[Declude.JunkMail] Filter file maintenance suggestion
Hi all, As I can see the new owners of Declude has some people able to develope dynamic websites and there is already a customer protected area. Now the suggestion: As there are out many different maintainers of excelent filter files and much more different versions and methods to get this filter updated on the own system. Why not create the possibility for declude customers to manage certain filter files in this protected area and publish it there for other customers? So only customers could access the resources and there is one centralized point and one methodology to get this updates. For example: If someone has a great list of spamdomains he could become the responsible of this list (maybe also a group of maintainers) and maintain different SD-lists. He can place a short description of what each filter can/cannot do and what are eventual drawbacks. Another list could contain known sources of legit mailing lists or bulkmail like REMOTEIP -80 CIDR 66.218.66.0/24 Yahoo Groups REMOTEIP -80 CIDR 66.218.67.0/24 Yahoo Groups REMOTEIP -80 CIDR 66.218.68.0/24 Yahoo Groups REMOTEIP -80 CIDR 66.218.69.0/24 Yahoo Groups Other examples: -Phishing filter -AV filter -header phrases for known MTA's failing CMDSPACE (for counterweight) With some phantasy the developer of this backoffice could introduce a lot of nice features. Maintainers can place usefull notes sorted by date. Users can write comments and report problems with certain configuations. There shouldn't be hundreds of different lists but some few very usefull and allways up-to-date filter files. I believe this would be a very good tool and a great enhancement and plus point for a declude service agreement. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] This one got through.....
Any idea why this message (here's the header) was delivered to the user. I have WEIGHT10 WEIGHT20 set to HOLD and it seems to be working great otherwise. The reason is: X-RBL-Warning: WEIGHT10: Weight of 28 reaches or exceeds the limit of 10. X-RBL-Warning: WEIGHT20: Weight of 28 reaches or exceeds the limit of 20. You have WEIGHT10 and WEIGHT20 set to WARN. I'm guessing that this is an outgoing E-mail (IMail counts gateway E-mail as outgoing E-mail), in which case the outgoing actions are used (from the \IMail\Declude\global.cfg file). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Client TOS Notifications from AOL
Declude Folks, I need some help figuring out why we are receiving e-mails from [EMAIL PROTECTED] Subject Line: Client TOS Notification, and the Sent To address is [EMAIL PROTECTED] I am not sure if these are coming back to me in our abuse or postmaster account? There is nothing in the body of the e-mail, only an attachment of e-mail apparently getting rejected. Anyone else seeing these? The client we host forwards his e-mail automatically to his AOL account. For example, below is the header of an e-mail that was attached whereas a spam e-amail appears to have been sent to our client (lamphier.com) hosted on our IMail server (sneezy.xerocom.net - vacant.spiderhost.com is router) which was forwarded to his AOL account. Unfortunately it did not weight enough under our Declude config, nor Sniffer to get held as Spam. Any ideas what AOL is doing or what I should do to eliminate these most appreciated. Worried about getting on the wrong side of AOL. Thanks. -Don Return-Path: [EMAIL PROTECTED] Received: from rly-xa05.mx.aol.com (rly-xa05.mail.aol.com [172.20.64.41]) by air-xa03.mail.aol.com (v101_r1.4) with ESMTP id MAILINXA31-7341621d0d322; Tue, 05 Oct 2004 00:03:36 -0400 Received: from SNEEZY.XEROCOM.NET (vacant.spiderhost.com [65.57.241.197]) by rly-xa05.mx.aol.com (v101_r1.5) with ESMTP id MAILRELAYINXA55-7341621d0d322; Tue, 05 Oct 2004 00:03:25 -0400 Received: from SMTP32-FWD by lamphier.com (SMTP32) id A1BF42BA100B8F0C3; Mon, 4 Oct 2004 23:58:48 Received: from pelxavirus3.terra.com.pe [200.48.36.5] by SNEEZY.XEROCOM.NET with ESMTP (SMTPD32-8.12) id ABF42BA100B8; Mon, 04 Oct 2004 23:58:44 -0400 Received: from anamaria (unknown [200.106.79.108]) by pelxavirus3.terra.com.pe (Postfix) with ESMTP id 295EDB7CA4; Mon, 4 Oct 2004 23:07:07 -0500 (PET) Message-ID: [EMAIL PROTECTED] To: Undisclosed Recipients From: Anni [EMAIL PROTECTED] Subject: Proposal Date: Mon, 4 Oct 2004 23:03:21 -0500 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED] X-RBL-Warning: HELOBOGUS: Domain pelxavirus3.terra.com.pe has no MX or A records [0301]. X-RBL-Warning: WEIGHT1-9: Total weight between 1 and 9. X-Declude-Sender: [EMAIL PROTECTED] [200.48.36.5] X-Declude-Spoolname: D1bf42ba100b8f0c3.SMD X-Note: CompBiz scanned with Declude JunkMail. X-Spam-Tests-Failed: NOABUSE, HELOBOGUS, WEIGHT1-9 [7]. X-Note: This E-mail was sent from smtp7.terra.com.pe ([200.48.36.5]). X-Sender: Sender of E-mail: [EMAIL PROTECTED] X-Note: RevDNS Remote Server smtp7.terra.com.pe ([200.48.36.5]). X-AOL-IP: 65.57.241.197 X-Mailer: Unknown (No Version) Dear Customer, =20 Be the very first listing in the top search engines immediately. =20 Our company will now place any business with a qualified website permanently= at the top of the major search engines guaranteed never to move. This prom= otion includes unlimited traffic and is not going to last long. If you are=20= interested in being guaranteed first position in the top search engines at a= promotional fee, please contact us promptly to find out if you qualify via=20= email at [EMAIL PROTECTED] AND INCLUDE THE URL(s) YOUR ARE INTERESTED I= N PLACING. This is not pay per click.=20 The following are examples on Yahoo!, MSN and Alta Vista: =20 Company: Oahu Dive Center URL: http://oahudivecenter.com keyword: oahu scuba diving =20 Company: California Moves.com URL: http://steph.cbsocal.com keyword: find a home southern california =20 Sincerely, =20 IGN The Search Engine Promotional Consultants --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] This one got through.....
