Hi,
Where can i find this versjon of DLAnalyzer(v2.0.B.I)
Amazingly enough at:
http://www.dlanalyzer.com
G
Best Regards
Andy
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe,
may account for your high ROUTE failures.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
---
[This E-mail was scanned for viruses
Hi,
If 42% of your mail fails the routing test, then you probably will get such
a mail sometime today and you can post the header then?
Also - note Scott's response. It appears as if the SPAMROUTING test is
hard-wired to the U.S. That alone may be a clue to what's going on. The
headers will
comments?
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
---
[This E-mail was scanned for viruses by Declude Virus (http
, will it still be included
in the weight (e.g., is the default action log).
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
---
[This E
:
AHBLEXEMPT ip4rdnsbl.ahbl.org * -8
0
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com
into their system.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL
Hi,
Is the reverse DNS valid, e.g., does the Reverse DNS actually point to one
of these registered domains?
Best Regards
Andy
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just
to
customize to your OWN domain name where you want to host your RDNS BL.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com
it will look up
somehost.somename.net.rdns.yourdomain.com - which will return a 127.0.0.2.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM
Title: Message
I
question the importance tomake the interface "cross platform" - when the
tool that you are managing (Imail and Declude) are Windows specific? I'd
personally rather use the web server that is already optimized for that
environment and offers me plenty of control: IIS.
something like UNREPORTEDTESTS WEIGHT10 WEIGHT20 NOLEGITCONTENT
IPNOTINMX
That would be great. Because currently email that fails the WHITELIST is
treated as SPAM when my Outlook client is looking at the X-Declude header -
just the opposite of what Whitelisting is trying to accomplish.
I have
I don't see the reasoning behind sending SPAMCOP thousands of e-mails per
day that are already stopped by your system.
Presence in SPAMCOP is temporary. To REMAIN listed, you need to keep
submitting SPAM so that the senders keep getting listed.
Best Regards
Andy Schmidt
HM Systems Software
Title: Message
Hi
Scott:
Do we STILL have a
whitelisting problem. Since 1.76i11, I now get:
10/27/2003 11:46:22
Q4bdb16ce00f471ae nNOLEGITCONTENT:-3 . Total weight = -310/27/2003 11:46:22
Q4bdb16ce00f471ae NOT bypassing whitelisting of E-mail with weight =20 (-858993460) and at least 1
Uh - then the Version Announcement (back in September) and your online
Declude Release Notes are both in error:
Release Notes:
JM ADD Adds a bypasswhitelisting test type that can be used in rare cases
when whitelist bypassing is necessary.
Your Version Announcement:
From: R. Scott Perry
Well it DOES work - now I see it full of log entries that actually report
the action it takes.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM
doubt that AOL would/could use those ranges for
external mail servers.
That particular header line does look like a fake.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201
ghph ztskkm hbavwmwh sh di
10/08/2003 23:39:15 Qd81d109f0148f5b6 From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] IP:
24.197.251.74 ID: 22002968
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business
with 63.107.174.24 and
plainly see that they are NOT in the same Class C address space?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from
Title: Message
not to
speak of trademark and or copyrightinfringement (which is NOT a civil
matter - stakes are higher). These web sites are made to look exactly as the
"realthing", using their logo, etc.
I have
reported many of these emails with all headers to them- and offered logs
etc
No I don't think that was the intention. I think the intention is that
there is no reason for mail to come through the backup MX server during
normal operations. The only ones who intentionally contact the backup MX
are likely to be viruses and spammers.
Best Regards
Andy Schmidt
HM Systems
Title: Message
ISP mail servers thatget used
by spammers
Uhuh -
so?Which ISP is permitting/tolerating/mis-configuring their servers
to be abused in that way?
I have seen very
FEW spammers thatMX mail fromtheir "own" mail servers (as they would
be shut down and/or blocked too easily).
Title: Message
There
are reports of people's printers that stopped working. Essentially, TCP/IP
connected printers on a local LAN set up by an ignorant network "admin"
withan invalid domain name,connected to a local print server.
Somehow, the workstations FIRST did a lookup by the (invalid)
Title: Message
(632
potential sites with a TLD set up to help increase awareness of museums on the
Web in general).
where
is THAT number coming from?
There
are probably 2 or 3 museums even in smaller towns (I can think of 2 in my
home-town of 30,000)
Best
RegardsAndy SchmidtPhone: +1
Can't reproduce here.
I get regular Not found in my browser.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matthew Bramble
Sent: Monday, September 22, 2003 01
o Adds a bypasswhitelisting test type that can be used in rare
cases when whitelist bypassing is necessary.
Used where and how?
Best Regards
Andy
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail
]
Return-Path: [EMAIL PROTECTED]
But, when I check @VM.MARIST.EDU I get:
vm.marist.edu.
Non-authoritative answer:
Name:vm.marist.edu
Addresses: 148.100.81.40, 148.100.80.40
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ
Uh - cool feature.
Currently I have a certain receiving Postmaster account whitelisted (so that
the occasional false positive can alert us after we sent them a BOUNCE or
ALERT) - which means it gets 80% spam.
The real false positives are seldomly more than a few points over our
BOUNCE or ALERT
[207.46.169.42]
X-Declude: Triggered BONDEDSENDER, MAILFROM, HELOBOGUS [-7]
X-Countries: UNITED STATES-destination
Return-Path: [EMAIL PROTECTED]
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20
Hi,
I have XSENDER OFF.
Instead I use:
XINHEADER Return-Path: %MAILFROM%
I don't have EnvFromStrict.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
Action=HOLD.
09/19/2003 15:20:15.662 Q56ec00f1016e71bc Unlocked
D:\IMAIL\spool\Q56ec00f1016e71bc.SMD.
09/19/2003 15:20:15.662 Q56ec00f1016e71bc Moving file to spam hold directory
09/19/2003 15:20:15.662 Q56ec00f1016e71bc Total Time: 1595ms
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600
like a waste of good money.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail
work that way, e.g., if one can really entirely bypass Declude
simply by sending mail to a forwarding email account - then this would be a
huge security hole? But I can't imagine that being the case!?
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper
If all you need is a relay server or backup MX, then IIS' built-in SMTP
server works just fine for us. We actually think of Imail as a mailbox
server and try to offload all outbound or relay functions to the MS SMTP.
Best Regards
Andy
-Original Message-
From: [EMAIL PROTECTED]
But if you use an action that causes the E-mail to be delivered
(such as SUBJECT, WARN, MAILBOX), then the forwarded E-mail will be
delivered.
I'm a bit dense today - and why would THAT be a problem?
Or are you saying the forwarded email would be an entirely new email
message and Declude's
Oh, they are not blocking the servers from spamming to the REST of the
world, they are only blacklisting servers from delivering mails into China.
E.g., they are targeting servers in Taiwan and elsewhere that are spamming
INTO China.
Servers that are in China and are spamming into the U.S. don't
SUBJECT 40 CONTAINS =?ISO-8859-1?b?
Assuming you don't ever get emails from European countries, Canada or other
locations that use accented characters.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934
Please review these archives - several people have been posting their
replacement config files in the past 2 days.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934
Here is the replacements that I'm using (marked up red) with the results for
the last few hours:
Best Regards
Andy Schmidt
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith
Sent: Wednesday, August 27, 2003 09:44 AM
To: [EMAIL PROTECTED
Hm - may be this list doesn't support HTML mail (or doesn't support
attachments), here is that screen shot again, this time as a BMP file.
The replacements that I'm using are marked up red with the results for the
last few hours
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East
The replacements that I'm using are marked up red with the results for the
last few hours.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM
Most likely, it's a non-Y2K-compliant header
Seems like an error in the decoder CGI? It should be able to handle this bit
mask?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL
not that smart,
I am just a computer. Sorry!
