[Declude.JunkMail] ANN: 5xxSink 0.5.01 update, IIS SMTP text-file recipient validator now supports 'nobody' wildcard domains

2005-12-12 Thread Sanford Whiteman
-- 5XXSINK Release 0.5.01 12/12/2005 * Release notes for this version: [ + Added feature] [ * Improved/changed feature ] [ - Bug fix ] [ ^ Cosmetic/naming change ] [+] Added new feature, RHS PRESCANNING, to

Re: [Declude.JunkMail] REVDNS

2005-12-12 Thread Scott Fisher
REVDNS 10 IS (Timeout) - Original Message - From: Markus Gufler [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, December 12, 2005 1:42 AM Subject: RE: [Declude.JunkMail] REVDNS I think it may be (timeout). I know Scott Fisher posted a filter the other day that

Re: [Declude.JunkMail] REVDNS

2005-12-12 Thread Serge
So it would be interesting know what's exactly in his text filter file REVDNS-TIMEOUT I'm going to try REVDNS END CONTAINS (timeout) if somebody have a better idea, please post - Original Message - From: Markus Gufler [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday,

RE: [Declude.JunkMail] REVDNS

2005-12-12 Thread Goran Jovanovic
Here is the exact line for one my log D9786103b008853ab.smd:X-Note: Reverse DNS: Sent from (timeout) ([81.215.38.233]). This is from Version 3.0.5.22 Goran Jovanovic Omega Network Solutions Tel: 416 322-0333 New Cell: 416 805-4357 or 416 805-HELP [EMAIL PROTECTED] -Original

RE: [Declude.JunkMail] REVDNS

2005-12-12 Thread Markus Gufler
I'm going to try REVDNS END CONTAINS (timeout) Can you send a message from an IP who will timeout for REVDNS? Declude support? Markus --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just

RE: [Declude.JunkMail] REVDNS

2005-12-12 Thread Markus Gufler
Thank you Scott, Serge, why do you use such a filter? A SpamDomain-Test should do this even bether. Markus -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Monday, December 12, 2005 3:58 PM To: Declude.JunkMail@declude.com

Re: [Declude.JunkMail] REVDNS

2005-12-12 Thread Serge
should this be (Timeout) or (timeout) ? - Original Message - From: Scott Fisher [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, December 12, 2005 2:58 PM Subject: Re: [Declude.JunkMail] REVDNS REVDNS 10 IS (Timeout) - Original Message - From: Markus

RE: [Declude.JunkMail] REVDNS

2005-12-12 Thread Goran Jovanovic
Filter test are not case sensitive Goran Jovanovic Omega Network Solutions -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Serge Sent: Monday, December 12, 2005 10:14 AM To: Declude.JunkMail@declude.com Subject: Re:

Re: [Declude.JunkMail] REVDNS

2005-12-12 Thread Scott Fisher
It is (Timeout), but Declude isn't case sensative. - Original Message - From: Serge [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, December 12, 2005 9:14 AM Subject: Re: [Declude.JunkMail] REVDNS should this be (Timeout) or (timeout) ? - Original Message

Re: [Declude.JunkMail] REVDNS

2005-12-12 Thread Scott Fisher
Spamdomains tests do not trigger on a REVDNS Timeout. - Original Message - From: Markus Gufler [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, December 12, 2005 9:14 AM Subject: RE: [Declude.JunkMail] REVDNS Thank you Scott, Serge, why do you use such a filter? A

RE: [Declude.JunkMail] REVDNS

2005-12-12 Thread Markus Gufler
Is a REVDNS-timeout such a frequent thing? Markus -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Monday, December 12, 2005 4:31 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] REVDNS Spamdomains tests

Re: [Declude.JunkMail] REVDNS

2005-12-12 Thread Scott Fisher
Last month I receveived a REVDNS timeout on 4% of all my email. 85% of that was spam. It is certainly an obfuscation technique used by some static spammers. - Original Message - From: Markus Gufler [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, December 12, 2005

Re: [Declude.JunkMail] REVDNS

2005-12-12 Thread Serge
I use tests that were posted long time ago by kami I use them for aol, hotmail, yahoo, ... i think they are much more flexible than spamdomains, and they test mailfrom, revdns and helo (i think spamdomains only test mailfrom and revdns) there was a long discussion at that time, i do not remember

RE: [Declude.JunkMail] REVDNS

2005-12-12 Thread Colbeck, Andrew
Well, telling the fake hotmail from the normal hotmail is one thing... And for this specific task, working around REVDNS is not your best best. HotMail publishes SPF records that help you by identifying their blocks of outbound CIDR addresses. All you need to do is check for a mailfrom that ends

[Declude.JunkMail] Checking country so many times...