Scott, This was an incoming message and you are absolutely correct. I rechecked their config file. I had them set up with a per domain configuration and I missed changing WARN to HOLD on this one. I now have a template for the new domain specific configurations so I don't make this mistake again. When I asked this domains users how the spam was yesterday this was the only message they sent to me so I assumed it had slipped through. Thanks, Gary At 03:47 AM 10/6/2004, you wrote: Any idea why this message (here's the header) was delivered to the user. I have WEIGHT10 WEIGHT20 set to HOLD and it seems to be working great otherwise. The reason is: X-RBL-Warning: WEIGHT10: Weight of 28 reaches or exceeds the limit of 10. X-RBL-Warning: WEIGHT20: Weight of 28 reaches or exceeds the limit of 20. You have WEIGHT10 and WEIGHT20 set to WARN. I'm guessing that this is an outgoing E-mail (IMail counts gateway E-mail as outgoing E-mail), in which case the outgoing actions are used (from the \IMail\Declude\global.cfg file). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ComsecNet Dedicated Data Services Stockton, CA Phone:(209) 463-2809 Fax:(209) 938-0481 Email: [EMAIL PROTECTED] Web: www.comsec.net This message is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error please destroy this message and notify the sender by reply email. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Client TOS Notifications from AOL
Some one at your company signed up and registered to receive these feedback loop messages. http://postmaster.info.aol.com/tools/fbl.html John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Don Schreiner Sent: Wednesday, October 06, 2004 7:09 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Client TOS Notifications from AOL Declude Folks, I need some help figuring out why we are receiving e-mails from [EMAIL PROTECTED] Subject Line: Client TOS Notification, and the Sent To address is [EMAIL PROTECTED] I am not sure if these are coming back to me in our abuse or postmaster account? There is nothing in the body of the e-mail, only an attachment of e-mail apparently getting rejected. Anyone else seeing these? The client we host forwards his e-mail automatically to his AOL account. For example, below is the header of an e-mail that was attached whereas a spam e-amail appears to have been sent to our client (lamphier.com) hosted on our IMail server (sneezy.xerocom.net - vacant.spiderhost.com is router) which was forwarded to his AOL account. Unfortunately it did not weight enough under our Declude config, nor Sniffer to get held as Spam. Any ideas what AOL is doing or what I should do to eliminate these most appreciated. Worried about getting on the wrong side of AOL. Thanks. -Don Return-Path: [EMAIL PROTECTED] Received: from rly-xa05.mx.aol.com (rly-xa05.mail.aol.com [172.20.64.41]) by air-xa03.mail.aol.com (v101_r1.4) with ESMTP id MAILINXA31-7341621d0d322; Tue, 05 Oct 2004 00:03:36 -0400 Received: from SNEEZY.XEROCOM.NET (vacant.spiderhost.com [65.57.241.197]) by rly-xa05.mx.aol.com (v101_r1.5) with ESMTP id MAILRELAYINXA55-7341621d0d322; Tue, 05 Oct 2004 00:03:25 -0400 Received: from SMTP32-FWD by lamphier.com (SMTP32) id A1BF42BA100B8F0C3; Mon, 4 Oct 2004 23:58:48 Received: from pelxavirus3.terra.com.pe [200.48.36.5] by SNEEZY.XEROCOM.NET with ESMTP (SMTPD32-8.12) id ABF42BA100B8; Mon, 04 Oct 2004 23:58:44 -0400 Received: from anamaria (unknown [200.106.79.108]) by pelxavirus3.terra.com.pe (Postfix) with ESMTP id 295EDB7CA4; Mon, 4 Oct 2004 23:07:07 -0500 (PET) Message-ID: [EMAIL PROTECTED] To: Undisclosed Recipients From: Anni [EMAIL PROTECTED] Subject: Proposal Date: Mon, 4 Oct 2004 23:03:21 -0500 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED] X-RBL-Warning: HELOBOGUS: Domain pelxavirus3.terra.com.pe has no MX or A records [0301]. X-RBL-Warning: WEIGHT1-9: Total weight between 1 and 9. X-Declude-Sender: [EMAIL PROTECTED] [200.48.36.5] X-Declude-Spoolname: D1bf42ba100b8f0c3.SMD X-Note: CompBiz scanned with Declude JunkMail. X-Spam-Tests-Failed: NOABUSE, HELOBOGUS, WEIGHT1-9 [7]. X-Note: This E-mail was sent from smtp7.terra.com.pe ([200.48.36.5]). X-Sender: Sender of E-mail: [EMAIL PROTECTED] X-Note: RevDNS Remote Server smtp7.terra.com.pe ([200.48.36.5]). X-AOL-IP: 65.57.241.197 X-Mailer: Unknown (No Version) Dear Customer, =20 Be the very first listing in the top search engines immediately. =20 Our company will now place any business with a qualified website permanently= at the top of the major search engines guaranteed never to move. This prom= otion includes unlimited traffic and is not going to last long. If you are=20= interested in being guaranteed first position in the top search engines at a= promotional fee, please contact us promptly to find out if you qualify via=20= email at [EMAIL PROTECTED] AND INCLUDE THE URL(s) YOUR ARE INTERESTED I= N PLACING. This is not pay per click.=20 The following are examples on Yahoo!, MSN and Alta Vista: =20 Company: Oahu Dive Center URL: http://oahudivecenter.com keyword: oahu scuba diving =20 Company: California Moves.com URL: http://steph.cbsocal.com keyword: find a home southern california =20 Sincerely, =20 IGN The Search Engine Promotional Consultants --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Client TOS Notifications from AOL
