RE: [Declude.JunkMail] SPF 2.0 ?

2004-09-20 Thread Andy Schmidt
that though we may eventually have a different standard from the IETF, all signs still point to Microsoft using Sender ID, so compliance with it is highly recommended. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1

RE: [Declude.JunkMail] SPF 2.0 ?

2004-09-20 Thread Andy Schmidt
it's cheap insurance. So - instead of standing on a high (open source) horse, I prefer to USE that information that OTHERs publish to reduce Spam sent to MY network in the meantime. That may not be right - but it sure is practical. No? Best Regards Andy Schmidt HM Systems Software, Inc. 600

RE: [Declude.JunkMail] SPF 2.0 ?

2004-09-20 Thread Andy Schmidt
publish TXT records that will help my mail server to qualify mail, then I sure want to do that! Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM

RE: Re[2]: [Declude.JunkMail] SPF Records and Off-Network Customers

2004-09-12 Thread Andy Schmidt
Cablevision would create their own SPF records to support their OptOnline.com customers - and you could include their OptOnline.com SPF record in your outbound definitions by reference. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original

RE: [Declude.JunkMail] SENDERDB oddity

2004-09-01 Thread Andy Schmidt
I do find it odd that the SAME IP would be whitelisted AND blacklisted - which is it!? They need to tie the various databases against each other and eliminate duplicate/triplicate listings. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle

RE: [Declude.JunkMail] GUI

2004-07-12 Thread Andy Schmidt
Title: Message Hi, I don't need the GUI (anymore)- but I fully appreciate the need for one. However, I wonder whether it is wise to invest into a GUI at THIS stage. The Declude product has been very quick to grow in features, waybeyond what Scott could have originally imagined when he

RE: [Declude.JunkMail] New Multiple Threat Lookup Database test for Declude JunkMail

2004-07-10 Thread Andy Schmidt
them know about what's going on on their OWN list! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list

RE: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

2004-07-09 Thread Andy Schmidt
Title: Message I guess they wrote a "setup" program that will install new code and even activate it for you. Hopefully, there'll be some "readme" inside that mysterious .EXE file. Otherwise, it is pretty much a cat in the sack! The installation process for the MTLDB: Download

RE: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

2004-07-09 Thread Andy Schmidt
have some concerns, how reliable such a test possibly can be, if it doesn't have an aggressive automatic de-listing policy (similar to Spamcop's). Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20

RE: Re[2]: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

2004-07-09 Thread Andy Schmidt
to be familiar with server operation/configuration. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ --- [This E-mail was scanned

RE: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

2004-07-09 Thread Andy Schmidt
of a particular machine. By the way, I do permit CERTAIN ICMP traffic across the border routers. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM

RE: [Declude.JunkMail] NOW OT: ICMP

2004-07-09 Thread Andy Schmidt
selectively. PING clearly is nice to have for support/diagnostic - it is NOT needed for regular operation. If Declude wants to make sure that the connection to their DNS server works - then they should test the connection to a DNS port. Those ports ARE open. Best Regards Andy Schmidt HM Systems

RE: [Declude.JunkMail] ICMP

2004-07-09 Thread Andy Schmidt
have gone through UUnet recently.) Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ --- [This E-mail was scanned for viruses

RE: [Declude.JunkMail] Now this is funny

2004-07-07 Thread Andy Schmidt
Actually, the ITU is an important international body. Chances are, you would not enjoy international phone, fax (and data) communication without the ITU (or a body like that). As far as what impact various U.N. organizations may or may not have had throughout history, that is a debate that does

RE: [Declude.JunkMail] Fake IP Test

2004-07-01 Thread Andy Schmidt
Title: Message Hi Todd: It's this line that the other test is checking: Received: from 65.16.167.134 ([211.249.122.134]) It discovers that the other side was using YOUR servers IP address in its own HELO string. I'm pretty certain that the "HELOVALID" test in declude will catch that.

