[Declude.JunkMail] Mail that fails test, bur Subject is not changed

2004-09-30 Thread Dan Rapaport
I'm getting SOME mail that is failing tests, but not having it's subject changed as per the $default$.junk,mail Mostly they fo get tagged, but here's an example of the relevant part of the header of one that does not. X-RBL-Warning: SPAMCOP: Blocked - see

[Declude.JunkMail] Word o f m o u t h

2004-09-30 Thread John Tolmachoff \(Lists\)
They're bk: **You are being researched** An individual at our website is sharing Opinions and Information regarding you via our website. A user at our website has begun the process of meeting people who know you. This email has been automatically sent to you to inform you of

Re: [Declude.JunkMail] Forwarded messages

2004-09-30 Thread R. Scott Perry
When a e-mail is forwarded, is the e-mail again processed by Declude? IIRC, someone convinced Ipswitch to force forwarded E-mails to be rescanned for a recent 8.1x version. Prior to that, they would not be rescanned. Declude now has code in it, however, to attempt to prevent the rescanning.

Re: [Declude.JunkMail] Mail that fails test, bur Subject is not changed

2004-09-30 Thread R. Scott Perry
I'm getting SOME mail that is failing tests, but not having it's subject changed as per the $default$.junk,mail Mostly they fo get tagged, but here's an example of the relevant part of the header of one that does not. What does the Declude JunkMail log file say? Most likely, these E-mails are

[Declude.JunkMail] eBay Phishing- Live

2004-09-30 Thread Kami Razvan
Hi; http://202.149.196.236/.aw-cgicgisk/SignIn.php You may want to filter the above. Just got a phishing email.. it is active. Regards, Kami ===Message Received: from correo.oyd.net [200.75.40.78] by with ESMTP (SMTPD32-8.13) id A00C28640056; Thu, 30 Sep 2004

Re: [Declude.JunkMail] eBay Phishing- Live

2004-09-30 Thread Pete McNeil
On Thursday, September 30, 2004, 9:25:20 AM, Kami wrote: KR Hi; KR   KR http://202.149.196.236/.aw-cgicgisk/SignIn.php KR   KR You may want to filter the above.  Just got a phishing email.. it is active. KR   KR Regards, KR Kami Interesting. We generated an active rule for this back on

[Declude.JunkMail] Typos on Declude Web Site and/or Manual

2004-09-30 Thread Dan Geiser
Does anyone know the best method for submitting reports regarding the Declude Web Site and/or JunkMail Manual? BTW, it's cool to finally put a face to our esteemed junkmail saviour, Scott Perry, http://www.declude.com/aboutus.asp. Thanks, Dan Geiser [EMAIL PROTECTED]

RE: [Declude.JunkMail] Typos on Declude Web Site and/or Manual

2004-09-30 Thread John Tolmachoff \(Lists\)
Oh man, there went my idea of what Scott looked like. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Thursday, September 30, 2004 7:07 AM To: [EMAIL

RE: [Declude.JunkMail] Typos on Declude Web Site and/or Manual

2004-09-30 Thread Andy Schmidt
Title: Message Uh, gee - so he never DID wire a card-sorter. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)Sent: Thursday, September 30, 2004 01:37 PMTo: [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] Typos

[Declude.JunkMail] OT: IP block tool

2004-09-30 Thread John Shacklett
I use SamSpade for Windows as my Swiss Army Knife while I'm working, and 99 times out of 100 it proves its worth. Fantastic tool. That 1 time when I'm not pleased, I'm trying to research who owns a given IP Range. The results that SamSpade returns just don't have the granularity I want. Can

Re: [Declude.JunkMail] OT: IP block tool

2004-09-30 Thread Dan Geiser
John, What is the IP range? Dan - Original Message - From: John Shacklett [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, September 30, 2004 3:35 PM Subject: [Declude.JunkMail] OT: IP block tool I use SamSpade for Windows as my Swiss Army Knife while I'm working, and 99

