DSN:Re: [Declude.JunkMail] False positives for Spamheaders
In the case of SPAMHEADERS, that test will fail on E-mail that has legal headers (but ones which are common in spam and rarely ever seen with legitimate mail clients). The most common problem is that the web programmers don't add a Message-ID: header -- the RFCs require that they have one, unless they have a good reason not to and understand the consequences (that their E-mail may get treated as junk). -Scott We're getting SPAMHEADERS failing that have a Message-ID: header, like this; Message-Id: 200205220850921.SM01366@shared1 Is there something wrong with this Message-Id: header, or is this failing for some other reason? We also get a lot of BADHEADERS failures on email we programmatically generate - what typically causes these? TIA, David --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: DSN:Re: [Declude.JunkMail] False positives for Spamheaders
We're getting SPAMHEADERS failing that have a Message-ID: header, like this; Message-Id: 200205220850921.SM01366@shared1 Is there something wrong with this Message-Id: header, or is this failing for some other reason? We also get a lot of BADHEADERS failures on email we programmatically generate - what typically causes these? Never mind, I found the badheader lookup link on www.declude.com. Sorry to have bothered everyone :)) Thanks, David --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: DSN:Re: [Declude.JunkMail] False positives for Spamheaders
We're getting SPAMHEADERS failing that have a Message-ID: header, like this; Message-Id: 200205220850921.SM01366@shared1 Is there something wrong with this Message-Id: header, or is this failing for some other reason? There are a lot of other reasons that the E-mail could fail the SPAMHEADERS test (you can use the BADHEADERS Lookup tool at http://www.declude.com/tools to find out why). In this case, it looks like the E-mail was indeed sent without a header, but IMail later added it. We also get a lot of BADHEADERS failures on email we programmatically generate - what typically causes these? There are quite a few reasons -- but the most common is a non-RFC-compliant Date: header. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] False positives for Spamheaders
Hello... Installed JunkMail last week and I'm getting some interesting spamheader false positives. Some of the more interesting ones are newsletters from: ORACLE, SOPHOS, and SYMANTEC! I must trigger for Spamheaders since there are far too many real spam messages failing only the Spamheader test, so i'll be doing some whitelisting... ...but, all this makes makes me wonder why companies such as these, who of all people should know better, are sending out deficient headers. Any suggestions? Thx, D (just curious) McD. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] False positives for Spamheaders
Installed JunkMail last week and I'm getting some interesting spamheader false positives. Some of the more interesting ones are newsletters from: ORACLE, SOPHOS, and SYMANTEC! Unfortunately, a lot of web mailers are thrown together (the boss thinks that their web programmer is a programmer, and therefore can write programs, even a mail client). The web programmer doesn't understand RFCs, and voila. Problems. In the case of SPAMHEADERS, that test will fail on E-mail that has legal headers (but ones which are common in spam and rarely ever seen with legitimate mail clients). The most common problem is that the web programmers don't add a Message-ID: header -- the RFCs require that they have one, unless they have a good reason not to and understand the consequences (that their E-mail may get treated as junk). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] False positives for Spamheaders
If anyone would understand that then well world be so much easier. Get it when someone like microsoft don't support postmaster and abuse.. Their mailservers don't have any rev dns configured and to boot has invalid headers (this was what I saw on a MSN passport lost password requests that got held in our mails a while back). Whatever you do do not block or delete on JUST spamheaders or badheaders use the weighted system and if a message fail spamheaders only let it pass through. my .02 Thursday, May 23, 2002, 20:00:34, you wrote: DM Hello... DM Installed JunkMail last week and I'm getting some interesting spamheader DM false positives. Some of the more interesting ones are newsletters from: DM ORACLE, SOPHOS, and SYMANTEC! DM I must trigger for Spamheaders since there are far too many real spam DM messages failing only the Spamheader test, so i'll be doing some DM whitelisting... DM ...but, all this makes makes me wonder why companies such as these, who of DM all people should know better, are sending out deficient headers. DM Any suggestions? DM Thx, DM D (just curious) McD. DM --- DM [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] DM --- DM This E-mail came from the Declude.JunkMail mailing list. To DM unsubscribe, just send an E-mail to [EMAIL PROTECTED], and DM type unsubscribe Declude.JunkMail. You can E-mail DM [EMAIL PROTECTED] for assistance. You can visit our web DM site at http://www.declude.com . DM --- DM [This E-mail scanned for viruses by Declude Virus] Best regards, Eje mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 - Your Full Time Professionals - --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] False positives for Spamheaders
