RE: [Declude.JunkMail] ROUTING and COUNTRIES

2005-09-18 Thread Gary Steiner
That's enough to make you paranoid.  ;)


  Original Message 
> From: "David Barker" <[EMAIL PROTECTED]>
> Sent: Sunday, September 18, 2005 2:18 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] ROUTING and COUNTRIES
> 
> "If Declude is reading this..." To help comfort those who think we are not
> paying attention. We read all posts and take notice of everything that is
> said.
> 
> I will look at adding this to the Knowledge Base next week.
> 
> David Barker
> www.declude.com
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner
> Sent: Sunday, September 18, 2005 12:11 PM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] ROUTING and COUNTRIES
> 
> If Declude is reading this, maybe they could add these values to their
> Knowledge Base.
> 
> http://support.declude.com/Customer/KBArticle.aspx?articleid=6&KBSearchID=10
> 12
> 
> I also found a country code list that included some of the codes Scott
> mentioned at the bottom of this page:
> 
> http://it.farmprogress.com/declude/declude.htm
> 
> 
>   Original Message 
> > From: "Scott Fisher" <[EMAIL PROTECTED]>
> > Sent: Friday, September 16, 2005 4:15 PM
> > To: Declude.JunkMail@declude.com
> > Subject: Re: [Declude.JunkMail] ROUTING and COUNTRIES
> > 
> > Yes COUNTRIES 0 CONTAINS *A is correct.  The Asterick is a literal.
> > 
> > codes I know of:
> > *1 Multi-Regional
> > *2 Europe
> > *3 North America
> > *4 Central/South America
> > *5 Pacific Rim
> > *A ARIN Unlisted (North America/South Africa)
> > *B Public Data Network
> > *E RIPE Unlisted (Europe, North Africa, Middle East)
> > *I Private IP
> > *L Loopback
> > *M Multicast
> > *P APNIC Unlisted (Asia Pacific)
> > *R IANA Reserved
> > *U Unknown
> > 
> > 
> > 
> > - Original Message - 
> > From: "Gary Steiner" <[EMAIL PROTECTED]>
> > To: 
> > Sent: Friday, September 16, 2005 2:06 PM
> > Subject: re: [Declude.JunkMail] ROUTING and COUNTRIES
> > 
> > 
> > I guess it depends on exactly what text it is searching for.  In looking
> at 
> > my log files (set to Debug), I see that when it is checking the COUNTRIES 
> > filter I created, it displays a message like "Checking countries:  *A ."
> Is 
> > it actually looking for an asterisk followed by an A?  Here are some 
> > "non-countries" and the corresponding text displayed in the log file:
> > 
> > [ARIN Unlisted] *A
> > [RIPE Unlisted] *E
> > [IANA Reserved] *R
> > [Unknown] *U
> > 
> > Does this mean we should be using a line like
> > 
> > COUNTRIES0CONTAINS*A
> > 
> > Is that asterisk a literal or will it act as a wildcard?  Is anyone using 
> > this in a country filter?
> > 
> > 
> > 
> >   Original Message 
> > > From: Nick Hayer <[EMAIL PROTECTED]>
> > > Sent: Friday, September 16, 2005 12:36 PM
> > > To: Declude.JunkMail@declude.com
> > > Subject: [Declude.JunkMail] ROUTING and COUNTRIES
> > >
> > > Help from the guru's please...
> > >
> > > Wouldn't [shouldn't] this email fail the ROUTING test?
> > >
> > > X-Country-Chain: UNITED STATES->[IANA Reserved]->UNITED 
> > > STATES->destination
> > > X-Note: SMTP Sender: [EMAIL PROTECTED]
> > > X-Note: Sent from: [Revdns: [No Reverse DNS]] [RemoteHostDomain:
> > > lgvsoft.at] [RemoteIP: 58.142.35.136] [SenderHost: lgvsoft.at]
> > > X-Note: Spam [v:2.0.6.16] tests: IP4R.SORBS.DYNAMIC [0],
> > > EXTERNAL.CIP.OnlyIp [2], TEST.DYNHELO [5], TEST.REVDNS [0], FILTER.DYNA
> > > [5], FILTER.COMBO.DYNHELO.CIP [3]
> > >
> > > Also - is there a way to determine that this email came from/through a
> > > foreign [to the US] source?
> > > This email did not trigger on a foreign filter file that contains:
> > > COUNTRIES0CONTAINSIANA Reserved
> > >
> > > Same file has these than never trigger it seems either
> > > COUNTRIES0CONTAINSARIN Unlisted
> > > COUNTRIES0CONTAINSRIPE Unlisted
> > >
> > > Thanks!
> > >
> > > -Nick
> > > ---
> > 
> > 
> > ---
> > [This E-mail scanned for viruses by Declude Virus]
> > 
> > 
> > ---
> > This E-mail came from the Declude.JunkM

