RE: [Declude.JunkMail] Question On behavior

2003-03-26 Thread Darrell LaRock
Scott,

To get around this problem do you think this is possible?

Add a lot of negative weight to the message that has a recipient as
postmaster so it won't get bounced.  Then create a test that will route
the message back to the postmaster's account?  This would then route the
message to the postmaster and not the other recipients?  I am only
pursing this because some really offensive email has been getting
through where they are including the postmaster@ address in the mail.

Is it possible to accomplish something like that?

Darrell


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Tuesday, March 25, 2003 10:04 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Question On behavior


We have our domains postmaster addresses whitelisted.  I noticed that a
message coming in that has multiple recipients will be delivered to all
the recipients mailboxes as long as it has a whitelisted postmaster
address.

This is not exactly the desired behavior I am looking for.

Unfortunately, that is the behavior that is required.  The problem is
that 
you are dealing with a single E-mail with multiple recipients, not
multiple 
E-mails.  We are working on some creative ways to get around this, but 
there would still be some definite limitations.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Question On behavior

2003-03-26 Thread R. Scott Perry

To get around this problem do you think this is possible?

Add a lot of negative weight to the message that has a recipient as
postmaster so it won't get bounced.  Then create a test that will route
the message back to the postmaster's account?
It might be possible to do something like that.  An action ROUTETO 
[EMAIL PROTECTED] would prevent the other users from seeing the 
E-mail.  Perhaps adding a filter that includes a line ALLRECIPS 0 CONTAINS 
[EMAIL PROTECTED], and then having the action for that filter set to 
ROUTETO [EMAIL PROTECTED]?  That way, any E-mail that was addressed 
to [EMAIL PROTECTED] would get sent only to [EMAIL PROTECTED]
   -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Question On behavior

2003-03-26 Thread Darrell LaRock
Scott,

We have achieved the desired behavior with that setup.  I sent a test
message tripping off one of the filters and the mail was delivered to
the postmaster and was not delivered to the other recipients.

This is just a testament on how flexible this product is..

Thanks for the help
Darrell

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Wednesday, March 26, 2003 9:13 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Question On behavior


To get around this problem do you think this is possible?

Add a lot of negative weight to the message that has a recipient as
postmaster so it won't get bounced.  Then create a test that will route
the message back to the postmaster's account?

It might be possible to do something like that.  An action ROUTETO 
[EMAIL PROTECTED] would prevent the other users from seeing the 
E-mail.  Perhaps adding a filter that includes a line ALLRECIPS 0
CONTAINS 
[EMAIL PROTECTED], and then having the action for that filter set
to 
ROUTETO [EMAIL PROTECTED]?  That way, any E-mail that was
addressed 
to [EMAIL PROTECTED] would get sent only to [EMAIL PROTECTED]
-Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Question On behavior

2003-03-26 Thread John Tolmachoff
 We have achieved the desired behavior with that setup.  I sent a test
 message tripping off one of the filters and the mail was delivered to
 the postmaster and was not delivered to the other recipients.

Thanks for that update Darrell.

Sounds like something that should be implemented by any one whitelisting
postmaster or root or abuse.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com




---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Question On behavior

2003-03-26 Thread Darrell LaRock
John,

You are absolutely right on this should be implemented instead of
whitelisting the postmaster or abuse account.  This week I can't tell
you how many messages got through because postmaster@ was listed as a
recipient.

That shouldn't happen anymore...

Darrell 


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
Sent: Wednesday, March 26, 2003 11:24 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Question On behavior

 We have achieved the desired behavior with that setup.  I sent a test
 message tripping off one of the filters and the mail was delivered to
 the postmaster and was not delivered to the other recipients.

Thanks for that update Darrell.

Sounds like something that should be implemented by any one whitelisting
postmaster or root or abuse.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com




---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Question On behavior

2003-03-25 Thread Darrell LaRock
We have our domains postmaster addresses whitelisted.  I noticed that a
message coming in that has multiple recipients will be delivered to all
the recipients mailboxes as long as it has a whitelisted postmaster
address.

This is not exactly the desired behavior I am looking for.

It should have blocked this mail from all recipients except the
postmaster.

03/24/2003 22:08:17 Qc816661e001c6824 WORDFILTER:13 DSBL:5
WIREHUB-DNSBL:3 NOPOSTMASTER:1 BASE64:5 SNIFFER:8 .  Total weight = 35
03/24/2003 22:08:17 Qc816661e001c6824 E-mail whitelisted - automatically
passing all spam tests [EMAIL PROTECTED]
03/24/2003 22:08:17 Qc816661e001c6824 L1 Message OK
03/24/2003 22:08:17 Qc816661e001c6824 Subject: Pe**nis Enlargement Pills
- Order today!
03/24/2003 22:08:17 Qc816661e001c6824 From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED]  IP: 12.233.204.136 ID: 
03/24/2003 22:08:17 Qc816661e001c6824 L2 Message OK
03/24/2003 22:08:17 Qc816661e001c6824 Subject: Pe**nis Enlargement Pills
- Order today!
03/24/2003 22:08:17 Qc816661e001c6824 From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED] [EMAIL PROTECTED]  IP: 12.233.204.136 ID: 
03/24/2003 22:08:17 Qc816661e001c6824 L3 Message OK
03/24/2003 22:08:17 Qc816661e001c6824 Subject: Penis Enlargement Pills -
Order today!
03/24/2003 22:08:17 Qc816661e001c6824 From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]  IP:
12.233.204.136 ID:

20030324 220817 127.0.0.1   SMTP (1812) processing
e:\imail\spool\Qc816661e001c6824.SMD
20030324 220817 127.0.0.1   SMTP (1812) ldeliver
mail1.gannett-tv.com dlarock-main (1) [EMAIL PROTECTED] 4166
20030324 220817 127.0.0.1   SMTP (1812) ldeliver wfmy.com
2wantstoknow-main (1) [EMAIL PROTECTED] 4166
20030324 220817 127.0.0.1   SMTP (1812) forwarded message to
[EMAIL PROTECTED],[EMAIL PROTECTED]
20030324 220817 127.0.0.1   SMTP (1812) finished
e:\imail\spool\Qc816661e001c6824.SMD status=1 


Any thoughts?
Darrell

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Question On behavior

2003-03-25 Thread R. Scott Perry

We have our domains postmaster addresses whitelisted.  I noticed that a
message coming in that has multiple recipients will be delivered to all
the recipients mailboxes as long as it has a whitelisted postmaster
address.
This is not exactly the desired behavior I am looking for.
Unfortunately, that is the behavior that is required.  The problem is that 
you are dealing with a single E-mail with multiple recipients, not multiple 
E-mails.  We are working on some creative ways to get around this, but 
there would still be some definite limitations.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.