RE: Re[2]: [Declude.JunkMail] Declude and SPF

2004-05-06 Thread Markus Gufler
Now one of our customers send a legit message trough our mailserver. Your use of legit is confusing. Rephrased, an SPF TXT record _is_ a legitimate use policy. For the purposes of an SPF check, there is no greater arbiter of legitimacy than that record. I specified legit in this case

RE: [Declude.JunkMail] Declude headers missing from several e-mails

2004-05-06 Thread R. Scott Perry
No backup software, no on access scanning. I am having some other problems with the machine - I'm about to nuke it regardless - I just wanted to make sure that declude was still being called to scan for viruses until I get this box formatted... ugh Unfortunately, if the files can't be locked by

RE: [Declude.JunkMail] Declude headers missing from several e-mails

2004-05-06 Thread marc catuogno
Thanks - It looks as if it was an aberration. I've checked a few different day's logs and didn't see could not lock file in any other log. Something must have been up. Maybe I should look through the logs more thouroughly and more often : ) Anything out there that could alert me to the fact

[Declude.JunkMail] Attach Command

2004-05-06 Thread Goran Jovanovic
I am using the ATTACH command with the default spamattach.eml file. Is there a method to specify a different .eml file? I would like to have one per domain or for testing etc. Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus

[Declude.JunkMail] %WEIGHT% variable as -100

2004-05-06 Thread Matt
Scott, This may be very minor and possibly just cosmetic, I have found that some messages will have a %WEIGHT% variable returned for a WARN action that is -100 when such a score is impossible on our system. The example below is from a message that scored 0 in the logs (seemingly correct), but

[Declude.JunkMail] IP In Hello

2004-05-06 Thread Kevin Bilbee
I have created a similar test that you pass teh %HELO% variable to here is my setup. I have 0 0 for the weights because I am still testing. I have found 1 false positive classmates.com has the ip xx-xx-xx-xx.classmates.com in their helo string. I have also seen a few of our customers sendign

RE: Re[2]: [Declude.JunkMail] Declude and SPF

2004-05-06 Thread Kevin Bilbee
Wouldn't be possible to let declude check for SPF-Records only for incomming messages? Not on version 7. decluse does not know if it is a local or remote user until Imail 8 and SMTP auth. Imail 8 indicates in the Q file it the user authed or not not if the user is local or remote. Kevin

[Declude.JunkMail] Email viewer

2004-05-06 Thread Patrick Allison
Hi All, What app are you using to view emails that have been held by Junkmail? TIA, Patrick Patrick Allison Information Technology System Specialist III Technology and Computer Service Centralia College Centralia, WA --- [This E-mail was scanned

Re: [Declude.JunkMail] Email viewer

2004-05-06 Thread Darin Cox
Try SpamReview... http://www.slsoft.com/spamreview.htm Darin. - Original Message - From: Patrick Allison [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, May 06, 2004 2:14 PM Subject: [Declude.JunkMail] Email viewer Hi All, What app are you using to view emails that have

RE: Re[2]: [Declude.JunkMail] Declude and SPF

2004-05-06 Thread Markus Gufler
Wouldn't be possible to let declude check for SPF-Records only for incomming messages? Not on version 7. decluse does not know if it is a local or remote user until Imail 8 and SMTP auth. Imail 8 indicates in the Q file it the user authed or not not if the user is local or remote.

RE: Re[2]: [Declude.JunkMail] Declude and SPF

2004-05-06 Thread Kevin Bilbee
Good question I did not think of that. Scott will have to answer. I beleive that all message are incomming at one point. 1) User sends a message from client 2) the message is oncomming to SMTP 3) SMTP determines that it is for another server 4) It then becomes an outgoing message??? My Best

Re: [Declude.JunkMail] Attach Command

2004-05-06 Thread R. Scott Perry
I am using the ATTACH command with the default spamattach.eml file. Is there a method to specify a different .eml file? I would like to have one per domain or for testing etc. No, only the \IMail\Declude\spamattach.eml file can be used with the ATTACH action.

RE: Re[2]: [Declude.JunkMail] Declude and SPF

2004-05-06 Thread R. Scott Perry
Not on version 7. decluse does not know if it is a local or remote user until Imail 8 and SMTP auth. Imail 8 indicates in the Q file it the user authed or not not if the user is local or remote. And why we can specify separate XINHEADER and XOUTHEADER lines? That's different.

RE: Re[2]: [Declude.JunkMail] Declude and SPF

2004-05-06 Thread Markus Gufler
And why we can specify separate XINHEADER and XOUTHEADER lines? That's different. XINHEADER/XOUTHEADER looks to see whether the E-mail is incoming or outgoing (based on the recipient(s), which is never forged). All spam is incoming; the problem with SPF is determining if it is a local

RE: [Declude.JunkMail] Attach Command

2004-05-06 Thread Goran Jovanovic
Scott, Then let me add that to the request for enhancement pile. Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, May 06, 2004 3:34 PM To: [EMAIL

Re: [Declude.JunkMail] %WEIGHT% variable as -100

2004-05-06 Thread R. Scott Perry
This may be very minor and possibly just cosmetic, I have found that some messages will have a %WEIGHT% variable returned for a WARN action that is -100 when such a score is impossible on our system. The example below is from a message that scored 0 in the logs (seemingly correct), but shows

Re: [Declude.JunkMail] %WEIGHT% variable as -100

2004-05-06 Thread Matt
Scott, Sorry, it wasn't the WARN action, it's coming from the XOUTHEADER (gatewayed client in this example): XOUTHEADERX-MailPure: Spam Score: %WEIGHT% - or - XINHEADERX-MailPure: Spam Score: %WEIGHT% 1.79i6 is the version that I am running presently. Following are some

[Declude.JunkMail] Thank heaven for JM headers

2004-05-06 Thread Darin Cox
This is a thank you to Scott and his team for all of the great features in JM. We havea few customers who relay all of their mail to a AOL accounts, insist onnobody aliases,and don't want filtering. One of these hadn't checked email in months and started today, clicking the AOL SPAM button

Re: [Declude.JunkMail] %WEIGHT% variable as -100

2004-05-06 Thread R. Scott Perry
1.79i6 is the version that I am running presently. Following are some other examples, with the first appearance in my inbox being April 12th which happens to be less than a week after you added the weight variable to the external tests, and just after you resolved the issue where the weights