RE: [Declude.JunkMail] Global configs (= SORBS results)

2004-06-30 Thread Andy Schmidt
Title: Message Hi, Using a filter, I combinethe different blacklists from various sources into distinct groups: Proxies Open-Relay DUL/DUHL Each group has a weight assigned. This way, I can use the combined know-how of multiple sources whether an IP is a Proxy and/or an open-relay and/or

RE: [Declude.JunkMail] Messages slipping through JM

2004-06-29 Thread Andy Schmidt
Jason, What does the Declude log file indicate for these messages? Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com

RE: [Declude.JunkMail] Global configs

2004-06-28 Thread Andy Schmidt
Title: Message Yesterday's summary:

RE: [Declude.JunkMail] Declude deactivated itself

2004-06-24 Thread Andy Schmidt
Hi Scott: Did you check the log I sent you? I read through it and it seemed rather short for a debug? I'm used to seeing pages over pages for a single message. These logs seem to be done in a few lines? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206

[Declude.JunkMail] Grouping Syntax

2004-06-18 Thread Andy Schmidt
group. Nested grouping would not be supported One could define either OR or AND condition for the group. This may be a simple way to address some of the frequent request to combine tests with AND and OR without having to introduce a complete scripting language. Best Regards Andy Schmidt HM

[Declude.JunkMail] Content Rules plus/vs. Sniffer?

2004-06-17 Thread Andy Schmidt
of Sniffer) - or whether you are trying to substitute Sniffer? Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ --- [This E-mail

RE: [Declude.JunkMail] IP4R DNS lookup

2004-06-17 Thread Andy Schmidt
Hi, I have used filters to summarize categories of ip4r and other tests. All the open relay tests will fail ONE filter. So whether one or 4 black-lists say it's an open relay - it will only get ONE weight. All the DUL/DUHL will fail ONE filter. So, whether a dial-up or dynamic port is listed

[Declude.JunkMail] IMail 8.12 (FYI)

2004-06-16 Thread Andy Schmidt
Title: Message v8.12== NEW FEATURES IMail now uses the Open SSL library.IMail now uses the Open LDAP server.The IMAP server now supports IMAP ACLs (RFC 2086). This enables IMail support for the Bynari Insight Connector. IMail Anti-spam will search for phrases in the

[Declude.JunkMail] Declude deactivated itself

2004-06-15 Thread Andy Schmidt
Title: Message Now THAT was weird - or rather, outright scary! Declude suddenly stopped working at 5:30 PM, did not create any log entries, etc... I'm including a DIAG screen and the log. No GP1/2 files in the root folder. However, the spf.none file had grown to almost 256 MEGAbytes -

RE: [Declude.JunkMail] NAZI Spam

2004-06-10 Thread Andy Schmidt
Hi, Those of you reading German, here is the news report covering this outbreak of nazi SPAM: http://www.n-tv.de/5252882.html Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax

[Declude.JunkMail] Combinations of Actions

2004-06-10 Thread Andy Schmidt
Title: Message Hi Scott: I figured out a way (using Filters) on how to "conditionally" either "DELETE" or "ROUTETO". So I got half of my project covered. For my second half... Since the RouteTo and CopyTo actions can only be combined with certain other actions (e.g.,I can't do a COPYTO

RE: [Declude.JunkMail] Mail From Help

2004-06-10 Thread Andy Schmidt
Hi, the MAILFROM was [EMAIL PROTECTED]. The header From: Sapphirex Expeditors [EMAIL PROTECTED] is NOT the mailfrom - it is the information that your mail client (e.g., Outlook, Eudora) displays as from. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1

RE: [Declude.JunkMail] COPYTO explanation

2004-06-10 Thread Andy Schmidt
. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED

RE: [Declude.JunkMail] Off Topic? - Complaints from AOL

2004-06-09 Thread Andy Schmidt
Title: Message Well, in AOL's defense, they cannot know which of their clients is having mail forwarded. However, you may institute a policy that you will not permit forwarding to AOL - email has to be read locally at your server - or they can use one of the registrars to forward they

[Declude.JunkMail] Feature Suggestion - More control over final action

2004-06-08 Thread Andy Schmidt
the ROUTETO and COPYTO action - and inside the filter I can reset the Delete and Hold actions, so that my new actions actually do get performed as intended? Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934

RE: [Declude.JunkMail] Feature Suggestion - More control over final action

2004-06-08 Thread Andy Schmidt
the ROUTETO and COPYTO action - and inside the filter I can reset the Delete and Hold actions, so that my new actions actually do get performed as intended? Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934

RE: [Declude.JunkMail] nospamproxy

2004-06-07 Thread Andy Schmidt
Wow - exactly what I always wanted for Declude. Instead of deleting messages or holding them, we could properly reject them and close the connection. If we could just get those folks and Scott to talk, that would be worth some money. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20

