Scott,
Thank you. I have been doing these type of excludes/fixes with some
other filters that I download (and I had to create the excludes) and
here SURBL already has it built in.
Wow. Updated the exclude list and DONE.
Thanx
Goran Jovanovic
The LAN Shoppe
-Original
and that resolved the problem. Also as Andrew mentioned you cannot
search/match on a leading space.
MIME attachments are in the BODY of the message.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf
Got it.
Goran Jovanovic
The LAN Shoppe
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
Sent: Thursday, July 15, 2004 4:15
PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] List
Test
checking the list. I have not seen a
message
99,000 + e-mails.
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe
Matt,
What about a DELTREE command? You would do it from the directory above
and so you should not even have to go into the directory in question.
Not sure how well or poorly it would perform.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED
or correct me
on the last statement that I made.
Goran Jovanovic
The LAN Shoppe
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Guhl, Markus (LDS)
Sent: Tuesday, July 06, 2004 2:27
AM
To: [EMAIL PROTECTED]
Subject: AW: [Declude.JunkMail]
Filter with a traling space
of it? Are there
exceptions to this?
From your manual you say ...filtertype can be CONTAINS,
STARTSWITH, ENDSWITH, or IS... but only CONTAINS is going to be
effective in the BODY since there is only 1 STARTSWITH and only 1
ENDSWITH? Do I understand this correctly?
Thanx
Goran Jovanovic
The LAN
there also
wants to use them. I have a similar set for your wordmask filter.
Goran Jovanovic
The LAN Shoppe
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan
Sent: Tuesday, July 06, 2004 2:58
AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail
Oopps
OK thanks I will have to fix that little oversight.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Tuesday, July 06, 2004 7:18 AM
To: [EMAIL PROTECTED
Unfortunately, I see many uneducated people sending real mail without
anything in the subject line. Note sure if that would translate into a
blank or a null subject line.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail
have any idea on how common
a space in the encoding would be?
Thanx
Goran Jovanovic
The LAN Shoppe
image001.gif
by Declude JunkMail version 1.79i7
X-Note: Total spam weight of this E-mail is 27.
X-Note:
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com
instance (and someone can correct me) where incoming mail
will legitimately have my servers IP address in the HELO string. Therefore it
is SPAM and time to kill it.
Goran Jovanovic
The LAN Shoppe
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd
Sent
Title: Message
That makes sense. If you see a reason to
allow e-mail in when its HELO is from your own IP address let me know as
I am blocking it immediately
Thanx
Goran Jovanovic
The LAN Shoppe
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
='storytext' colspan='2'HEWLETT PACKARD CANADA/td
And so the $ from the Unit $ is getting
put together with the Ext and thereby getting a $ex out of it? Why would JunkMail
not see the space that is shown in the Heading above (BTW I am not an HTLP
programmer)?
Thanx
Goran Jovanovic
The LAN
Scott,
In the title bar in the message there is a space (more than one in
fact). How come then you strip out the HTML codes the space disappears?
Or maybe I should ask the question how does the space show up in the
mail message in the first place?
Thanx
Goran Jovanovic
The LAN
I just went there with Symantec 9 installed with the Jun 16, 2004
signatures installed it detected the download.ject Threat. SO IE 6 SP1
was going to run it but my AV caught and killed it.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED
I
have to go searching?
I will post my grep command after I get it to work (after I get it to
work).
Thanx
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew
Sent: Wednesday
John,
This is only going to work for domains hosted on the IMail server and
not domains that are store and forwarded. Right?
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of John
final.txt
Now if this is all I had to do OK fine but over time I am going to
accumulate more things to remove. So is there any way to pass the find
command a list of things to remove and do it all in one shot?
Thanx
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses
ATTACH spamattach2.eml
Hey Scott what about this as a new feature request?