RE: [Declude.JunkMail] ROUTING and COUNTRIES

2005-09-18 Thread David Barker

"If Declude is reading this..." To help comfort those who think we are not
paying attention. We read all posts and take notice of everything that is
said.

I will look at adding this to the Knowledge Base next week.

David Barker
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner
Sent: Sunday, September 18, 2005 12:11 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] ROUTING and COUNTRIES

If Declude is reading this, maybe they could add these values to their
Knowledge Base.

http://support.declude.com/Customer/KBArticle.aspx?articleid=6&KBSearchID=10
12

I also found a country code list that included some of the codes Scott
mentioned at the bottom of this page:

http://it.farmprogress.com/declude/declude.htm


  Original Message 
> From: "Scott Fisher" <[EMAIL PROTECTED]>
> Sent: Friday, September 16, 2005 4:15 PM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] ROUTING and COUNTRIES
> 
> Yes COUNTRIES 0 CONTAINS *A is correct.  The Asterick is a literal.
> 
> codes I know of:
> *1 Multi-Regional
> *2 Europe
> *3 North America
> *4 Central/South America
> *5 Pacific Rim
> *A ARIN Unlisted (North America/South Africa)
> *B Public Data Network
> *E RIPE Unlisted (Europe, North Africa, Middle East)
> *I Private IP
> *L Loopback
> *M Multicast
> *P APNIC Unlisted (Asia Pacific)
> *R IANA Reserved
> *U Unknown
> 
> 
> 
> - Original Message ----- 
> From: "Gary Steiner" <[EMAIL PROTECTED]>
> To: 
> Sent: Friday, September 16, 2005 2:06 PM
> Subject: re: [Declude.JunkMail] ROUTING and COUNTRIES
> 
> 
> I guess it depends on exactly what text it is searching for.  In looking
at 
> my log files (set to Debug), I see that when it is checking the COUNTRIES 
> filter I created, it displays a message like "Checking countries:  *A ."
Is 
> it actually looking for an asterisk followed by an A?  Here are some 
> "non-countries" and the corresponding text displayed in the log file:
> 
> [ARIN Unlisted] *A
> [RIPE Unlisted] *E
> [IANA Reserved] *R
> [Unknown] *U
> 
> Does this mean we should be using a line like
> 
> COUNTRIES0CONTAINS*A
> 
> Is that asterisk a literal or will it act as a wildcard?  Is anyone using 
> this in a country filter?
> 
> 
> 
>   Original Message 
> > From: Nick Hayer <[EMAIL PROTECTED]>
> > Sent: Friday, September 16, 2005 12:36 PM
> > To: Declude.JunkMail@declude.com
> > Subject: [Declude.JunkMail] ROUTING and COUNTRIES
> >
> > Help from the guru's please...
> >
> > Wouldn't [shouldn't] this email fail the ROUTING test?
> >
> > X-Country-Chain: UNITED STATES->[IANA Reserved]->UNITED 
> > STATES->destination
> > X-Note: SMTP Sender: [EMAIL PROTECTED]
> > X-Note: Sent from: [Revdns: [No Reverse DNS]] [RemoteHostDomain:
> > lgvsoft.at] [RemoteIP: 58.142.35.136] [SenderHost: lgvsoft.at]
> > X-Note: Spam [v:2.0.6.16] tests: IP4R.SORBS.DYNAMIC [0],
> > EXTERNAL.CIP.OnlyIp [2], TEST.DYNHELO [5], TEST.REVDNS [0], FILTER.DYNA
> > [5], FILTER.COMBO.DYNHELO.CIP [3]
> >
> > Also - is there a way to determine that this email came from/through a
> > foreign [to the US] source?
> > This email did not trigger on a foreign filter file that contains:
> > COUNTRIES0CONTAINSIANA Reserved
> >
> > Same file has these than never trigger it seems either
> > COUNTRIES0CONTAINSARIN Unlisted
> > COUNTRIES0CONTAINSRIPE Unlisted
> >
> > Thanks!
> >
> > -Nick
> > ---
> 
> 
> ---
> [This E-mail scanned for viruses by Declude Virus]
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> ---
> [This E-mail scanned for viruses by Declude Virus] 