Kami John, Thanks a ton guys! That was me that registered on the AOL feedback loop using our abuse addy, but going back months ago and did not realize. So much to keep up with battling Spam! Just a few more points on my Declude weight and would not have made it to AOL - ohhh well - will keep tweaking our config. -Don - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 06, 2004 10:31 AM Subject: RE: [Declude.JunkMail] Client TOS Notifications from AOL Some one at your company signed up and registered to receive these feedback loop messages. http://postmaster.info.aol.com/tools/fbl.html John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Don Schreiner Sent: Wednesday, October 06, 2004 7:09 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Client TOS Notifications from AOL Declude Folks, I need some help figuring out why we are receiving e-mails from [EMAIL PROTECTED] Subject Line: Client TOS Notification, and the Sent To address is [EMAIL PROTECTED] I am not sure if these are coming back to me in our abuse or postmaster account? There is nothing in the body of the e-mail, only an attachment of e-mail apparently getting rejected. Anyone else seeing these? The client we host forwards his e-mail automatically to his AOL account. For example, below is the header of an e-mail that was attached whereas a spam e-amail appears to have been sent to our client (lamphier.com) hosted on our IMail server (sneezy.xerocom.net - vacant.spiderhost.com is router) which was forwarded to his AOL account. Unfortunately it did not weight enough under our Declude config, nor Sniffer to get held as Spam. Any ideas what AOL is doing or what I should do to eliminate these most appreciated. Worried about getting on the wrong side of AOL. Thanks. -Don Return-Path: [EMAIL PROTECTED] Received: from rly-xa05.mx.aol.com (rly-xa05.mail.aol.com [172.20.64.41]) by air-xa03.mail.aol.com (v101_r1.4) with ESMTP id MAILINXA31-7341621d0d322; Tue, 05 Oct 2004 00:03:36 -0400 Received: from SNEEZY.XEROCOM.NET (vacant.spiderhost.com [65.57.241.197]) by rly-xa05.mx.aol.com (v101_r1.5) with ESMTP id MAILRELAYINXA55-7341621d0d322; Tue, 05 Oct 2004 00:03:25 -0400 Received: from SMTP32-FWD by lamphier.com (SMTP32) id A1BF42BA100B8F0C3; Mon, 4 Oct 2004 23:58:48 Received: from pelxavirus3.terra.com.pe [200.48.36.5] by SNEEZY.XEROCOM.NET with ESMTP (SMTPD32-8.12) id ABF42BA100B8; Mon, 04 Oct 2004 23:58:44 -0400 Received: from anamaria (unknown [200.106.79.108]) by pelxavirus3.terra.com.pe (Postfix) with ESMTP id 295EDB7CA4; Mon, 4 Oct 2004 23:07:07 -0500 (PET) Message-ID: [EMAIL PROTECTED] To: Undisclosed Recipients From: Anni [EMAIL PROTECTED] Subject: Proposal Date: Mon, 4 Oct 2004 23:03:21 -0500 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED] X-RBL-Warning: HELOBOGUS: Domain pelxavirus3.terra.com.pe has no MX or A records [0301]. X-RBL-Warning: WEIGHT1-9: Total weight between 1 and 9. X-Declude-Sender: [EMAIL PROTECTED] [200.48.36.5] X-Declude-Spoolname: D1bf42ba100b8f0c3.SMD X-Note: CompBiz scanned with Declude JunkMail. X-Spam-Tests-Failed: NOABUSE, HELOBOGUS, WEIGHT1-9 [7]. X-Note: This E-mail was sent from smtp7.terra.com.pe ([200.48.36.5]). X-Sender: Sender of E-mail: [EMAIL PROTECTED] X-Note: RevDNS Remote Server smtp7.terra.com.pe ([200.48.36.5]). X-AOL-IP: 65.57.241.197 X-Mailer: Unknown (No Version) Dear Customer, =20 Be the very first listing in the top search engines immediately. =20 Our company will now place any business with a qualified website permanently= at the top of the major search engines guaranteed never to move. This prom= otion includes unlimited traffic and is not going to last long. If you are=20= interested in being guaranteed first position in the top search engines at a= promotional fee, please contact us promptly to find out if you qualify via=20= email at [EMAIL PROTECTED] AND INCLUDE THE URL(s) YOUR ARE INTERESTED I= N PLACING. This is not pay per click.=20 The following are examples on Yahoo!, MSN and Alta Vista: =20 Company: Oahu Dive Center URL: http://oahudivecenter.com keyword: oahu scuba diving =20 Company: California Moves.com URL: http://steph.cbsocal.com keyword: find a home southern california =20 Sincerely, =20 IGN The Search Engine Promotional Consultants --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives
Re: [Declude.JunkMail] Client TOS Notifications from AOL
Essentially someone received an email in their AOL acount and marked it as SPAM. Since you setup a feedback loop with AOL they will now send you every instance of an email that was reported as SPAM by one of their members. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers. Don Schreiner writes: Declude Folks, I need some help figuring out why we are receiving e-mails from [EMAIL PROTECTED] Subject Line: Client TOS Notification, and the Sent To address is [EMAIL PROTECTED] I am not sure if these are coming back to me in our abuse or postmaster account? There is nothing in the body of the e-mail, only an attachment of e-mail apparently getting rejected. Anyone else seeing these? The client we host forwards his e-mail automatically to his AOL account. For example, below is the header of an e-mail that was attached whereas a spam e-amail appears to have been sent to our client (lamphier.com) hosted on our IMail server (sneezy.xerocom.net - vacant.spiderhost.com is router) which was forwarded to his AOL account. Unfortunately it did not weight enough under our Declude config, nor Sniffer to get held as Spam. Any ideas what AOL is doing or what I should do to eliminate these most appreciated. Worried about getting on the wrong side of AOL. Thanks. -Don Return-Path: [EMAIL PROTECTED] Received: from rly-xa05.mx.aol.com (rly-xa05.mail.aol.com [172.20.64.41]) by air-xa03.mail.aol.com (v101_r1.4) with ESMTP id MAILINXA31-7341621d0d322; Tue, 05 Oct 2004 00:03:36 -0400 Received: from SNEEZY.XEROCOM.NET (vacant.spiderhost.com [65.57.241.197]) by rly-xa05.mx.aol.com (v101_r1.5) with ESMTP id MAILRELAYINXA55-7341621d0d322; Tue, 05 Oct 2004 00:03:25 -0400 Received: from SMTP32-FWD by lamphier.com (SMTP32) id A1BF42BA100B8F0C3; Mon, 4 Oct 2004 23:58:48 Received: from pelxavirus3.terra.com.pe [200.48.36.5] by SNEEZY.XEROCOM.NET with ESMTP (SMTPD32-8.12) id ABF42BA100B8; Mon, 04 Oct 2004 23:58:44 -0400 Received: from anamaria (unknown [200.106.79.108]) by pelxavirus3.terra.com.pe (Postfix) with ESMTP id 295EDB7CA4; Mon, 4 Oct 2004 23:07:07 -0500 (PET) Message-ID: [EMAIL PROTECTED] To: Undisclosed Recipients From: Anni [EMAIL PROTECTED] Subject: Proposal Date: Mon, 4 Oct 2004 23:03:21 -0500 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED] X-RBL-Warning: HELOBOGUS: Domain pelxavirus3.terra.com.pe has no MX or A records [0301]. X-RBL-Warning: WEIGHT1-9: Total weight between 1 and 9. X-Declude-Sender: [EMAIL PROTECTED] [200.48.36.5] X-Declude-Spoolname: D1bf42ba100b8f0c3.SMD X-Note: CompBiz scanned with Declude JunkMail. X-Spam-Tests-Failed: NOABUSE, HELOBOGUS, WEIGHT1-9 [7]. X-Note: This E-mail was sent from smtp7.terra.com.pe ([200.48.36.5]). X-Sender: Sender of E-mail: [EMAIL PROTECTED] X-Note: RevDNS Remote Server smtp7.terra.com.pe ([200.48.36.5]). X-AOL-IP: 65.57.241.197 X-Mailer: Unknown (No Version) Dear Customer, =20 Be the very first listing in the top search engines immediately. =20 Our company will now place any business with a qualified website permanently= at the top of the major search engines guaranteed never to move. This prom= otion includes unlimited traffic and is not going to last long. If you are=20= interested in being guaranteed first position in the top search engines at a= promotional fee, please contact us promptly to find out if you qualify via=20= email at [EMAIL PROTECTED] AND INCLUDE THE URL(s) YOUR ARE INTERESTED I= N PLACING. This is not pay per click.=20 The following are examples on Yahoo!, MSN and Alta Vista: =20 Company: Oahu Dive Center URL: http://oahudivecenter.com keyword: oahu scuba diving =20 Company: California Moves.com URL: http://steph.cbsocal.com keyword: find a home southern california =20 Sincerely, =20 IGN The Search Engine Promotional Consultants --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Client TOS Notifications from AOL
On this note, what are other's policy on forwarding client's addresses to AOL accounts? We signed up with this feedback loop program quite some time and realized that 95% of the reported spam's where coming from forwarded messages to AOL accounts. In the event of forwarded messages, our IMail box takes the blame instead of the original MTA. I have considered creating a policy of not allowing mail forwarding to AOL accounts for fear of getting blacklisted from AOL. Steve -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Schreiner Sent: Wednesday, October 06, 2004 11:37 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Client TOS Notifications from AOL Kami John, Thanks a ton guys! That was me that registered on the AOL feedback loop using our abuse addy, but going back months ago and did not realize. So much to keep up with battling Spam! Just a few more points on my Declude weight and would not have made it to AOL - ohhh well - will keep tweaking our config. -Don - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 06, 2004 10:31 AM Subject: RE: [Declude.JunkMail] Client TOS Notifications from AOL Some one at your company signed up and registered to receive these feedback loop messages. http://postmaster.info.aol.com/tools/fbl.html John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Don Schreiner Sent: Wednesday, October 06, 2004 7:09 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Client TOS Notifications from AOL Declude