Re: [Declude.JunkMail] SPF issue

2004-09-30 Thread Imail Admin
I've been just begging for motivation to upgrade from 7.15 to 8.x, and so far, the only good reason I've found is the WHITELIST AUTH feature. Otherwise, it's hard to see any reason for upgrading, especially when I've got a stable, trouble-free mail server now, and an upgrade could introduce any

RE: [Declude.JunkMail] OT: IP block tool

2004-09-30 Thread Fritz Squib
John, I just found this the other day, don't know if it's what you're looking for. http://www.whoisview.com/products/whoisview/ Fritz Frederick P. Squib, Jr. Network Operations/Mail Administrator Citizens Telephone Company of Kecksburg http://www.wpa.net () ascii ribbon campaign - against

RE: [Declude.JunkMail] OT: IP block tool

2004-09-30 Thread Kevin Bilbee
Not to state the obvious by why not use dnsstuff?? Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Shacklett Sent: Thursday, September 30, 2004 1:08 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] OT: IP block tool I

Re: [Declude.JunkMail] Blocking IPs based on Country

2004-09-30 Thread Kevin Stanford
Ok...so would I put this line in my Global.cfg file: china ip4r china.blackholes.com * 10 0 Thanks for the help! Kevin At 11:13 AM 09/30/2004, you wrote: While I don't recommend it, as I've seen false positives from blocking entire countries, you could use: an IP4R test using

RE: [Declude.JunkMail] Typos on Declude Web Site and/or Manual

2004-09-30 Thread R. Scott Perry
I always envisioned a Big S on his chest.. I hate it when they crop pictures... and a few more years on his age too! Ah, yes, I looked young when that picture was taken. G -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail

Re: [Declude.JunkMail] Blocking IPs based on Country

2004-09-30 Thread Scott Fisher
That looks correct. - Original Message - From: Kevin Stanford [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, September 30, 2004 2:53 PM Subject: Re: [Declude.JunkMail] Blocking IPs based on Country Ok...so would I put this line in my Global.cfg file: china ip4r

[Declude.JunkMail] Filter question

2004-09-30 Thread John Carter
Scott: I set up a filter of MAILFROM 0 STARTSWITH [EMAIL PROTECTED] I am only holding right now. The following was caught. Notice the coups@ is in the Received: line, not the From: line. Should this one have been caught or skipped? BTW, in 24 hours have caught around 600 msgs with this and

Re: [Declude.JunkMail] Filter question

2004-09-30 Thread R. Scott Perry
I set up a filter of MAILFROM 0 STARTSWITH [EMAIL PROTECTED] I am only holding right now. The following was caught. Notice the coups@ is in the Received: line, not the From: line. Should this one have been caught or skipped? It should have been caught. That's because the sender was actually

Re: [Declude.JunkMail] OT: IP block tool

2004-09-30 Thread Darin Cox
I'd been looking for another command line whois utility since the last one I had stopped working due to the whois servers used. Thanks, Fritz! Darin. - Original Message - From: Fritz Squib [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, September 30, 2004 3:00 PM Subject: RE:

RE: [Declude.JunkMail] OT: IP block tool

2004-09-30 Thread Colbeck, Andrew
I heavily depend on: http://openrbl.org Which lists dnsstuff and moenstad as similar services. For the last year, they've been subject to on-again off-again Denial of Service attacks, and now have many regional mirrors, and they've recently introduced a timeout on the first lookup submission,

Re: [Declude.JunkMail] eBay Phishing- Live

2004-09-30 Thread Dave Doherty
It is still active. APNIC data for the IP: inetnum: 202.149.192.0 - 202.149.223.255 netname: HTIL-TTML-IN descr:Tata Teleservices Maharashtra Ltd country: IN admin-c: IO9-AP tech-c: IO9-AP mnt-by: APNIC-HM mnt-lower:MAINT-IN-HTIL mnt-routes: