behaviour
Scott The domain in question is not local. Looking through the Declude logs I find things 06/14/2002 02:56:50 Qa1c03fd60048eaef ERROR: Could not find [EMAIL PROTECTED] in recip file. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Thursday, June 13, 2002 8:47 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Odd behaviour It was set up as WEIGHT 10 ROUTETO [EMAIL PROTECTED] However, [EMAIL PROTECTED] did not exist so the email bounced. The PAMHEADERS [EMAIL PROTECTED] was the address that [EMAIL PROTECTED] (my IMAIL Server) tried to send to let the sender (me) know that the message could not be delivered to [EMAIL PROTECTED] That is odd. Can this be reproduced? If so, can you look at the Q*.SMD file in the \IMail\spool directory to see if it has PAMHEADERS WARN in it anywhere? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Odd behaviour
In th Imail logs I see this. 06:14 00:14 SMTP-(020B) RCPT To:NIFFERROUTETO [EMAIL PROTECTED] 06:14 00:14 SMTP-(020B) 553 NIFFER ROUTETO [EMAIL PROTECTED]... No such user here It appears that the address is mangled and refused at the remote server. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of David Stavert Sent: Friday, June 14, 2002 9:26 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Odd behaviour Scott The domain in question is not local. Looking through the Declude logs I find things 06/14/2002 02:56:50 Qa1c03fd60048eaef ERROR: Could not find [EMAIL PROTECTED] in recip file. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Thursday, June 13, 2002 8:47 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Odd behaviour It was set up as WEIGHT 10 ROUTETO [EMAIL PROTECTED] However, [EMAIL PROTECTED] did not exist so the email bounced. The PAMHEADERS [EMAIL PROTECTED] was the address that [EMAIL PROTECTED] (my IMAIL Server) tried to send to let the sender (me) know that the message could not be delivered to [EMAIL PROTECTED] That is odd. Can this be reproduced? If so, can you look at the Q*.SMD file in the \IMail\spool directory to see if it has PAMHEADERS WARN in it anywhere? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Simple step from ATTACH option?
I will be installing IMail 7.1 this weekend. The delivery rules allow for a forward to a mailbox based on a filter. I am hoping that will make all this work. The attach feature will keep the original message intact and allow a domain manager to take the responsibility for retrieving and forwarding a false postive that got caught. Has anyone had any experience with 7.1 and Declude / Attach?? David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Friday, May 24, 2002 9:59 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Simple step from ATTACH option? With the ATTACH option, it seems to me, it would be an easy step for you to: Create an attach option that changes the delivery address to [EMAIL PROTECTED] or what ever. It's not that easy. That's going to be just as tricky to do as it was before the ATTACH action. The ATTACH action just modifies the original E-mail (D*.SMD), but keeps the recipient list (Q*.SMD) intact. Changing the delivery address requires modifying the Q*.SMD file. I know this type of option has been asked for a lot. It just seems like a real simple step from ATTACH. Good try. :) Seriously, though, this is something that we do plan to add soon. So whether or not the ATTACH action will help, it likely will be seen soon (perhaps as a REDIRECT action). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Wish List
Add away. Thanks David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Tom Schwarz Sent: Monday, May 20, 2002 4:24 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Wish List I'm already doing this. I have a program on the server that runs 24x7 and checks a specific email account every minute. In my case the email account is [EMAIL PROTECTED] This works with IMail Rules file. The process is as follows: You, as an email users, forward the email in question to [EMAIL PROTECTED] This program sees the email, strips it down, and replys to you with information about what email address it is going to add to the IMail rules. If you reply to this email it is added to your Rules and IMail takes care of all email from that address in the future. I could add this to SpamReview, if you like and it would work in the Out-Of-Office Mode, or make it a seperate program. However, as Scott points out it will not be perfect. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Monday, May 20, 2002 4:09 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Wish List Would it not be great if we could assign an e-Mail or a number of e-Mails that if someone sends a message to they will automatically get blacklisted? This would immediately save all the junk they will manage to send through. It is a good idea. The question though is what to block -- the remote mailserver, the return address, or something else? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Wish List
