RE: [Declude.JunkMail] ED Spam Expression

Try this ... (?i:\b(?!dick?)(m(\W?|_){0,3}e(\W?|_){0,3}g(\W?|_){0,[EMAIL PROTECTED])?(\W?|_){0,3}d(\ W?|_){0,3}[|li1í!](\W?|_){0,3}[ck]{1,2}\b) Will match on obfuscated dick (ie. D!ck) but NOT dick, can include mega obfuscated. David -Original Message- From: [EMAIL PROTECTED]

[Declude.JunkMail] Postmaster Spoofed Returns

Does anyone have any suggestions on how to stop returned email on spoofed email addresses for our domain. I was going to setup a rule but it would catch good and bad alike... Thanks, Kevin --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to

RE: [Declude.JunkMail] Postmaster Spoofed Returns

I suppose the detection of any remnants of the original spam is going to be a manual process...correct? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, September 27, 2007 9:08 AM To: declude.junkmail@declude.com Subject: Re:

[Declude.JunkMail] User getting flagged for spam from WiFi locations

I have a user that has a laptop. When they are on the local network they have no problems sending email, however, if they use WiFi or broadband the email is flagged as spam after failing several checks. I cannot whitelist his email address because it is being spoofed by spammers. Anyone know of a

RE: [Declude.JunkMail] User getting flagged for spam from WiFi locations

fax [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Stanford Sent: Tuesday, September 25, 2007 8:35 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] User getting flagged for spam from WiFi locations I have a user

[Declude.JunkMail] SMD files showing up in different directories

In August I upgraded to version 4. Since that time I have smd files showing up in the root of C:. Here is a copy of the header: X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2670 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670 X-Declude-Sender:

RE: [Declude.JunkMail] Upgrade to version 4 causes processor to skyrocket

now it is down to about 1 - 2 minutes. Thanks, Kevin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Stanford Sent: Tuesday, August 21, 2007 11:11 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Upgrade to version 4 causes

RE: [Declude.JunkMail] Upgrade to version 4 causes processor to skyrocket

was the fact you increased your threads. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Stanford Sent: Thursday, September 20, 2007 9:56 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Upgrade to version 4 causes processor

[Declude.JunkMail] SPF (Fail or Pass)

I am not really sure how to set this up but I would like to make sure that if a domain has an spf record that it is checked and if it is not legit it is immediately marked as spam. Also, is it possible to do this on my domain as I get a lot of spoofed email to my domain using my domain as a return

[Declude.JunkMail] Upgrade to version 4 causes processor to skyrocket

Hi all, Since upgrading to Declude Version 4 (from version 3) my processor has really taken a hit (runs about 90-100%). I used the default Global.cfg file and just moved over the Whitelist stuff as well as a few rules that I have. Looking at the Task Manager is consistently shows decludeproc.exe

RE: [Declude.JunkMail] Upgrade to version 4 causes processor to skyrocket

declude.cfg file. Are you still using the same setting in that file from Version 3? Has your mail volume increased? Darrell Kevin Stanford wrote: Hi all, Since upgrading to Declude Version 4 (from version 3) my processor has really taken a hit (runs about 90-100%). I used the default Global.cfg

[Declude.JunkMail] Allow only 3 countries

Hi all, I would like to allow only 3 countries into our mail server and block all others without using any weighting. Basically I want to Blacklist all countries except 3 but still filter on the three. Thanks for any help offered. Kevin --- This E-mail came from the Declude.JunkMail mailing

[Declude.JunkMail] Reverse Blacklist (sorta whitelist)

What changes would I need to make in the $defalut$.junkmail and the global.cfg file to only allow email from IPs originating from Mexico, United States and Canada but still check for SPAM? And if this is possible can I stop all other country lookups? Thanks, Kevin --- This E-mail came from

RE: [Declude.JunkMail] may skip - 1

The problem I have is I have spam getting through that should have been caught by these filters and I cannot figure out why. Lately we have had a lot of spam passing the filters. Is there a time out in the dnsbl lookup that it will pass the spam if the test cannot be run? This started about 2 - 3