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Kami Razvan
Sent: Saturday, June 19, 2004 7:24 AM
To: [EMAIL
Also if I so not want these tests to show up in the %TESTSFAILED%
variable then would I add
HIDETESTS WEIGHT1019 WEIGHT2029..
And would I need to put in the $default$.junkmail file
WEIGHT1019 LOG
Correct. Note that you could simply not include the WEIGHT1019 line
in
the
per domain? Anything?
Thanx
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe
WEIGHT1019 LOG
I do not want to bother putting a line in the headers but I want to have
them in the log file for reporting.
Thanx
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from
but know I can make per-domain
changes or global changes and run the batch file and all done
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)
Sent: Tuesday, June 15
that I can tell
users to create a rule to move it to a separate folder in their e-mail
system.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Chuck Schick
Sent: Tuesday, June 15, 2004 10:32
Thank you it does help
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Adrian Titei
Sent: Tuesday, June 15, 2004 9:08 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Dell
Goran Jovanovic
The LAN Shoppe
One of my clients is getting hammered big time with NULL MAILFROM. They
are all NDRs from all over the place. Yesterday 56% of his mail was NDRs
Total Messages: 3009
TEST # FAILED Percentage
NULLMAILFROM.1680
generated by spoofed
sender SPAM. So going back to my original desire to weed out bad NDRs
from good NDRs this will not do it. Right?
Sorry its late and I am sort of rambling.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED
/business_updates/2004/06-June/11/images/shim.gif
http://dell.email-link.ca/cgi-bin2/DM/y/hhMW0EbdxG0Kos0CD6G0As
I am waiting to get back the full headers
Why would they encode the subject line
like that?
Has anyone else seen the domain
dell.email-link.ca?
Thanx
Goran Jovanovic
:
a
href=http://www.pll8782.info/faq_files/approved/index.html;http://www.
usbank.com/internetBanking/RequestRouter?requestCmdId=DisplayLoginPage/
a
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came
and they
can be used to send malicious strings in the MAILFROM field.
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL
Drive
Patch it to same level
Restore the IMail directories to D Drive
Check all drive references
Start Services
This should move all the mail and users etc etc
Obviously fix all the Declude filter paths etc.
Will this work?
Thanx
Goran Jovanovic
The LAN Shoppe
---
[This E-mail
Tom,
Is there more in the registry than under
HKLM\Software\Ipswitch\.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Tom Baker | Netsmith Inc
Sent: Friday, June 11, 2004 12:07
.cz
My questions:
Is this the best way?
COUNTRIES and not COUNTRY will check every mail hop?
And the biggest question will this do what the client wants?
Thanx
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com
??
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Markus Gufler
Sent: Wednesday, June 09, 2004 11:33 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Blacklist one Country for one
Scott,
Can I name a filter something like:
SPECFIC-DOMAIN.COM
Using the .
Or do I have to stick with -
SPECFIC-DOMAIN-COM
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from
Thank you all for the input
I got so caught up with the filtering that I forgot about the per-domain
blacklist capability.
So all I did was to add a .cz to the blacklist file for that domain and
it took care of it. Got to remember the big picture :)
Goran Jovanovic
The LAN Shoppe
This is the first log line for an e-mail that I used for testing.
06/09/2004 14:59:54 Q5e1f12a8012e3b47 Filter NIGERIAN: Skipping E-mail
with a current weight of 68 (=48)
Since this is the first filter in the global.cfg how did the weight
start off at 68???
Goran Jovanovic
The LAN
itself as in the SMTP handshakes.
Or were you looking at changing something else?
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
Sent: Wednesday, June 09, 2004 5:35 PM
I found this arriving today.
X-Declude-Sender:
[66.205.198.196]
Is there a way to punish
e-mails with a null sender? Is it appropriate to do that?
Internally on the From field it shows up
as Secret Markets [EMAIL PROTECTED]
Goran Jovanovic
The LAN Shoppe
you are going to have the be
constantly figuring out which one did what and I think it will make it
more complicated
Anyway only my opinion.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf
Andrew,
I assume that the list you sent you use as a FROMFILE test?