Tom Are you referring to the vacation message in IMail or the out of office feature in Outlook / Exchange. We use both depending on the client or the application. It might be as well to use the Program Alias in IMail to process the email and add the address to the domain rules. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Tom Schwarz Sent: Monday, May 20, 2002 7:20 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Wish List David, Only if it were that easy. I'll toss it into the next major release. ? Do you use the Out of Office feature now? Tom -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of David Stavert Sent: Monday, May 20, 2002 6:44 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Wish List Importance: Low Add away. Thanks David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Tom Schwarz Sent: Monday, May 20, 2002 4:24 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Wish List I'm already doing this. I have a program on the server that runs 24x7 and checks a specific email account every minute. In my case the email account is [EMAIL PROTECTED] This works with IMail Rules file. The process is as follows: You, as an email users, forward the email in question to [EMAIL PROTECTED] This program sees the email, strips it down, and replys to you with information about what email address it is going to add to the IMail rules. If you reply to this email it is added to your Rules and IMail takes care of all email from that address in the future. I could add this to SpamReview, if you like and it would work in the Out-Of-Office Mode, or make it a seperate program. However, as Scott points out it will not be perfect. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Monday, May 20, 2002 4:09 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Wish List Would it not be great if we could assign an e-Mail or a number of e-Mails that if someone sends a message to they will automatically get blacklisted? This would immediately save all the junk they will manage to send through. It is a good idea. The question though is what to block -- the remote mailserver, the return address, or something else? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Declude in front of exchange servers.
Does anyone have a name for the tool that retrieves mail and then
destributes it to the exchange server. I have used it in the past. I believe
there is one from Australia but there may be others. I just had a use for it
come up today.
David
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Mark Smith
Sent: Thursday, May 16, 2002 10:44 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Declude in front of exchange servers.
Gotcha..
You can configure Exchange to fetch all email via a single POP3 fetch.
This is usually used if the Exchange server doesn't have 24x7 access to
the Internet and is the only Exchange server in the organization.
Many smaller businesses use this and outsource the MX/SMTP service to an
ISP. They then have their Exchange server configured to use a RAS
connection to fetch the mail every x mins/hours.
Mark
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of
Grant Griffith
Sent: Thursday, May 16, 2002 11:31 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Declude in front of exchange servers.
We have a client that uses exchange and what we did was setup
an nobody alias that catches all the email, then they pull
the information via some POP3 tool and then Exchange sends
the emails to the correct user on its end. Works really well
for them, but I have no idea how they have it setup on the
Exchange end.
Sincerely,
Grant Griffith, Vice President
EI8HT LEGS Web Management Co., Inc.
http://www.getafreewebsite.com 877-483-3393
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Mark Smith
Sent: Thursday, May 16, 2002 10:21 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Declude in front of exchange servers.
We're testing it right now and it works well.
The only problem that I've seen (and this isn't a Junkmail
problem) is that there's no way in Imail to set a max message
size for a front end server. On our Exchange server we set
the max message size to 3mb so when the inbound message hits
Imail, it tries to forward to Exchange. Exchange won't let it
in so it sites in the iMail queue and doesn't bounce back to
the original sender.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of
Johnson, Mike
Sent: Thursday, May 16, 2002 11:05 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Declude in front of exchange servers.
Has anyone used declude (with iMail) infront of exchange servers to
filter mail? How well does this option work?
I~
I~ II~
)_) )_) )_)
)___))___))___)\
)))_)\\
_III\\\__
-\ Venture Computer /-
^^^ \ Systems / ^ ^^
^ ^ ^^^
^^^^^
Michael Johnson, MCSE
(507) 252-5944
[EMAIL PROTECTED]
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the
Declude.JunkMail mailing list. To unsubscribe, just send
an E-mail to
[EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You
can E-mail [EMAIL PROTECTED] for assistance. You can
visit our web
site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the
Declude.JunkMail mailing list. To unsubscribe, just send an
E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for
assistance. You can visit our web site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the
Declude.JunkMail mailing list. To unsubscribe, just send an
E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for
assistance. You can visit our web site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
RE: [Declude.JunkMail] Declude in front of exchange servers.
