Re: [Declude.JunkMail] %TO% variable

2004-06-05 Thread Roderick A. Anderson
Darin Cox wrote: Does %ALLRECIPS% do what you want? Darin. No it doesn't. %ALLRECIPS% gives the last address(es) delivered to not the initial address. So if the address chain (?) is '[EMAIL PROTECTED]' - sends to - '[EMAIL PROTECTED]' = forwards to = '[EMAIL PROTECTED]' =

Re: [Declude.JunkMail] Loop ?

2004-06-05 Thread R. Scott Perry
Can someone take a look at the folowing header and let me know why it seems looping thru my server ? Received: from mail.cefib.com [208.154.200.6] by mail.cefib.com with ESMTP (SMTPD32-8.05) id A8DEF3E0054; Wed, 02 Jun 2004 00:01:34 + Received: from mail.cefib.com [208.154.200.6] by

Re: [Declude.JunkMail] %TO% variable

2004-06-05 Thread R. Scott Perry
No it doesn't. %ALLRECIPS% gives the last address(es) delivered to not the initial address. So if the address chain (?) is '[EMAIL PROTECTED]' - sends to -'[EMAIL PROTECTED]' = forwards to ='[EMAIL PROTECTED]' = forwards to ='[EMAIL PROTECTED]' %ALLRECIPS% gives

Re: [Declude.JunkMail] %TO% variable

2004-06-05 Thread Roderick A. Anderson
R. Scott Perry wrote: %ALLRECIPS% gives '[EMAIL PROTECTED]' when I need '[EMAIL PROTECTED]'. %MAILFROM% gives '[EMAIL PROTECTED]' which is great. I was hoping for a %MAILTO% that would give me '[EMAIL PROTECTED]'. Actually, in this case, I believe Declude will actually just see [EMAIL

Re: [Declude.JunkMail] Loop ?

2004-06-05 Thread Serge
I figured it out, and it is strange: The forward was to a [EMAIL PROTECTED] and the domain no longer exist on Imail, also the MX is still pointing to the Imail box.. Why would that create a loop ? - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent:

[Declude.JunkMail] why/how this was white listed..how to stop it?

2004-06-05 Thread marc catuogno
I am running Declude 1.79 and Imail 8.05, I have autowhitelist on and whitelist auth. This user (Bernie Cohen) had himself in his address book and it looks like the spammer had the from e-mail to be bernie's e-mail address. I thought it was difficult to fake the x-declude sender? I like the

Re: [Declude.JunkMail] why/how this was white listed..how to stop it?

2004-06-05 Thread R. Scott Perry
I thought it was difficult to fake the x-declude sender? That's the problem -- the *only* information that is very difficult to fake is the IP address that connects to your IMail server. Any other information is trivial for a spammer to fake. Should I advise all my users NOT to have

RE: [Declude.JunkMail] Help with Header info

2004-06-05 Thread Goran Jovanovic
Maybe I will just make two separate mailboxes - 1 for Declude Spam and 1 for IMail spam. That would probably be the easiest way. In my opinion I would just use one of the two methods Declude or IMail. You are going to have to invest time in either/both and it seems to me that it would be

[Declude.JunkMail] External program didn't finish after 1 hour; terminating

2004-06-05 Thread Matt
Scott, I just noticed that the other day there was a one hour (exact) outage on my server that seemingly related to Declude. It seems that IMail called Declude which errored out in the Virus part, then an hour later the JunkMail log indicated that it was terminating and external program