RE: [Declude.JunkMail] Ebay and Spamdomians

2003-08-14 Thread Paul Navarre
 In my experience, for HOTMAIL.COM in particular I've never seen a message
 sent through a non-Hotmail server.  I think you might have a configuration
 problem if you are seeing tons of legitimate e-mail from non Hotmail
 servers.  Especially since it's a web-based e-mail client I wouldn't think
 they could use anything but Microsoft owned, e.g. hotmail.com, msn.com,
 servers.

I'm glad I posted on this as I am realizing that I am not understanding exactly what 
is going on.
When I had the spamdomains test set at 2/3s of the hold weight, I would find 4 or 5 
legitimate
messages a day held, with spamdomains putting each message over the top.

A quick look in my logs shows that 4 or 5 messages a day is a tiny percentage compared 
to the number
of spammy messages that fail spamdomains.

The problem is that these 4 or 5 messages a day are too many for me. It seems somebody 
is on my case
whenever there is a false positive.

I realize now that yahoo.com was probably a bad example, although I am sure that I 
have seen it
happen. Perhaps Sheldon's explanation is correct.

The bottom line is that I think I need to pay better attention to those false 
positives and see if I
can figure out more about them.

Thanks for the feedback,

Paul Navarre

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Ebay and Spamdomians

2003-08-14 Thread Dan Geiser
Hey, Paul, et.al.,
My current SPAMDOMAINS has a weight of 10.  The hold weights on most of my
domains is well below 10 so almost every message failing SPAMDOMAINS is
held.  My current SD.TXT file has 118 lines in it.  I'll see maybe 1 legit
e-mail caught by SPAMDOMAINS for every 1000 messages, i.e. a message being
sent from a spam domain through an alternate.  So far I've been able to
tweak SD.TXT and add an alias to deal with those.

In my experience, for HOTMAIL.COM in particular I've never seen a message
sent through a non-Hotmail server.  I think you might have a configuration
problem if you are seeing tons of legitimate e-mail from non Hotmail
servers.  Especially since it's a web-based e-mail client I wouldn't think
they could use anything but Microsoft owned, e.g. hotmail.com, msn.com,
servers.

Later,
Dan

- Original Message - 
From: Paul Navarre [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, August 06, 2003 4:13 PM
Subject: RE: [Declude.JunkMail] Ebay and Spamdomians


 I've been surprised at everyone waxing poetic over the spamdomains test. I
have had to give this
 test very little wieght because we constantly get legitimate mail from
spam domain addresses, but
 sent through other servers. For example, I see a ton of legitimate email
from hotmail but where the
 sender sent it presumably through their work server.

 That's not a knock against Declude. The test works as advertised, and I do
use it. I just have to
 give it very little weight.

 Paul Navarre

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 
 This E-mail is scanned and free from viruses. www.nexustechgroup.com




This E-mail is scanned and free from viruses. www.nexustechgroup.com

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Ebay and Spamdomians

2003-08-14 Thread Jeff Pereira
I had the same thing with emails from Hotjobs and Monster.com.

Because they all have the same basic subject line I chose to whitelist them.

JP
- Original Message -
From: Sheldon Koehler [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, August 06, 2003 12:01 PM
Subject: [Declude.JunkMail] Ebay and Spamdomians


 I searched but with so many emails regarding SPAMDOMAINS I could not find
 the answer.

 I know it was discussed a few weeks ago about email coming from Ebay and
 legit greeting card sites that use the senders email address. Email from
 domains in the SD get bounced.

 Any ideas?


 Sheldon


 Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com
 Ten Forward Communications   360-457-9023
 Nationwide access, neighborhood support!

 Whenever you find yourself on the side of the majority, it's time
 to pause and reflect. Mark Twain


 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 ---
 [This E-mail scanned for viruses by Declude Virus]



---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Ebay and Spamdomians

2003-08-14 Thread Paul Navarre
I've been surprised at everyone waxing poetic over the spamdomains test. I have had to 
give this
test very little wieght because we constantly get legitimate mail from spam domain 
addresses, but
sent through other servers. For example, I see a ton of legitimate email from hotmail 
but where the
sender sent it presumably through their work server.

That's not a knock against Declude. The test works as advertised, and I do use it. I 
just have to
give it very little weight.

Paul Navarre

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Ebay and Spamdomians

2003-08-14 Thread Dan Geiser
What is the LA?

