RE: [Declude.JunkMail] How do I let through mail from a known spammer?

2005-04-25 Thread Colbeck, Andrew
Well, the really simple way is: HEADERS -100 CONTAINS @faifa.org which gives you some risk that bad mail will be allowed through if it contains that string anywhere else in the header. Here's a general filter that would help you in situations like this to narrow that down with JunkMail Pro and a

[Declude.JunkMail] How do I let through mail from a known spammer?

2005-04-25 Thread Kevin Rogers
We have some users that get newsletters sent from an organization that uses another company to send out their newsletters. This other company is listed on spam databases. I don't want to whitelist this other company, but I want the original company's newsletters to get through. From: FAIFA <[

Re: [Declude.JunkMail] Whitelist to a recipient

2005-04-25 Thread Matt
Title: Whitelist to a recipient Markus, Two notes.  First, you can rewrite this as: ALLRECIPS   WHITELIST   IS    <[EMAIL PROTECTED]> This might be more appealing for logging and diagnosis. Secondly, this only works in Declude Pro since that is required for custom filters.  Since Declude Pr

RE: [Declude.JunkMail] Whitelist to a recipient

2005-04-25 Thread Markus Gufler
Title: Whitelist to a recipient We have the same problem. We've solved our whitelisting for certain users by creating a whitelist text filter file   ALLRECIPS -5000 IS <[EMAIL PROTECTED]>, [EMAIL PROTECTED]   Now certain messages having multiple recipients wouldn't be whitelisted by the -5000

Re: [Declude.JunkMail] Whitelist to a recipient

2005-04-25 Thread Matt
Title: Whitelist to a recipient Corby, If you have Declude Virus Pro, you can set up per-user configurations which are explained in the manual (http://www.declude.com/Version/Manuals/2.0.6.asp).  You should also take note that multiple recipient spams can still be deleted when they are also re

Re: [Declude.JunkMail] DNS SPF Record

2005-04-25 Thread William Stillwell
As like anything, in order for SPF to work, everyone has to implement and use it.   Ie, I got three "nasty" emails saying one of my users was sending them spam, and clearly it came from a remote server that was sending email using bogus senders, and if there servers properly used spf, it woul

[Declude.JunkMail] Whitelist to a recipient

2005-04-25 Thread Agid, Corby
Title: Whitelist to a recipient We have a recipient on our system that doesn't want spam filtering.   Simple enough, I added a WHITELIST TO in global.cfg file. This appears to have the consequence of whitelisting spam that is also addressed to others.   He gets his spam, but so does everyone

[Declude.JunkMail] DNS SPF Record

2005-04-25 Thread Kyle Fisher
Are most of you using a SPF record in your DNS?  Are you noticing a difference?   Kyle

RE: [Declude.JunkMail] SMD Files

2005-04-25 Thread Kyle Fisher
Title: Message The article talked about getting ICMP packets for the MTU updates.  I guess I will plug in my sniffer and see if this is happening to determine if this is the problem.   Kyle   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Su

RE: [Declude.JunkMail] SMD Files

2005-04-25 Thread Kyle Fisher
I will check on it.  I am running 2k3 with Sp1.  I don’t know if that patch is included in the Service pack or not.  I was having some other issues with the server and MS said to install Sp1 and it fixed most of them, but then this started happening two weeks after I installed it.   I did

Re: [Declude.JunkMail] Alternative drug spellings

2005-04-25 Thread Scott Fisher
I have an vb program that I run that de-obfuscates the subject line and runs it against a filter file. It'll catch lots of alternative drug spellings: http://it.farmprogress.com/declude/obfsubj.htm - Original Message - From: "Dan Horne" <[EMAIL PROTECTED]> To: Sent: Monday, April 25, 20

RE: [Declude.JunkMail] Off Topic - Content Filter Suggestions

2005-04-25 Thread Dan Horne
I spent several months researching and testing many Windows- and Linux-based content filters because we wanted to replace Websense. The uppers thought it was too expensive. Long story short, after all my research I found that no other filter held a candle to Websense. I still don't like it, but

[Declude.JunkMail] Alternative drug spellings

2005-04-25 Thread Dan Horne
Does anyone have a good, long filter file with a bunch of alternative spellings for the various drugs the spammers hawk? I know it is impossible to create a "comprehensive" list of them all, but if someone has a good start then I would love it if you could share it. We have been getting several o