---
[This E-mail scanned for viruses by Declude Virus]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] ROUTING and COUNTRIES

2005-09-18 Thread Gary Steiner
If Declude is reading this, maybe they could add these values to their 
Knowledge Base.

http://support.declude.com/Customer/KBArticle.aspx?articleid=6&KBSearchID=1012

I also found a country code list that included some of the codes Scott 
mentioned at the bottom of this page:

http://it.farmprogress.com/declude/declude.htm


  Original Message 
> From: "Scott Fisher" <[EMAIL PROTECTED]>
> Sent: Friday, September 16, 2005 4:15 PM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] ROUTING and COUNTRIES
> 
> Yes COUNTRIES 0 CONTAINS *A is correct.  The Asterick is a literal.
> 
> codes I know of:
> *1 Multi-Regional
> *2 Europe
> *3 North America
> *4 Central/South America
> *5 Pacific Rim
> *A ARIN Unlisted (North America/South Africa)
> *B Public Data Network
> *E RIPE Unlisted (Europe, North Africa, Middle East)
> *I Private IP
> *L Loopback
> *M Multicast
> *P APNIC Unlisted (Asia Pacific)
> *R IANA Reserved
> *U Unknown
> 
> 
> 
> - Original Message - 
> From: "Gary Steiner" <[EMAIL PROTECTED]>
> To: 
> Sent: Friday, September 16, 2005 2:06 PM
> Subject: re: [Declude.JunkMail] ROUTING and COUNTRIES
> 
> 
> I guess it depends on exactly what text it is searching for.  In looking at 
> my log files (set to Debug), I see that when it is checking the COUNTRIES 
> filter I created, it displays a message like "Checking countries:  *A ."  Is 
> it actually looking for an asterisk followed by an A?  Here are some 
> "non-countries" and the corresponding text displayed in the log file:
> 
> [ARIN Unlisted] *A
> [RIPE Unlisted] *E
> [IANA Reserved] *R
> [Unknown] *U
> 
> Does this mean we should be using a line like
> 
> COUNTRIES0CONTAINS*A
> 
> Is that asterisk a literal or will it act as a wildcard?  Is anyone using 
> this in a country filter?
> 
> 
> 
>   Original Message 
> > From: Nick Hayer <[EMAIL PROTECTED]>
> > Sent: Friday, September 16, 2005 12:36 PM
> > To: Declude.JunkMail@declude.com
> > Subject: [Declude.JunkMail] ROUTING and COUNTRIES
> >
> > Help from the guru's please...
> >
> > Wouldn't [shouldn't] this email fail the ROUTING test?
> >
> > X-Country-Chain: UNITED STATES->[IANA Reserved]->UNITED 
> > STATES->destination
> > X-Note: SMTP Sender: [EMAIL PROTECTED]
> > X-Note: Sent from: [Revdns: [No Reverse DNS]] [RemoteHostDomain:
> > lgvsoft.at] [RemoteIP: 58.142.35.136] [SenderHost: lgvsoft.at]
> > X-Note: Spam [v:2.0.6.16] tests: IP4R.SORBS.DYNAMIC [0],
> > EXTERNAL.CIP.OnlyIp [2], TEST.DYNHELO [5], TEST.REVDNS [0], FILTER.DYNA
> > [5], FILTER.COMBO.DYNHELO.CIP [3]
> >
> > Also - is there a way to determine that this email came from/through a
> > foreign [to the US] source?
> > This email did not trigger on a foreign filter file that contains:
> > COUNTRIES0CONTAINSIANA Reserved
> >
> > Same file has these than never trigger it seems either
> > COUNTRIES0CONTAINSARIN Unlisted
> > COUNTRIES0CONTAINSRIPE Unlisted
> >
> > Thanks!
> >
> > -Nick
> > ---
> 
> 
> ---
> [This E-mail scanned for viruses by Declude Virus]
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> ---
> [This E-mail scanned for viruses by Declude Virus] 