- Original Message - 
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, August 06, 2003 4:30 PM
Subject: RE: [Declude.JunkMail] Ebay and Spamdomians


Sending messages from a hotmail address but not through a hotmail server may
not be allowed under the LA.

John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Paul Navarre
 Sent: Wednesday, August 06, 2003 1:13 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Ebay and Spamdomians

 I've been surprised at everyone waxing poetic over the spamdomains test. I
have
 had to give this
 test very little wieght because we constantly get legitimate mail from
spam domain
 addresses, but
 sent through other servers. For example, I see a ton of legitimate email
from
 hotmail but where the
 sender sent it presumably through their work server.

 That's not a knock against Declude. The test works as advertised, and I do
use it. I
 just have to
 give it very little weight.

 Paul Navarre

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
===
This E-mail is scanned and free from viruses. www.nexustechgroup.com



This E-mail is scanned and free from viruses. www.nexustechgroup.com

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Ebay and Spamdomians

2003-08-14 Thread John Tolmachoff \(Lists\)
Sending messages from a hotmail address but not through a hotmail server may
not be allowed under the LA.

John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Paul Navarre
 Sent: Wednesday, August 06, 2003 1:13 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Ebay and Spamdomians
 
 I've been surprised at everyone waxing poetic over the spamdomains test. I
have
 had to give this
 test very little wieght because we constantly get legitimate mail from
spam domain
 addresses, but
 sent through other servers. For example, I see a ton of legitimate email
from
 hotmail but where the
 sender sent it presumably through their work server.
 
 That's not a knock against Declude. The test works as advertised, and I do
use it. I
 just have to
 give it very little weight.
 
 Paul Navarre
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Ebay and Spamdomians

2003-08-14 Thread Markus Gufler

 I'm glad I posted on this as I am realizing that I am not 
 understanding exactly what is going on. When I had the 
 spamdomains test set at 2/3s of the hold weight, I would find 
 4 or 5 legitimate messages a day held, with spamdomains 
 putting each message over the top.

Hi Paul

I had the same problem here and solved it by setting up two different
spamdomain tests.

SPAMDOMAINS_H   spamdomains E:\IMail\Declude\spamdomains_high.txt x
10 0
SPAMDOMAINS_L   spamdomains E:\IMail\Declude\spamdomains_low.txt x 6
0

As you can see each of this test has his own text-file with the domains
listed.

I recommend to put first all the domains you actually have in the
high-file.
Now you can move domain per domain to the low-file if it has created a
FP.

Our current weight for the high file is 50% of the hold weight.
For the low-file we give 30% of the hold weight.

With this setting we have had not a single FP caused by the
spamdomains-tests in the last 5 weeks.

Markus

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Ebay and Spamdomians

2003-08-14 Thread John Tolmachoff \(Lists\)
License agreement.

John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
626-737-6003
[EMAIL PROTECTED]
www.eservicesforyou.com


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Dan Geiser
 Sent: Wednesday, August 06, 2003 1:40 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.JunkMail] Ebay and Spamdomians
 
 What is the LA?
 
 - Original Message -
 From: John Tolmachoff (Lists) [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Wednesday, August 06, 2003 4:30 PM
 Subject: RE: [Declude.JunkMail] Ebay and Spamdomians
 
 
 Sending messages from a hotmail address but not through a hotmail server
may
 not be allowed under the LA.
 
 John Tolmachoff MCSE CSSA
 Engineer/Consultant
 eServices For You
 www.eservicesforyou.com
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
  [EMAIL PROTECTED] On Behalf Of Paul Navarre
  Sent: Wednesday, August 06, 2003 1:13 PM
  To: [EMAIL PROTECTED]
  Subject: RE: [Declude.JunkMail] Ebay and Spamdomians
 
  I've been surprised at everyone waxing poetic over the spamdomains test.
I
 have
  had to give this
  test very little wieght because we constantly get legitimate mail from
 spam domain
  addresses, but
  sent through other servers. For example, I see a ton of legitimate email
 from
  hotmail but where the
  sender sent it presumably through their work server.
 
  That's not a knock against Declude. The test works as advertised, and I
do
 use it. I
  just have to
  give it very little weight.
 
  Paul Navarre
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 ===
 This E-mail is scanned and free from viruses. www.nexustechgroup.com
 
 
 ===
 =
 This E-mail is scanned and free from viruses. www.nexustechgroup.com
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.