that though we may eventually have a
different standard from the IETF, all signs still point to Microsoft using
Sender ID, so compliance with it is highly recommended.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1
it's
cheap insurance.
So - instead of standing on a high (open source) horse, I prefer to USE that
information that OTHERs publish to reduce Spam sent to MY network in the
meantime.
That may not be right - but it sure is practical. No?
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600
publish TXT records that will help my
mail server to qualify mail, then I sure want to do that!
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM
Cablevision would create their own SPF records to support their
OptOnline.com customers - and you could include their OptOnline.com SPF
record in your outbound definitions by reference.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original
I do find it odd that the SAME IP would be whitelisted AND blacklisted -
which is it!?
They need to tie the various databases against each other and eliminate
duplicate/triplicate listings.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle
Title: Message
Hi,
I
don't need the GUI (anymore)- but I fully appreciate the need for
one.
However, I wonder whether it is wise to invest into a GUI at THIS
stage. The Declude product has been very quick to grow in features,
waybeyond what Scott could have originally imagined when he
them know
about what's going on on their OWN list!
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list
Title: Message
I
guess they wrote a "setup" program that will install new code and even activate
it for you. Hopefully, there'll be some "readme" inside that mysterious .EXE
file. Otherwise, it is pretty much a cat in the sack!
The installation process for the MTLDB: Download
have some concerns, how reliable such a test possibly can be, if it
doesn't have an aggressive automatic de-listing policy (similar to
Spamcop's).
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20
to be familiar with server
operation/configuration.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
---
[This E-mail was scanned
of a
particular machine.
By the way, I do permit CERTAIN ICMP traffic across the border routers.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM
selectively. PING clearly is nice to have for
support/diagnostic - it is NOT needed for regular operation.
If Declude wants to make sure that the connection to their DNS server works
- then they should test the connection to a DNS port. Those ports ARE open.
Best Regards
Andy Schmidt
HM Systems
have gone
through UUnet recently.)
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
---
[This E-mail was scanned for viruses
Actually, the ITU is an important international body. Chances are, you would
not enjoy international phone, fax (and data) communication without the ITU
(or a body like that).
As far as what impact various U.N. organizations may or may not have had
throughout history, that is a debate that does
Title: Message
Hi
Todd:
It's
this line that the other test is checking:
Received: from 65.16.167.134 ([211.249.122.134])
It
discovers that the other side was using YOUR servers IP address in its own HELO
string.
I'm
pretty certain that the "HELOVALID" test in declude will catch that.
Title: Message
Hi,
Using
a filter, I combinethe different blacklists from various sources into
distinct groups:
Proxies
Open-Relay
DUL/DUHL
Each
group has a weight assigned. This way, I can use the combined know-how of
multiple sources whether an IP is a Proxy and/or an open-relay and/or
Jason,
What does the Declude log file indicate for these messages?
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com
Title: Message
Yesterday's summary:
Hi Scott:
Did you check the log I sent you?
I read through it and it seemed rather short for a debug? I'm used to
seeing pages over pages for a single message. These logs seem to be done in
a few lines?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
group.
Nested grouping would not be supported
One could define either OR or AND condition for the group.
This may be a simple way to address some of the frequent request to
combine tests with AND and OR without having to introduce a complete
scripting language.
Best Regards
Andy Schmidt
HM
of Sniffer) - or whether you are
trying to substitute Sniffer?
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
---
[This E-mail
Hi,
I have used filters to summarize categories of ip4r and other tests.
All the open relay tests will fail ONE filter. So whether one or 4
black-lists say it's an open relay - it will only get ONE weight.
All the DUL/DUHL will fail ONE filter. So, whether a dial-up or dynamic port
is listed
Title: Message
v8.12==
NEW FEATURES
IMail now uses the Open SSL library.IMail now
uses the Open LDAP server.The IMAP server now supports IMAP ACLs (RFC 2086).
This enables IMail support for the Bynari Insight Connector. IMail Anti-spam
will search for phrases in the
Title: Message
Now THAT was weird -
or rather, outright scary!