---
[This E-mail scanned for viruses by Declude Virus]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] ROUTING and COUNTRIES

2005-09-16 Thread Scott Fisher

Yes.
- Original Message - 
From: "Nick Hayer" <[EMAIL PROTECTED]>

To: 
Sent: Friday, September 16, 2005 7:32 PM
Subject: Re: [Declude.JunkMail] ROUTING and COUNTRIES



Scott -

Scott Fisher wrote:


Yes COUNTRIES 0 CONTAINS *A is correct.  The Asterick is a literal.


So COUNTRY 0 CONTAINS *A
would work as well?

Thanks!

-Nick



codes I know of:
*1 Multi-Regional
*2 Europe
*3 North America
*4 Central/South America
*5 Pacific Rim
*A ARIN Unlisted (North America/South Africa)
*B Public Data Network
*E RIPE Unlisted (Europe, North Africa, Middle East)
*I Private IP
*L Loopback
*M Multicast
*P APNIC Unlisted (Asia Pacific)
*R IANA Reserved
*U Unknown



- Original Message - From: "Gary Steiner" 
<[EMAIL PROTECTED]>

To: 
Sent: Friday, September 16, 2005 2:06 PM
Subject: re: [Declude.JunkMail] ROUTING and COUNTRIES


I guess it depends on exactly what text it is searching for.  In 
looking at my log files (set to Debug), I see that when it is checking 
the COUNTRIES filter I created, it displays a message like "Checking 
countries:  *A ."  Is it actually looking for an asterisk followed by 
an A?  Here are some "non-countries" and the corresponding text 
displayed in the log file:


[ARIN Unlisted] *A
[RIPE Unlisted] *E
[IANA Reserved] *R
[Unknown] *U

Does this mean we should be using a line like

COUNTRIES0CONTAINS*A

Is that asterisk a literal or will it act as a wildcard?  Is anyone 
using this in a country filter?




 Original Message 


From: Nick Hayer <[EMAIL PROTECTED]>
Sent: Friday, September 16, 2005 12:36 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] ROUTING and COUNTRIES

Help from the guru's please...

Wouldn't [shouldn't] this email fail the ROUTING test?

X-Country-Chain: UNITED STATES->[IANA Reserved]->UNITED 
STATES->destination

X-Note: SMTP Sender: [EMAIL PROTECTED]
X-Note: Sent from: [Revdns: [No Reverse DNS]] [RemoteHostDomain:
lgvsoft.at] [RemoteIP: 58.142.35.136] [SenderHost: lgvsoft.at]
X-Note: Spam [v:2.0.6.16] tests: IP4R.SORBS.DYNAMIC [0],
EXTERNAL.CIP.OnlyIp [2], TEST.DYNHELO [5], TEST.REVDNS [0], FILTER.DYNA
[5], FILTER.COMBO.DYNHELO.CIP [3]

Also - is there a way to determine that this email came from/through a
foreign [to the US] source?
This email did not trigger on a foreign filter file that contains:
COUNTRIES0CONTAINSIANA Reserved

Same file has these than never trigger it seems either
COUNTRIES0CONTAINSARIN Unlisted
COUNTRIES0CONTAINSRIPE Unlisted

Thanks!