RE: [Declude.JunkMail] Declude version 1.79 and Delog

2004-06-01 Thread Andy Schmidt
): [EMAIL PROTECTED] 12 Test(s) ...: BYPASS19, DSBLSINGLE, SPAMCOP, SORBS, XBL-DYNA, HELOBOGUS, IPNOTINMX, REVDNS, SPAMROUTING, NOLEGITCONTENT, SNIFFER, WEIGHTKILL ... Etc ... Number of Unique Messages Blocked: 1376 Best Regards Andy Schmidt HM Systems Software, Inc. 600 East

[Declude.JunkMail] Message Confirmation Feature

2004-06-01 Thread Andy Schmidt
Title: Message Hi, Since this doesn't appear to ever be offered as part of Declude, I took half an hour and threw a few lines of code together. If you have a small subset of messages that you hold but for which you are worried about occasional false positives being held, then you can use

[Declude.JunkMail] ALERT then HOLD?

2004-06-01 Thread Andy Schmidt
Title: Message Hi Scott: I set up two tests (same test, different names) that cause an ALERT and a HOLD action. After testing a bit, I get the feeling as if the ALERT is not working (see enclosed debug log) Is there some rule of thumb or chart, which actions are mutually exclusive?

RE: [Declude.JunkMail] COPYTO combined with DELETE/HOLD/BOUNCE

2004-06-01 Thread Andy Schmidt
Title: Message Hi Scott: I think the the issue of "mutually exclusive" actions may not be obvious to a user (after reading the manual). I did some more experimenting using the COPYTO action. My logic was - if I use a "copy" to another user, this reallyshouldn't effect how the "primary"

RE: [Declude.JunkMail] ALERT then HOLD?

2004-06-01 Thread Andy Schmidt
flexibility in determining what actions to take and what final disposition a message should have. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM

[Declude.JunkMail] Detect Test NOT Failed

2004-05-31 Thread Andy Schmidt
Title: Message Hi, I'm trying to detect mails weight = 15 that did NOT fail "Sniffer". I have: Global.cfg: SNIFFER external nonzero "D:\IMAIL\Sniffer\Win32\.exe ?"40SNIFFER-SNAKEexternal 052"D:\IMAIL\Sniffer\Win32\.exe ?"10SNIFFER-SCAMS external

RE: [Declude.JunkMail] Detect Test NOT Failed

2004-05-31 Thread Andy Schmidt
Title: Message Hi Matt: Uh - I see. We would need a "SKIPIFWEIGHTLESS" option. Scott? But - I still don't understand why I don't see lots of entries for "NOTSNIFFed". If anything, now I should see lots of legitimate mail "match" that test? Best RegardsAndy SchmidtHM Systems Software,

RE: [Declude.JunkMail] Detect Test NOT Failed

2004-05-31 Thread Andy Schmidt
MAINS:6 NOABUSE:3 NOPOSTMASTER:3 NJABL-DYNABLOCK:6 FIVETENSRC:2 FIVETENSRC-DYNA:3 SORBS-DYNA:7 DYNAMIC:4 TELUS-DYNA:1 . Total weight = 48. Andrew 8) -Original Message-From: Andy Schmidt [mailto:[EMAIL PROTECTED] Sent: Monday, May 31, 2004 3:03 PMTo: [EMAIL PROTE

RE: Re[2]: [Declude.JunkMail] Detect Test NOT Failed

2004-05-31 Thread Andy Schmidt
since it M startswith a score of zero. M If Andrew's suggestion doesn't work for your purposes, there's likely M akludge that can be written with multiple filter files that can do M this. M Matt M Andy Schmidt wrote: M Hi Matt: M   M Uh - I see.  We would need aSKIPIFWEIGHTLESS

RE: [Declude.JunkMail] Detect Test NOT Failed

2004-05-31 Thread Andy Schmidt
That's the way to do it Nope - it was a failure. The WEIGHTRANGE doesn't get processed by Declude until the end. So when the FITLER is running, the WEIGHTRANGE hasn't been set yet - apparently. So, Scott... We're back to needing SKIPIFWEIGHTLESS! Best Regards Andy Schmidt Phone: +1 201 934

