Fwd: RE: [Declude.JunkMail] How do I block this...what is best way? way?

2003-09-29 Thread Neal Mathews
From 9/17:

From: Tom [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] How do I block this...what is best way?
Date: Wed, 17 Sep 2003 19:05:03 -0400
Organization: Image`fx Productions, Inc.
X-Mailer: Microsoft Outlook, Build 10.0.4510
Importance: Normal
X-Declude-Sender: [EMAIL PROTECTED] [206.181.98.1]
X-Declude-Spoolname: De8b7581900fe90c6.SMD
X-CYBERsitter-SpamManager-In: Passed - Adult: 0 (Req: 18) Spam: 14 (Req: 
18) Tot: 14 (Req: 20)
X-CYBERsitter-SpoolFile: De8a4195e0a08d255.SMD
X-CYBERsitter-Sender: [EMAIL PROTECTED] [206.181.98.33]
X-Note: This E-mail was scanned for viruses by Declude Virus (www.declude.com)
X-NRecips: 1
X-Reverse-IP: mail.imagefxonline.net
X-Weight: -13 (CURRENT, HEUR1, SPAMCHK)
X-Country-Chain: UNITED STATES-destination.
X-Declude-Sender: [EMAIL PROTECTED] [206.181.98.33]
X-Declude-Spoolname: De8a4195e0a08d255.SMD
Sender: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
X-Note: Scanned for spam by Declude JunkMail, V1.75i3.
X-From: [EMAIL PROTECTED]
X-RevDNS:  [24.107.232.14]
X-NoRecips: 1
X-Country-Chain:
X-Weight: 0 (Whitelisted)

 Is the ImageFX file still being updated?  When I check their
 code next to an entry, looks like the last time anything was added was
8/25.
It's still being updated, just not as often.  Because our spam has been way
down and under control we have not needed to do daily updates.  So we now
update depending on the collection of spam we get in our spam box.  We have
also created an Interface that allows users to control their own spam so we
don't have to do it anymore.  It makes life a lot easier and eliminates the
complaints from those users that want all the mail they can handle.
Best Regards,
Tom
Image`fx
---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


* 

If you are not the intended addressee indicated in this message (or 
responsible
for delivery of the message to such person), you may not copy or deliver this
message to anyone. In such case, you should destroy this message and kindly
notify the sender by reply email. Please advise immediately if you or your
employer do not consent to Internet email for messages of this kind.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] ImageFX Kill List

2003-09-29 Thread Neal Mathews

Sorry, used the wrong subject first time. - NM


 From 9/17:

From: Tom [EMAIL PROTECTED] 
To: [EMAIL PROTECTED] 
Subject: RE: [Declude.JunkMail] How do I block this...what is best way?

Date: Wed, 17 Sep 2003 19:05:03 -0400 
Organization: Image`fx Productions, Inc. 
X-Mailer: Microsoft Outlook, Build 10.0.4510 
Importance: Normal 
X-Declude-Sender: [EMAIL PROTECTED] [206.181.98.1] 
X-Declude-Spoolname: De8b7581900fe90c6.SMD 
X-CYBERsitter-SpamManager-In: Passed - Adult: 0 (Req: 18) Spam: 14 (Req:
18) Tot: 14 (Req: 20) 
X-CYBERsitter-SpoolFile: De8a4195e0a08d255.SMD 
X-CYBERsitter-Sender: [EMAIL PROTECTED] [206.181.98.33] 
X-Note: This E-mail was scanned for viruses by Declude Virus
(www.declude.com)

X-NRecips: 1 
X-Reverse-IP: mail.imagefxonline.net 
X-Weight: -13 (CURRENT, HEUR1, SPAMCHK) 
X-Country-Chain: UNITED STATES-destination. 
X-Declude-Sender: [EMAIL PROTECTED] [206.181.98.33] 
X-Declude-Spoolname: De8a4195e0a08d255.SMD 
Sender: [EMAIL PROTECTED] 
Reply-To: [EMAIL PROTECTED] 
X-Note: Scanned for spam by Declude JunkMail, V1.75i3. 
X-From: [EMAIL PROTECTED] 
X-RevDNS: [24.107.232.14] 
X-NoRecips: 1 
X-Country-Chain: 
X-Weight: 0 (Whitelisted)
 Is the ImageFX file still being updated? When I check their 
 code next to an entry, looks like the last time anything was added
was 
8/25.
It's still being updated, just not as often. Because our spam has been
way 
down and under control we have not needed to do daily updates. So we now

update depending on the collection of spam we get in our spam box. We
have 
also created an Interface that allows users to control their own spam so
we 
don't have to do it anymore. It makes life a lot easier and eliminates
the 
complaints from those users that want all the mail they can handle.
Best Regards, 
Tom 
Image`fx
--- 
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
--- 
This E-mail came from the Declude.JunkMail mailing list. To 
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
type unsubscribe Declude.JunkMail. The archives can be found

at
http://www.mail-archive.com.