Declude suddenly
stopped working at 5:30 PM, did not create any log entries, etc... I'm
including a DIAG screen and the log.
No GP1/2 files in
the root folder.
However, the
spf.none file had grown to almost 256 MEGAbytes -
Hi,
Those of you reading German, here is the news report covering this outbreak
of nazi SPAM:
http://www.n-tv.de/5252882.html
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax
Title: Message
Hi
Scott:
I figured out a way
(using Filters) on how to "conditionally" either "DELETE" or "ROUTETO". So I got
half of my project covered.
For my second
half... Since the RouteTo and CopyTo actions can only be combined with certain
other actions (e.g.,I can't do a COPYTO
Hi,
the MAILFROM was [EMAIL PROTECTED].
The header
From: Sapphirex Expeditors [EMAIL PROTECTED]
is NOT the mailfrom - it is the information that your mail client (e.g.,
Outlook, Eudora) displays as from.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1
.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED
Title: Message
Well,
in AOL's defense, they cannot know which of their clients is having mail
forwarded.
However, you may institute a policy that you will not permit forwarding
to AOL - email has to be read locally at your server - or they can use one of
the registrars to forward they
the ROUTETO and COPYTO action - and inside the filter I
can reset the Delete and Hold actions, so that my new actions
actually do get performed as intended?
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934
the ROUTETO and COPYTO action - and inside the filter I
can reset the Delete and Hold actions, so that my new actions
actually do get performed as intended?
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934
Wow - exactly what I always wanted for Declude. Instead of deleting
messages or holding them, we could properly reject them and close the
connection.
If we could just get those folks and Scott to talk, that would be worth some
money.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20
): [EMAIL PROTECTED]
12 Test(s) ...: BYPASS19, DSBLSINGLE, SPAMCOP,
SORBS, XBL-DYNA, HELOBOGUS, IPNOTINMX, REVDNS, SPAMROUTING, NOLEGITCONTENT,
SNIFFER, WEIGHTKILL
... Etc ...
Number of Unique Messages Blocked: 1376
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East
Title: Message
Hi,
Since
this doesn't appear to ever be offered as part of Declude, I took half an hour
and threw a few lines of code together.
If you
have a small subset of messages that you hold but for which you are worried
about occasional false positives being held, then you can use
Title: Message
Hi
Scott:
I set up two tests
(same test, different names) that cause an ALERT and a HOLD
action.
After testing a bit,
I get the feeling as if the ALERT is not working (see enclosed debug
log)
Is there some rule
of thumb or chart, which actions are mutually exclusive?
Title: Message
Hi
Scott:
I
think the the issue of "mutually exclusive" actions may not be obvious to a user
(after reading the manual).
I did
some more experimenting using the COPYTO action.
My
logic was - if I use a "copy" to another user, this reallyshouldn't effect
how the "primary"
flexibility in determining what actions to take and
what final disposition a message should have.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM
Title: Message
Hi,
I'm trying to detect
mails weight = 15 that did NOT fail "Sniffer".
I
have:
Global.cfg:
SNIFFER
external nonzero "D:\IMAIL\Sniffer\Win32\.exe
?"40SNIFFER-SNAKEexternal
052"D:\IMAIL\Sniffer\Win32\.exe
?"10SNIFFER-SCAMS external
Title: Message
Hi
Matt:
Uh - I
see. We would need a "SKIPIFWEIGHTLESS" option.
Scott?
But -
I still don't understand why I don't see lots of entries for "NOTSNIFFed".
If anything, now I should see lots of legitimate mail "match" that
test?
Best
RegardsAndy SchmidtHM Systems Software,
MAINS:6 NOABUSE:3 NOPOSTMASTER:3 NJABL-DYNABLOCK:6
FIVETENSRC:2 FIVETENSRC-DYNA:3 SORBS-DYNA:7 DYNAMIC:4 TELUS-DYNA:1 .
Total weight = 48.
Andrew
8)
-Original Message-From: Andy Schmidt
[mailto:[EMAIL PROTECTED] Sent: Monday, May 31, 2004
3:03 PMTo: [EMAIL PROTE
since it
M startswith a score of zero.