RE: [Declude.JunkMail] Detect Test NOT Failed

2004-05-31 Thread Andy Schmidt
a failure. The "WEIGHTRANGE" doesn't get processed by Declude until the end. So when the FITLER is running, the WEIGHTRANGE hasn't been set yet - apparently. So, Scott... We're back to needing "SKIPIFWEIGHTLESS"! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Bus

RE: [Declude.JunkMail] Whitelisted- getting thru

2004-05-21 Thread Andy Schmidt
and/or the number of other recipients was too high. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Friday, May 21, 2004 08:40 AM

RE: [Declude.JunkMail] Whitelisted- getting thru

2004-05-19 Thread Andy Schmidt
the effect is different from a whitelist? Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From: [EMAIL

RE: [Declude.JunkMail] Whitelisted- getting thru

2004-05-19 Thread Andy Schmidt
Uh - INTERESTING. I need to read up on ROUTETO. I didn't realize it could be used to eliminate extraneous CC/BCC users. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1

[Declude.JunkMail] Redundant Log Lines - Proposing Clean-Up

2004-05-19 Thread Andy Schmidt
Title: Message Hi Scott: a) I think the "LASTACTION' log entry is rendering the "Deleting Spam from/to" log entry obsolete. It contains the action, the from and to to - all information that is redundant with other log lines (see "red" sample below) b) Once an email is "bypassing

RE: [Declude.JunkMail] Misunderstood DUL/DYNA

2004-05-17 Thread Andy Schmidt
Title: Message You don't have to remove the tests, you just have to rename them. I renamed mine with DYN, that way Declude doesn't see them as matching DUL/DYNA/DUHL and therefore will not skip them when the Mail From matches a local address. But Matt - please correct me if I'm wrong.I

RE: [Declude.JunkMail] DUL skipping was ISBLANK is blank

2004-05-15 Thread Andy Schmidt
Title: Message Thanks - ouch. I'd say that's a bug in design. Since AUTH is supported in Imail 8 and since others may not allow local users to send through their Imail server (my outbound is going through IIS SMTP with SMTP AUTH), there should be AT LEAST a config option to turn this

RE: [Declude.JunkMail] DUL skipping was ISBLANK is blank

2004-05-15 Thread Andy Schmidt
. Neither is true in my case. It should be an option. Those who need to bypass the DYNA tests on the first hop should be able to - those who don't need to should not lose those tests! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message

RE: [Declude.JunkMail] DUL skipping was ISBLANK is blank

2004-05-15 Thread Andy Schmidt
that is on that list - but only on the FIRST hope. Thus, the DUL/DYNA/DUHL skip tests on the FIRST hop! They can't be omitted - otherwise we'd block most private mail relayed through other providers SMTP servers. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934

RE: [Declude.JunkMail] DUL skipping was ISBLANK is blank

2004-05-14 Thread Andy Schmidt
Title: Message Matt, I think there is a misunderstanding (possibly on MY side). DUL/DYNA/DUHL tests from hitting your own local users when they are sending E-mail (only one hop and typically dynamic/residential), Declude disables any dnsbl, ip4r or rhsbl test when they have one of those

RE: [Declude.JunkMail] DUL skipping was ISBLANK is blank

2004-05-14 Thread Andy Schmidt
Title: Message Scott (in case you're not gone yet): At this moment, Declude will not apply scores from any dnsbl, ip4r or rhsbl tests if they have either DUL, DYNA or DUHL in the name AND the Mail From matches a local user. Does Declude REALLY trust the mail from and will bypass

RE: [Declude.JunkMail] OT: Outlook HTML Question

2004-05-13 Thread Andy Schmidt
Open the message (not preview) and then right click in the message body to access the context menu. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Daniel

RE: [Declude.JunkMail] Injunction against SpamCop

2004-05-12 Thread Andy Schmidt
probably justify more drastic measures to be taken. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From

RE: [Declude.JunkMail] Latest interim

2004-05-11 Thread Andy Schmidt
- but it will help every customer who is running interim releases. Like you and myself, I'm sure that many people end up downloading an interim release to find out WHICH version the latest is - just to discover that they are running THAT number already. Best Regards Andy Schmidt HM Systems Software, Inc

RE: [Declude.JunkMail] DNS Report mail server failure

2004-05-05 Thread Andy Schmidt
Title: Message Oh, that is the reason why I haven't upgraded to IMail. I'm still waiting for them to beable to drop the connection the moment an email is passinga certain Spam threshold and/or is detected as a virus- then I WANT to be able to drop the connection rather than "confirming" the

RE: [Declude.JunkMail] Hotmail and MSN help needed.