At 07:44 AM 9/29/2003, you wrote:

Morning,


I know this was sorta mentioned briefly a few weeks ago but I don't think we ever heard from Tom. 

Is this file not being updated anymore? 

Thanks, 
Sharyn 


* 
If you are not the intended addressee indicated in this message (or responsible 
for delivery of the message to such person), you may not copy or deliver this 
message to anyone. In such case, you should destroy this message and kindly 
notify the sender by reply email. Please advise immediately if you or your 
employer do not consent to Internet email for messages of this kind.



RE: [Declude.JunkMail] How do I block this...what is best way?

2003-09-17 Thread Neal Mathews
Is the ImageFX file still being updated?  When I check their code next to 
an entry, looks like the last time anything was added was 8/25.

N. Mathews

At 09:29 AM 9/16/2003, you wrote:


Not to feed the spammers again by asking this, but is there a repository
of blacklists out there somewhere?  Anyone willing to share?
I use the pre-made blacklist file (Kill List) from ImageFx as I don't
have a lot of spare time to do my own configurations. Good job, guys, by
the way! :)
http://www.imagefxonline.net/apps/delog/

I don't use this in my IMAIL kill list, I use it in JM. (blacklist
fromfile)
Sharyn

We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged Best in the World at the annual
San Francisco Wine and Spirits Championships. For
more information, please click (go to) htmla 
href=http://www.cruzanrums.com;www.cruzanrums.com/a/html
---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


* 

If you are not the intended addressee indicated in this message (or 
responsible
for delivery of the message to such person), you may not copy or deliver this
message to anyone. In such case, you should destroy this message and kindly
notify the sender by reply email. Please advise immediately if you or your
employer do not consent to Internet email for messages of this kind.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Report System

2003-08-04 Thread Neal Mathews
And, you guessed it, me too!

Neal M.

At 10:14 AM 8/4/2003, you wrote:
At 07:07 AM 8/4/2003 -0700, you wrote:

Me too...

Hawk

Darrell I would like to try your reporting as well

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Darrell LaRock
Sent: Thursday, July 31, 2003 2:06 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Report System
Terry,

I used delog for awhile, but I needed several other features that did not
come with delog.  So I developed an application that had all of the features
that I needed.  Below is a sample report that I generated(tab format).  The
reports can be in tab, csv, or html format and you have the ability to email
them as well.
There are many other things that dlanalyzer can report on.  You can get
reports on domains, users, tests, and different reporting periods.  The
combinations are endless.
Right now I am finishing up database support and a few other miscellaneous
features I wanted to add in..
If you would like to try it out let me know and I will make it available..

Darrell

Start Time: 6/1/2003 12:00:00 AM
End Time: 6/2/2003 12:00:00 AM
Total Messages: 25935
Messages That Failed: 18252
Spam Percentage: 70.38%
TEST# FAILEDPercentage
BADHEADERS  373514.40%
BASE64  12034.64%
BLACKLIST   13255.11%
COMMENTS668 2.58%
DECREASEIPWGHT  40  0.15%
DECREASEWEIGHT  557 2.15%
DECREASEWEIGHTLOW   313 1.21%
DSBL380714.68%
DSN 12154.68%
EASYNET-DNSBL   741828.60%
FXBLACKLIST 25749.92%
HELOBOGUS   477618.42%
HEUR10  289911.18%
IPBLACKLIST 5   0.02%
MAILFROM385 1.48%
NJABL   408 1.57%
NOABUSE 334112.88%
NONENGLISH  214 0.83%
NOPOSTMASTER402015.50%
OLDEMPLOYEE 29  0.11%
ORDB261 1.01%
OSDUL   113 0.44%
OSLIST  2   0.01%
OSRELAY 343 1.32%
OSSOFT  326512.59%
OSSRC   330812.75%
POSTMASTER  12  0.05%
REVDNS  423116.31%
ROUTING 14875.73%
SNIFFER 328512.67%
SNIFFERAV   12  0.05%
SNIFFERCASINO   159 0.61%
SNIFFERDEBT 815 3.14%
SNIFFEREXP  269 1.04%
SNIFFERGETRICH  630 2.43%
SNIFFERGREY 421 1.62%
SNIFFERINK  196 0.76%
SNIFFERINSURAN  58  0.22%
SNIFFEROBFUS350 1.35%
SNIFFERPHARM17276.66%
SNIFFERPORN 16306.28%
SNIFFERSCAM 1   0.00%
SNIFFERSPAMWAR  127 0.49%
SNIFFERTHEFT138 0.53%
SNIFFERTRAVEL   438 1.69%
SPAMCOP 417216.09%
SPAMHEADERS 416016.04%
WEIGHT1010482   40.42%
WEIGHT5 769 2.97%
WORDFILTER  782630.18%
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Terry Parks
Sent: Thursday, July 31, 2003 2:26 PM
To: Declude. JunkMail
Subject: [Declude.JunkMail] Report System
While it's quiet I'd like to know which system is best at reporting status
of the email system in terms of most messages sent from/delivered to
address, etc. I need a good summary reporting system that will email me
these results. I've tried delog but the email feature doesn't work.
Terry