[Declude.JunkMail] may skip - 1

Could anyone tell me why these test would be skipped? Thanks, Kevin 11/08/2006 11:37:07.874 Q15c3521000fc8cbd Test #0: WHITLEIST [FROM] - may skip-1 11/08/2006 11:37:07.874 Q15c3521000fc8cbd Test #1: AHBL [ip4r] - may skip-1 11/08/2006 11:37:07.874 Q15c3521000fc8cbd Test #2: BLITZEDALL [ip4r] -

RE: [Declude.JunkMail] may skip - 1

: Kevin Stanford [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Wednesday, November 08, 2006 3:39 PM Subject: [Declude.JunkMail] may skip - 1 Could anyone tell me why these test would be skipped? Thanks, Kevin 11/08/2006 11:37:07.874 Q15c3521000fc8cbd Test #0: WHITLEIST [FROM] - may

[Declude.JunkMail] Blackholes test

I have declude setup to block by country using the blackholes dnsbl. It appears that blackholes is having intermittent problems staying up thus allowing spam to get through. Does anyone have a work around to block by IP address by country? Seems like I read somewhere about setting up a private dns

[Declude.JunkMail] Whitelist our domain on private network

Is there a way to whitelist our domain within our private network but will still catch spam that is forging our domain? I have a lot of spam that is forging our domain but sometimes I get false positives with our users here and I have to sort through a huge list of spam to find them. Thanks for

[Declude.JunkMail] Whitelisting our Domain

If we whitelist our domain will Spam that spoofs our email addresses and domain also be whitelisted? If so, how can I circumvent it? Thanks, Kevin --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe

Re: [Declude.JunkMail] Whitelisting our Domain

on all clients and configure Junkmail to whitelist AUTHing users. If not, but all mail comes in from static IPs, you could use an IP whitelist to bypass for those IPs. Darin. - Original Message - From: Kevin Stanford [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday

Re: [Declude.JunkMail] Earthlink Porn Spam

It looks like this is coming from Korea. I don't know if you are able but we blocked many foreign IP addresses and this cut down on our SPAM dramatically without any false positives so far. We have no need to communicate with countries outside of North America. Hope this helps... Kevin At 03:21

Re[2]: [Declude.JunkMail] OT: Pete McNiel's Product Proposal

PST files blow up magically at a certain number of messages - I forget how many, but that's one of the reasons I'm never going near Outlook Actually it is the pst file size. OutlookXP 2 gig limit Outlook2003 20 gig limit Kevin --- [This E-mail was scanned for viruses by Declude Virus

Re: [Declude.JunkMail] Blocking IPs based on Country

Ok...so would I put this line in my Global.cfg file: china ip4r china.blackholes.com * 10 0 Thanks for the help! Kevin At 11:13 AM 09/30/2004, you wrote: While I don't recommend it, as I've seen false positives from blocking entire countries, you could use: an IP4R test using

[Declude.JunkMail] Websense

I installed Websense yesterday and since then I have been getting email stopped because it cannot find the MX record. Here is a sample: 03/04/2004 14:07:38 Q8c7c04700342f0a4 WARNING: DNS server 10.100.1.16 returned a SERVER FAILURE error for MX or A for bmccapital.com. Websense is filtering

[Declude.JunkMail] Fwd:

Is anyone doing anything about these messages. I am getting more and more by the day! Thanks, Kevin Received: from mail.stevenstransport.com [10.100.1.17] by mail.stevenstransport.com (SMTPD32-6.00) id AD69710A015C; Sun, 08 Jun 2003 14:24:25 -0500 Received: FROM declude.com BY

Re: [Declude.JunkMail] Fwd: Blank Emails from Declude

I would recommend switching that poor mailserver to IMail (or any other mailserver that will include the IP address in the headers, which is almost all of them). My poor mail server is IMail v6. I received about 95 of these blank emails since last Friday with different received times, I have