M If Andrew's suggestion doesn't work for your purposes, there's likely
M akludge that can be written with multiple filter files that can do
M this.
M Matt
M Andy Schmidt wrote:
M Hi Matt:
M
M Uh - I see. We would need aSKIPIFWEIGHTLESS
That's the way to do it
Nope - it was a failure. The WEIGHTRANGE doesn't get processed by Declude
until the end. So when the FITLER is running, the WEIGHTRANGE hasn't been
set yet - apparently.
So, Scott... We're back to needing SKIPIFWEIGHTLESS!
Best Regards
Andy Schmidt
Phone: +1 201 934
a failure. The "WEIGHTRANGE" doesn't get processed by Declude
until the end. So when the FITLER is running, the WEIGHTRANGE hasn't been
set yet - apparently.
So, Scott... We're back to needing "SKIPIFWEIGHTLESS"!
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Bus
and/or
the number of other recipients was too high.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, May 21, 2004 08:40 AM
the effect is different from a whitelist?
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
-Original Message-
From: [EMAIL
Uh - INTERESTING.
I need to read up on ROUTETO. I didn't realize it could be used to
eliminate extraneous CC/BCC users.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1
Title: Message
Hi
Scott:
a) I think the
"LASTACTION' log entry is rendering the "Deleting Spam from/to" log entry
obsolete. It contains the action, the from and to to - all information that is
redundant with other log lines (see "red" sample below)
b) Once an email is
"bypassing
Title: Message
You don't have to remove the
tests, you just have to rename them. I renamed mine with DYN, that way
Declude doesn't see them as matching DUL/DYNA/DUHL and therefore will not skip
them when the Mail From matches a local address.
But
Matt - please correct me if I'm wrong.I
Title: Message
Thanks
- ouch.
I'd
say that's a bug in design.
Since
AUTH is supported in Imail 8 and since others may not allow local users to send
through their Imail server (my outbound is going through IIS SMTP with SMTP
AUTH), there should be AT LEAST a config option to turn this
.
Neither is true in my case.
It should be an option. Those who need to bypass the DYNA tests on the
first hop should be able to - those who don't need to should not lose those
tests!
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message
that is on that list - but only on the
FIRST hope. Thus, the DUL/DYNA/DUHL skip tests on the FIRST hop!
They can't be omitted - otherwise we'd block most private mail relayed
through other providers SMTP servers.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934
Title: Message
Matt,
I
think there is a misunderstanding (possibly on MY side).
DUL/DYNA/DUHL
tests from hitting your own local users when they are sending E-mail (only one
hop and typically dynamic/residential), Declude disables any dnsbl, ip4r or
rhsbl test when they have one of those
Title: Message
Scott
(in case you're not gone yet):
At this
moment, Declude will not apply scores from any dnsbl, ip4r or rhsbl tests if
they have either DUL, DYNA or DUHL in the name AND the Mail From matches a local
user.
Does
Declude REALLY trust the mail from and will bypass
Open the message (not preview) and then right click in the message body to
access the context menu.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Daniel
probably justify more drastic measures to be
taken.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
-Original Message-
From
- but it will
help every customer who is running interim releases.
Like you and myself, I'm sure that many people end up downloading an interim
release to find out WHICH version the latest is - just to discover that
they are running THAT number already.
Best Regards
Andy Schmidt
HM Systems Software, Inc
Title: Message
Oh,
that is the reason why I haven't upgraded to IMail. I'm still waiting for
them to beable to drop the connection the moment an email is
passinga certain Spam threshold and/or is detected as a virus- then
I WANT to be able to drop the connection rather than "confirming" the
Yep, got a complaint today as well. Hopefully, AOL is blocking them so that
they'll snap out of their coma.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
Hm - isn't that already covered in the HELOBOGUS test?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bud Durland
Sent: Sunday, April 18, 2004 07:18 PM
I'm trying to figure out WHY spammers would bother to include dial-up
reverse DNS as HELO string?
