I am getting a lot of postmaster rejects from bad addresses after turning on
BANEXT for COM attachments. I would like to exclude notifications on my
BANnotify.EML file. Can I do this by inserting SKIPIFBANEXTNAMEHAS COM at
the top of EML file? I am just guessing based on feature to use
There seems to be a bug in all versions where a bogus COM file is still
bounced as a banned extension (unlike other 'bogus' types that are
detected).
The workaround is to add SKIPIFEXT COM to the top of your
bannotify.eml, however this will stop all bounces for COM files
regardless of whether
I had to make a sizable kludge to make COPYFILE work the way that I
wanted to due to the lack of the Declude headers. I've requested that
this be addressed in future releases and it is nice to see that I am
not alone even if my own use for this is unique. It's almost valueless
to have the
Don,
The manuals are on the web site. Select Tech Support at the top of the page
and you will be taken to links for the manuals.
As for the bogus COM file issue, we understand that this is a problem and
are looking into ways to resolve it.
David Franco-Rocha
- Original Message -
From:
Matt,
This will work for the meantime and thank you very much!
-Don
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Monday, March 21, 2005 8:17 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Exclude BABEXT Notify for COM
Matt,
I would like to clarify one issue:
Are you saying that the specific issue is that notifications are erroneously
being sent for bogus COM files and that the issue is *not* whether bogus COM
files are being accurately detected?
David Franco-Rocha
- Original Message -
From: Matt
David,
I posted some log snippets last week on the Declude Virus list that
show what is happening.
Yes, the notifications are being sent in error. These COM files are
being detected by Declude Virus as "Bogus", and the proper behavior is
for the bogus identification to override the banned
On Monday, March 21, 2005, 11:00:49 AM, Chase wrote:
snip/
CS Looking at our test list (posted bellow), we likely have WAY too
CS many dns blacklists. That will be the first thing I look at. Any
CS other suggestions?
I have had luck running a DNS server (resolver - bind) locally on the
IMail
I need some help tuning Declude for performance. Up until now, I have been adding tests mainly for spam filtering effectiveness. But I notice now that the server can process about7 messages per second with the spam filtering off, versus only about 1-1.5 messages per second with Declude turned
On Monday, March 21, 2005, 11:00:49 AM, Chase wrote:
CS I need some help tuning Declude for performance. Up until
One other thought (pushed send too fast).
You may have a test or two in there that is not responding --- causing
things to time out and slow things down. If you can find it and drop
I don' have UCEPROTECRDO, XBL-DYNA, BLKLST-SURBL andHELOISIP. Can you post your definitions for those? Can I get them off the declude website somehow (I couldn't find them)?
-Chase
Chase Seibert| Network and Systems Engineer | Bullhorn Inc | 617.464.2440 x119 | www.bullhorn.com
-Original
Any recommendations for Declude add-ins or log readers that might be able to detect the run times of various tests? If I set logging to high would it log runtimes?
-Chase
Chase Seibert| Network and Systems Engineer | Bullhorn Inc. | 617.464.2440 x119 | www.bullhorn.com
-Original
The test definitions might be more helpful than the
Test actions...
I see AHBL is listed twice.
DSbl is listed twice.Sorbs is listed as are
many of the SORBS individual tests. Possible overlap.
You list CBL/Blitzedall/SBL and Spamhaus listed.
Potential overlap here.
Reynolds is a now pay
Turned out to be that one of our two DNS servers was down; causing a timeout on many of the requests. That's fixed, and Declude is now performing at about 3-4 messages per second. Much better, and not that far off the throughput with zero spam filtering.
-Chase
Chase Seibert| Network and
XBL is = CBL Blitzed all
UCE is probably your dnsbl-1
dnsbl-2
HELOISIP is an external test to see if the HELo is
an IP address.
Seehttp://www.mail-archive.com/declude.junkmail@declude.com/msg17819.html
Blklst-surbl might be duplicating the
invuribl test you are running.
- Original
Test runtimes aren't listed in logging level
HIGH.
They might be in debug mode, but I wouldn't run
that for long.
- Original Message -
From:
Chase Seibert
To: Declude.JunkMail@declude.com
Sent: Monday, March 21, 2005 10:30
AM
Subject: RE: [Declude.JunkMail]
On Monday, March 21, 2005, 11:29:09 AM, Chase wrote:
CS I don' have UCEPROTECRDO, XBL-DYNA, BLKLST-SURBL
CS and HELOISIP. Can you post your definitions for those? Can I get
CS them off the declude website somehow (I couldn't find them)?
UCEPROTECRDOip4rdnsbl-1.uceprotect.net
Here is an idea many of us use:
Configure DNS service on the Imail
server for caching only.
Point Imail/Declude to use the DNS on
the same server.
Configure the DNS service to use your
other DNS servers and forwarders.
You will see a slight performance boost.