2005-12-12 Thread Mark Smith
Just moved to 3.05.22 and my server's can't keep up with the queue (but they can with 2.06). Threads=20 CPU's fine. Anyway, I set Declude logs to debug and I'm seeing this for every message. Anyone know why Declude would check the country so many times? 12/12/2005 12:14:26.837

[Declude.JunkMail] WAY OT: COVAD VOIP

2005-12-12 Thread Marc Catuogno
I have been considering switching many of our office from POTS lines to COVAD voice over IP. Since this is such a diverse and well informed group, I was wonder if anyone has any experience with them or suggestions as to alternate VOIP providers. Off list replies are welcomed. Thanks - Marc ---

re: [Declude.JunkMail] Checking country so many times...

2005-12-12 Thread Gary Steiner
It doesn't. What happens (and it only seems to happen for the COUNTRIES filter) is that it prints a line for every line in the filter file. The US that you see is what it found in the message, and it is comparing US to every line in the filter file. Gary Original Message

Re: [Declude.JunkMail] Checking country so many times...

2005-12-12 Thread Matt
Mark, I believe that most people that are seeing backups have reported that raising their THREADS to something like 75 and lowering their WAITFORTHREADS to something like 1 will clean up their performance issues. This seems to be common for those around here that get more than 50,000

RE: [Declude.JunkMail] WAY OT: COVAD VOIP

2005-12-12 Thread calvis
Yes this is Way OT :) The good thing about Covad VOIP is that they will provide you with a SLA which is rare for a VOIP provider. The Cons are: 1) You have to use their switch router brand of phones. 2) Rates are not really that good compared to other VOIP providers. 3) Their interface is

Re: [Declude.JunkMail] Checking country so many times...

2005-12-12 Thread Bill Green dfn Systems
Mark, I don't know what your processor capability is, but with dual 1.5s my optimum setting is threads=65. You may try bumping yours up to at least 35-40 and see what it does to your proc utilization. you'll need to restart decludeproc service after the change for it to take effect. Keep in

Re: [Declude.JunkMail] WAY OT: COVAD VOIP

2005-12-12 Thread Dave Doherty
I use Vonage - $25/mo unlimited for home use. Been using it for about six months, and the only problem I encountered was an occasional breakup of the voice channel while downloading large files. I was using it on a Covad 384k DSL line, which I just dropped in favor of Verizon's Fios service.

Re: [Declude.JunkMail] Checking country so many times...

2005-12-12 Thread Scott Fisher
My guess is that this is normal behavior. I'm thinking that what you are seeing is the searching through country database (all_list.dat). - Original Message - From: Mark Smith [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, December 12, 2005 11:28 AM Subject:

Re: [Declude.JunkMail] WAY OT: COVAD VOIP

2005-12-12 Thread Darrell \([EMAIL PROTECTED])
I know for a bit vonage did not provide 911 service - has that been resolved yet by them? I know the FCC mandated it.. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail.

Re: [Declude.JunkMail] WAY OT: COVAD VOIP

2005-12-12 Thread Dave Doherty
Yes, was all over their website when I signed up for the service. It's very clear that you need to provide the address info, and they make it very easy to do. They were actually so pushy about it that I wondered whether they were in trouble somewhere and a few days later they were on the news

RE: [Declude.JunkMail] Checking country so many times...

