[Declude.JunkMail] Feature Idea?

2004-06-01 Thread Scott Fisher
I'm not sure of my terminology here. The MAILFROM tests the e-mail address referred to as the Declude Mailfrom. There is also a displayed mailfrom that is displayed in the e-mail client and can be quite misleading. It would be interesting to have a variable to check the displayed mailfrom. I

[Declude.JunkMail] New filter test idea using DNS timeout.

2004-06-01 Thread Scott Fisher
My idea is to punish those people that have a reverse dns timeout. To help counter a case where I have a DNS problem, I'll only perform this when a major RBL test fails. Why? Under normal conditions the reverse dns shouldn't timeout, and that timeout negates the spamdomains tests. Opinions? Is

[Declude.JunkMail] Example of WHITELIST in a Filter?

2004-06-01 Thread jeff
I've been playing with the WHITELIST in a filter option, mostly to create a filter for whitelisting mailing lists people subscribe to. Ever since my Whitelist had to move out of Gloabl.cfg due to size (whitelisted employee home email addresses...) I've been looking at moving the few whitelist

Re: [Declude.JunkMail] Example of WHITELIST in a Filter?

2004-06-01 Thread Scott Fisher
WHITELIST will whitelist the mail and bypass all junkmail processing. To bypass the specific filter use an END SUBJECT END CONTAINS [Declude.JunkMail] Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 06/01/04 09:51AM I've been playing with the WHITELIST in a filter

[Declude.JunkMail] Declude version 1.79 and Delog

2004-06-01 Thread Karl Hentschel
I noticed after I upgraded to Declude 1.79, Delog 1.08b is no longer able to calculate the number of failed messages from the declude log files. It returns that 0 failed. Apparently the log files for declude have changed with this new version. Does anybody know if there is a newer version of Delog

Re: [Declude.JunkMail] Example of WHITELIST in a Filter?

2004-06-01 Thread jeff
WHITELIST will whitelist the mail and bypass all junkmail processing. To bypass the specific filter use an END SUBJECT END CONTAINS [Declude.JunkMail] That's what I thought, thanks for confirming it. :) Jeff --- [This E-mail was scanned for viruses by Declude Virus

[Declude.JunkMail] Way off topic

2004-06-01 Thread Douglas McKee
Sorry to be a bother but I need to find someone who has successfully harvested the passwords from Post.office so we can migrate to a newer MTA. Currently we are running Declude and Imail on another server in front of our real MTA. Thanks, Doug McKee --- [South Texas Internet scanned this

RE: [Declude.JunkMail] Declude version 1.79 and Delog

2004-06-01 Thread Andy Schmidt
Hi, Does anybody know if there is a newer version of Delog or another program that can analyze the declude log files? I use DLAnalyzer (www.DLAnalyzer.com) with great success. Here a few snippets from reports that I schedule daily: Last Action Report Using Action: DELETE, HOLD,

Re: [Declude.JunkMail] Declude version 1.79 and Delog

2004-06-01 Thread Aaron J . Caviglia
Scott, I've noticed the logging problem as well and I do have LOGLEVEL MID in my global.cfg. That doesn't resolve the issue. Aaron On Jun 1, 2004, at 9:01 AM, R. Scott Perry wrote: I noticed after I upgraded to Declude 1.79, Delog 1.08b is no longer able to calculate the number of failed

Re: [Declude.JunkMail] Declude version 1.79 and Delog

2004-06-01 Thread R. Scott Perry
I've noticed the logging problem as well and I do have LOGLEVEL MID in my global.cfg. That doesn't resolve the issue. Do you have the Msg failed lines in your log file? If not, then you should go to LOGLEVEL HIGH. -Scott --- Declude

RE: [Declude.JunkMail] Declude version 1.79 and Delog

2004-06-01 Thread Keith Johnson
Scott, Did the Msg Failed line under LOGLEVEL MID to report the individual line numbers that it failed in a filter test get moved to HIGH? Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, June 01, 2004 12:50 PM

RE: [Declude.JunkMail] Declude version 1.79 and Delog

2004-06-01 Thread Keith Johnson
Scott, Thanks, we have been running along with MID since the beginning, all along, upgrading the interim releases. We just this week needed to know which line it failed on in one of our filter files. This is what we get now in our log. I will up to HIGH this week. Thanks,