Folks, I need some help figuring out why we are receiving e-mails from [EMAIL PROTECTED] Subject Line: Client TOS Notification, and the Sent To address is [EMAIL PROTECTED] I am not sure if these are coming back to me in our abuse or postmaster account? There is nothing in the body of the e-mail, only an attachment of e-mail apparently getting rejected. Anyone else seeing these? The client we host forwards his e-mail automatically to his AOL account. For example, below is the header of an e-mail that was attached whereas a spam e-amail appears to have been sent to our client (lamphier.com) hosted on our IMail server (sneezy.xerocom.net - vacant.spiderhost.com is router) which was forwarded to his AOL account. Unfortunately it did not weight enough under our Declude config, nor Sniffer to get held as Spam. Any ideas what AOL is doing or what I should do to eliminate these most appreciated. Worried about getting on the wrong side of AOL. Thanks. -Don Return-Path: [EMAIL PROTECTED] Received: from rly-xa05.mx.aol.com (rly-xa05.mail.aol.com [172.20.64.41]) by air-xa03.mail.aol.com (v101_r1.4) with ESMTP id MAILINXA31-7341621d0d322; Tue, 05 Oct 2004 00:03:36 -0400 Received: from SNEEZY.XEROCOM.NET (vacant.spiderhost.com [65.57.241.197]) by rly-xa05.mx.aol.com (v101_r1.5) with ESMTP id MAILRELAYINXA55-7341621d0d322; Tue, 05 Oct 2004 00:03:25 -0400 Received: from SMTP32-FWD by lamphier.com (SMTP32) id A1BF42BA100B8F0C3; Mon, 4 Oct 2004 23:58:48 Received: from pelxavirus3.terra.com.pe [200.48.36.5] by SNEEZY.XEROCOM.NET with ESMTP (SMTPD32-8.12) id ABF42BA100B8; Mon, 04 Oct 2004 23:58:44 -0400 Received: from anamaria (unknown [200.106.79.108]) by pelxavirus3.terra.com.pe (Postfix) with ESMTP id 295EDB7CA4; Mon, 4 Oct 2004 23:07:07 -0500 (PET) Message-ID: [EMAIL PROTECTED] To: Undisclosed Recipients From: Anni [EMAIL PROTECTED] Subject: Proposal Date: Mon, 4 Oct 2004 23:03:21 -0500 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED] X-RBL-Warning: HELOBOGUS: Domain pelxavirus3.terra.com.pe has no MX or A records [0301]. X-RBL-Warning: WEIGHT1-9: Total weight between 1 and 9. X-Declude-Sender: [EMAIL PROTECTED] [200.48.36.5] X-Declude-Spoolname: D1bf42ba100b8f0c3.SMD X-Note: CompBiz scanned with Declude JunkMail. X-Spam-Tests-Failed: NOABUSE, HELOBOGUS, WEIGHT1-9 [7]. X-Note: This E-mail was sent from smtp7.terra.com.pe ([200.48.36.5]). X-Sender: Sender of E-mail: [EMAIL PROTECTED] X-Note: RevDNS Remote Server smtp7.terra.com.pe ([200.48.36.5]). X-AOL-IP: 65.57.241.197 X-Mailer: Unknown (No Version) Dear Customer, =20 Be the very first listing in the top search engines immediately. =20 Our company will now place any business with a qualified website permanently= at the top of the major search engines guaranteed never to move. This prom= otion includes unlimited traffic and is not going to last long. If you are=20= interested in being guaranteed first position in the top search engines at a=
RE: [Declude.JunkMail] Client TOS Notifications from AOL
What I do if the message is legit is forward that notice to the sender and recipient explaining the AOL report spam button to please take care of this issue or forwarding messages to AOL addresses will be banned. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Steve Flook Sent: Wednesday, October 06, 2004 9:43 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Client TOS Notifications from AOL On this note, what are other's policy on forwarding client's addresses to AOL accounts? We signed up with this feedback loop program quite some time and realized that 95% of the reported spam's where coming from forwarded messages to AOL accounts. In the event of forwarded messages, our IMail box takes the blame instead of the original MTA. I have considered creating a policy of not allowing mail forwarding to AOL accounts for fear of getting blacklisted from AOL. Steve -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Schreiner Sent: Wednesday, October 06, 2004 11:37 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Client TOS Notifications from AOL Kami John, Thanks a ton guys! That was me that registered on the AOL feedback loop using our abuse addy, but going back months ago and did not realize. So much to keep up with battling Spam! Just a few more points on my Declude weight and would not have made it to AOL - ohhh well - will keep tweaking our config. -Don - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 06, 2004 10:31 AM Subject: RE: [Declude.JunkMail] Client TOS Notifications from AOL Some one at your company signed up and registered to receive these feedback loop messages. http://postmaster.info.aol.com/tools/fbl.html John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Don Schreiner Sent: Wednesday, October 06, 2004 7:09 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Client TOS Notifications from AOL Declude Folks, I need some help figuring out why we are receiving e-mails from [EMAIL PROTECTED] Subject Line: Client TOS Notification, and the