---
[This E-mail scanned for viruses by Surfside Internet]
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
* This E-mail scanned for viruses by Declude Virus *



* This E-mail scanned for viruses by Declude Virus *

===

Confidentiality Notice:

The information contained in this e-mail and all attachments are
confidential and are for sole use of its intended recipient.
It may not be disclosed to or used by anyone other than the addressee. If
received in error, please 

Re: [Declude.JunkMail] Reference documents needed

2003-03-26 Thread Neal Mathews

At 02:47 PM 3/26/2003, you wrote:
I simply cannot
keep up with the constant changes in JunkMail. News tests,
variables, and parameters are listed in the Release Notes, but the trick
is how to integrate those tests into an existing configuration, where to
insert them, how to configure the parameters for new tests, etc.

For example, the Release Notes for 1.67 Beta says
 JM ADD Adds comments test type to detect
anti-filter HTML comments.

Sounds great. Where and how do I use that test??
That's exactly what this list is for -- our goal is to add new features
to the manual after new releases, but to have information about beta
features discussed on this list.

 JM ADD Adds AUTOWHITELIST
ON option in global.cfg file which will use address books as
whitelists . . . 

Wonderful! A personal whitelist! Uhh, but address books
where?
Uhh, in the archive of this list. :)
How many times does the poor guy have to repeat this??? :)

-NM

*

If you are not the intended addressee indicated in this message (or
responsible 
for delivery of the message to such person), you may not copy or deliver
this 
message to anyone. In such case, you should destroy this message and
kindly 
notify the sender by reply email. Please advise immediately if you or
your 
employer do not consent to Internet email for messages of this 
kind.


===
Neal R. Mathews
Network Systems Engineer
Email: [EMAIL PROTECTED]
Phone: 1-716-673-1000 ext 8321
Direct: 1-716-673-8321

The Carriage House Companies,
Inc. 
196 Newton Street
Fredonia, NY 14063
 



RE: [Declude.JunkMail] Log Analyzer - Comments Needed

2003-02-28 Thread Neal Mathews

Me too!!! [EMAIL PROTECTED]

At 10:28 AM 2/28/2003, you wrote:
Count me in : [EMAIL PROTECTED] 
 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of John Shacklett
Sent: Friday, February 28, 2003 9:44 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Log Analyzer - Comments Needed

Yes, me too please.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of John Tolmachoff
Sent: Friday, 28 February 2003 9:25 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Log Analyzer - Comments Needed


 I have a beta available and I am looking for individuals to test
it
out.
 If you are interested the beta will be made available as early
as
 Monday.

I would be interested.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA 92835
www.reliancesoft.com



---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be
found
at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be
found
at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be
found
at
http://www.mail-archive.com.


*

If you are not the intended addressee indicated in this message (or
responsible 
for delivery of the message to such person), you may not copy or deliver
this 
message to anyone. In such case, you should destroy this message and
kindly 
notify the sender by reply email. Please advise immediately if you or
your 
employer do not consent to Internet email for messages of this 
kind.


===
Neal R. Mathews
Network Systems Engineer
Email: [EMAIL PROTECTED]
Phone: 1-716-673-1000 ext 8321
Direct: 1-716-673-8321

The Carriage House Companies,
Inc. 
196 Newton Street
Fredonia, NY 14063
 



[Declude.JunkMail] New COUNTRIES Feature

2002-11-07 Thread Neal Mathews
Why would my old Country filter catch something from Turkey
with this line:

MAILFROM
10
ENDSWITH .TR

while the new feature does not with this line:

COUNTRIES10CONTAINS.tr

My %COUNTRYCHAIN% header shows it going through Turkey.

Any ideas?

Here are partial headers:

X-RBL-Warning: DSN: Not supporting null originator (DSN)
X-RBL-Warning: NOABUSE: Not supporting abuse@domain
X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA
212.64.200.44 with no reverse DNS entry.
X-Warning: This E-Mail filtered for Foreign Country
X-RBL-Warning: DSBL:
http://dsbl.org/listing.php?212.64.200.44
X-Note: Scanned for spam by Declude JunkMail, V1.62.
X-From: [EMAIL PROTECTED]
X-RevDNS: [No Reverse DNS] [212.64.200.44]
X-NoRecips: 1
X-Country-Chain: TURKEY-destination
X-Weight: 23 (DSN, NOABUSE, REVDNS, CFILTER, WEIGHTRANGE15-49,
DSBL)


*

If you are not the intended addressee indicated in this message (or
responsible 
for delivery of the message to such person), you may not copy or
deliver this 
message to anyone. In such case, you should destroy this message and
kindly 
notify the sender by reply email. Please advise immediately if you
or your 
employer do not consent to Internet email for messages of this kind.


===
Neal R. Mathews
Network Systems Engineer
Email: [EMAIL PROTECTED]
Phone: 1-716-673-1000 ext 8321
Direct: 1-716-673-8321

The Carriage House Companies,
Inc. 
196 Newton Street
Fredonia, NY 14063