2004-04-20 Thread Andy Schmidt
Yep, got a complaint today as well. Hopefully, AOL is blocking them so that they'll snap out of their coma. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206

RE: [Declude.JunkMail] New test

2004-04-18 Thread Andy Schmidt
Hm - isn't that already covered in the HELOBOGUS test? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bud Durland Sent: Sunday, April 18, 2004 07:18 PM

RE: [Declude.JunkMail] New test

2004-04-18 Thread Andy Schmidt
I'm trying to figure out WHY spammers would bother to include dial-up reverse DNS as HELO string? And if so, why not just check the reverse DNS? And, how much does this test overlap with existing dynamic host/dial up blacklists? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business

RE: [Declude.JunkMail] SURBL filter script

2004-04-16 Thread Andy Schmidt
? Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

RE: Re[2]: [Declude.JunkMail] Notification to customers of change of ownership

2004-04-14 Thread Andy Schmidt
I subscribed to that other list - but have yet to see any emails? Is that to be expected? (I'm in Digest mode). Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: [Declude.JunkMail] Notification to customers of change of ownership

2004-04-12 Thread Andy Schmidt
Hi, Just a suggestion: Rather then talking to them in the third person, it may be reassuring if they were to introduce themselves to their customers and personally address some of the points that list members have raised. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent

[Declude.JunkMail] Country Chain

2004-04-02 Thread Andy Schmidt
Title: Message Hi Scott: Just for your info (I know that you don't control the data). I downloaded a new country.dat file a week ago - so I think I'm relatively current. Yet - the following country chain was reported: 'EU' [corrupt RIPE data]-destination for the following headers:

RE: [Declude.JunkMail] Country Chain

2004-04-02 Thread Andy Schmidt
) as corrupt. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, April 02, 2004 07:37 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail

[Declude.JunkMail] Befuddled: Test not logged!

2004-03-19 Thread Andy Schmidt
Title: Message Hi Scott: I know you are busy with viruses - but I can't figure THIS one out. I have thousands of emails in the log file, where SORBS-DUHL is discovered, logged and treated properly. But at least this ONE got through and I have no explanation. Firstlet's look at a mail 10

RE: [Declude.JunkMail] SPF

2004-03-11 Thread Andy Schmidt
Title: Message Matt, I think the point is, that there are TWO different decisions: a) can you implement SPF for your own domain - you say "No" - then don't. b) can you follow the SPF policies that OTHER administrators set for THEIR domains - apparently they want you to. IF someone

[Declude.JunkMail] FW: Question for seller -- Item #479451635

2004-03-02 Thread Andy Schmidt
Title: Message Another phishing scheme - interest version. The link goes to: http://66.169.74.16:9092/ws/eBayISAPI.dllViewItemitem=1841484809category=47545.html Best RegardsAndy SchmidtPhone: +1 201 934-3414 x20 (Business)Fax: +1 201 934-9206 -Original Message- Received: from

[Declude.JunkMail] 75 Byte Long Attachments (broken virus)

2004-02-23 Thread Andy Schmidt
Title: Message Hi, I think many of us are getting swamped with these "cleaned" virus emails - that show up as tiny zip files with no meaningful content. How about we could test "ATTACHMENTSIZE" to give everything extra points to an email if ithas a non-plausible attachment length? Best

RE: [Declude.JunkMail] Questions about LOGLEVEL MID

2004-02-22 Thread Andy Schmidt
Yes, I'm using SWITCHRECIP ON - don't know how anyone does not G. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Sunday, February 22, 2004 03

RE: [Declude.JunkMail] ZOMBIE v1.0.0 for Declude JunkMail Pro v1.78 beta ---

2004-02-20 Thread Andy Schmidt
Matt, Don't remove any tests yet. They are just not being REPORTED if you use the new TestFailed... Contains... syntax to consolidate certain tests into one filter! I'm ready to report this bug - just documenting it now. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent

RE: [Declude.JunkMail] Different Tests Failed for same mail?

2004-02-20 Thread Andy Schmidt
But Scott: The receipients looked the same to me? Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message

RE: [Declude.JunkMail] Different Tests Failed for same mail?

2004-02-20 Thread Andy Schmidt
entry) should be complete, otherwise the log file is no longer a log file? Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com

RE: [Declude.JunkMail] Different Tests Failed for same mail?

