s a high number of
other senders with bogus REVDNS errors - where the IP is blank. But, there
are also a large number of emails which correctly identify the IP address in
the log (at least apparently so).
Best Regards
Andy Schmidt
H&M Systems Software, Inc.
600 East Crescent Avenue
Suite 203
Uppe
Notice - how the following email came from 63.107.174.32 - yet, it STILL has
the X-RBL-Warning!
That IP is my backup SMTP server (so its set to IPBYPASS) AND it runs a few
auxiliary services that send automated emails (so its set to WHITELIST).
IPBYPASS63.107.174.32
IPBYPASS65.86
Scott:
The moment I put on the latest 155i this afternoon, I started getting
massive false reports of Reverse DNS missing. It took until now before I
realized it was NOT my DNS servers etc.
The problem is, that Declude does not look up the IP address, but rather
looks up " ".
Here is a sample
Hi Scott:
that is true - their Virus "Alerts" would better be placed on
www.TheHistoryChannel.com.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf O
ovide true contact
information. They play god "we don't need anyone to ever contact us, we are
always without fault". Makes you appreciate, why outfits like them get sued
into the ground eventually.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www1.worldcom.com/us/tools/noc/status.xml
10:17 AM EST. 4/25/02: Routing instabilities on the Backbone. NOC is working
issue. No ETR at this time.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
>> No specific idea, but I did just watch
Sent: Saturday, April 06, 2002 04:50 PM
To: Andy Schmidt
Subject: Re: [Declude.JunkMail] Reverse DNS Lookup.htm
Hello Andy,
DSL.net, Inc. (NETBLK-DSLNET-6) DSLNET-6 65.84.0.0 -
65.86.255.255
H & M SYSTEMS SOFTWARE INC. (NETBLK-DSLNET-20020211-6)
DSLNET-20020211-0
Country: UNITED STATES
How I am searching:
Searching for 162.89.86.65.in-addr.arpa PTR at f.root-servers.net: Got
unknown result, sorry!
Title: Reverse DNS Lookup
Reverse DNS for 65.86.89.162Generated by www.DNSstuff.com
Country: UNITED STATES
How I am searching:
Searching for 162.89.86.65
er authoritative name server to
ns1.webhost.hm-software.com, instead it is using the NON-authoritative
information provided by ns1.dls.net.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http:/
NY browser in the world will display BLANKS:
Test
NameResultDetailsTTLTime
PTR
ABL
BLARSBL
BLITZEDHTTP
BLITZEDSOCKS
BLITZEDWINGATE
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses
>> There don't seem to be any problems from this end. Have there been
issues
before? When I go there, it shows a couple of timeouts (UIB/UIBOK), but
the rest return something. <<
Here is what I see:
Shouldn't I AT LEAST be seeing "Not Listed"?
Best Regards
An
Is the IP4r lookup broken again. I'm getting no lookup responses for
virtually ANY of the Spam databases - even after 10 retries:
http://www.dnsstuff.com/tools/ip4r.ch?ip=216.129.91.35
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E
FIRM action wouldn't
make things any WORSE than they are now. But, it would at least allow me to
"BOUNCE" more aggressively (where I currently may only use "ALERT") because
I would feel comfortable that the "bounced" email could still be delivered
after co
>> although most mail with a weight that high would have confirmations
bounce <<
Well - obviously, you would have to detect a valid conformation queue ID in
the SUBJECT line and if found, would let confirmations PASS - even if
NORMALLY that IP address would bounce.
Best Regards
uot;confirm" that this was valid email and the risk of losing any
important/time-critical email will be even less of an issue. This is 100
times better than some frustrated business partner having to contact the
postmaster and plead his case - he can STILL do that, but in the meantime,
the ema
rned emails.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Jim Matuska
Sent: Friday, March 22, 2002 10:51 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Bo
more likely than others to trip the
SPAMROUTING test.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Monday, March 18, 2002 01:16 PM
To: [EMAIL PR
t least 50 - 60% of the the queue IDs in my virus log are
messages indicating that there was a premature end of the MIME header.
