[Declude.JunkMail] Spamdomains question

2004-05-11 Thread Rick Davidson
I just had an email fail spamdomains for [EMAIL PROTECTED]
X-RBL-Warning: SPAMDOMAINS: Spamdomain 'swbell.net' found: Address of
[EMAIL PROTECTED] sent from invalid mta7.pltn13.pbi.net.


pbi.net is registered to SBC and is valid (pacific bell internet)

In my spam domains file I have this:
swbell.net  .prodigy.net

would I just add another line like this?
swbell.net  .pbi.net

or can they be placed on the same line like this?
swbell.net  .prodigy.net  .pbi.net

Question 2:
Is there a way to turn the headers off in the mail archive so everyones
declude header messages arent the bulk of the search results?

Rick Davidson
National Systems Manager
North American Title Group
-

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Spamdomains question

2004-05-11 Thread R. Scott Perry

I just had an email fail spamdomains for [EMAIL PROTECTED]
X-RBL-Warning: SPAMDOMAINS: Spamdomain 'swbell.net' found: Address of
[EMAIL PROTECTED] sent from invalid mta7.pltn13.pbi.net.
pbi.net is registered to SBC and is valid (pacific bell internet)

In my spam domains file I have this:
swbell.net  .prodigy.net
would I just add another line like this?
swbell.net  .pbi.net
No.  With both those lines, E-mail from @swbell.net will fail the test 
unless the reverse DNS contains swbell.net in it.

For example, an E-mail from @swbell.net with a reverse DNS entry of 
mail.prodigy.net would pass the first line, but fail the second line, 
causing the test to fail.

or can they be placed on the same line like this?
swbell.net  .prodigy.net  .pbi.net
This is something that we hope to add later.

Question 2:
Is there a way to turn the headers off in the mail archive so everyones
declude header messages arent the bulk of the search results?
Unfortunately, I'm not aware of any way to do that.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Spamdomains question

2004-05-11 Thread Scott Fisher
I believe you are only allowed two columns in the spam domain line.

Scott Fisher
Director of IT
Farm Progress Companies

 [EMAIL PROTECTED] 05/11/04 03:40PM 
I just had an email fail spamdomains for [EMAIL PROTECTED] 
X-RBL-Warning: SPAMDOMAINS: Spamdomain 'swbell.net' found: Address of
[EMAIL PROTECTED] sent from invalid mta7.pltn13.pbi.net.


pbi.net is registered to SBC and is valid (pacific bell internet)

In my spam domains file I have this:
swbell.net  .prodigy.net

would I just add another line like this?
swbell.net  .pbi.net

or can they be placed on the same line like this?
swbell.net  .prodigy.net  .pbi.net

Question 2:
Is there a way to turn the headers off in the mail archive so everyones
declude header messages arent the bulk of the search results?

Rick Davidson
National Systems Manager
North American Title Group
-

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] SpamDomains Question

2004-01-30 Thread Scott Fosseen
I have added a SpamDomains test to Global.cfg and junkmail.default file
SpamDomains is set to warn.  I am running a backup mail server that forwards
mail to the system with Declude Junkmail.  I do have an IPBYPASS entry for
the backup mail server.

My warn messages in the mail server look to always test my backup mail
server name if the message was routed through that server.   I am running
Declude Virus Pro V 1.75

So is the header info correct and the SpamDomains logic is using my backup
mail server address as who sent the message, or is the message wrong?
_
Scott Fosseen - Systems Engineer -Prairie Lakes AEA
http://fosseen.us/scott
_
Aoccdrnig to a rscheearch at an Elingsh uinervtisy, it deosn't mttaer
in waht oredr the ltteers in a wrod are, the olny iprmoatnt tihng is
taht the frist and lsat ltteers are in the rghit pclae. The rset can
be a toatl mses - We do not raed ervey lteter by itslef, but the wrod
as a wlohe.
_

---
[This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] SPAMDOMAINS question

2003-10-08 Thread R. Scott Perry

This may have been asked already, but I could not find it in the archives...

in the spamdomains.txt file, can I use an entry like:

.br

to block all mail from Brazil or is that going to be too broad?
That would work (blocking any E-mail with a return address with .br in 
it, which came from a reverse DNS entry without .br in it).

