RE: [Declude.JunkMail] Experience with Statistical Filtering [IMail 8.02]

2003-09-08 Thread Kami Razvan
Title: Message Oh Oh... Interesting... I sure will. So I am imagining things... has happened before. I will try to add up the weights and see - I will review the archives now.. so perhaps that explains why the headers show up at the bottom of the header and not at the top like the

[Declude.JunkMail] Test - ignore

2003-09-08 Thread David
X-Outbound Test-Failures: IPNOTINMX, FILTER-WHITE X-Outbound Test-Weight: -30 X-Note: Intended recipient(s): [EMAIL PROTECTED] X-Note: Sent from mail.moragg.com ([62.219.165.29]). X-Note: This E-mail has been scanned for spam and viruses. X-Note: Please send abuse reports to [EMAIL PROTECTED]

[Declude.JunkMail] Declude v1.75 bogs down the server

2003-09-08 Thread Paul Hung
Return Receipt Your [Declude.JunkMail] Declude v1.75 bogs down the server document :

Re: [Declude.JunkMail] SORBS test results, was Configuration Question - -

2003-09-08 Thread Matthew Bramble
I've got about 2 1/2 days of SORBS stats done, checking all but SORBS-BLOCK (because I don't believe the methodology relates to spam). The results are very telling. SORBS --- 4377 - Unique Incoming Messages 1350 - Test Hits (30.8% of unique messages, multiple

RE: [Declude.JunkMail] Declude v1.75 bogs down the server

2003-09-08 Thread Joseph S. Trimboli
Scott, Thanks, I'll give it a try. Joe Trimboli System Administrator CyberLink, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Friday, September 05, 2003 4:45 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude

RE: [Declude.JunkMail] Message Delay. Was: Feature request: no displayable text in body no displayable text in body

2003-09-08 Thread Charles Frolick
I have customers here in the building that host domains with us that come visit me when there is a fifteen minute delay in their email since there are deals with tens of thousands of dollars relying on the speed of email, too late and someone else has the deal. Unless you know about their

[Declude.JunkMail] Whitelistfile problem

2003-09-08 Thread Tandem Group
I am having a whitelistfile problem with a mailing list. There are the odd messages which get caught in our regular tests and I need to whitelist the address. The X-Declude-Sender: line is as follows: [EMAIL PROTECTED] where the second set of numbers change for each message. I don't know about

Re: [Declude.JunkMail] Whitelistfile problem

2003-09-08 Thread R. Scott Perry
I am having a whitelistfile problem with a mailing list. There are the odd messages which get caught in our regular tests and I need to whitelist the address. The X-Declude-Sender: line is as follows: [EMAIL PROTECTED] where the second set of numbers change for each message. I don't know about

Re: [Declude.JunkMail] Whitelistfile problem

2003-09-08 Thread Matthew Bramble
Why not just whitelist @returns.groups.yahoo.com or even just groups.yahoo.com? You don't need to match the whole line, just a part of it. You might also be failing yahoo.com E-mail accounts, and if so, you might want to reduce the scoring of the blocklist that is catching this domain. Some

RE: [Declude.JunkMail] Whitelistfile problem

2003-09-08 Thread Tandem Group
Thanks. I guess there is a fairly low probability of seeing mainstream spam from a mailing list, so I will use your suggestion. Erik -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Monday, September 8, 2003 09:25 To: [EMAIL

[Declude.JunkMail] Multiple recipients seeing action

2003-09-08 Thread Tandem Group
I have a concern with messages to multiple recipients where the action chosen by a single recipient is used on others. In one case, a message was sent to nine recipients (eight in the Bcc) and one of the Bcc recipients is signed up for our spam control, but another is seeing the action, in this

[Declude.JunkMail] Setting a test for a specific domain

2003-09-08 Thread Doris Dean
is it possible to set a test for a specific domain ... rather than using the whitelist (as I recall there is a limit to the number of whitelist tests that can exist) so instead could I set up a test where the domain could not fail? If yes what would it look like .. I am using the declude

Re: [Declude.JunkMail] Multiple recipients seeing action

2003-09-08 Thread R. Scott Perry
I have a concern with messages to multiple recipients where the action chosen by a single recipient is used on others. Unfortunately, that's a problem inherent in SMTP, where a single E-mail can be sent to multiple recipients -- and it's expected that the E-mail be identical for all recipients.

[Declude.JunkMail] another funny spammer

2003-09-08 Thread Sean Fahey
Got this one today... how polite. They claim I "subscribed" from IP 55.133.94.93 - assumingthat is really the IP it came from, eitherwe shouldbe worried aboutmilitary security or someone has some spare time on their hands and is making extra money on the side. Dear Customer, Positive

Re: [Declude.JunkMail] Setting a test for a specific domain

2003-09-08 Thread R. Scott Perry
is it possible to set a test for a specific domain ... rather than using the whitelist (as I recall there is a limit to the number of whitelist tests that can exist) so instead could I set up a test where the domain could not fail? If yes what would it look like .. I am using the declude

RE: [Declude.JunkMail] Multiple recipients seeing action

2003-09-08 Thread Tandem Group
Scott: That would, in my view, be quite a serious problem for anyone using per-user settings, and I hope you can find a way to deal with it. I suppose the upside is that some customers will see the Subject add-on and call and ask 'what's this?' giving us an opportunity to sell our spam control