Sent To address is [EMAIL PROTECTED] I am not sure if these are coming back to me in our abuse or postmaster account? There is nothing in the body of the e-mail, only an attachment of e-mail apparently getting rejected. Anyone else seeing these? The client we host forwards his e-mail automatically to his AOL account. For example, below is the header of an e-mail that was attached whereas a spam e-amail appears to have been sent to our client (lamphier.com) hosted on our IMail server (sneezy.xerocom.net - vacant.spiderhost.com is router) which was forwarded to his AOL account. Unfortunately it did not weight enough under our Declude config, nor Sniffer to get held as Spam. Any ideas what AOL is doing or what I should do to eliminate these most appreciated. Worried about getting on the wrong side of AOL. Thanks. -Don Return-Path: [EMAIL PROTECTED] Received: from rly-xa05.mx.aol.com (rly-xa05.mail.aol.com [172.20.64.41]) by air-xa03.mail.aol.com (v101_r1.4) with ESMTP id MAILINXA31-7341621d0d322; Tue, 05 Oct 2004 00:03:36 -0400 Received: from SNEEZY.XEROCOM.NET (vacant.spiderhost.com [65.57.241.197]) by rly-xa05.mx.aol.com (v101_r1.5) with ESMTP id MAILRELAYINXA55-7341621d0d322; Tue, 05 Oct 2004 00:03:25 -0400 Received: from SMTP32-FWD by lamphier.com (SMTP32) id A1BF42BA100B8F0C3; Mon, 4 Oct 2004 23:58:48 Received: from pelxavirus3.terra.com.pe [200.48.36.5] by SNEEZY.XEROCOM.NET with ESMTP (SMTPD32-8.12) id ABF42BA100B8; Mon, 04 Oct 2004 23:58:44 -0400 Received: from anamaria (unknown [200.106.79.108]) by pelxavirus3.terra.com.pe (Postfix) with ESMTP id 295EDB7CA4; Mon, 4 Oct 2004 23:07:07 -0500 (PET) Message-ID: [EMAIL PROTECTED] To: Undisclosed Recipients From: Anni [EMAIL PROTECTED] Subject: Proposal Date: Mon, 4 Oct 2004 23:03:21 -0500 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED] X-RBL-Warning: HELOBOGUS: Domain pelxavirus3.terra.com.pe has no MX or A records [0301]. X-RBL-Warning: WEIGHT1-9: Total weight between 1 and 9. X-Declude-Sender: [EMAIL PROTECTED] [200.48.36.5] X-Declude-Spoolname: D1bf42ba100b8f0c3.SMD X-Note: CompBiz scanned with Declude JunkMail. X-Spam-Tests-Failed: NOABUSE, HELOBOGUS, WEIGHT1-9 [7]. X-Note: This E-mail was sent from smtp7.terra.com.pe
RE: [Declude.JunkMail] Client TOS Notifications from AOL
Good question and I am curious too. We actually have a no-forwarding e-mail policy and not just to AOL. But... sometimes the customer dictates what they want or will go elsewhere and we then allow on a case-by-case basis. If we allowed for every customer I bet we would be blacklisted already. I am still fearful AOL may blacklist on what little traffic we do have getting forwarded. Thanks. -Don -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Flook Sent: Wednesday, October 06, 2004 12:43 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Client TOS Notifications from AOL On this note, what are other's policy on forwarding client's addresses to AOL accounts? We signed up with this feedback loop program quite some time and realized that 95% of the reported spam's where coming from forwarded messages to AOL accounts. In the event of forwarded messages, our IMail box takes the blame instead of the original MTA. I have considered creating a policy of not allowing mail forwarding to AOL accounts for fear of getting blacklisted from AOL. Steve -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Schreiner Sent: Wednesday, October 06, 2004 11:37 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Client TOS Notifications from AOL Kami John, Thanks a ton guys! That was me that registered on the AOL feedback loop using our abuse addy, but going back months ago and did not realize. So much to keep up with battling Spam! Just a few more points on my Declude weight and would not have made it to AOL - ohhh well - will keep tweaking our config. -Don - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 06, 2004 10:31 AM Subject: RE: [Declude.JunkMail] Client TOS Notifications from AOL Some one at your company signed up and registered to receive these feedback loop messages. http://postmaster.info.aol.com/tools/fbl.html John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Don Schreiner Sent: Wednesday, October 06, 2004 7:09 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Client TOS Notifications from AOL Declude Folks, I need some help figuring out why we are receiving e-mails from [EMAIL PROTECTED] Subject Line: Client TOS Notification, and the Sent To address is [EMAIL PROTECTED] I am not sure if these are coming back to me in our abuse or postmaster account? There is nothing in the body of the e-mail, only an attachment of e-mail apparently getting rejected. Anyone else seeing these? The client we host forwards his e-mail automatically to his AOL account. For example, below is the header of an e-mail that was attached whereas a spam e-amail appears to have been sent to our client (lamphier.com) hosted on our IMail server (sneezy.xerocom.net - vacant.spiderhost.com is