2005-12-12 Thread Mark Smith
Matt, Thanks for the info but no dice. I reverted back to 2.6 and blazing fast processing. There's just something about 3.05 on my servers that runs slow. And I've got 3 servers doing the same thing.. SysInternals Process explorer shows that DecludeProc really isn't calling that many instances of

RE: [Declude.JunkMail] CBL:Fw: news

2005-12-12 Thread Ernesto Nieto
I'm sorry if this question is really easy but I can't get it to work. How does the test get included into the global.cfg file? Ernesto Imail/Declude newbie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Tuesday, December 06, 2005

[Declude.JunkMail] Question about filtering

2005-12-12 Thread Kevin Bilbee
I have a problem I have been trying to solve. When a contains filter comairs abainst the body of the email where does that body begin? Does it begin at the mime segment or does it begin at actual content? For example If I have something like this Received: from ns1.ssc-isp.net [12.9.25.242] by

Re: [Declude.JunkMail] Question about filtering

2005-12-12 Thread Matt
I believe it starts immediately following the first double CFLF. I'm not sure if the STARTSWITH filter for BODY is tweaked in any way, but if it is it only ignores CRLF's and not other characters. Matt Kevin Bilbee wrote: I have a problem I have been trying to solve. When a contains

RE: [Declude.JunkMail] Question about filtering

2005-12-12 Thread Kevin Bilbee
So with this - Subject: News Alert --=_469e734c3adb39df03c2f293185d8c73 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable TabletrtdThis is a spam/td/tr/table I would need to do the following if I was looking for table at the beginning of a message

Re: [Declude.JunkMail] Question about filtering

2005-12-12 Thread Scott Fisher
I thought it replaced CRLF's with a space. - Original Message - From: Matt [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, December 12, 2005 3:36 PM Subject: Re: [Declude.JunkMail] Question about filtering I believe it starts immediately following the first double

RE: [Declude.JunkMail] Question about filtering

2005-12-12 Thread Kevin Bilbee
Can declude jup in here and settle this. Does filtering remove CRLFs or does it replace them with spaces??? Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Monday, December 12, 2005 3:07 PM To:

RE: [Declude.JunkMail] ANN: 5xxSink 0.5.01 update, IIS SMTP text-file recipient validator now supports 'nobody' wildcard domains

2005-12-12 Thread Markus Gufler
Sandy, I've tested the previous version and it seem's working great. The next step will be testing it with several thousands of valid recipients. Would it be an idea to develope it in this way that different virt. IIS-SMTP-Services can use 5xxSink with different prescan.txt and rcptlist.txt So

RE: [Declude.JunkMail] WAY OT: COVAD VOIP

2005-12-12 Thread Evans Martin
I have been using Vonage at home and love it. I had tried Lingo before Vonage and HATED it, although I think most of the problems were due to the D-Link hardware that they supplied. I have had some experience with Linux based PBX systems and have found them to be much more cost effective than

RE: [Declude.JunkMail] WAY OT: COVAD VOIP

2005-12-12 Thread Erik Currier
I'll agree with Evans. We tried Lingo and Skype. Vonage is far better. I live in Prague, Czech Republic 9 months of the year... 3 months in USA. We use Vonage to connect to North America via phone. Vonage does have settings to control how much bandwith is used when on the phone and on the

Re: [Declude.JunkMail] Question about filtering

2005-12-12 Thread Matt
Let's clarify a couple of things that might have been confused here. The original question was asking where the BODY begins. That is what my response was addressing. When it comes to filtering line breaks, that is a totally different story and it is not the question that I answered. Within

RE: [Declude.JunkMail] Question about filtering

2005-12-12 Thread Kevin Bilbee
Ok that make good sence so do you think this will work BODY 15CONTAINS Content-Transfer-Encoding: quoted-printable Table Which is what I asked in the message you replied to? -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of MattSent:

[Declude.JunkMail] Way OT: Future Broadband - Verizon Business Fios Service

2005-12-12 Thread Dave Doherty
FWIW- I signed up for Verizon's Business Fios (fiber optic broadband) service a couple of weeks ago, and they installed it last week. rant Now letme start by saying that if I can buy the equivalent service for ANYTHING fromanybody BUT Verizon, I do it. Overall, their customer service

Re: [Declude.JunkMail] Question about filtering

2005-12-12 Thread Matt
Kevin, Yes, that filter should work. Matt Kevin Bilbee wrote: Ok that make good sence so do you think this will work BODY 15CONTAINS Content-Transfer-Encoding: quoted-printable Table Which is what I asked in the message you replied to? -Original