Now what?
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
---
[This E-mail was scanned
you want to change it?
It also indicates that there is NO delegation from the SWBELL name server to
yours.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
PTR Host192.argohouston.com.
193 PTR Host193.argohouston.com.
194 PTR Host194.argohouston.com.
(etc - pick whatever valid host names you desire.)
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ
:
Reports secnap2.secnap.net.
Answer:
208.237.120.132 PTR record: secnap2.secnap.net. [TTL 3600s]
[A=208.237.120.132]
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
for the fact, that not all authoritative name
servers have current and valid zone information.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM
Title: Message
What
are your Imail settings with respect to relaying?
Looks
as if you may have defined "permit for local hosts" - which is misleading,
because all it requires is that the sender use one of your domain names to be
able to relay through your system.
You
need to either do
100124,1011 is a valid CompuServe ID account format and
[EMAIL PROTECTED] the valid compuserve email address format - not
at all toomanynumbersbeforethe@'.
In Europe, you will often see:
[EMAIL PROTECTED]
Also a perfectly valid email address for the largest European provider.
Even in the U.S.,
shaw.ca shawcable.net
Best Regards
Andy
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The
Hi,
Actually, your sprintPCS email did NOT have ANY valid Reverse DNS according
to the header you included:
X-Note: This E-mail was sent from [No Reverse DNS] ([63.167.114.16]).
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ
: if
people want to send email to postmaster and bypass any blocks, then it
cannot contain any other recipients.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
Title: Message
yes,
email from Europe or Quebec may use ISO encoding to includenational
language characters.
Or
email where the subject line refers to individuals with foreignnames or
places, e.g.
SUBJECT: Meeting at 1 PM with Mr.
Déjà
Best
RegardsAndy SchmidtHM Systems Software,
Title: Message
The
key is to use Challenge/Response systems ONLY if the sender is questionable,
e.g., is an open relay, has no Reverse DNS, has a bogus HELO,
etc.
This
way, the sending party has the option to properly set up a COMPLIANT mail server
and they will NOT have to deal with
on the Internet - any number of reasons.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
Sent: Saturday, June 14, 2003 09:22 PM
To: [EMAIL PROTECTED
I decided against notifying the recipient for Vulnerabilities. Apparently,
vulnerabilities are essentially spam - and notifying the recipient would
mean that they end up getting an unwanted message after all.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934
Title: Message
Hi
Scott:
I noticed that most
email coming from the t-online servers have mangled X-Declude Headers, e.g. the
Reverse DNS is always replaced with the trailing end of the first "Received"
time-stamp and the beginning of the Message-ID or whichever header happens to
follow,
) if domain DOES appear in SPAMDOMAINS file and mismatches, then weight is
added for bad behavior.
It does make sense to me that these comparative tests against a filtered
list (e.g., the SPAMDOMAIN file) could have the does not apply outcome
where NO weight is modified.
Best Regards
Andy Schmidt
Here two big international ones:
t-online.de t-online.com
wanadoo.fr
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com
back to me).
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
--- Message which triggered moderation
From [EMAIL PROTECTED
/2003 17:51:09 Qbb4535320128b6b9 Subject: Screen shots: Merrill Lynch
store
06/05/2003 17:51:09 Qbb4535320128b6b9 From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED] IP: 12.29.228.5 ID:
[EMAIL PROTECTED] 5.228.29.12.in-addr.arpa
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1
used in
the HELO).
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
-Original Message-
From: Postmaster [mailto:[EMAIL
In the Global.cfg have:
WEIGHTHDR weightrange x x 6 7
In your $Default$.Junkmail have:
WEIGHTHDR WARNX-RBL-Warning: Failed %TESTSFAILED% [%WEIGHT%]
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River
Title: Message
Hi
Scott:
Shouldn't this message ID cause a "BADHEADERS"
failure:
Message-ID: [EMAIL PROTECTED]
since
"athlon" is not guaranteed to be a unique occurrence (because it's not a
FQDN)?