And if so, why not just check the reverse DNS? And, how much does this test
overlap with existing dynamic host/dial up blacklists?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business
?
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED
I subscribed to that other list - but have yet to see any emails? Is that
to be expected? (I'm in Digest mode).
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
Hi,
Just a suggestion: Rather then talking to them in the third person, it may
be reassuring if they were to introduce themselves to their customers
and personally address some of the points that list members have raised.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent
Title: Message
Hi
Scott:
Just for your info
(I know that you don't control the data). I downloaded a new country.dat
file a week ago - so I think I'm relatively current.
Yet - the following
country chain was reported:
'EU' [corrupt RIPE
data]-destination
for the following
headers:
) as corrupt.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Friday, April 02, 2004 07:37 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail
Title: Message
Hi
Scott:
I know you are busy
with viruses - but I can't figure THIS one out. I have thousands of emails
in the log file, where SORBS-DUHL is discovered, logged and treated properly.
But at least this ONE got through and I have no explanation.
Firstlet's
look at a mail 10
Title: Message
Matt,
I
think the point is, that there are TWO different decisions:
a) can you implement SPF for your own domain - you say
"No" - then don't.
b) can you follow the SPF policies that OTHER
administrators set for THEIR domains - apparently they want you
to.
IF
someone
Title: Message
Another phishing scheme - interest
version.
The
link goes to:
http://66.169.74.16:9092/ws/eBayISAPI.dllViewItemitem=1841484809category=47545.html
Best
RegardsAndy SchmidtPhone: +1 201 934-3414 x20
(Business)Fax: +1 201 934-9206
-Original Message-
Received: from
Title: Message
Hi,
I think many of us
are getting swamped with these "cleaned" virus emails - that show up as tiny zip
files with no meaningful content.
How about we could
test "ATTACHMENTSIZE" to give everything extra points to an email if ithas
a non-plausible attachment length?
Best
Yes,
I'm using SWITCHRECIP ON - don't know how anyone does not G.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Sunday, February 22, 2004 03
Matt,
Don't remove any tests yet.
They are just not being REPORTED if you use the new TestFailed...
Contains... syntax to consolidate certain tests into one filter!
I'm ready to report this bug - just documenting it now.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent
But Scott:
The receipients looked the same to me?
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
-Original Message
entry) should be complete, otherwise the log
file is no longer a log file?
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com
files, if the test
vanishes the test ENTIRELY (not just from the verbose log details)! The
tests-summary line (the last entry) should be complete, otherwise the log
file is no longer a log file?
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle
the same - but: I didn't specify IGNORE, I
specified LOG and the manual says: LOG The LOG action places an entry
into the log file (C:\IMail\spool\dec.log by default).
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone
).
Is IGNORE truely same as LOG action - or are you saying that there IS a
differenc e, where IGNORE only logs actions with a weight, where LOG
logs unconditionally?
If so, then may be the manual should clarify that.
Also, I assume that the default action is IGNORE?
Best Regards
Andy Schmidt
HM
Title: Message
Hi
Scott:
This IP shows up as
"IANA Reserved" - but it seems to be a dial-up IPrange for Tiscale (a huge
multi-natioinalEuropean provider).
Received: from
smtp.webhost.hm-software.com [63.107.174.32] by hm-software.com with
ESMTP (SMTPD32-7.07) id A38E66F1013A; Thu, 19 Feb
good 'ole BIND hung again
Nah - that can't be. Everyone here is beating up on MS DNS and tells us
that only BIND is suitable for production use by any sane person because it
is infallible? G
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail
Nope,
The original link still works:
http://www.paypal.com/verification/%?6488820019=20
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
Sent
Title: Message
Of
course - it could be that law enforcement asked them to MAINTAIN the site so
that they can collect evidence.
Best
RegardsAndy SchmidtPhone: +1 201 934-3414 x20
(Business)Fax: +1 201 934-9206
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL
as it would help my SMTP server to disconnect on
dictionary attacks.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
-Original
Title: Message
Matt:
One
more angle to that.
Am I
mistaken, or does the LDAP lookup only work for "IP based" mail domains?
