RE: [Declude.JunkMail] Declude not taking action

2003-12-08 Thread Kami Razvan
Hi; Some common observations about Declude not seeing emails: - Last night I personally had 2 emails that were not seen by Declude and 4 were in the Admin mailbox. At least these are the ones that I have seen. Of all of these none have the IMail spam headers. - In our configuration we do all

Re: [Declude.JunkMail] Declude not taking action

2003-12-08 Thread Matthew Bramble
Kami, I believe that what you are getting at is a very likely explanation for this. I had never seen this before the other day, and it seems that most of the reports are coming from IMail 8 users who are using IMail to run tests before Declude gets the message. I figure that my system's

Re: [Declude.JunkMail] Declude not taking action

2003-12-08 Thread Matthew Bramble
John, If I'm correct, you like Kami, are also using IMail 8 to pre-process your E-mail? If so, that would explain the discrepancy. The longer the window that the message sits in the original spool, the more likely the queue will steal it or a copy of it. Matt John Tolmachoff (Lists)

Re: [Declude.JunkMail] Declude not taking action

2003-12-08 Thread Matthew Bramble
Dave, IMail delivered a copy to Declude that was deleted, but IMail also delivered a copy directly to me without processing it with Declude. There were two copies of this message as a result of the queue being run at this particular instant in time. The copy that was delivered without being

RE: [Declude.JunkMail] Declude not taking action

2003-12-08 Thread Kami Razvan
Dave Marchette wrote: Gotcha. But do the headers of the copy that Imail delivered\stole have any Declude markings in the header? === Hi again.. This is another one I just noticed. Received: from 69.0.99.172.adsl.snet.net [69.0.99.172] by

Re: [Declude.JunkMail] TESTFAILEDWITHWEIGHTS

2003-12-08 Thread R. Scott Perry
what we need is %TESTWITHWEIGHT% intead of %TESTFAILEDWITHWEIGHTS% so it will list test like ipnotinmx when they pass, and contribute to the total weight, instead of when they fail. you said i was coming in the next release, did you mean %TESTFAILEDWITHWEIGHTS% ? Correct. The problem with

RE: [Declude.JunkMail] Hijack Question

2003-12-08 Thread R. Scott Perry
OK, I have an idea. Scott, can we disable HOLD1, and if so would that affect HOLD2 operation? 99.5% of messages held by HOLD1 end up passing. Yes -- if you set the HOLD1 threshold to be greater than the HOLD2 threshold, then only HOLD2 will apply.

Re[2]: [Declude.JunkMail] Declude not taking action

2003-12-08 Thread Terry Fritts
I had never seen this before the other day, and it seems that most of the reports are coming from IMail 8 users Well, now that this discussion is in full swing I have seen this but it was so rare that I didn't believe it. I remember researching one incident for more than an hour and

RE: [Declude.JunkMail] Declude not taking action

2003-12-08 Thread R. Scott Perry
- In our configuration we do all the IP4r tests in IMail and add header for Declude to analyze. It is as if IMail never added the headers.. Since none are there. Could it be that IMail somehow skips its own spam test? Should we not expect if IMail has done all that it was to do the headers

Re: [Declude.JunkMail] TESTFAILEDWITHWEIGHTS

2003-12-08 Thread R. Scott Perry
I have tried this and it did not work. I already have IPNOTINMX and NOLEGITCONTENT set up for this and they are not appearing in the TESTFAILEDWITHWEIGHTS variable. I added my weight test to it and they still appear. It is formatted as follows in my global.cfg HIDETESTS IPNOTINMX

[Declude.JunkMail] Config not catching site

2003-12-08 Thread Ron Rushing
I thought I had the config set correctly to tag mail coming from a site. Site addy is [EMAIL PROTECTED] Its one where the host name constantly changes but the domain stays the same. I have entered in the senderfile.txt list @.optinmaildomain.com All Deculde sees is it failing the badheaders

RE: [Declude.JunkMail] Declude not taking action

2003-12-08 Thread John Tolmachoff \(Lists\)
FYI, I have a support incident open with Ipswitch on this issue and have passed on others information posted here. Here is there response this morning: John, We're looking into it a bit further, I've passed the info to RD for some further insight. Thanks for your patience. John Tolmachoff

[Declude.JunkMail] catchallemails

2003-12-08 Thread Omar K.
After upgrading to the latest beta, I noticed that all of my emails are being tagged as failing this test. Is this how it should be? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe,

RE: [Declude.JunkMail] Config not catching site

2003-12-08 Thread John Tolmachoff \(Lists\)
There is no wildcard and certainly @ is not a wild card. You need to use .optinmaildomain.com John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Ron Rushing Sent: Monday,

Re: [Declude.JunkMail] catchallemails

2003-12-08 Thread R. Scott Perry
After upgrading to the latest beta, I noticed that all of my emails are being tagged as failing this test. Is this how it should be? Yes. With the latest beta, you need to add a line HIDETESTS CATCHALLMAILS IPNOTINMX NOLEGITCONTENT to the \IMail\Declude\global.cfg file, and then those

[Declude.JunkMail] MAILFROM STARTSWITH

2003-12-08 Thread John Tolmachoff \(Lists\)
Can STARTSWITH be used with MAILFROM? John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL

Re: [Declude.JunkMail] MAILFROM STARTSWITH

2003-12-08 Thread R. Scott Perry
Can STARTSWITH be used with MAILFROM? Yes. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've