Until we are able to isolate those messages and can convince myself of the
contrary, I will remain suspicious that this could be indicative of viruses
slipping by.
Best Re
he missing space between the " and the < or is it that it should
not be quoted at all?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from
/from Imail. All it does is inspect the IP header to get the sender's
IP - and, if necessary, will drop the connection to Imail and reply with an
error code to the sender.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message---
has the mailer issue resolved.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just sen
Scott,
but you ARE doing it already - that's why I see the log entry.
>
> >> Warning: EOF in middle of MIME segment [] <<
>
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED
>> Should a legitimate email ever fail both BADHEADERS and SPAMHEADERS? <<
That's pretty common - the two tests "overlap".
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send
esn't follow RFCs it's probably some freeware SPAM mailer.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mai
>> Declude just looks for a exact match <<
How about an IP whitelist?
Will
WHITELIST IP 127.0.0.1
ALSO imply that 127.0.0.10 - 19 and 100 - 199 are whitelisted?
If so, how do whitelist single digit host addresses (such as the above .1).
Best Regards
Andy
Is the following true:
Incoming Mail
%LOCALHOST% = %RECIPHOST%
%REMOTEHOST% = %SENDERHOST%
Outbound Mail
%LOCALHOST% = %SENDERHOST%
%REMOTEHOST% = %RECIPHOST%
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for
OST to the RCPT TO domain and
SENDERHOST to the envelope FROM domain?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailin
MTP server in the process is required to ADD additional headers
(such as "received"). The FINAL SMTP server in the process is required to
ADD the "Return-Path" header. (Imail does NOT add that header because it
stores that information in its Q* file. This alternate storage
OM to the RETURN PATH
header, so that any bounces AFTER completion of the SMTP process still know
where to send bounces to.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
uot;
addresses - there are just two different FORMATs of the SAME address.
Of course, Imail doesn't use the RETURN PATH - it relies on its Q* files to
store the envelope FROM.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was sc
for client replies, and the
Envelop FROM for server replies - why do we need a forth?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from th
could) have been set by the
originating SMTP server? In other words, that header could/should already
exists in the header and Imail should NOT add it upon receipt of inbound
mail.
If ANYTHING, Imail or Declude should add it to any OUTBOUND mail? Scott?
Best Regards
Andy Schmidt
Phone: +1 201
st Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED]
ender" an "official" header, or is Return-Path the proper header to
record the Envelope MAIL FROM. Please advise!
I want to record the envelope mail-from, but I want to do it correctly and
don't want to be redundant.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business
re is s typical SPAM
header:
Received: from s0260.pm0.net [199.236.13.43]
If I could add "pm0.net" and "hispeedmailer.com" and others to a new
"Reverse DNS" blacklist, then we wouldn't have to try to enter their
complete IP block one line at a time.
Best Reg
= NOERROR
header flags: query, want recursion
questions = 1, answers = 0, authority records = 0, additional = 0
QUESTIONS:
222.170.153.141.in-addr.arpa, type = PTR, class = IN
DNS request timed out.
timeout was 2 seconds.
timeout (2 secs)
SendRequest fai
.NS.UU.NET.
Searching for PTR record for 55.32/27.239.45.12.in-addr.arpa at
AUTH00.NS.UU.NET.: Reports mail.dextershoe.com.
etc.
(Let's overlook for a moment, that AUTH00.NS.UU.NET currently is actually
missing that zone )
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:
>> One person reported being able to send mail to multiple recipients with
an .eml file (using a comma between them, IE "To:
[EMAIL PROTECTED],[EMAIL PROTECTED]") <<
Yes, I have been doing this with success. It's actually documented!