I don't want to use the RAS connector. I know about RAS and ETRN. There is a tool. Separate program. It can handle multiple domains I believe. The tool becomes useful when you don't want to open a hole in the firewall or create a dialup connection. It is very inexpensive. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mark Smith Sent: Thursday, May 16, 2002 2:51 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude in front of exchange servers. It's the RAS Connector. It's built into Exchange. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of David Stavert Sent: Thursday, May 16, 2002 3:31 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude in front of exchange servers. Does anyone have a name for the tool that retrieves mail and then destributes it to the exchange server. I have used it in the past. I believe there is one from Australia but there may be others. I just had a use for it come up today. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mark Smith Sent: Thursday, May 16, 2002 10:44 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude in front of exchange servers. Gotcha.. You can configure Exchange to fetch all email via a single POP3 fetch. This is usually used if the Exchange server doesn't have 24x7 access to the Internet and is the only Exchange server in the organization. Many smaller businesses use this and outsource the MX/SMTP service to an ISP. They then have their Exchange server configured to use a RAS connection to fetch the mail every x mins/hours. Mark -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Grant Griffith Sent: Thursday, May 16, 2002 11:31 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude in front of exchange servers. We have a client that uses exchange and what we did was setup an nobody alias that catches all the email, then they pull the information via some POP3 tool and then Exchange sends the emails to the correct user on its end. Works really well for them, but I have no idea how they have it setup on the Exchange end. Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mark Smith Sent: Thursday, May 16, 2002 10:21 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude in front of exchange servers. We're testing it right now and it works well. The only problem that I've seen (and this isn't a Junkmail problem) is that there's no way in Imail to set a max message size for a front end server. On our Exchange server we set the max message size to 3mb so when the inbound message hits Imail, it tries to forward to Exchange. Exchange won't let it in so it sites in the iMail queue and doesn't bounce back to the original sender. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Johnson, Mike Sent: Thursday, May 16, 2002 11:05 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Declude in front of exchange servers. Has anyone used declude (with iMail) infront of exchange servers to filter mail? How well does this option work? I~ I~ II~ )_) )_) )_) )___))___))___)\ )))_)\\ _III\\\__ -\ Venture Computer /- ^^^ \ Systems / ^ ^^ ^ ^ ^^^ ^^^^^ Michael Johnson, MCSE (507) 252-5944 [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send
RE: [Declude.JunkMail] Declude in front of exchange servers.
Did find it. Could be useful. http://www.chimera.co.nz/ David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Harry Vanderzand Sent: Thursday, May 16, 2002 3:13 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude in front of exchange servers. other than the pop3 connector which is built in to exch2000 and a separate download for exch5.5 I have never seen or used anything else -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mark Smith Sent: Thursday, May 16, 2002 4:09 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude in front of exchange servers. No idea. Try http://www.slipstick.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of David Stavert Sent: Thursday, May 16, 2002 4:01 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude in front of exchange servers. I don't want to use the RAS connector. I know about RAS and ETRN. There is a tool. Separate program. It can handle multiple domains I believe. The tool becomes useful when you don't want to open a hole in the firewall or create a dialup connection. It is very inexpensive. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mark Smith Sent: Thursday, May 16, 2002 2:51 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude in front of exchange servers. It's the RAS Connector. It's built into Exchange. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of David Stavert Sent: Thursday, May 16, 2002 3:31 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude in front of exchange servers. Does anyone have a name for the tool that retrieves mail and then destributes it to the exchange server. I have used it in the past. I believe there is one from Australia but there may be others. I just had a use for it come up today. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mark Smith Sent: Thursday, May 16, 2002 10:44 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude in front of exchange servers. Gotcha.. You can configure Exchange to fetch all email via a single POP3 fetch. This is usually used if the Exchange server doesn't have 24x7 access to the Internet and is the only Exchange server in the organization. Many smaller businesses use this and outsource the MX/SMTP service to an ISP. They then have their Exchange server configured to use a RAS connection to fetch the mail every x mins/hours. Mark -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Grant Griffith Sent: Thursday, May 16, 2002 11:31 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude in front of exchange servers. We have a client that uses exchange and what we did was setup an nobody alias that catches all the email, then they pull the information via some POP3 tool and then Exchange sends the emails to the correct user on its end. Works really well for them, but I have no idea how they have it setup on the Exchange end. Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mark Smith Sent: Thursday, May 16, 2002 10:21 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude in front of exchange servers. We're testing it right now and it works well. The only problem that I've seen (and this isn't a Junkmail problem) is that there's no way in Imail to set a max message size for a front end server. On our Exchange server we set the max message size to 3mb so when the inbound message hits Imail, it tries to forward to Exchange. Exchange won't let it in so it sites in the iMail queue and doesn't bounce back to the original sender. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Johnson, Mike Sent: Thursday, May 16, 2002 11:05 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Declude in front of exchange servers. Has anyone used declude (with iMail) infront of exchange servers to filter mail? How well does this option work? I~ I~ II~ )_) )_) )_) )___))___))___)\ )))_)\\ _III\\\__ -\ Venture Computer /- ^^^ \ Systems
RE: [Declude.JunkMail] v1.47 (beta) released
Scott If the sendto can be someone other than the recipient it will be perfect. If the email can go to the postmaster at the domain for instance. In multidomain or forwarding situations it spreads the load and gives a domain administrator the ability to fine tune the setup. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Monday, April 22, 2002 8:46 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] v1.47 (beta) released We have just released Declude JunkMail v1.47 ( http://www.declude.com/junkmail/manual.htm ), a beta version. The noticeable changes include: o CIDR ranges can be used in WHITELIST IP entries and ipfile test types o WHITELIST TODOMAIN and WHITELIST TO (for the Pro version) allow easy opt-out for domains/users o New ATTACH action I'd love to hear what people think about the new (unique) ATTACH action. It requires downloading a file from http://www.declude.com/release/147/spamattach.eml , that goes in your \IMail\Delude\ directory (which can be modified to suit your needs), and then using ATTACH as the action (IE WEIGHT20 ATTACH). What this does is it delivers the spam, but in a much less obtrusive way. Instead of a misleading subject of Hi or Here's the information you requested or an annoying subject of MAKE $$$MONEY$$$ NOW, you'll see a subject of You have spam for all spams. By default, the body of the E-mail will show the real subject of the E-mail, the sender's E-mail address, and a list of the tests that failed. If you want to view the spam, you just click a link (depending on your mail client, you may just see the text of the original E-mail body in Notepad, or the original E-mail in its original form). With this, spam becomes extremely easy to identify, easy to filter, less annoying, and false positives are much less of a problem. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] v1.47 (beta) released
I shiver in anticipation Thanks David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Monday, April 22, 2002 9:40 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] v1.47 (beta) released If the sendto can be someone other than the recipient it will be perfect. If the email can go to the postmaster at the domain for instance. In multidomain or forwarding situations it spreads the load and gives a domain administrator the ability to fine tune the setup. That's in the works. We are in the process of adding code to modify the recipient address, which would allow for moving mail to a folder, as well as rerouting the E-mail to a different address. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court
I have been through this s number of times. Savvis will probably just do recursive queries. As I assume they have large blocks of addresses so the root number servers point to Savvis which will then hand off the query to your server. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Madscientist Sent: Tuesday, March 26, 2002 2:31 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court Once upon a time they had done this... Long ago... Somebody must have tripped over a switch. I've sent them a note... Thanks! _M | -Original Message- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]] On Behalf Of John | Tolmachoff | Sent: Tuesday, March 26, 2002 3:12 PM | To: [EMAIL PROTECTED] | Subject: RE: [Declude.JunkMail] DORKZTL:Spammers lose in | small-claims court | | | You may have it set up internally, but look here; | | http://www.dnsstuff.com/tools/ptr.ch?ip=216.88.36.96 | | Not according to what the Internet can see. | | NS2.SAVVIS.NET. (an authoritative nameserver for | 88.216.in-addr.arpa.) says that there are no PTR records for | 216.88.36.96. To get a PTR record, you should speak to your | ISP. You could also contact [EMAIL PROTECTED], who is in | charge of the 88.216.in-addr.arpa. zone. | | Either that, or get them to delegate authority over your IP | addresses to you. | | John Tolmachoff | IT Manager, Network Engineer | 211 E. Imperial Hwy., Suite 106 | Fullerton, CA 92835 | 714-578-7999, ext. 104 | [EMAIL PROTECTED] | www.reliancesoft.com | | | | -Original Message- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]] On Behalf Of Madscientist | Sent: Tuesday, March 26, 2002 12:07 PM | To: [EMAIL PROTECTED] | Subject: RE: [Declude.JunkMail] DORKZTL:Spammers lose in | small-claims court | | [NOTE: Your mail server [216.88.36.96] is missing a reverse | DNS entry. All Internet hosts are required to have a reverse | DNS entry. The missing reverse DNS entry will cause your mail | to be treated as spam on some servers, such as AOL.] | | | OK, I'll bite. This server does in fact have a reverse DNS | entry (PTR) record as such: | | 96 IN PTRMNR1.MICRONEIL.COM. | | And that is correct. This is an outgoing mail gateway and DNS | server for us. What is the issue with this warning and how do | I resolve it? _M | | | -Original Message- | | From: [EMAIL PROTECTED] | | [mailto:[EMAIL PROTECTED]] On Behalf Of | Madscientist | | Sent: Tuesday, March 26, 2002 2:56 PM | | To: [EMAIL PROTECTED] | | Subject: RE: [Declude.JunkMail] DORKZTL:Spammers lose in | | small-claims court | | | | | | [NOTE: Your mail server [216.88.36.96] is missing a reverse | | DNS entry. All Internet hosts are required to have a reverse | | DNS entry. The missing reverse DNS entry will cause your mail | | to be treated as spam on some servers, such as AOL.] | | | | | | [NOTE: Your mail server [216.88.36.96] is missing a reverse | | DNS entry. All Internet hosts are required to have a reverse | | DNS entry. The missing reverse DNS entry will cause your mail | | to be treated as spam on some servers, such as AOL.] | | | | | | I think the point is that the case law is now moving in the | | right direction along with the legislation... Eventually, | | maybe soon, the fines and other legal rammifications of | | spamming will begin to make it less palatable. Certainly this | | won't stop all spam, since it can always move overseas, but | | it will change the shape of the playing field. | | | | _M | | | | | -Original Message- | | | From: [EMAIL PROTECTED] | | | [mailto:[EMAIL PROTECTED]] On Behalf Of Todd Holt | | | Sent: Tuesday, March 26, 2002 2:43 PM | | | To: [EMAIL PROTECTED] | | | Subject: RE: [Declude.JunkMail] DORKZTL:Spammers lose in | | | small-claims court | | | | | | | | | I have to agree, John. I thought this was a step in the right | | | direction. | | | | | | Not to be negative, but... | | | Are these fines large enough to stop SPAMmers that could | potentially | | | make much more than the fines. In essence, they could be | a cost of | | | doing business for the SPAMmers. Does anyone know how much a | | | SPAMmer can make? Does it exceed the amount of these fines? | | | | | | Todd | | | | | | -Original Message- | | | From: [EMAIL PROTECTED] | | | [mailto:[EMAIL PROTECTED]]On Behalf Of | Dean Zingle, | | | Ipswitch.ca | | | Sent: Tuesday, March 26, 2002 12:42 PM | | | To: [EMAIL PROTECTED] | | | Subject: Re: [Declude.JunkMail] DORKZTL:Spammers lose in | | | small-claims court | | | | | | | | | Huh? Did you read the article John? I may have to re-read the | | | article, but I got the exact opposite out of it ... | | | | | | Dean | | | | | | - Original Message - | | | From: John Tolmachoff [EMAIL PROTECTED] | | | To: [EMAIL PROTECTED] | | | Sent: Tuesday, March 26, 2002 11:31 AM | | | Subject: RE: [Declude.JunkMail] DORKZTL:Spammers lose in | | | small-claims court | | | | | | | | |
RE: [Declude.JunkMail] Imail Antivirus Declude Junkmail
I have the IMail AV software but have not installed it yet. I am running both Declude AV and JM. I will install it this weekend and test it a bit. Let you know what I see. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Wednesday, February 27, 2002 7:40 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Imail Antivirus Declude Junkmail Is anyone using Imail Antivirus and Declude Junkmail? Are there any known problems if the two are running together? We've got a lot of people running both together, and haven't heard of any issues running both together (although if anyone does know of any issues, please speak up). Ouch -- sorry, I assumed that was Declude Virus and Declude JunkMail. I am not aware of anyone yet running IMail AntiVirus, either with or without Declude. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Manual
Scott Just noticed that the manual.htm for junkmail shows simply rename the \IMail\Declude\junkmail.cfg file to junkmail.bak. in the Emergency Uninstall section. David Stavert Netraprise Systems, Inc. 79 13th Ave NE, Suite 112 Minneapolis, MN 55413 612.317.9065 612.317.9062 FAX --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: DSN:RE: [Declude.JunkMail] Sequence of Tests?