-Nick
---




---
[This E-mail scanned for viruses by Declude Virus]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] ROUTING and COUNTRIES

2005-09-16 Thread Nick Hayer

Scott -

Scott Fisher wrote:


Yes COUNTRIES 0 CONTAINS *A is correct.  The Asterick is a literal.


So COUNTRY 0 CONTAINS *A
would work as well?

Thanks!

-Nick



codes I know of:
*1 Multi-Regional
*2 Europe
*3 North America
*4 Central/South America
*5 Pacific Rim
*A ARIN Unlisted (North America/South Africa)
*B Public Data Network
*E RIPE Unlisted (Europe, North Africa, Middle East)
*I Private IP
*L Loopback
*M Multicast
*P APNIC Unlisted (Asia Pacific)
*R IANA Reserved
*U Unknown



- Original Message - From: "Gary Steiner" 
<[EMAIL PROTECTED]>

To: 
Sent: Friday, September 16, 2005 2:06 PM
Subject: re: [Declude.JunkMail] ROUTING and COUNTRIES


I guess it depends on exactly what text it is searching for.  In 
looking at my log files (set to Debug), I see that when it is checking 
the COUNTRIES filter I created, it displays a message like "Checking 
countries:  *A ."  Is it actually looking for an asterisk followed by 
an A?  Here are some "non-countries" and the corresponding text 
displayed in the log file:


[ARIN Unlisted] *A
[RIPE Unlisted] *E
[IANA Reserved] *R
[Unknown] *U

Does this mean we should be using a line like

COUNTRIES0CONTAINS*A

Is that asterisk a literal or will it act as a wildcard?  Is anyone 
using this in a country filter?




 Original Message 


From: Nick Hayer <[EMAIL PROTECTED]>
Sent: Friday, September 16, 2005 12:36 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] ROUTING and COUNTRIES

Help from the guru's please...

Wouldn't [shouldn't] this email fail the ROUTING test?

X-Country-Chain: UNITED STATES->[IANA Reserved]->UNITED 
STATES->destination

X-Note: SMTP Sender: [EMAIL PROTECTED]
X-Note: Sent from: [Revdns: [No Reverse DNS]] [RemoteHostDomain:
lgvsoft.at] [RemoteIP: 58.142.35.136] [SenderHost: lgvsoft.at]
X-Note: Spam [v:2.0.6.16] tests: IP4R.SORBS.DYNAMIC [0],
EXTERNAL.CIP.OnlyIp [2], TEST.DYNHELO [5], TEST.REVDNS [0], FILTER.DYNA
[5], FILTER.COMBO.DYNHELO.CIP [3]

Also - is there a way to determine that this email came from/through a
foreign [to the US] source?
This email did not trigger on a foreign filter file that contains:
COUNTRIES0CONTAINSIANA Reserved

Same file has these than never trigger it seems either
COUNTRIES0CONTAINSARIN Unlisted
COUNTRIES0CONTAINSRIPE Unlisted

Thanks!

-Nick
---




---
[This E-mail scanned for viruses by Declude Virus]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] ROUTING and COUNTRIES

2005-09-16 Thread Scott Fisher

Yes COUNTRIES 0 CONTAINS *A is correct.  The Asterick is a literal.

codes I know of:
*1 Multi-Regional
*2 Europe
*3 North America
*4 Central/South America
*5 Pacific Rim
*A ARIN Unlisted (North America/South Africa)
*B Public Data Network
*E RIPE Unlisted (Europe, North Africa, Middle East)
*I Private IP
*L Loopback
*M Multicast
*P APNIC Unlisted (Asia Pacific)
*R IANA Reserved
*U Unknown



- Original Message - 
From: "Gary Steiner" <[EMAIL PROTECTED]>

To: 
Sent: Friday, September 16, 2005 2:06 PM
Subject: re: [Declude.JunkMail] ROUTING and COUNTRIES


I guess it depends on exactly what text it is searching for.  In looking at 
my log files (set to Debug), I see that when it is checking the COUNTRIES 
filter I created, it displays a message like "Checking countries:  *A ."  Is 
it actually looking for an asterisk followed by an A?  Here are some 
"non-countries" and the corresponding text displayed in the log file:


[ARIN Unlisted] *A
[RIPE Unlisted] *E
[IANA Reserved] *R
[Unknown] *U

Does this mean we should be using a line like

COUNTRIES0CONTAINS*A

Is that asterisk a literal or will it act as a wildcard?  Is anyone using 
this in a country filter?