John
Chase Seibert wrote:
I don' have UCEPROTECRDO, XBL-DYNA, BLKLST-SURBL and HELOISIP. Can you
post your definitions for those? Can I get them off the declude
website somehow (I couldn't find them)?
I wrote the HELOISIP test. It's not a DNS test. Rather, it will tell
you if the HELO or REVDNS
Is there any mail in specific you are trying to
target?
- Original Message -
From:
Joe
Raykiewicz
To: declude.junkmail@declude.com
Sent: Monday, March 21, 2005 2:43
PM
Subject: [Declude.JunkMail] filter
files
I am currently thinking about
using a
Joe here is a very basic filter but hopefully will help get you started:
SKIPIFWEIGHT 16
MINWEIGHTTOFAIL 3
MAXWEIGHT 12
#Subject
SUBJECT 3 CONTAINS Online Pharmacy
#Words
BODY 5 CONTAINS Meds
BODY 2 CONTAINS cheap Perscriptions
BODY 2 CONTAINS No prescription required
BODY 2 CONTAINS No
We sent a bulk mailing this morning for a client to 532 addresses. We use
Group Mail and authenticate from our office dedicated IP to our IMAIL server
via the clients account virtual domain. However, the e-mail was rejected to
any AOL address stating that URLs are improperly formatted. We have
I've never seen this problem before.
There are certainly a lot or URLs in that message. Do you know somebody
with an AOL address that you can use as a test subject? Do a binary
search, and cut the message in half. Send the message and repeat until
you've succeeded in sending the message, in
Check your left-hand nav...you have some bad links there...
Darin.
- Original Message -
From: Don Schreiner [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Monday, March 21, 2005 5:29 PM
Subject: [Declude.JunkMail] OT: Help with AOL Filtering Bulk Mail for a
Client
We sent a
Darin/Andrew,
I do not know anyone or have an AOL account to test. Anyone have one by
chance? I checked left NAV and all links look valid, however I am a little
suspect of the Bee Well Therapy Advertiser link with no www and going to
change. Where did you see a bad link in the left NAV? Also the
Look at the About HMN link, for example...
http://www.holisticmoms.org/index.cfm/about
See what I mean? There are three links like this in the nav that AOL is
complaining about since they don't end with the filename...the path keeps
going.
Darin.
- Original Message -
From: Don
Darin,
Got it now. The link is valid to the directory not ending with the index
file which is as follows for example:
http://www.holisticmoms.org/index.cfm/about
but you are saying AOL wants to see full path...
http://www.holisticmoms.org/index.cfm/about/index.cfm.
Will let you know if it
Or shouldn't it at least have a / at then end indicated end of path?
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Don Schreiner
Sent: Monday, March 21, 2005 3:33 PM
Nope...I'm saying it should either end at
http://www.holisticmoms.org/index.cfm
Or be reparsed as something like
http://www.holisticmoms.org/index.cfm?about
Basically there shouldn't be any more to the path after index.cfm.
Darin.
- Original Message -
From: Don Schreiner [EMAIL
What Don is doing is something thats been around for quite a while,
and not just in ColdFusion. In CF its commonly called a FakeURL and
the intent of it is to make a url search engine safe by removing the
?'s and 's and replacing them with slashes.
Its been around for years. I've never heard of
Darin,
The entire problem here is the page is dynamically generated via CF and
database and the correct page will not come up any other way, only the home
page of the site. This code has been in use about 6 years this way and would
be a major deal to change all. Found an AOL test subject and
To anybody that cares, I just added
http://si20.com/auth?uid=
to my custom JunkMail Pro filter file which contains identifying strings
for Challenge/Response and other nuisance messages.
I'm sorry if this message is considered too far off topic.
Andrew.
-Original Message-
From: [EMAIL
Thanks to both of you. I am looking to get mostly obscene stuff, but the
medical stuff would be very good to catch also. I will start with this and
then adventure out on my own:D
On a side note has anyone used Message Sniffer, and would it help with this
type of stuff or am i looking in
Matt/Darin/John/Andrew,
Inserting the trailing / on the URLs ending with a directory - did the trick
and passed the AOL filter. I learned something again today. Thanks for your
help! This list is the best!
-Don
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
While the AOL filter is fixed, I am now getting 554 Denied on some servers
(see below). I am also getting unsolicited bulk mail undeliverable.
I am using Group Mail in our office on dedicated IP authenticating SMTP to
their virtual domain on our IMail server. Do I need to make an additional
DNS
Hi, Don-
news.holisticmoms.org reports its IP address as 65.57.241.196
65.57.241.196 reports its name as vacant.compbiz.net.
You should have your provider set up a reverse lookup (pointer) record for
65.57.241.196 that points to news.holisticmoms.org instead of
vacant.compbiz.net
-d
-
36 matches
Mail list logo
