Re: [Declude.JunkMail] Hello Bogus

2004-05-02 Thread R. Scott Perry

Shouldnt this fail the helobogus test ? (No mx and no A records)
Received: from finance [217.64.97.78] by mail.cefib.com
No, because the sender was one in your domain.  Since most mail clients 
unfortunately are not RFC-compliant with the HELO/EHLO, Declude JunkMail 
automatically skips this test if the E-mail uses a return address on a 
domain of yours.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Hello Bogus

2004-05-02 Thread serge
I do whitelist my IPs (by addresses or auth)
can we make declude not skip the test for local return addresses ?

- Original Message - 
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Sunday, May 02, 2004 12:33 PM
Subject: Re: [Declude.JunkMail] Hello Bogus



 Shouldnt this fail the helobogus test ? (No mx and no A records)
 
 
 Received: from finance [217.64.97.78] by mail.cefib.com

 No, because the sender was one in your domain.  Since most mail clients
 unfortunately are not RFC-compliant with the HELO/EHLO, Declude JunkMail
 automatically skips this test if the E-mail uses a return address on a
 domain of yours.

 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers
 since 2000.
 Declude Virus: Ultra reliable virus detection and the leader in mailserver
 vulnerability detection.
 Find out what you've been missing: Ask for a free 30-day evaluation.

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re[2]: [Declude.JunkMail] Hello Bogus

2004-05-02 Thread Sanford Whiteman
 can we make declude not skip the test for local return addresses ?

I  think  this  is a good suggestion. A feature like LOCALSKIPPING OFF
would let an admin vouch for the whitelisting of allowed local clients
and let other tests run.

--Sandy



Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Hello Bogus

2004-05-01 Thread serge
Shouldnt this fail the helobogus test ? (No mx and no A records)


Received: from finance [217.64.97.78] by mail.cefib.com

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Hello

2003-01-22 Thread Jay Calvert



Hi all, I am new to list and am hoping that you can 
help me with a problem I am having:


We have several hundred employees all over the 
USA. Some of these people use various means of connecting to the internet, 
some ISDN, Cable, DSL, dialup. Everyonce in a while, I get a call from on 
of these employees stating that when they send email through our server, our 
mail server is not forwarding on the message to the recipient. 


I have discovered in several cases that the IP 
address they are using is in a spam database.

My Question is this: Is there a way to ignore 
the Spam Weighting if they have an account on the system?

Thanks.

Jay


Re: [Declude.JunkMail] Hello

2003-01-22 Thread R. Scott Perry


I have discovered in several cases that the IP address they are using is 
in a spam database.

My Question is this:  Is there a way to ignore the Spam Weighting if they 
have an account on the system?

No.

However, in this case, you may want to re-consider the settings for 
outgoing E-mail (in the global.cfg file).  For example, if you are blocking 
outgoing E-mail based on the total weight (such as the WEIGHT10 test), you 
may want to change it to a higher value (blocking based on the WEIGHT20 
test, for example).
  -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re[2]: [Declude.JunkMail] Hello

2003-01-22 Thread Sanford Whiteman
Descriptive  Subject  lines  will  get  you  much  better answers, but
Scott's already gotten back to you.

 Is  there  a way that if the sender is a recognized user of our mail
 system to ignore all spam filters?

You  mean if the sender impersonates a recognized user (like so many
spammers do)?

As  Scott said, adjust your weights, or (a) if you know the particular
IP  address,  and  it's  just  one host on a Class C or something like
that,  whitelist  it;  (b)  if  he's  getting  roaming  access  from a
blacklisted ISP, tell him to get a new ISP.

-Sandy

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.