router) which was forwarded to his AOL account. Unfortunately it did not weight enough under our Declude config, nor Sniffer to get held as Spam. Any ideas what AOL is doing or what I should do to eliminate these most appreciated. Worried about getting on the wrong side of AOL. Thanks. -Don Return-Path: [EMAIL PROTECTED] Received: from rly-xa05.mx.aol.com (rly-xa05.mail.aol.com [172.20.64.41]) by air-xa03.mail.aol.com (v101_r1.4) with ESMTP id MAILINXA31-7341621d0d322; Tue, 05 Oct 2004 00:03:36 -0400 Received: from SNEEZY.XEROCOM.NET (vacant.spiderhost.com [65.57.241.197]) by rly-xa05.mx.aol.com (v101_r1.5) with ESMTP id MAILRELAYINXA55-7341621d0d322; Tue, 05 Oct 2004 00:03:25 -0400 Received: from SMTP32-FWD by lamphier.com (SMTP32) id A1BF42BA100B8F0C3; Mon, 4 Oct 2004 23:58:48 Received: from pelxavirus3.terra.com.pe [200.48.36.5] by SNEEZY.XEROCOM.NET with ESMTP (SMTPD32-8.12) id ABF42BA100B8; Mon, 04 Oct 2004 23:58:44 -0400 Received: from anamaria (unknown [200.106.79.108]) by pelxavirus3.terra.com.pe (Postfix) with ESMTP id 295EDB7CA4; Mon, 4 Oct 2004 23:07:07 -0500 (PET) Message-ID: [EMAIL PROTECTED] To: Undisclosed Recipients From: Anni [EMAIL PROTECTED] Subject: Proposal Date: Mon, 4 Oct 2004 23:03:21 -0500 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED] X-RBL-Warning: HELOBOGUS: Domain pelxavirus3.terra.com.pe has no MX or A records [0301]. X-RBL-Warning: WEIGHT1-9: Total weight between 1 and 9. X-Declude-Sender: [EMAIL PROTECTED] [200.48.36.5] X-Declude-Spoolname: D1bf42ba100b8f0c3.SMD X-Note: CompBiz scanned with Declude JunkMail. X-Spam-Tests-Failed: NOABUSE, HELOBOGUS, WEIGHT1-9 [7]. X-Note: This E-mail was sent from smtp7.terra.com.pe
Re: [Declude.JunkMail] Filter file maintenance suggestion
Has anyone ever seen this list and tried using it in their blacklist file? http://www.joewein.de/sw/blacklist.htm#bl Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Markus Gufler [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 06, 2004 5:20 AM Subject: [Declude.JunkMail] Filter file maintenance suggestion Hi all, As I can see the new owners of Declude has some people able to develope dynamic websites and there is already a customer protected area. Now the suggestion: As there are out many different maintainers of excelent filter files and much more different versions and methods to get this filter updated on the own system. Why not create the possibility for declude customers to manage certain filter files in this protected area and publish it there for other customers? So only customers could access the resources and there is one centralized point and one methodology to get this updates. For example: If someone has a great list of spamdomains he could become the responsible of this list (maybe also a group of maintainers) and maintain different SD-lists. He can place a short description of what each filter can/cannot do and what are eventual drawbacks. Another list could contain known sources of legit mailing lists or bulkmail like REMOTEIP -80 CIDR 66.218.66.0/24 Yahoo Groups REMOTEIP -80 CIDR 66.218.67.0/24 Yahoo Groups REMOTEIP -80 CIDR 66.218.68.0/24 Yahoo Groups REMOTEIP -80 CIDR 66.218.69.0/24 Yahoo Groups Other examples: -Phishing filter -AV filter -header phrases for known MTA's failing CMDSPACE (for counterweight) With some phantasy the developer of this backoffice could introduce a lot of nice features. Maintainers can place usefull notes sorted by date. Users can write comments and report problems with certain configuations. There shouldn't be hundreds of different lists but some few very usefull and allways up-to-date filter files. I believe this would be a very good tool and a great enhancement and plus point for a declude service agreement. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter file maintenance suggestion
- Original Message - From: Richard Farris [EMAIL PROTECTED] Has anyone ever seen this list and tried using it in their blacklist file? http://www.joewein.de/sw/blacklist.htm#bl Joe's data is included in the URIBL_JP_SURBL list, along with data from Prolocation. Their data is very accurate, and thus can be scored higher than some of the other SURBL lists. Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter file maintenance suggestion
So is URIBL_JP_SURBL supposed to be in our Global file..because I dont have it.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Bill Landry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 06, 2004 4:52 PM Subject: Re: [Declude.JunkMail] Filter file maintenance suggestion - Original Message - From: Richard Farris [EMAIL PROTECTED] Has anyone ever seen this list and tried using it in their blacklist file? http://www.joewein.de/sw/blacklist.htm#bl Joe's data is included in the URIBL_JP_SURBL list, along with data from Prolocation. Their data is very accurate, and thus can be scored higher than some of the other SURBL lists. Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Burst a message before processing (?)