---
[This E-mail was scanned for viruses by Declude Virus (ht
>> can anyone think of a better names than HEADER/FOOTER <<
Prolog/Epilog
Banner/Trailer
Top/Bottom
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
-Declude-Note: Heuristic spam detection level 10 [1.00]
X-RCPT-TO: <*** disguised ***>
X-UIDL: 948329397
Importance: Normal
X-RBL-Warning: This E-mail has headers consistent with spam [4202]. See:
http://www.declude.com/tools/header.php?code=40000202
X-IXS-Message-Id: OM:[EMAIL PROT
ent with spam [4202]. See:
http://www.declude.com/tools/header.php?code=40000202
X-IXS-Message-Id: OM:[EMAIL PROTECTED]
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
-
will result in a bounce. The
sending email address is never valid.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing
Scott,
I know you have been complaining about the WHOIS restrictions of Network
Solutions.
I don't know if you realize, but the following URL seems to be unrestricted:
http://www.netsol.com/cgi-bin/whois/whois?STRING=ipswitch.com&SearchType=do
Best Regards
Andy Schmidt
Phone: +
eir local ISP's SMTP server. Everything is fine, until they try to email
a co-worker and our MAILFROM test promptly detects this.
So I have MAILFROM set to HOLD instead of DELETE - only because the volume
of messages is not that high.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Bus
ginning of the globa.cfg file it would otherwise execute before
all the "weighted" tests were even evaluted?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
Th
MAILFROM Test
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". You can E-mail
[EMAIL PROTECTED] fo
Hi,
The Imail List Server is now being flagged as bad headers.
Received: from list.ipswitch.com [156.21.1.21] by hm-software.com with ESMTP
(SMTPD32-7.05) id A0A8493028E; Sat, 12 Jan 2002 03:15:36 -0500
Subject: SPAM: [See Headers] [IMail_Forum DIGEST]
Precedence: bulk
Sender: [EMAIL PROTECTE
John Olden wrote:
>> another software company that has this close of a tie with it's customers
and fixes problems this fast. <<
Yes - thanks Scott.
Of course, I paid for my annual maintenance agreement to support this kind
of service. Hope everyone else is?
Best Regards
An
Before you can ask:
Here a debug log with the "waiting for ip4r results" that's filling up the
MID level log:
01/10/2002 16:27:36 CFG: Setting LOG_OK level to NONE
01/10/2002 16:27:36 CFG: Set hop to 0 and hophigh to 0.
01/10/2002 16:27:36 Console turned OFF
01/10/2002 16:27:36 CFG: Setting
My log is now full of these lines:
01/10/2002 15:58:16 Q006638e Waiting for ip4r results
01/10/2002 15:58:21 Q006b38e Waiting for ip4r results
01/10/2002 15:58:30 Q007338e Waiting for ip4r results
01/10/2002 15:58:30 Q007338e HEUR8:3 . Total weight = 3
01/10/2002 15:58:30 Q007338e Msg failed HEU
Hm,
I may have more info on this.
I just noticed that ONE of my mailing list digests (external) suddenly comes
without attachments - in other words, an empty MAIL.
Here is the Imail Log entries for 00:00 to 00:01.
Please note the size in this entry:
01:10 00:00 SMTPD(0E7D033C) [130.160.4.249] D
These are the FIRST lines of any day's log file.
01/10/2002 00:00:55 SPAMHEADERS:3 HEUR10:4 . Total weight = 7
01/10/2002 00:00:55 (Error 5 at 40f08a v1.31)
01/10/2002 00:00:55 (log part 2 saved as C:\declude.gp2)
01/10/2002 00:00:55 (log part 1 saved as C:\declude.gp1)
01/10/2002 00:00:55
that
"innocent" people (who we bounced) can plead their case with us without
being bounced AGAIN!