Do you bother with a weight or are all these domains VERY bad and you
just delete if it is on the list?
Thanx
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED
Why did this fail HELOBOGUS?
Received: from CATOAVS100.corp.ingramcan.com [199.166.196.130] by
bigdee.com
(SMTPD32-8.10) id A944228100AE; Thu, 03 Jun 2004 15:17:24 -0400
Is it because CATOAVS100.corp.ingramcan.com cannot be resolved?
Goran Jovanovic
The LAN Shoppe
---
[This E
and they would wade through it. Although I
suppose that could be done with a WEIGHT10 ROUTETO
[EMAIL PROTECTED] in that domain's config.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of R
Slightly off this topic but if I have the all_list.dat file in my
declude directory but I do not any COUNTRY/COUNTRIES filters then
X-Country-Chain: Somewhere-Otherwhere-destination
Will show up in the headers but no points will be added to the score of
the e-mail. Right?
Goran
Great thank you
Goran Jovanovic
The LAN Shoppe
2345 Yonge Street, Suite 302
Toronto, Ontario M4P 2E5
Phone: (416) 440-1167 x-2113
Cell: (416) 931-0688
E-Mail: [EMAIL PROTECTED]
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail
Is order in a filter important for these
commands? Specifically can I have the END in front of the SKIPIFWEIGHT and
MAXWEIGHT?
ALLRECIPS END NOTCONTAINS @domain.com
SKIPIFWEIGHT 60
MAXWEIGHT 60
ANYWHERE 14 CONTAINS Blue Pill
Goran Jovanovic
The LAN Shoppe
image001
Excellent.
Thank you Scott.
Hope you had a relaxing trip and are recharged and ready to go (sure
seems like it :) )
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent
: Fri, 14 May 2004
15:51:20 -0400
MIME-Version: 1.0
X-Mailer: Internet
Mail Service (5.5.2656.59)
Content-Type:
multipart/mixed;
boundary=_=_NextPart_000_01C439EC.C3B973B4
Goran Jovanovic
The LAN Shoppe
image001.gif
I have a better idea. Make the spammers put the word SPAM at the
beginning of the subject line (regardless of content) then it would make
it really easy for filters..
All I have to say is this is going to be very usefulNOT
Goran Jovanovic
The LAN Shoppe
?
2) If the test is executed for all domains then will the score of the
test be added to e-mails for all domains?
3) If 2 is true then do I have to add TESTNAME IGNORE to all other
domain's config files to not count the score?
Thanx
Goran Jovanovic
The LAN Shoppe
---
[This E-mail
it in
global.cfg. It is a filter test that is going to add scores of 5 to 50
depending on what it does. I only want the test to apply to one domain so that
I can test it out. How do I do this? Can I do this?
Goran Jovanovic
The LAN Shoppe
2345 Yonge Street, Suite 302
Toronto, Ontario M4P 2E5
You have
WEIGHT10HOLD
WEIGHT20HOLD
In your .junkmail file. Could it be that the WEIGHT20 is nullifying the
WEIGHT10?
You certainly could remove the WEIGHT20 line as the WEIGHT10 will handle
it.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From
OK this is what I really wanted to know. Guess
I should have asked that in the first place.
I will go and get the latest interim
and then check it out J
Thanx
Goran Jovanovic
The LAN Shoppe
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf
When you use this I assume it is on the IMail server?
Does the ASP work with IMail's web server or do you have to make IIS
work in the mix? I have not even installed IIS and am not sure how it
would react on the same machine, badly I think.
Goran Jovanovic
The LAN Shoppe
Would it work on the same machine if it had two IP addresses and you
restricted IMail to one of them and IIS to the other?