 Original Message 

From: Nick Hayer <[EMAIL PROTECTED]>
Sent: Friday, September 16, 2005 12:36 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] ROUTING and COUNTRIES

Help from the guru's please...

Wouldn't [shouldn't] this email fail the ROUTING test?

X-Country-Chain: UNITED STATES->[IANA Reserved]->UNITED 
STATES->destination

X-Note: SMTP Sender: [EMAIL PROTECTED]
X-Note: Sent from: [Revdns: [No Reverse DNS]] [RemoteHostDomain:
lgvsoft.at] [RemoteIP: 58.142.35.136] [SenderHost: lgvsoft.at]
X-Note: Spam [v:2.0.6.16] tests: IP4R.SORBS.DYNAMIC [0],
EXTERNAL.CIP.OnlyIp [2], TEST.DYNHELO [5], TEST.REVDNS [0], FILTER.DYNA
[5], FILTER.COMBO.DYNHELO.CIP [3]

Also - is there a way to determine that this email came from/through a
foreign [to the US] source?
This email did not trigger on a foreign filter file that contains:
COUNTRIES0CONTAINSIANA Reserved

Same file has these than never trigger it seems either
COUNTRIES0CONTAINSARIN Unlisted
COUNTRIES0CONTAINSRIPE Unlisted

Thanks!

-Nick
---



---
[This E-mail scanned for viruses by Declude Virus]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


re: [Declude.JunkMail] ROUTING and COUNTRIES

2005-09-16 Thread Gary Steiner
I guess it depends on exactly what text it is searching for.  In looking at my 
log files (set to Debug), I see that when it is checking the COUNTRIES filter I 
created, it displays a message like "Checking countries:  *A ."  Is it actually 
looking for an asterisk followed by an A?  Here are some "non-countries" and 
the corresponding text displayed in the log file:

[ARIN Unlisted] *A
[RIPE Unlisted] *E
[IANA Reserved] *R
[Unknown]   *U

Does this mean we should be using a line like

COUNTRIES0CONTAINS*A

Is that asterisk a literal or will it act as a wildcard?  Is anyone using this 
in a country filter?



  Original Message 
> From: Nick Hayer <[EMAIL PROTECTED]>
> Sent: Friday, September 16, 2005 12:36 PM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] ROUTING and COUNTRIES
> 
> Help from the guru's please...
> 
> Wouldn't [shouldn't] this email fail the ROUTING test?
> 
> X-Country-Chain: UNITED STATES->[IANA Reserved]->UNITED STATES->destination
> X-Note: SMTP Sender: [EMAIL PROTECTED]
> X-Note: Sent from: [Revdns: [No Reverse DNS]] [RemoteHostDomain: 
> lgvsoft.at] [RemoteIP: 58.142.35.136] [SenderHost: lgvsoft.at]
> X-Note: Spam [v:2.0.6.16] tests: IP4R.SORBS.DYNAMIC [0], 
> EXTERNAL.CIP.OnlyIp [2], TEST.DYNHELO [5], TEST.REVDNS [0], FILTER.DYNA 
> [5], FILTER.COMBO.DYNHELO.CIP [3]
> 
> Also - is there a way to determine that this email came from/through a 
> foreign [to the US] source?
> This email did not trigger on a foreign filter file that contains:
> COUNTRIES0CONTAINSIANA Reserved
> 
> Same file has these than never trigger it seems either
> COUNTRIES0CONTAINSARIN Unlisted
> COUNTRIES0CONTAINSRIPE Unlisted
> 
> Thanks!
> 
> -Nick
> ---


---
[This E-mail scanned for viruses by Declude Virus]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.