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail
This sounds like a promising approach:
http://www.rhyolite.com/anti-spam/dcc/
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "un
Thanks - after running it for an hour I have yet to found any WEIGHT
problems.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "un
at January?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL
% -to %mailfrom% -from %mailto% -subject %subject%
(the above syntax is just pretense)
Best Regards
Andy Schmidt
H&M Systems Software, Inc.
600 East Crescent Avenue
Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.hm-sof
Scott,
why not make the mail program configurable - e.g., we could use BLAT or
similar freeware SMTP mailers. I am forced to use an INVALID email address
to avoid auto-responder loops and in my message tell people which address to
use instead of respond.
Best Regards
Andy
---
[This E-mail was
Scott:
>> This could be caused by the same problem as with the last message (the
global.cfg file being used), if it is set to just "WARN" without any custom
text. <<
You seem to be right on this point. Out of 15 spam messages that had
SPAMHEADERS/BADHEADERS that were allowed to pass through, I
Hi Scott:
>> It's a different problem than before. <<
Hm, but apprently a NEW one. It took my not more than 15 minutes to see
several cases of this appear. The 1.30-pre-release was successful for
hours without a single case!?
>> It seems that there is another issue that can cause the global.c
Title: STOCKPLAY - NU ELECTRIC CORPORATION
Scott:
Sorry - but
the 1.3.0 beta seems have to have broken the JunkMail feature in a number of
places again.
Problem 1:
As you can see from my $default$.junkmail file, I have
configured:
OSRELAY WARNBADHEADERS
WARN X-Declude-Note: %WARN
TP32.EXE
"D:\IMAIL\spool\Qc5162d6.SMD".
12/18/2001 17:37:54 Qc5162d6 Total Time: 1860ms
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Andy Schmidt
Sent:
Scott:
Every so often I match my config files to your samples. I see that you
added ORBL back in - but your IP4r page claims it no longer exists. Who is
right?
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail m
NG: Suspected SPAM. This E-mail was routed in a poor manner
consistent with spam [2103].
X-Declude-Sender: [EMAIL PROTECTED] [194.127.224.201]
X-Declude-Spoolname: Dfed609e.SMD
X-Declude-Note: Processed by Declude 1.30; remote host [No Reverse DNS]
X-RCPT-TO: <[EMAIL PROTECTED]>
Status:
Is there a variable such as %HeaderCode% so that my email notifications or
WARNING headers can include a string such as:
XRBL-Warning: %WARNING%
http://www.declude.com/tools/header.php?code=%HeaderCode%
?
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
Code: 2103. The E-mail (code 2103) didn't fail either the BADHEADERS
or SPAMHEADERS tests.
yet:
X-RBL-WARNING: Suspected SPAM. This E-mail was routed in a poor manner
consistent with spam [2103].
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 20
Here a third one - this one is even more drastic. Total weight is 22 - but
it does NOT trigger WEIGHT10! I'll hold off sending any more samples -
unless you need more:
OSRELAY:6 SPAMCOP:7 SPAMROUTING:4 REVDNS:5 . Total weight = 22
but only TWO "Msg Failed" logs - which add up to "9" - so WEIG
Another one:
SPAMCOP:7 . Total weight = 7
Yet - not "Msg Failed" log entry for SPAMCOP!
12/09/2001 15:40:33 CFG: Setting LOG_OK level to NONE
12/09/2001 15:40:33 CFG: Set hop to 0 and hophigh to 0.
12/09/2001 15:40:33 Console turned OFF
12/09/2001 15:40:33 CFG: Setting XINHEADER to X-Declu
e5172.SMD.
12/09/2001 15:39:14 Qcbe5172 Passing to SMTP3: D:\IMAIL\SMTP32.EXE
"D:\IMAIL\spool\Qcbe5172.SMD".
12/09/2001 15:39:14 Qcbe5172 Total Time: 1454ms
Best Regards
Andy Schmidt
H&M Systems Software, Inc.