Goran Jovanovic
The LAN Shoppe
2345 Yonge Street, Suite 302
Toronto, Ontario M4P 2E5
Phone: (416) 440-1167 x-2113
Cell: (416) 931-0688
E
It looks like our block is listed and not specifically our IP. I will
have to see if I can get our IP de-listed
There is a company that one of our users is trying to send to and they
do an outright block as soon as the MAIL FROM is entered... sigh
Goran Jovanovic
The LAN
Kevin,
I tried the link below and was unable to get there???
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
Sent: Tuesday, May 18, 2004 2:20 PM
To: [EMAIL PROTECTED
Uh I should have seen that but I am trying to do too many things at the
same time.
Thanx
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
Sent: Tuesday, May 18, 2004 2:39
messages in that mailbox since last Monday at 6:30 PM.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Scott Fisher
Sent: Monday, May 17, 2004 12:44 AM
To: [EMAIL PROTECTED]
Subject: RE
it?.
Thanx
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Scott Fisher
Sent: Monday, May 17, 2004 12:49 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] f-prot
I find the Mcafee
McAfee was only $11.00 for the year so the
price barrier is non-existant and I see from your and Scott's
responses that there are indeed reasons to have more than one scanner.
Thank you all
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED
Anyone have any experience with SPEWS.ORG? It seems that the IP address
of our server we are using is listed in SPEWS. Has anyone ever got
themselves de-listed?
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com
Scott,
I am interested in what you are doing with this filter? Obviously you
are checking if an incoming e-mail is for someone and assigning 20
points to it, but why?
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail
Hi,
Does anyone know how to do this? If an HTML mail arrives in Outlook how
can you look to see what the HTML source is? I have looked and do not
see any View Source and the Save as options did not work.
Thanx
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses
Duh ... looked everywhere but there.
Thanx
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Erik
Sent: Wednesday, May 12, 2004 8:03 PM
To: [EMAIL PROTECTED]
Subject: RE
Thanx Kevin,
Got to love the hoops we sometimes have to go through
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
Sent: Wednesday, May 12, 2004 8:19 PM
To: [EMAIL
Hmmm me too. I had problems earlier this week and then it came back.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Rick Hogue
Sent: Wednesday, May 12, 2004 11:01 PM
To: [EMAIL
with an attachment? There is
Content-Type: application/msword;
Which I could key on? I would also have to add one for Excel etc. So is
the following correct?
HEADERS -10 CONTAINS Content-Type: application/msword;
Is there a better way to do this?
Thanx
Goran Jovanovic
The LAN Shoppe
Thank you. I looked through some older messages and found the same
answer.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Scott Fisher
Sent: Monday, May 10, 2004 4:19 PM
To: [EMAIL
[EMAIL PROTECTED]
NEWTESTWARN
Is there anyway to accomplish this?
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail
Is there anyway to accomplish this?
Create two tests with different names, same definition.
I take it the test would be called twice then? And the score would be
doubled?
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http
there.
Goran Jovanovic
The LAN Shoppe
2345 Yonge Street, Suite 302
Toronto, Ontario M4P 2E5
Phone: (416)
440-1167 x-2113
Cell: (416)
931-0688
E-Mail: [EMAIL PROTECTED]
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of serge
Sent: Saturday, May 08, 2004
I am using the ATTACH command with the default spamattach.eml file. Is
there a method to specify a different .eml file? I would like to have
one per domain or for testing etc.
Thanx
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http
Scott,
Then let me add that to the request for enhancement pile.
Thanx
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Thursday, May 06, 2004 3:34 PM
To: [EMAIL
Hi,
I am doing store and forward (gateway) processing for multiple domains.
What is the best way NOT to do JunkMail for a domain? I may only want to
do Virus scanning for that particular domain.
Thanx
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses
John,
WHITELISTTO if it is an incoming domain (which means it is hosted on the
IMail server?)
WHITELISTFROM if it is just passing through?
Right?