RE: [Declude.JunkMail] Declude version 1.79 and Delog

2004-06-01 Thread R. Scott Perry
Thanks, we have been running along with MID since the beginning, all along, upgrading the interim releases. We just this week needed to know which line it failed on in one of our filter files. This is what we get now in our log. I will up to HIGH this week. Thanks, Qff4f4d2301429a89

Re: [Declude.JunkMail] Declude version 1.79 and Delog

2004-06-01 Thread Aaron J . Caviglia
Scott, Changing to Loglevel High seems to have added the Msg Failed lines to the log. I run delog at the end of the day and see what the results are, but I'm pretty sure it works now. Thanks, Aaron On Jun 1, 2004, at 10:16 AM, R. Scott Perry wrote: Did the Msg Failed line under

[Declude.JunkMail] Message Confirmation Feature

2004-06-01 Thread Andy Schmidt
Title: Message Hi, Since this doesn't appear to ever be offered as part of Declude, I took half an hour and threw a few lines of code together. If you have a small subset of messages that you hold but for which you are worried about occasional false positives being held, then you can use

[Declude.JunkMail] ALERT then HOLD?

2004-06-01 Thread Andy Schmidt
Title: Message Hi Scott: I set up two tests (same test, different names) that cause an ALERT and a HOLD action. After testing a bit, I get the feeling as if the ALERT is not working (see enclosed debug log) Is there some rule of thumb or chart, which actions are mutually exclusive?

RE: [Declude.JunkMail] COPYTO combined with DELETE/HOLD/BOUNCE

2004-06-01 Thread Andy Schmidt
Title: Message Hi Scott: I think the the issue of "mutually exclusive" actions may not be obvious to a user (after reading the manual). I did some more experimenting using the COPYTO action. My logic was - if I use a "copy" to another user, this reallyshouldn't effect how the "primary"

RE: [Declude.JunkMail] COPYTO combined with DELETE/HOLD/BOUNCE

2004-06-01 Thread R. Scott Perry
My logic was - if I use a copy to another user, this really shouldn't effect how the primary recipient's mail is acted on. From my tests it seems as if DELETE/HOLD/BOUNCE basically are killer actions that cannot be combined with ANY other action (other than LOG/IGNORE)? I have the need to

Re: [Declude.JunkMail] ALERT then HOLD?

2004-06-01 Thread R. Scott Perry
I set up two tests (same test, different names) that cause an ALERT and a HOLD action. The problem here is that the ALERT action is designed specifically to deliver the E-mail, and the HOLD action is designed specifically to block it. Since both can't be used together, the HOLD action is used

RE: [Declude.JunkMail] ALERT then HOLD?

2004-06-01 Thread Andy Schmidt
Hi Scott: The problem here is that the ALERT action is designed specifically to deliver the E-mail, and the HOLD action is designed specifically to block it. I get it. I guess my suggestion would be to make a distinction between: - final message disposition: DELETE / HOLD / PASS

RE: [Declude.JunkMail] COPYTO combined with DELETE/HOLD/BOUNCE

2004-06-01 Thread Goran Jovanovic
Let me throw in my two cents worth as well. If you are thinking about changing the way you process actions I would like to see the ability to do multiple actions per test. NEWFILTER WARN,COPYTO [EMAIL PROTECTED],HOLD Not sure how you would do this but for me this makes sense. Want the WARN

Re: [Declude.JunkMail] Declude version 1.79 and Delog

2004-06-01 Thread Robert
But who wants 800MB to 1GB spam log files? The server is so busy doing declude processes there isn't enough time to run a log analyzer on the local machine. It takes to long to transfer the log file to a different machine. Robert - Original Message - From: R. Scott Perry [EMAIL

RE: [Declude.JunkMail] Declude version 1.79 and Delog

2004-06-01 Thread John Tolmachoff \(Lists\)
But who wants 800MB to 1GB spam log files? The server is so busy doing declude processes there isn't enough time to run a log analyzer on the local machine. It takes to long to transfer the log file to a different machine. Once a week, I zip the previous weeks logs, ftp them to my