[Declude.JunkMail] Avoiding False Positives?

2004-06-23 Thread Brent Brashear
I have numerous clients that report the problems of their client e-mails
failing spam tests. They ask me why their clients fail -and what they can
suggest to avoid failing some of the filters.

I've heard some things like using all CAPS or backgrounds can hit some
filters. 

My understanding of this is minimal. I know a lot has to do with what
filters are being used -and how the administrator setup the domain.

Is there any advise to give to legit e-mailers to help out in reducing their
chances of getting caught in the spam filters?

Regards,

Brent
attachment: winmail.dat

Re: [Declude.JunkMail] Avoiding False Positives?

2004-06-23 Thread R. Scott Perry

I have numerous clients that report the problems of their client e-mails
failing spam tests. They ask me why their clients fail -and what they can
suggest to avoid failing some of the filters.
...
Is there any advise to give to legit e-mailers to help out in reducing their
chances of getting caught in the spam filters?
It all depends on what spam tests they are failing.  For example, if they 
are failing SPAMCOP, people reported them as sending spam.  If they are 
failing the BADHEADERS test, then their mail client is not 
RFC-compliant.  So the first step is to check the X-Spam-Tests-Failed: 
header to see which spam tests the E-mail failed, and work from there.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Avoiding False Positives?

2004-06-23 Thread Greg Foulks
Brent,
Something that I'm doing for my users is the use of a pass phrase. I've 
given all of my users a pass phrase (combination of letters and numbers, 
similar to a pin code) to give to their contacts who send email to them. 
Using Spamchk I've created a negative weight of 1000 whenever the pass 
phrase is found within the body of an email which will erase any all 
weight that has been assigned to an incoming email and thus saving it 
from ever being considered spam.

Greg
Brent Brashear wrote:
I have numerous clients that report the problems of their client e-mails
failing spam tests. They ask me why their clients fail -and what they can
suggest to avoid failing some of the filters.
I've heard some things like using all CAPS or backgrounds can hit some
filters. 

My understanding of this is minimal. I know a lot has to do with what
filters are being used -and how the administrator setup the domain.
Is there any advise to give to legit e-mailers to help out in reducing their
chances of getting caught in the spam filters?
Regards,
Brent
 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Avoiding False Positives?

2004-06-23 Thread Brent Brashear
I appreciate the feedback.

Where do you get information about the tests (like SPAMCOP and BADHEADERS
(how do you get RFC-compliant?)?

What are the most popular tests to use?

My understanding is that you can't just throw EVERY test out there into your
filter search (especially if you're an ISP with 100's (or more) e-mail
domains), because that will slow down the server.

Thanks again for the feedback...

-Brent

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Wednesday, June 23, 2004 8:31 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Avoiding False Positives?



I have numerous clients that report the problems of their client e-mails
failing spam tests. They ask me why their clients fail -and what they can
suggest to avoid failing some of the filters.
...
Is there any advise to give to legit e-mailers to help out in reducing
their
chances of getting caught in the spam filters?

It all depends on what spam tests they are failing.  For example, if they
are failing SPAMCOP, people reported them as sending spam.  If they are
failing the BADHEADERS test, then their mail client is not
RFC-compliant.  So the first step is to check the X-Spam-Tests-Failed:
header to see which spam tests the E-mail failed, and work from there.


-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Web Force Systems AntiVirus]


---
[This E-mail scanned for viruses by Web Force Systems AntiVirus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Avoiding False Positives?

2004-06-23 Thread R. Scott Perry

Where do you get information about the tests (like SPAMCOP and BADHEADERS
(how do you get RFC-compliant?)?
Descriptions of the DNS-based spam tests can be found at 
http://www.declude.com/junkmail/support/ip4r.htm ; descriptions of the 
others can be found in the manual.  To become RFC-compliant, the vendor of 
an Internet product must follow the rules of the Internet (the RFCs).

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.