In other words, ifI host a few hundred mail domains sharing the SAME IP
address, then it appears as if Imail's LDAP feature ONLY connects to the ONE
mail domain that
s as my backup MX. ORF has been a
godsend to ward off unwanted emails by spammers who try to send to the
Backup MX (so they don't have to be processed by Declude/Imail).
I would seriously consider funding some of the development for an IMAIL/LDAP
lookup event sink as it would help my SMTP server to &qu
integration support (multiple) virtual domains
(ip-less) - or will it only create users for the AD domain name?
Accordingly, how will it know that two mailboxes and/or aliases by the same
name, but on two different mail domains, should be kept as two different
entities in AD?
Best Regards
Andy Schmidt
Title: Message
Matt:
gatewayed
E-mail accounts. Since IMail doesn't offer any way to validate gatewayed
addresses or fending off dictionary attacks
With "gateway" you mean
that you are hosting the "public" MX for them (primary and possibly backup MX),
but you are NOT hosting their
Rick,
I read the BlackIce User Guide and various other manuals to see if I want
to pursue this software. Which feature/setting blocks Dictionary SMTP
attacks? I can't seem to find any setting specific to this?
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite
Hi George,
is there any type of Challenge Response tools available for Imail that
you are aware of
Unfortunately - not.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send
the false positives
when Declude could automate that process!
(Hm - now that I'm saying this - I should just write a little web
application that copies the held D and Q file back to the spool and include
the parameterized URL in my bounce messages... If I only had the time...)
Best Regards
Andy Schmidt
line to include a
reason code, e.g., BADHEADER(80001004), SPAMFILTER(37), WHITELIST(IP) for
BADHEADER reason code or SPAMFILTER line number or WHITELIST reason.
The goal should be to make MID level logging LESS VERBOSE - but NOT less
informative.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414
Hi,
May be I'm must lucky - but yesterday I had:
HABEAS..50.04%
HIL...1961.57%
5 messages with HABEAS headers - but 195 mails that failed HABEAS' infringer
list.
Best Regards
Andy
---
[This E-mail was scanned for viruses by Declude Virus
Title: Message
Hi:
I noted the
following on the SPF site:
"In either case an
MTA should reject messages from null senders that have more than one
recipient."
Imail only allows to
either permit or deny null senders.But, the above statement sounds obvious
- an automated bounce message
Hi,
This was an excerpt from Dlanalyzer.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
-Original Message-
From
EXEMPT for counterweight (which also helps with AOL):
AHBLEXEMPT ip4rexemptions.ahbl.org * -8
0
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax
server though
causes me great pause.
Matt
Andy Schmidt wrote:
Hi,
Well, I simply use SPF PASS to assign a negative weight. Since AOL
implemented SPF, that automatically reduces any SpamCop effect to a
tolerable level, e.g.,
The following email had a weight of -13. Even if it was listed
Title: Message
SpamCop
has a very serious and obvious problem, and I think it might be the result of a
bug or something because clearly this wasn't always the case. Imperfect as
they may be, SpamCop could fix this problem and greatly improve on their present
reliability.
Sorry
for
I counter-balance Habeas with their own hil blacklist.
Right now - 95% of all habeas mail is actually coming from a blacklisted
server.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20
in a weighting scheme, I would be surprised if
anyone would actually hold or delete legit mail!?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman
Sent
Title: Message
Hm:
"In the past 772.9 days, it has been listed 19 times for a
total of 3.1 days"
Sound's like it works as designed - because of the volume of legit mail,
it is only listed for a few hours each time. A total of THREE days out of
roughly 800?
Again
- why not use a weighting
Scott:
the de facto standard is to have a space after the colon in all
Internet headers.
There IS space after the colon - do you mean a space after between the
quote and the less-than symbol?
From: GOERING iSeries Solutions[EMAIL PROTECTED]
Best Regards
Andy Schmidt
HM Systems
Hi Scott:
Okay - that's fair enough.
So one should think of the line labeled Tests failed: as a line that
really contains Actions taken:
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http
401 - 500 of 803 matches
Mail list logo