600 East Crescent Avenue
Suite 203
Upper Saddle River, NJ 07458-1846
Phone
**
Click here to see another weight loss product:
http://weighout.81832.com
You are receiving this email as a subscriber
to the Opt-In America Mailing List.
To remove yourself from all related maillists,
just click here:
mailto:[EMAIL PROTECTED]?Subject=REMOVE
Best Regards
Andy Schmi
6194 Subject: INVESTIGATE YOUR NEIGHBOR
12/07/2001 11:00:51 Qe7a6194 From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED]
Why would Declude act differently for the SAME tests!
Best Regards
Andy Schmidt
H&M Systems Software, Inc.
600 East Crescent Avenue
Suite 203
Upper Saddle River, NJ 07458-1846
Okay, you may be right with that.
Would you mind looking at the enclosed two files. One represents a file
that HAS a 3D= the other does not.
I see that the Imail header DOES look different - so your explanation may be
correct.
Best Regards
Andy Schmidt
H&M Systems Software, Inc.
600
Best Regards
Andy Schmidt
H&M Systems Software, Inc.
600 East Crescent Avenue
Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.hm-software.com/
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
AMHEADERS WARNX-RBL-WARNING: Suspected SPAM. %WARNING%
SPAMROUTING WARNX-RBL-WARNING: Suspected SPAM. %WARNING%
HEURWARNX-RBL-WARNING: Suspected SPAM. %WARNING%
Best Regards
Andy Schmidt
H&M Systems Software, Inc.
600 East Crescent Avenue
Suite 203
Upper Sa
gital
signatures. That made a huge difference in the time it takes to open signed
mail in Outlook.
-Original Message-
From: Support [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 07, 2001 05:46 AM
To: 'Andy Schmidt'
Cc: Smart Business Support
Subject: email problems
Hi Andy,
I r
e "3D" before the IP
Address variable?
Best Regards
Andy Schmidt
H&M Systems Software, Inc.
600 East Crescent Avenue
Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.hm-software.com/
-Original Message-
From:
st Regards
Andy Schmidt
H&M Systems Software, Inc.
600 East Crescent Avenue
Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.hm-software.com/
D34e0498.GSC
Description: Binary data
--- Begin Message ---
Argos Networks
:15 Q5d582f0 Subject: Prescriptions Without Doctors
Appointment.
12/07/2001 01:11:15 Q5d582f0 From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED]
Best Regards
Andy Schmidt
H&M Systems Software, Inc.
600 East Crescent Avenue
Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414
No, you just have to customize the text to match your needs and then place
them in the \Imail\Declude\ subfolder.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf
Here is a few that we've been using.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Trevor Perraton
Sent: Tuesday, December 04, 2001 11:51 AM
To: [
It's working for my customers. The fact that the all of my customers have
been getting plenty of virus alerts from Declude/Virus certainly helped.
They trust our judgment, that we inspect and block email for good (and
easily AVOIDABLE!) reasons.
I have THREE very large domains for which I create
WARNX-RBL-WARNING: Suspected SPAM. %WARNING%
Best Regards
Andy Schmidt
H&M Systems Software, Inc.
600 East Crescent Avenue
Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.hm-software.com/
-Original Message-
nl.
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 301718581
Best Regards
Andy Schmidt
H&M Systems Software, Inc.
600 East Crescent Avenue
Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
http://www.hm-software.com/
---
This E-
0.
In-Reply-To: <[EMAIL PROTECTED]>
X-SLUIDL: 9A1DF51B-4ECC4782-89B78F8D-9BCF8DB4
X-Declude-Sender: [EMAIL PROTECTED] [63.84.125.200]
X-Declude-Spoolname: De37d174.SMD
X-Declude-Note: Processed by Declude 1.28; remote host [No Reverse DNS]
Best Regards
Andy Schmidt
Phone: +1 201 934-
ALLRECIPS should only show the ORIGINAL recipient
c) There should be a way to show the ENVELOPE "from" and the HEADER "from" -
and there should be a way to notify EITHER - IF they are different!