-Original Message-
Received:
from athlon [208.169.85.246] by hm-software.com
the SPAMHEADERS test that is
designed/advertised to be flexible and which is expected to adopt based
on occurrence of certain issues in the wild - so THERE it would make sense
to leave the MessageID FQDN check out of SPAMHEADERS.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent
Hi Scott:
No - neither was the case - those were normal firstname.lastname email
addresses.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent
charge them for about 2 minutes of
consulting services - that's how little time it takes for someone who is the
least bit knowledgable to straighten out their domain.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL
Hi,
Would be nice if Declude could be told not insert a header if one already
exists, e.g.:
XUNIQUEINHEADER Return-Path: %MAILFROM%
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business
delete on:
Weight = 20
If someone needs assistance who gets caught by the MailFrom/Percent or
OSDUL/OSSOFT and all your test does is reduce weights - I assume the
people's emails would still not get through? So I do need to whitelist the
PostMaster?
Best Regards
Andy Schmidt
HM Systems Software
: 204.189.38.2#53(204.189.38.2)
;; WHEN: Fri May 30 11:51:56 2003
;; MSG SIZE rcvd: 116
==
Bill
- Original Message -
From: Andy Schmidt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, May 30, 2003 11:45 AM
Subject: RE: [Declude.JunkMail] spamdomains list
Bill,
You need
; D7c05147f0162cb7b.SMD from gateway1.skubi.com
[12.3.242.12]
X-Declude: Triggered MAILFROM, HELOBOGUS, IPNOTINMX, NOLEGITCONTENT [3]
X-Countries: UNITED STATES-destination
Return-Path: [EMAIL PROTECTED]
X-Spam-Prob: 0.768622
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
with the sender email address.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
-com.mr.outblaze.com. [TTL=86400] IP=205.158.62.23 (No Glue)
[TTL=21600]
20 post-com-bk.mr.outblaze.com. [TTL=86400] IP=205.158.62.23 (No Glue)
[TTL=21600]
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414
loop.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.HM-Software.com/
Hi:
ORDB hatte für den Open-Relay-Check zwei GMX-Adressen verwendet, die
nicht auf SMTP-Auth konfiguriert waren. In der eigenen
Open-Relay-Definition beschreibe ORDB ein solches System aber als einen
Mail-Server, der Nachrichten weiterleite, bei denen weder der Sender noch
der Empfänger ein
Hm, Scott:
I may be off-base here, but I would imagine this could work:
A) Declude inspects the D... and Q... File, correct?
B) once Declude decides, that there is a TO whitelist for a particular
email, it will determine if the Q file lists more than one R line
(Recipient).
C) if there is MORE
Uh - okay. I thought there was a file I had downloaded once before - but
when I saw no mention in the Junkmail/manual.htm I thought I was
remembering wrong.
Thanks.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone
brands all can communicate
across the one Internet.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list
Hi Scott:
This one returned code 802c (This E-mail has a bogus Date: header.) -
however, the Date: header does look just fine?
May be the problem is the Subject header - as it appears to wrap around
into a second line? But, then again, multi-line headers appear to be quite
normal, because
Are you sure you matched this up correctly?
Declude Version 1.68i5.
Here is the chain of evidence I followed:
A) The snippet of our own, highly informative, bounce message showing the
DECLUDE variables:
... (verbose text omitted) ...
Mail Server: 161.225.2.41 for target.com
Hi:
Adds %IP4R%, %RHSBL%, %MAILFROMBL% and %HELO% variables.
Okay, I can guess what IP4R and HELO inserts - but what do strings do the
two ...BLs insert?
Where are those variables valid?
A) in Declude SMTP headers?
B) in alert/bounce messages templates?