RE: [Declude.JunkMail] another funny spammer

2003-09-08 Thread Kami Razvan
Title: Message :) That URL: Specialoffers4you.com has been in our URL filter file since January 4, 2003. So they have been around for a while.. Regards, Kami -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sean FaheySent: Monday, September 08,

RE: [Declude.JunkMail] Multiple recipients seeing action

2003-09-08 Thread Charles Frolick
We changed our handling because of this. We classify and rank using weights, then add a formatted header, they then can use Imail rules or client rules to handle as they wish. I also built a web app that will modify their rules for them by providing a simple how aggressive do you want to be and

RE: [Declude.JunkMail] Multiple recipients seeing action

2003-09-08 Thread John Tolmachoff \(Lists\)
I would actually think that this should be an configuration option in Imail, where if you wanted to, each incoming message, if to more than one recipient on the local server, would be separated. In other words, if Imail received a message destined to 3 people on the server, instead of creating

[Declude.JunkMail] Strange Subject

2003-09-08 Thread Frederick Samarelli
How does a subject that shows this. =?ISO-8859-1?b?UmU6Q2hlYXBlc3QgVmlhZ3JhIEd1YXJhbnRlZWQ=?= Display this. Re:Cheapest Viagra Guaranteed --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To

Re: [Declude.JunkMail] Strange Subject

2003-09-08 Thread R. Scott Perry
How does a subject that shows this. =?ISO-8859-1?b?UmU6Q2hlYXBlc3QgVmlhZ3JhIEd1YXJhbnRlZWQ=?= Display this. Re:Cheapest Viagra Guaranteed That's because the subject is encoded. To help support non-English languages, there was an RFC that allowed subjects and message bodies to be encoded.

RE: [Declude.JunkMail] Strange Subject

2003-09-08 Thread Markus Gufler
How does a subject that shows this. =?ISO-8859-1?b?UmU6Q2hlYXBlc3QgVmlhZ3JhIEd1YXJhbnRlZWQ=?= The ?b? indicates that this subject line is Base64 encoded. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the

[Declude.JunkMail] Strange header from REVDNS and REMOTEIP

2003-09-08 Thread Keith Purtell
I've started getting strange results in an XINHEADER. Specifically, one that uses REVDNS and REMOTEIP. Enclosed is an example followed by the relevant snippet from config.cfg. I can't figure out the SENT from X-Note which has recently been sporadically showing gibberish, and the first line that

Re: [Declude.JunkMail] Strange header from REVDNS and REMOTEIP

2003-09-08 Thread R. Scott Perry
I've started getting strange results in an XINHEADER. Specifically, one that uses REVDNS and REMOTEIP. Enclosed is an example followed by the relevant snippet from config.cfg. I can't figure out the SENT from X-Note which has recently been sporadically showing gibberish, and the first line

RE: [Declude.JunkMail] Strange header from REVDNS and REMOTEIP

2003-09-08 Thread Keith Purtell
Well, I'm using Outlook 2000, and the only thing at the level of my PC which might influence the headers is a piece of software which changes incoming HTML email into plain text. If you think it'll make a difference, I can try to retrieve one of these via IMail's Web Messaging, before my local

Re: [Declude.JunkMail] Strange Subject

2003-09-08 Thread Frederick Samarelli
Any suggestion on how to block these. Thanks. - Original Message - From: Markus Gufler [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, September 08, 2003 4:55 PM Subject: RE: [Declude.JunkMail] Strange Subject How does a subject that shows this.

RE: [Declude.JunkMail] Strange header from REVDNS and REMOTEIP

2003-09-08 Thread R. Scott Perry
Well, I'm using Outlook 2000, and the only thing at the level of my PC which might influence the headers is a piece of software which changes incoming HTML email into plain text. If you think it'll make a difference, I can try to retrieve one of these via IMail's Web Messaging, before my local

RE: [Declude.JunkMail] Strange Subject

2003-09-08 Thread Andy Schmidt
SUBJECT 40 CONTAINS =?ISO-8859-1?b? Assuming you don't ever get emails from European countries, Canada or other locations that use accented characters. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201

RE: [Declude.JunkMail] Multiple recipients seeing action

2003-09-08 Thread Charles Frolick
If you don't mind running a MX gateway or switching to a different one, Xmail server (www.xmailserver.org) does split all messages into individual recipients, I tested it. Downside is you will run declude for every recipient which will increase server load. I would guess at least a 5-10%

RE: [Declude.JunkMail] Strange Subject

2003-09-08 Thread Charles Frolick
I believe the Outlook XP and 2003 mail config test uses the subject encoding as well on the test message. Had acustomer with bad pop settings leave several test on webmail and they looked like that. Thanks, Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED]

Re: [Declude.JunkMail] Strange Subject

2003-09-08 Thread Matthew Bramble
Use a text filter and add something like: SUBJECT 40 CONTAINS =?ISO-8859-1?b? to it. I tried this all the way down to ust ?b? and a SUBJECT filter didn't catch it. The SUBJECT filter also doesn't catch the decoded text. I found though that if you use the HEADERS filter, it

[Declude.JunkMail] statistical filtering

2003-09-08 Thread serge
scott is it possible for you to create a test that would use imail's antispam-table-ini.txt ? - Original Message - From: Charles Frolick [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, September 08, 2003 10:54 PM Subject: RE: [Declude.JunkMail] Strange Subject I believe the