Re: [Declude.JunkMail] TESTFAILEDWITHWEIGHTS

2003-12-08 Thread Daniel Grotjan
Yes, I'm running 1.77 beta. The exact line from my global.cfg is... HIDETESTS IPNOTINMX NOLEGITCONTENT K-SPAM-ALL K-SPAM-VHIGH K-SPAM-HIGH K-SPAM-MED K-SPAM-LOW The K-SPAM- test are weight test for my Webmail junkmail filter I created. I use Imail rules for customers to choose to send mail

Re: [Declude.JunkMail] TESTFAILEDWITHWEIGHTS

2003-12-08 Thread R. Scott Perry
Yes, I'm running 1.77 beta. The exact line from my global.cfg is... HIDETESTS IPNOTINMX NOLEGITCONTENT K-SPAM-ALL K-SPAM-VHIGH K-SPAM-HIGH K-SPAM-MED K-SPAM-LOW The K-SPAM- test are weight test for my Webmail junkmail filter I created. I use Imail rules for customers to choose to send mail

[Declude.JunkMail] TLD blacklist

2003-12-08 Thread Andy Ognenoff
I was just checking out the archives and I came across someone with the same problem as I but I wanted to see if there has been any additional work or suggestions about it. I want to blacklist some TLDs using Declude (Standard). Scott answered that it's not reliable but offered a suggestion of

Re: [Declude.JunkMail] Test suggestion request for comments...

2003-12-08 Thread Burzin Sumariwalla
Why not use SMTP auth? I suppose this might be a problem is you aren't using Imail 8.x(?) Burzin At 12:32 PM 12/7/2003, you wrote: Scott, you have probably seen requests like this before, however, I think this would be a great way to support most corporate and some ISP e-mail domains with a

Re: [Declude.JunkMail] Test suggestion request for comments...

2003-12-08 Thread Bill Landry
This has nothing to do with my users, it has everything to do with other people trying to send mail to my hosted customers, which has nothing to do with SMTP Auth. Bill - Original Message - From: Burzin Sumariwalla [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 08, 2003

[Declude.JunkMail] Filter weight display suggestion

2003-12-08 Thread Matthew Bramble
Scott, I can already see how this will become a common thing to misunderstand so I wanted to make a recommendation before people got too used to the new functionality which shows the weights with the Warn action and %TESTSFAILEDWITHWEIGHTS% variable (and possibly the logs also, but I haven't

Re: [Declude.JunkMail] Filter weight display suggestion

2003-12-08 Thread R. Scott Perry
The issue is that the weight shown in the Warn and other actions only reflects the weights assigned within the filter file itself and not the weight from the Global.cfg file. Although most of my tests will probably become internally weighted with the combination of END and MAXWEIGHT

[Declude.JunkMail] Positive attributes (was Test suggestion request for comments...)

2003-12-08 Thread Keith Purtell
Kami: I've been working along similar lines but run into some difficulties. I did succeed in getting a group of managers and team leaders to suggest a list of good words which are often used in correspondence, and are now given negative weight. However, there is an occasional nightmare

RE: [Declude.JunkMail] Positive attributes (was Test suggestion request for comments...)

2003-12-08 Thread Kami Razvan
group of managers and team leaders to suggest a list of good words which are often used in correspondence, Hi Keith: Actually I think what Bill was originally talking about and what I was trying to say was a way to actually credit good servers. Lets say.. - No blacklists - Valid REVDNS - Valid

Re: [Declude.JunkMail] TESTFAILEDWITHWEIGHTS

2003-12-08 Thread Serge
It may be confusing for some. but why not add a second variable and leave to the administrator the choice of using it or not. - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 08, 2003 12:35 PM Subject: Re: [Declude.JunkMail]

RE: [Declude.JunkMail] Positive attributes (was Test suggestion request for comments...) request for comments...)

2003-12-08 Thread Colbeck, Andrew
And to state the obvious... Giving negative weights to combinations of good server configurations would benefit correspondence from legitimate mail servers that would otherwise get tagged as spam by false positives on content filters, e.g. a joke e-mail with bad words or a newsletter with URLs

[Declude.JunkMail] END statement in filters

2003-12-08 Thread Daniel Grotjan
Is anyone using the END statement in filters successfully? I am finding on my server that if I have an END anywhere in a filter it always ends, whether it matches that statement or not. I have tried this on several filters just to test and get the same results on all of them. I tried in the

Re: [Declude.JunkMail] END statement in filters

2003-12-08 Thread Bill Landry
I reported experiencing the same thing last week with using the END flag, but that was while using the final interim release (I have not tested with the v1.77 beta yet). I found that even if none of the END lines matched, but other lines in the file did match, END causes Declude to skip the

RE: [Declude.JunkMail] END statement in filters

2003-12-08 Thread George Kulman
Bill Daniel, I'm running the 1.77 Beta with 8.04 have the same problem. George -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry Sent: Monday, December 08, 2003 8:52 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] END

Re: [Declude.JunkMail] Filter weight display suggestion

2003-12-08 Thread Matthew Bramble
Just wanted to say thanks! Matt R. Scott Perry wrote: The issue is that the weight shown in the Warn and other actions only reflects the weights assigned within the filter file itself and not the weight from the Global.cfg file. Although most of my tests will probably become internally