C) in ... ?
Best Regards
Andy
0), e.g. a %TESTSRESULT% variable that inserts the string PASSED
(if whitelisted or total weight = 0) or the string FAILED in any other
case that at least one test failed.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
(ab)use the ipfile option to define
an IP whitelist and define the PASS action (to let mail pass), which
hopefully would supercede all other actions based on other tests.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
be reduced and their
management can be totally automated is highly desirable and worth an upgrade
charge.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http
where
the MAILFROM is bogus.
What am I doing wrong?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list
Hi,
this list has served me well so far:
HELO8 CONTAINS$domain
REVDNS 8 ENDSWITH.a83c9d.net
REVDNS 8 ENDSWITH.are.net
REVDNS 8 ENDSWITH.azogle.com
REVDNS 8 ENDSWITH.bestpost.net
Hi,
not one message deleted by Declude was a false positive
John, how would you know - since they were DELETED and you have no way to
determine their content after the fact?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned
Why not control the message size in Imail - you can set it per domain and, I
believe, per user.
If the message exceeds the max message size, Imail will reject it - and it
will result in a bounce from the SENDING server.
In fact, Imail's ESMTP will announce the max message size to the sending
Sorry - I can't tell whether your old Imail 5 has that feature - or, whether
it was added in Version 6 or 7. I would consult IPswitch's web site for
historic information going that many years back. I started with Imail 4 and
don't recall if/that it WAS added after that - but I may not have paid
These are just the defaults for creating new users,
The limits themselves are actually set on the userlevel.
No - they are NOT.
I went through this with IPSwitch when messages were rejected for an inbound
IP address (IP bound domain), even though the VIRTUAL domain and INDIVIDUAL
users were
cache).
So - I believe in the ip=!NET... detail screen your CACHE OFF link is
constructed incorrectly.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue
Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http
Scott,
would you like for me to downloaded a new interim release to CONFIRM that it
has since been fixed (you apparently thought back then, that it had been
fixed already)?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned
Email - Please Ignore
01/17/2003 13:41:51 Q4e6d4dac00e4e077 From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED]
even though the email was addressed to my alias domain of:
[EMAIL PROTECTED]
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
Title: Message
Oh, this is all sementics.
:-)
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Kami
RazvanSent: Thursday, January 16, 2003 10:31 AMTo:
[EMAIL PROTECTED]Subject: [Declude.JunkMail] How obscene
is Basement?
Scott...
) [192.67.198.73] MAIL From:[EMAIL PROTECTED]
01:06 07:48 SMTPD(4A1D00D4) [192.67.198.73] RCPT
To:[EMAIL PROTECTED]
01:06 07:48 SMTPD(4A1D00D4) [192.67.198.73]
D:\IMAIL\spool\D7b294a1d00d4e815.SMD 1913
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
X-Countries: %COUNTRYCHAIN%
XINHEADER Return-Path: %MAILFROM%
XOUTHEADER X-Note: Report any abuse to [EMAIL PROTECTED]
XSENDER OFF
XSPOOLNAME OFF
SWITCHRECIP ON
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
Hi Scott:
The following header tripped SPAMROUTING.
However,
http://www.dnsstuff.com/tools/whois.ch?ip=192.67.198.73 is located in
Karlsruhe, Germany
http://www.dnsstuff.com/tools/whois.ch?ip=217.72.192.180 is located in
Karlsruhe, Germany
addr = ops.denic.de
serial = 2003010330
refresh = 10800 (3 hours)
retry = 7200 (2 hours)
expire = 360 (41 days 16 hours)
default TTL = 86400 (1 day)
Is your DNSREPORT/DNSSTUFF lookup broken?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20
- but DNSSTUFF
can't?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Friday, January 03, 2003 04:19 PM
To: [EMAIL PROTECTED]
Subject: Re
601 - 700 of 803 matches
Mail list logo