2004-02-20 Thread Andy Schmidt
files, if the test vanishes the test ENTIRELY (not just from the verbose log details)! The tests-summary line (the last entry) should be complete, otherwise the log file is no longer a log file? Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle

[Declude.JunkMail] Summary Line suppresses tests that DID fail!

2004-02-20 Thread Andy Schmidt
the same - but: I didn't specify IGNORE, I specified LOG and the manual says: LOG The LOG action places an entry into the log file (C:\IMail\spool\dec.log by default). Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone

RE: [Declude.JunkMail] Summary Line suppresses tests that DID fail!

2004-02-20 Thread Andy Schmidt
). Is IGNORE truely same as LOG action - or are you saying that there IS a differenc e, where IGNORE only logs actions with a weight, where LOG logs unconditionally? If so, then may be the manual should clarify that. Also, I assume that the default action is IGNORE? Best Regards Andy Schmidt HM

[Declude.JunkMail]

2004-02-19 Thread Andy Schmidt
Title: Message Hi Scott: This IP shows up as "IANA Reserved" - but it seems to be a dial-up IPrange for Tiscale (a huge multi-natioinalEuropean provider). Received: from smtp.webhost.hm-software.com [63.107.174.32] by hm-software.com with ESMTP (SMTPD32-7.07) id A38E66F1013A; Thu, 19 Feb

RE: [Declude.JunkMail] DNS Reports timing out?

2004-02-16 Thread Andy Schmidt
good 'ole BIND hung again Nah - that can't be. Everyone here is beating up on MS DNS and tells us that only BIND is suitable for production use by any sane person because it is infallible? G --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail

RE: [Declude.JunkMail] New Phishing Scam

2004-02-15 Thread Andy Schmidt
Nope, The original link still works: http://www.paypal.com/verification/%?6488820019=20 Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent

RE: [Declude.JunkMail] New Phishing Scam

2004-02-14 Thread Andy Schmidt
Title: Message Of course - it could be that law enforcement asked them to MAINTAIN the site so that they can collect evidence. Best RegardsAndy SchmidtPhone: +1 201 934-3414 x20 (Business)Fax: +1 201 934-9206 -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [Declude.JunkMail] [Declude.Junkmail] MS SMTP LDAP Routing

2004-02-09 Thread Andy Schmidt
as it would help my SMTP server to disconnect on dictionary attacks. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original

[Declude.JunkMail] OT: IMail LDAP for Virtual Mail Domains?

2004-02-09 Thread Andy Schmidt
Title: Message Matt: One more angle to that. Am I mistaken, or does the LDAP lookup only work for "IP based" mail domains? In other words, ifI host a few hundred mail domains sharing the SAME IP address, then it appears as if Imail's LDAP feature ONLY connects to the ONE mail domain that

RE: [Declude.JunkMail] [Declude.Junkmail] MS SMTP LDAP Routing

2004-02-09 Thread Andy Schmidt
s as my backup MX. ORF has been a godsend to ward off unwanted emails by spammers who try to send to the Backup MX (so they don't have to be processed by Declude/Imail). I would seriously consider funding some of the development for an IMAIL/LDAP lookup event sink as it would help my SMTP server to &qu

[Declude.JunkMail] OT: IMAIL - AD

2004-02-09 Thread Andy Schmidt
integration support (multiple) virtual domains (ip-less) - or will it only create users for the AD domain name? Accordingly, how will it know that two mailboxes and/or aliases by the same name, but on two different mail domains, should be kept as two different entities in AD? Best Regards Andy Schmidt

RE: [Declude.JunkMail] Using Imail/Declude as Public Gateway

2004-02-09 Thread Andy Schmidt
Title: Message Matt: gatewayed E-mail accounts. Since IMail doesn't offer any way to validate gatewayed addresses or fending off dictionary attacks With "gateway" you mean that you are hosting the "public" MX for them (primary and possibly backup MX), but you are NOT hosting their

RE: [Declude.JunkMail] How do they do it?

2004-02-06 Thread Andy Schmidt
Rick, I read the BlackIce User Guide and various other manuals to see if I want to pursue this software. Which feature/setting blocks Dictionary SMTP attacks? I can't seem to find any setting specific to this? Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite

RE: [Declude.JunkMail] Any sort of Challenge Response tool for Declude/Imail??