Not sure if this is an iMail (SMTP) or Declude question (or possibly WAMCHECK). We've notice that messages with multiple To, Cc and Bcc recipients are all whitelisted if the first addressee whitelists -- the whitelisting coming from WAMCHECK. Is there a way to have a message 'burst' into multiple copies (?) before processing by Declude? Can Declude do this? If not any ideas as to how? TIA, Rod -- Roderick A. Anderson Technology Services Management Group http://www.technologyservicesmanagementgroup.com/ Spokane WA, 99202 --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter file maintenance suggestion
- Original Message - From: Richard Farris [EMAIL PROTECTED] So is URIBL_JP_SURBL supposed to be in our Global file..because I dont have it.. No, Declude does not support SURBL lists yet. I use them with SpamAssassin. However, others here download the SURBL lists and use them in body filters with Declude JunkMail. I wouldn't do that though, since body filtering is so processor intensive and the SURBL lists are getting rather large. Hopefully Declude will build in SURBL support in a near-term further release, as they are a great spam fighting tool. In the mean time, you can always setup a Linux mail gateway and use SpamAssassin, or use the Win32 version of SpamAssassin with DJM (see Sandy Whiteman's e-mail signature). Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] Filter file maintenance suggestion
So is URIBL_JP_SURBL supposed to be in our Global file..because I dont have
it..
URIBL_JP_SURBL is the default name of the SpamAssassin rule
corresponding to Joe's zone. AFAIK, it's the only zone directly
provided by SURBL that is _not_ activated by default in SA 3.0.
I am a non-fan of the SURBL zone transfer to humonguous Declude
filter file concept and would not suggest this route unless you are
taking positive steps to measure and regulate CPU utilization.
SURBL support is far less intensive in SpamAssassin, and SA can be
integrated easily with Declude once it's up and running. If you do
decide to essay the SA installation, you can add URIBL_JP_SURBL to SA
like so:
urirhssub URIBL_JP_SURBL multi.surbl.org.A 64
headerURIBL_JP_SURBL eval:check_uridnsbl('URIBL_JP_SURBL')
describe URIBL_JP_SURBL Contains a URL listed in JP at
http://www.surbl.org/lists.html
tflagsURIBL_JP_SURBL net
--Sandy
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]
SpamAssassin plugs into Declude!
http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/
Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases!
http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/
http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
Re: [Declude.JunkMail] Burst a message before processing (?)
You would need a gateway that splits the messages prior to being received by IMail. I'm not aware of any systems running on Windows that could do this on the same box, so you would likely need a new box with a flavor of Linux or BSD. This can add significant processing overhead if you don't validate addresses at the gateway while being dictionary attacked. We get a massive number of messages from such attacks on just a handful of our domains. If you simply want to whitelist all stuff going to a particular address, you should use Declude Pro and a per-user config that is empty or has no actions. I think that should work as desired. If the whitelisting isn't for a particular local account, you should also research a setting in Declude that allows for turning off whitelisting when a weight reaches a certain amount. This is used for situations where one user is whitelisted and other users are getting the same message. It isn't perfect as far as protecting the other addresses, and it will delete a significant amount of the E-mail to the whitelisted address, though stuff that scores very high (according to your settings), but it is a way around the issue. You can search the documentation for BYPASSWHITELIST and that should show you what to do. Matt Roderick A. Anderson wrote: Not sure if this is an iMail (SMTP) or Declude question (or possibly WAMCHECK). We've notice that messages with multiple To, Cc and Bcc recipients are all whitelisted if the first addressee whitelists -- the whitelisting coming from WAMCHECK. Is there a way to have a message 'burst' into multiple copies (?) before processing by Declude? Can Declude do this? If not any ideas as to how? TIA, Rod -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] Filter file maintenance suggestion
In the mean time, you can always setup a Linux mail gateway and use SpamAssassin, or use the Win32 version of SpamAssassin with DJM (see Sandy Whiteman's e-mail signature). Or both! You can run the SPAMD daemon on any platform, but have SPAMC32 query it from Declude Junkmail. Running SPAMD elsewhere will eliminate all the local RegEx resource utilization, and having SPAMC32 run within Declude should save you local resources vs. searching for SpamAssassin header tags on every Declude pass. SPAMC32 also lets you assign different weights to different SPAMD rulesets (different daemons) and more. [ Don't worry, I'll cool off the cheerleading the moment a lot of SPAMC32 support posts come in. :) ] --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[2]: [Declude.JunkMail] Filter file maintenance suggestion
Sanford, What type of CPU overhead do you experience with running SA/SPAMD with Declude? I saw the tech doc and it mentioned that it takes up 20MB of memory for each config file load in serial. Are you aware of anyone running this on machines pulling over 200K emails each day? Thanks for the aid. Keith -Original Message- From: [EMAIL PROTECTED] on behalf of Sanford Whiteman Sent: Wed 10/6/2004 6:52 PM To: Bill Landry Cc: Subject: Re[2]: [Declude.JunkMail] Filter file maintenance suggestion In the mean time, you can always setup a Linux mail gateway and use SpamAssassin, or use the Win32 version of SpamAssassin with DJM (see Sandy Whiteman's e-mail signature). Or both! You can run the SPAMD daemon on any platform, but have SPAMC32 query it from Declude Junkmail. Running SPAMD elsewhere will eliminate all the local RegEx resource utilization, and having SPAMC32 run within Declude should save you local resources vs. searching for SpamAssassin header tags on every Declude pass. SPAMC32 also lets you assign different weights to different SPAMD rulesets (different daemons) and more. [ Don't worry, I'll cool off the cheerleading the moment a lot of SPAMC32 support posts come in. :) ] --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. winmail.dat