In future you might want to assume you are wrong BEFORE you ask the question. ;) David As usual when I assume something I am wrong :) Stu At 02:39 PM 01/16/2002 -0500, you wrote: Is it a correct assumption that if 4 weight tests are defined (weight5, weight10, weight15, weight20) and the total weight is 18 only the weight15 test would get triped. No. If the total weight is 18, the WEIGHT5 test, WEIGHT10 test and WEIGHT15 tests will all get triggered. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . -- --- CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Declude JunkMail v1.33 (beta) ready
GPL files attached. Did your log files show any errors (such as No recipients found in BANNOTIFY.eml)? With ver 1.33 01/14/2002 12:44:24 Q270628e Scanned: Error in virus scanner. [MIME: 2 45210] With ver 1.32 01/10/2002 11:53:27 Qd51666a Scanned: Banned file extension. [Prescan OK][MIME: 3 2516] The only difference was replacing 1.33 with 1.32 and restarting SMTP David DECLUDE.GP1 Description: Binary data DECLUDE.GP2 Description: Binary data
RE: [Declude.JunkMail] Chaining Actions (WATCH OUT)
Scott et al To all those who thought this was a good idea. I tried it. It works well with mail to a singe recipient but if you have 10 or more (12 may be the number) in the To: line you will have problems. The mail will stick in the queue and most of the recipients that may eventually get the mail will have no message body. I didn't try it to see what part of it failed, how many and what statements make it fail but it is a problem. David Stavert Netraprise Systems, Inc. 79 13th Ave NE, Suite 112 Minneapolis, MN 55413 612.317.9065 612.317.9062 FAX XINHEADER X-Note: QueInControl: %QUEUENAME% (%NRECIPS%) XINHEADER X-Note: RDNS Real Origin: %REVDNS%[%REMOTEIP%] XINHEADER X-Note: SMTP Real From: %MAILFROM% XINHEADER X-Note: SMTP Real To: %ALLRECIPS% XOUTHEADER X-Note: QueOutControl: %QUEUENAME% (%NRECIPS%) Also, this way we do not have to open the second file in the Spool/Spam to see who and where the message came from. Even our users can get the 'real' scoop on these things now... We can also better identify spam servers for kill.lst or rules.ima using this info. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Whitelist NOT honored
Scott I tried adding CC %ALLRECIPS% to the BANEXT email template hoping to have a copy go to the recipient as well. Is it possible?? David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Tuesday, January 08, 2002 3:35 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Whitelist NOT honored I sincerely hope, that Declude is NOT doing a case sensitive pattern match - as neither email addresses nor host names are case sensitive? It is case sensitive. This was discovered this morning, and will be changed for 1.32. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail scanned for viruses] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Whitelist NOT honored
Scott Thanks. Get some sleep. ;) David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Tuesday, January 08, 2002 8:49 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Whitelist NOT honored I tried adding CC %ALLRECIPS% to the BANEXT email template hoping to have a copy go to the recipient as well. Is it possible?? No, that isn't possible. However, you should be able to do something like this: To: %MAILFROM%,%ALLRECIPS% with each address (or group of addresses) separated by a comma. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail scanned for viruses] --- [This E-mail scanned for viruses] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
