you would need to have gmx.at in the sd.txt file.
As I know GMX a european freemailer use also other TLDs.
For example gmx.de, gmx.net, gmx.it,
So I've set the following line in my sd-file:
@gmx. .gmx.
Most spam with a gmx-domain we can see here is from gmx.at.
Markus
---
Scott,
I never saw any comment on the country code problem I was having. Is there
an updated list that would have properly identified this email? Is there a
way to detect reserved countries?
Karen
-- original msg --
I just received a junk mail (coffee offer) with the following header
I never saw any comment on the country code problem I was having. Is there
an updated list that would have properly identified this email? Is there a
way to detect reserved countries?
You can download the latest IP-Country database from
http://www.declude.com/release/170/all_list.dat .
Note
Hi,
I changed the line in my Global.cfg file to not deliver Mail with a weight
of 20 (or more):
WEIGHT20HOLD
Why does an E-Mail with a weight of 21 come through?
...
X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED]
X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED]
We've seen more and more spam comming from buongiorno.com.
Their IP is also listed on OSSRC and SPAMBAG, but when you go to their
website
http://www.buongiorno.com/uk/
it looks like they offer a lot of newsletters following the opt-in
principle.
In addition it's also possible to send the own
Please post the JunkMail log for this message.
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of interactiveaustria
Sent: Wednesday, July 02,
I changed the line in my Global.cfg file to not deliver Mail with a weight
of 20 (or more):
WEIGHT20HOLD
Why does an E-Mail with a weight of 21 come through?
That is because:
X-RBL-Warning: WEIGHT20: Weight of 21 reaches or exceeds the limit of 20.
The X-RBL-Warning: headers only appear
I use duplicated tests to perform multiple actions. In one I do and
ATTACH with one and a ROUTETO to forward the mail to a central mailbox
for the domain. The problem with this (or any duplicated test to
accomplish multiple actions) is that the weight is cumulative so the
failure is double. This
Just installed Imail 8 and was wondering what the consensus about the
default DNS blackslists are?
Are most junkmail/sniffer users leaving these enabled or disabling them?
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the
I use duplicated tests to perform multiple actions. In one I do and
ATTACH with one and a ROUTETO to forward the mail to a central mailbox
for the domain. The problem with this (or any duplicated test to
accomplish multiple actions) is that the weight is cumulative so the
failure is double. This
Hi,
Please post the JunkMail log for this message.
07/02/2003 16:45:06 Qefee01b302f619ae Msg failed NOABUSE (Not supporting
[EMAIL PROTECTED]). Action=WARN.
07/02/2003 16:45:06 Qefee01b302f619ae Msg failed NOPOSTMASTER (Not
supporting [EMAIL PROTECTED]). Action=WARN.
07/02/2003 16:45:06
Declude Console stopped working after the 8.01 Imail Upgrade (Pro). The
mail
is getting through the server and is being commented by Declude. I did not
change anything else. I even tried bumping up to 1.70 beta, still no
console. The line in the global and virus .cfg files should read 'Console
Did the Imail directory change?
Nope, just shut down the services, ran the patch and restarted the server.
(It didnt say it had to, but it IS a Windows machine)
---
[This E-mail was scanned for viruses at tqci.net]
---
[This E-mail was scanned for viruses by Declude Virus
Nope, just shut down the services, ran the patch and restarted the server.
(It didnt say it had to, but it IS a Windows machine)
Do the Declude log files show any errors?
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail
There actually is an easy way around this. Instead of:
BADHEADERS1 badheaders x x 8 0
BADHEADERS2 badheaders x x 8 0
you can use:
BADHEADERS1 badheaders x x 8 0
The weight and weightrange test types don't add to the weight of the
E-mail, so that won't be an issue.
-Scott
At 02:39 PM 7/2/2003, David Stavert wrote:
There actually is an easy way around this. Instead of:
BADHEADERS1 badheaders x x
Kami, I found that mail from dartmail.net was all legitimate newsletters,
but mail from maildart was spam. I let the RBLs do their usual job, but
then I counterweight with:
HELO -50 ENDSWITH dartmail.net
although I prefer REVDNS, I find this a reliable middleground (WHITELIST
being on the other
Do the Declude log files show any errors?
-Scott
---
None that I can see. Would the error be obvious?
---
[This E-mail was scanned for viruses at tqci.net]
---
[This E-mail was scanned for viruses by Declude Virus
Do the Declude log files show any errors?
---
None that I can see. Would the error be obvious?
It should be -- I was expecting something like lines of Could not start
console or Invalid activation code for each E-mail that is received.
Is the \IMail\Deccon.exe file there?
Nope, just shut down the services, ran the patch and restarted the
server.
(It didnt say it had to, but it IS a Windows machine)
Do the Declude log files show any errors?
-Scott
OK Further investigation shows deccon.exe IS running (so says
OK Further investigation shows deccon.exe IS running (so says the taks
manager) however, there is nothing showing up on the desktop. Weird eh?
Are you using Terminal Services (which doesn't seem to have any way to
display the default desktop)?
OK Further investigation shows deccon.exe IS running (so says the taks
manager) however, there is nothing showing up on the desktop. Weird eh?
Are you using Terminal Services (which doesn't seem to have any way to
display the default desktop)?
Speaking of this, is anyone running Imail with
KR SPAM hardly comes with PDF attachments or Word or even less likely
KR with Excel. Perhaps one easy way to combat this is to figure out
KR the attachment (don't know how) may be we can assign a negative
KR weight to emails with such attachments.
.. another 2 cents to echo Scott's reply
Is there a site available where I can download the latest sd.txt file that
people are using for the SPAMDOMAINS test?
Thank you,
Bill
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
Ironically, HELO dell.com is a 100% reliable indicator of spam. Do you
think Dell has outgoing mail servers that run SMTP instead of ESMTP? A
real server would say EHLO dell.com. Be careful of this one before you
apply it willy nilly. Yahoo uses the older SMTP for some of its outoing
E-mail
Scott,
I noticed that IMail 8.0 HF1 now includes the anticipated A lines in the Q*.SMD
files when a user is authenticated via SMTP AUTH. The format is:
[EMAIL PROTECTED]
Can you incorporate this into a new test so that we can reduce the weight on emails
that are sent using SMTP
I second that. That is one of my biggest issues when people travel and
connect with dialup or dsl or the likes.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Bill B.
Sent: Wednesday, July 02, 2003 7:00 PM
To: [EMAIL PROTECTED]
Subject:
I send the TESTSFAILED in the spamattach message body with the attached
mail. It looks like it failed an incredible number of tests but it
really only failed the HELOBOGUS, IPNOTINMX, FROMFILE, SNIFFER
Although I do not use spamattach, I only use TESTSFAILED in the headers.
John Tolmachoff
28 matches
Mail list logo