Yup. I doubt I'll ever do any deleting. Except for one president who insists I HOLD for him (damn the torpedoes, boy!), everyone else gets SUBJECT for everything except Badheaders and Routing, which I wait to see if they Weight10 from any other failure before they get SUBJECT. That MS info is news to me, but I wouldn't put it passed 'em (damn the torpedoes, boy!). D. At 08:37 PM 5/23/2002 -0500, you wrote: If anyone would understand that then well world be so much easier. Get it when someone like microsoft don't support postmaster and abuse.. Their mailservers don't have any rev dns configured and to boot has invalid headers (this was what I saw on a MSN passport lost password requests that got held in our mails a while back). Whatever you do do not block or delete on JUST spamheaders or badheaders use the weighted system and if a message fail spamheaders only let it pass through. my .02 Thursday, May 23, 2002, 20:00:34, you wrote: DM Hello... DM Installed JunkMail last week and I'm getting some interesting spamheader DM false positives. Some of the more interesting ones are newsletters from: DM ORACLE, SOPHOS, and SYMANTEC! DM I must trigger for Spamheaders since there are far too many real spam DM messages failing only the Spamheader test, so i'll be doing some DM whitelisting... DM ...but, all this makes makes me wonder why companies such as these, who of DM all people should know better, are sending out deficient headers. DM Any suggestions? DM Thx, DM D (just curious) McD. DM --- DM [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] DM --- DM This E-mail came from the Declude.JunkMail mailing list. To DM unsubscribe, just send an E-mail to [EMAIL PROTECTED], and DM type unsubscribe Declude.JunkMail. You can E-mail DM [EMAIL PROTECTED] for assistance. You can visit our web DM site at http://www.declude.com . DM --- DM [This E-mail scanned for viruses by Declude Virus] Best regards, Eje mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 - Your Full Time Professionals - --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] False positives for Spamheaders
We have the exact same problem.. We've been running in SUBJECT mode and I've got everything tuned perfectly except list servers! All of our users are forwarding email to me saying that this is real email and not SPAM: Since I'm dealing with a single business in front of an Exchange server, we're going to have to decide if we want to block spam or want to allow users to subscribe to lists. Unfortunately, I think most people get on Spam lists because the join lists. FWIW, Microsoft (at least the UK sites) don't support REVDNS, Postmaster, or Abuse. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Dale McDiarmid Sent: Thursday, May 23, 2002 10:01 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] False positives for Spamheaders Yup. I doubt I'll ever do any deleting. Except for one president who insists I HOLD for him (damn the torpedoes, boy!), everyone else gets SUBJECT for everything except Badheaders and Routing, which I wait to see if they Weight10 from any other failure before they get SUBJECT. That MS info is news to me, but I wouldn't put it passed 'em (damn the torpedoes, boy!). D. At 08:37 PM 5/23/2002 -0500, you wrote: If anyone would understand that then well world be so much easier. Get it when someone like microsoft don't support postmaster and abuse.. Their mailservers don't have any rev dns configured and to boot has invalid headers (this was what I saw on a MSN passport lost password requests that got held in our mails a while back). Whatever you do do not block or delete on JUST spamheaders or badheaders use the weighted system and if a message fail spamheaders only let it pass through. my .02 Thursday, May 23, 2002, 20:00:34, you wrote: DM Hello... DM Installed JunkMail last week and I'm getting some interesting DM spamheader false positives. Some of the more interesting ones are DM newsletters from: ORACLE, SOPHOS, and SYMANTEC! DM I must trigger for Spamheaders since there are far too many real DM spam messages failing only the Spamheader test, so i'll be doing DM some whitelisting... DM ...but, all this makes makes me wonder why companies such as these, who of DM all people should know better, are sending out deficient headers. DM Any suggestions? DM Thx, DM D (just curious) McD. DM --- DM [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] DM --- DM This E-mail came from the Declude.JunkMail mailing list. To DM unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type DM unsubscribe Declude.JunkMail. You can E-mail DM [EMAIL PROTECTED] for assistance. You can visit our web site at DM http://www.declude.com . DM --- DM [This E-mail scanned for viruses by Declude Virus] Best regards, Eje mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 - Your Full Time Professionals - --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