Thanx
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED
Yes but now I am watching THE O.C. and thinking about SPAM tests
Thanx
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)
Sent: Wednesday, May 05, 2004 9:17
will whitelist it for all domains. Is there a way to do it by
domain and preferably in a file?
Thanx
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list
Can you whitelist IP addresses via a file in global.cfg or only inline?
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Friday, April 30, 2004 4:30 PM
To: [EMAIL
filtering on the SUBJECT will catch this mail but of course
anything with the same text.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Tuesday, April 27, 2004 11:02
John,
Do you have a filter that searches for URLs in the BODY and that is what you added it
to?
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)
Sent: Saturday
OK what am I missing? There is no console? There are only config files
and filters.
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)
Sent: Saturday, April 24
it
as
a) not in the base global.cfg downloadable file
b) not using Hijack
But I will put it in anyway.
Thanx
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)
Sent: Saturday, April
Scott,
The performance isn't as important as the reliability, which isn't
that
high. I would recommend using BIND instead (we actually run BIND on
our
IMail server, and it works flawlessly).
I thought that BIND was the DNS that runs on *NIX. I guess they have
ported it.
Is BIND free?
Scott,
I working on trapping more Nigerian Scams.
What would you do in a filter? Search the body for phrases that are
found in these types of e-mails?
Goran
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail
Scott,
The easy answer to this is to use your own DNS servers -- if you do
(and
they are decent DNS servers; BIND is preferred), you won't be subject
to
the restrictions of ATT, Sprint, and others that block spam database
lookups.
Since we are running IMail (ie Windows) what is the
OK I think I was somehow reversed in my tinking
Goran Jovanovic
The LAN Shoppe
Goran Jovanovic wrote:
This is parts of a header I received and I just want to check a few
things
So the spammer thought that he would use my IP address in the HELO
line
205.150.108.8
Well, you might also have a WHITELIST action, or a WEIGHT action for a
high
value that does a DELETE.
I guess what is important is to find out the precedence of the ACTION
keywords. So if a WEIGHT10 is set with a DELETE action and the test that
you are testing has a WEIGHT of 1 and the
.
X-Country-Chain:
Organization: The LAN Shoppe
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED
Think of it this way -- if you used the HOLD action for E-mail with a
weight of 5 or higher, and the DELETE action for E-mail with a weight
of
10
or higher, which action would you want taken on an E-mail with a
weight of
25?
In your description I would want the DELETE taken.
I was
through me. Right?
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe
Todd,
Would you mind sending me a copy of the spamdomain.txt file as well? I
would like to see what you have as a starting point.
Thanx
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf
Scott,
If you have both JunkMail and Virus are you able to block/delete an
incoming mail message if the attachment had a virus? Actually do you
need JunkMail at all in this condition?
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http
\declude\lanshop.com\whitelist.txt
BL-LANSHOP DELETE
Not sure if this has been asked before or if I am just doing things the
hard way.
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from
(hopefully bringing it down to 25).
Do you folks mark and send some mail to users, hold some and delete
some? Or do you just hold and delete? If you can share some weight
ranges with me I would appreciate.
Thanx
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses
Scott,
http://www.declude.com/relnotes.htm
Is this the permanent link for the release notes? Currently it is
pointing at the 1.78 notes. Are there notes for 1.79?
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com
things loser so that I do not
delete real stuff and as I learn more I will tighten the screws.
Thanx again
Goran Jovanovic
The LAN Shoppe
2345 Yonge Street, Suite 302
Toronto, Ontario M4P 2E5
Phone: (416) 440-1167 x-2113
Cell: (416) 931-0688
E-Mail: [EMAIL
I simply copied a current DEC.log file into the directory I create
for WAMLOG and ran
Wamlog dec0416.log
And it produced a file wamlog.txt in the same directory
Goran Jovanovic
The LAN Shoppe
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail
201 - 300 of 310 matches
Mail list logo