Except you will never know how a test will work in your environment without
trying it. What works for one person in their environment may not work for
someone else, and vise versa. I guess that's the beauty of a weighted
system like Declude.
Also, because you can try different tests without
Also, because you can try different tests without causing any problems by
simply using the LOG and/or IGNORE actions, there should be no hesitation to
see how a particular test will work in your environment.
I agree.. What we always do is add the test with a weight of Zero and use
the WARN
Can you give me the syntax for that?
- Original Message -
From: Markus Gufler [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, September 26, 2003 12:37 PM
Subject: RE: [Declude.JunkMail] spam review
How do I get the Weight: to show?
Andy,
It's not the answer but maybe this
Darrell,
Does DLA also do Imail log files? I would love to have a program that can
email me a summary every day and then a larger report text file I can look
at if needed.
Sheldon
Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com
Ten Forward Communications
Three Web sites that provide spam-blocking lists have been forced
offline as a result of crippling Internet attacks in what experts on
Thursday said is an escalation in the war between spammers and opponents
of unsolicited e-mails.
These lists that we all have come to love, could be made
You would have to download the lists quite often to stay current, and they
are rather large. And if the site is being DDoSed, and it cannot even
respond to regular DNS queries, how are you going to be able to connect to
download the updates?
Bill
- Original Message -
From: Sheldon
I get the Sniffer updates several times per day. And if it was a CNAME and
not an IP, it could be changed.
Sheldon
Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com
Ten Forward Communications 360-457-9023
Nationwide access, neighborhood support!
He who sends a message
Can you give me the syntax for that?
Assuming you have configured 2 weight tests like
WEIGHT10
WEIGHT20
in your global.cfg file and you want to hold on 20 points:
Set the two actions
WEIGHT10 SUBJECT [spam%WEIGHT%]
WEIGHT20 HOLD
in your $default$.junkmail file. (Note the space after the ]
DNS blacklist databases are very much larger than the Sniffer rule set
files.
Bill
- Original Message -
From: Sheldon Koehler [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, September 26, 2003 11:14 AM
Subject: Re: [Declude.JunkMail] Attacks prompt shutdown of antispam lists
I
Yes, that part I already have.
But I already have WEIGHT10 HOLD and WEIGHT20 DELETE
What is the syntax for getting the weight in the subject line?
thanks, andy
- Original Message -
From: Markus Gufler [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, September 26, 2003 2:08 PM
DNS blacklist databases are very much larger than the Sniffer rule set
files.
OK, bad idea...
Sheldon
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to
These lists that we all have come to love, could be made
available via
FTP and we can host them on our own servers...
You would have to download the lists quite often to stay
current, and they are rather large. And if the site is being
DDoSed, and it cannot even respond to
DNS blacklist databases are very much larger than the Sniffer
rule set files.
A textfile containing only IP-Addresses can by zipped down to around 1/3
of his size.
A file containing 200 Ips has an original size of 3,1 kB
The zipped file has 1,1 kB
(Probably the zip algoritmus will work bether
What do people think of this proposed solution to spam: Sender Permitted
From (SPF)? You can find out more about it at:
http://spf.pobox.com/howithelps.html
Sounds like it could be an effective tool against spam, although there would
need to be mass adoption in order for it to be of much
It wouldn't make sense to repeatedly download what was
essentially the same list with small changes. It would make much more
sense to have one large file to download once, followed by a distribution
of small diff files to apply to the main file, containing any
additions/deletions since the
Multiply times the number of databases you want to use, times the number of
times you would need to download them each day to stay current, times the
number of people that want to download the files--have you got a spare OC-3
laying around...?
Bill
- Original Message -
From: Markus
Don't know if any one asked this, but we are seeing a flurry of
omlauted characters used in Subject fields:
RE: üS Döctor appröved RX Prëscríptíon
We are ring to filter on these, but Declude doesn't see to
recognize them?
That should trigger the NONENGLISH test (if you are using it).
Reply to: R. Scott Perry
Re: [Declude.JunkMail] Foreign Characters and Declude on Friday 7:40:45 PM
I want to enable foreign characters but filter on their
exact words. It sounds like these character sets are not
'viewed' and filtered in Declude?
--
Roger Heath
[EMAIL PROTECTED]
At 07:25 PM 9/26/2003 -0400, you wrote:
At 06:50 PM 09/26/2003, Pete McNeil
wrote:
At 02:30 PM 9/26/2003 -0700, you
wrote:
I've said it before, I'll say
it again. It's time to leverage the power
of the network agianst abuse on that same network.
Pete,
You are preaching to the choir ;)
When
I'll go you one better. I got one in the real mail (from Spain, I am in the
US). Says I won 650,000 in a lottery, all I need to do is fill in the
official looking ppage of personal info, bank acct and emergency contacts so
they can deposit it for me. Of course, I have to act fast or it all goes
20 matches
Mail list logo
