Re: [Declude.JunkMail] whitelisting based on rev dns
On Nov 8, 2006, at 1:24 PM, Craig Edmonds wrote: How can I whitelist based on Reverse DNS? Create a filter with lines like REVDNS xxx ENDSWITH .abcdefghi.com where xxx is weight to apply. Xxx could be a very high number to cause the message to be deleted or it could be a negative number. In my revdns spam filter I also have the following lines at the top to save processor usage SKIPIFWEIGHT xx STOPATFIRSTHIT If the message's weight already exceeds xx the filter will be skipped. Later, Greg --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] picture spam
On Oct 12, 2006, at 11:52 AM, Dave Beckstrom wrote: According to Declude’s web site, any business that provides email to customers can’t use commtouch. If the above is true, and since Declude provides e-mail to some of it's customers (see http://www.declude.com/site/ms.htm), shouldn't that technically prevent Declude from using Commtouch? Just wondering, Greg --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] [OT] Drop Connection On First Invalid User
On Mar 27, 2006, at 11:16 AM, Craig Edmonds wrote: Does anyone know if this actually works on IMAIL 8.11? I notice Greg said it didn't work for him but I was just wondering. I was using 8.14 or 8.15 when it didn't work for me. Upgraded to 8.22 and it worked, but now thinking back I don't remember if I shutdown/ restarted Imail or restarted the server after making the addition to the registry (I was under a VERY heavy attack!). Nothing bad happened when it didn't work for me so I'd suggest you add the key, shutdown/ restart Imail and see what happens. Maybe you can prove I did something wrong and other people running 8.1 won't need to upgrade to get that feature. Thanks, Greg Evanitsky ACS, Inc. (717) 248-2720 ext. 5113 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] [OT] Drop Connection On First Invalid User
On Mar 27, 2006, at 10:36 AM, Marc Catuogno wrote: I don't have the key referred to in the KB article. You'll need to manually add it to the registry (I had to also). Declude has nothing to do with it. Thanks, Greg Evanitsky ACS, Inc. (717) 248-2720 ext. 5113 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] [OT] Drop Connection On First Invalid User
On Mar 26, 2006, at 2:22 PM, Goran Jovanovic wrote: How are you going to drop the SMTP connection on the first or second invalid recipient? In Imail. http://support.ipswitch.com/kb/IM-20050831-DM01.htm BTW, the support page says it works in 8.1+ but didn't for me. Upgraded to 8.22, works perfectly. Thanks, Greg Evanitsky ACS, Inc. (717) 248-2720 ext. 5113 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] IP Blocking
On Mar 24, 2006, at 12:45 PM, Orin Wells wrote: It appears the cause for my imail jamming problem is a spam source in Korea starting with the block 51.0.0.0 Until advised otherwise, I don't care if anyone ever receives messages from this origin If you know you don't want those ip packets, why not discard them asap? If you don't want to ever receive a message from an ip range I'd recommend you block those IP packets from your network at your main router. If you can't do that, block them at the mail server (smtp access control in imail) and lastly blacklist them in declude. At router - messages never reach mail server so mail server can process legitimate messages. At imail - messages pass through network, imail sends a denied access message, very little processing. In declude - messages pass through network, imail still must accept message, then declude must process. Thanks, Greg Evanitsky ACS, Inc. (717) 248-2720 ext. 5113 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] [OT] Drop Connection On First Invalid User
On Mar 23, 2006, at 12:55 PM, Darrell (([EMAIL PROTECTED])) wrote: Is anyone dropping the smtp connection on the first invalid user? Anyone see a downside to this? If the message has multiple recipients (even ones that are valid) they will receive a notice saying the message was not delivered. Thoughts? We drop after the second invalid user. One could be an accident, two is a pattern. We had over 14,000 invalid users attempts yesterday from 216.79.155.*. Imail SMTP access control list today for that subnet. If the "denied" numbers are big during the next few days, blockage at our main router is the next/final step. Thanks, Greg Evanitsky ACS, Inc. (717) 248-2720 ext. 5113 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