The one catch is that it would apply to any E-mail with .br in the return 
address, including @mail.brook.com.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] SPAMDOMAINS question

2003-10-08 Thread Jon Lapp
Title: Message



This may have been 
asked already, but I could not find it in the archives...

in the 
spamdomains.txt file, can I use an entry like:

.br

to block all mail 
from Brazil or is that going to be too broad?


Jon 
Lapp
Computer 
Systems Specialist
Northstar 
Computer Forms, Inc.
716.763.5513 - 
Direct
716.763.0272 - 
Fax
http://www.nscf.com
[EMAIL PROTECTED] 




[Declude.JunkMail] Spamdomains question

2003-07-24 Thread Joshua Levitsky
Title: Re: [Declude.JunkMail] dashes in domains



Question on SpamDomains...

X-RBL-Warning: SPAMDOMAINS: Spamdomain 'netscape.' found: Address of [EMAIL PROTECTED] sent from invalid 
r2d2.aoltw.net

The above header was in an email to me from a netscape employee I work 
with. (changed it to snoopy so she doesn't get spam) Mail from Netscape comes 
from aoltw.net as that is one of our internal domains at AOL Time Warner. In 
Spamdomains I have

netscape. aol.

Should I make it looser with 

netscape. aol

removing the period on the end of "aol" ? I know this opens it up to 
matching many more hosts, but it still will fail many spammers. Is there a 
better solution? 

-Josh


Re: [Declude.JunkMail] Spamdomains question

2003-07-24 Thread Dan Geiser
Title: Re: [Declude.JunkMail] dashes in domains



Joshua,
What about...

netscape. .aol

?

Dan

  - Original Message - 
  From: 
  Joshua 
  Levitsky 
  To: [EMAIL PROTECTED] 
  
  Sent: Thursday, July 24, 2003 6:26 
  PM
  Subject: [Declude.JunkMail] Spamdomains 
  question
  
  Question on SpamDomains...
  
  X-RBL-Warning: SPAMDOMAINS: Spamdomain 'netscape.' found: Address of [EMAIL PROTECTED] sent from invalid 
  r2d2.aoltw.net
  
  The above header was in an email to me from a netscape employee I work 
  with. (changed it to snoopy so she doesn't get spam) Mail from Netscape comes 
  from aoltw.net as that is one of our internal domains at AOL Time Warner. In 
  Spamdomains I have
  
  netscape. aol.
  
  Should I make it looser with 
  
  netscape. aol
  
  removing the period on the end of "aol" ? I know this opens it up to 
  matching many more hosts, but it still will fail many spammers. Is there a 
  better solution? 
  
  -Josh


Re: [Declude.JunkMail] Spamdomains question

2003-07-24 Thread Joshua Levitsky
Title: Re: [Declude.JunkMail] dashes in domains



Oh that is smart... cool... I think that will do it 
for me. 

-Josh

  - Original Message - 
  From: 
  Dan 
  Geiser 
  To: [EMAIL PROTECTED] 
  
  Sent: Thursday, July 24, 2003 6:42 
  PM
  Subject: Re: [Declude.JunkMail] 
  Spamdomains question
  
  Joshua,
  What about...
  
  netscape. .aol
  
  ?
  
  Dan
  
- Original Message - 
From: 
Joshua 
Levitsky 
To: [EMAIL PROTECTED] 

Sent: Thursday, July 24, 2003 6:26 
PM
Subject: [Declude.JunkMail] Spamdomains 
question

Question on SpamDomains...

X-RBL-Warning: SPAMDOMAINS: Spamdomain 'netscape.' found: Address of 
[EMAIL PROTECTED] sent from 
invalid r2d2.aoltw.net

The above header was in an email to me from a netscape employee I 
work with. (changed it to snoopy so she doesn't get spam) Mail from Netscape 
comes from aoltw.net as that is one of our internal domains at AOL Time 
Warner. In Spamdomains I have

netscape. aol.

Should I make it looser with 

netscape. aol

removing the period on the end of "aol" ? I know this opens it up to 
matching many more hosts, but it still will fail many spammers. Is there a 
better solution? 

-Josh