2004-02-02 Thread Andy Schmidt
Hi George, is there any type of Challenge Response tools available for Imail that you are aware of Unfortunately - not. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send

RE: [Declude.JunkMail] Challenge/Response with Declude

2004-01-28 Thread Andy Schmidt
the false positives when Declude could automate that process! (Hm - now that I'm saying this - I should just write a little web application that copies the held D and Q file back to the spool and include the parameterized URL in my bounce messages... If I only had the time...) Best Regards Andy Schmidt

RE: [Declude.JunkMail] LOGLEVEL MID - good?

2004-01-26 Thread Andy Schmidt
line to include a reason code, e.g., BADHEADER(80001004), SPAMFILTER(37), WHITELIST(IP) for BADHEADER reason code or SPAMFILTER line number or WHITELIST reason. The goal should be to make MID level logging LESS VERBOSE - but NOT less informative. Best Regards Andy Schmidt Phone: +1 201 934-3414

RE: [Declude.JunkMail] Habeas White list

2004-01-22 Thread Andy Schmidt
Hi, May be I'm must lucky - but yesterday I had: HABEAS..50.04% HIL...1961.57% 5 messages with HABEAS headers - but 195 mails that failed HABEAS' infringer list. Best Regards Andy --- [This E-mail was scanned for viruses by Declude Virus

[Declude.JunkMail] Null Sender Messages to Multiple Recipients

2004-01-22 Thread Andy Schmidt
Title: Message Hi: I noted the following on the SPF site: "In either case an MTA should reject messages from null senders that have more than one recipient." Imail only allows to either permit or deny null senders.But, the above statement sounds obvious - an automated bounce message

RE: [Declude.JunkMail] Junk Mail Stats

2004-01-22 Thread Andy Schmidt
Hi, This was an excerpt from Dlanalyzer. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From

RE: [Declude.JunkMail] Question about Some Spam Tests

2004-01-16 Thread Andy Schmidt
EXEMPT for counterweight (which also helps with AOL): AHBLEXEMPT ip4rexemptions.ahbl.org * -8 0 Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax

RE: [Declude.JunkMail] AOL on SPAMCOP

2004-01-16 Thread Andy Schmidt
server though causes me great pause. Matt Andy Schmidt wrote: Hi, Well, I simply use SPF PASS to assign a negative weight. Since AOL implemented SPF, that automatically reduces any SpamCop effect to a tolerable level, e.g., The following email had a weight of -13. Even if it was listed

RE: [Declude.JunkMail] AOL on SPAMCOP

2004-01-16 Thread Andy Schmidt
Title: Message SpamCop has a very serious and obvious problem, and I think it might be the result of a bug or something because clearly this wasn't always the case. Imperfect as they may be, SpamCop could fix this problem and greatly improve on their present reliability. Sorry for

RE: [Declude.JunkMail] Habeas

2004-01-16 Thread Andy Schmidt
I counter-balance Habeas with their own hil blacklist. Right now - 95% of all habeas mail is actually coming from a blacklisted server. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20

RE: Re[2]: [Declude.JunkMail] Question about Some Spam Tests

2004-01-15 Thread Andy Schmidt
in a weighting scheme, I would be surprised if anyone would actually hold or delete legit mail!? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent

RE: [Declude.JunkMail] Question about Some Spam Tests

2004-01-15 Thread Andy Schmidt
Title: Message Hm: "In the past 772.9 days, it has been listed 19 times for a total of 3.1 days" Sound's like it works as designed - because of the volume of legit mail, it is only listed for a few hours each time. A total of THREE days out of roughly 800? Again - why not use a weighting

RE: [Declude.JunkMail] Why is FROM Header wrong?

2004-01-14 Thread Andy Schmidt
Scott: the de facto standard is to have a space after the colon in all Internet headers. There IS space after the colon - do you mean a space after between the quote and the less-than symbol? From: GOERING iSeries Solutions[EMAIL PROTECTED] Best Regards Andy Schmidt HM Systems

RE: [Declude.JunkMail] More 1.77i15 Log Issues

2004-01-13 Thread Andy Schmidt
Hi Scott: Okay - that's fair enough. So one should think of the line labeled Tests failed: as a line that really contains Actions taken: Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- [This E-mail was scanned for viruses by Declude Virus (http

<    1   2   3   4   5   6   7   8   9   >