Best Regards
Andy Schmidt
H&M Systems Software, Inc.
600 East Crescent Avenu
Larry -
Declude is NOT where you prevent ORBZ from listing YOU.
Declude is, where YOU detect OTHER servers that have been listed.
You have to configure Imail itself for NO RELAY or RELAY ONLY FOR IP
ADDRESSES (whatever that option is called in the Imail config screens).
Only THAT will secure aga
ted.
Best Regards
Andy Schmidt
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
http://www.declude.com/JunkMail/manual.htm
Scroll down to "Tests".
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit ou
but I just want to let you know that I am NOT ignoring your
valid point.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type &q
Hi Scott:
Sorry to keep bugging you - I just noticed that AT LEAST for the
WEIGHT10bounce.eml the %FULLMSG% tag seems not be effective?
I'm enclosing the message template AND a generated email - and as you
can see - NO original messages was appended.
Best Regards
Andy Schmidt
Phone
Oops - sorry. In fact, it's only checking the EXPIRY. That's a feature/bug
of Office XP. There is a registry entry or some other place where this
delay can be turned off. Sorry, I don't have it handy right now - but you
may need it eventually.
-Original Message-
From: [EMAIL PROTECTE
Hi Scott:
okay - after testing this in DEBUG mode vs. MID log level - I can
confidently say:
- if you're running in MID log level, you are apparently not clearing
some work variable or resetting some accumulator. Virtually ALL total
weights are incorrect.
- if you're running in DEBUG log level
The DECLUDE.GP* files only contain a few garbled characters - but may be the
debug log helps zooming in? (PS: Never let me test )
11/06/2001 19:07:16 CFG: Setting LOG_OK level to NONE
11/06/2001 19:07:16 CFG: Set hop to 0 and hophigh to 0.
11/06/2001 19:07:16 Console turned OFF
11/06/2001 19:
In case you need more - weight is 14 - but WEIGHT10 does NOT fail message!
I still believe it has something to do with the fact, that the final
recipient is an forwarding alias to an external domain. The first example
was forwarded to @aol.com this one to @fcc.net!
11/06/2001 19:52:59 CFG: Se
Okay, I think I have a debug log that shows where the WEIGHT10 was NOT
triggered, even though the total weight was 10.
At one point it says:
11/06/2001 19:54:38 Q86454a8 SPAMHEADERS:3 SPAMROUTING:4 HEUR8:3 . Total
weight = 10
But later on it says:
11/06/2001 19:54:38 Q86454a8
I defined
SWITCHRECIP ON
but it's still using
Declude\$default$.junkmail
instead of
Declude\WebsterWatch.com\$default$.junkmail
11/06/2001 20:45:25 CFG: Setting LOG_OK level to NONE
11/06/2001 20:45:25 CFG: Set hop to 0 and hophigh to 0.
11/06/2001 20:45:25 Con
>> The easiest way to debug this would be to send an E-mail from the IP
address in question, with the Declude debugging turned on. <<
Here it is - as you can see, it DOES recognize the whitelist:
11/06/2001 18:27:57 Q71fb3de Testing whitelist 2 63.107.174.
11/06/2001 18:27:57 Q7
erim version that has the weight
information added to the headers <<
Only do it if it helps YOU. I can wait.
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On
BOUNCE
WEIGHT10BOUNCE
WEIGHT8 SUBJECT SPAM: [See Headers]
REVDNS ALERT
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Tuesday, Novem
cipient. <<
It seems the default is ON. Because in MY case it's now using the ACTUAL
recipient - and I do NOT have SWITCHREP defined at all.
If this switch were to work as you describe (ON = ACTUAL, OFF/Null =
INTENDED), then it should be using the intended recipient - and it does
801 - 900 of 968 matches
Mail list logo
