] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Friday, June 15, 2007 11:16 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
Smartermail had made a change to the .hdr file in the way that CMDSPACE was
being reported, I am currently testing the fix
E: [EMAIL PROTECTED]
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Monday, April 09, 2007 1:17 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
David,
Has any progress been made
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
David,
Has any progress been made on this issue? Using SmarterMail Enterprise
3.3.2439 and Declude 4.3.23, I still am not seeing CMDSPACE getting any hits.
Gary Steiner
Original Message
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
I am looking for more information regarding this issue.
Is this unique to the SM Enterprise Edition?
Also, does it seem to be related to a specific version of Declude?
Any help with this would
Ditto
Mike
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
Here.
Running SmarterMail 3.3.2369, Declude 4.2.3.
Shayne
Original Message
From: Michael Jaworski [EMAIL PROTECTED]
Sent: Tuesday, November 14, 2006 7:55 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
Anyone using SmarterMail
Of David
Barker
Sent: Monday, November 13, 2006 7:19 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
I am looking for more information regarding this issue.
Is this unique to the SM Enterprise Edition?
Also, does it seem to be related to a specific
:[EMAIL PROTECTED] On Behalf Of Goran
Jovanovic
Sent: Friday, November 10, 2006 5:44 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
My understanding from quite a while ago is that SmarterMail did not pass the
CMDSPACE info on to Declude (somehow). So
Michael,
If you have anything being held as spam, that folder will contain the *.hdr
ad *.eml files. Look at one of the *.hdr files to see whether it contains a
mention of CMDSPACE. That is how SmarterMail has been passing that
information to Declude. If it is there, send us a copy of the *.hdr
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] CMDSPACE/SmarterMail
Michael,
If you have anything being held as spam, that folder will contain the *.hdr
ad *.eml files. Look at one of the *.hdr files to see whether it contains a
mention of CMDSPACE. That is how SmarterMail has been
I'm also using SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14, and
have had CMDSPACE configured for quite a while, but hadn't thought anything
about it. When I saw your message I ran DLanalyzer on my logs for the past two
weeks and saw that there were no hits for CMDSPACE at all.
I see that too, I will look into this.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Friday, November 10, 2006 2:27 PM
To: declude.junkmail@declude.com
Subject: re: [Declude.JunkMail] CMDSPACE/SmarterMail
Thanks Gary!
It is a Declude holiday. We might hear something from them Monday.
M
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Friday, November 10, 2006 11:27 AM
To: declude.junkmail@declude.com
Subject: re: [Declude.JunkMail
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
I see that too, I will look into this.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Friday, November 10, 2006 2:27 PM
-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Friday, November 10, 2006 3:40 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
Thanks, David. It's little things like this short acknowledging message
that can go miles towards
Hi,
I would like to ask those that having been using CMDSPACE; what percentage
of your weight do you assign to this?
Zero. I have backup and anti virus software using Microsoft DLLs which have
the same bug.
So if I were to use the CMDSPACE it would push some mails to my subject
If you're able to whitelist (by IP or AUTH-ed users) all users who connect from
inbound to outbound to your server then you can use a very high weight for this
test. I give 50% of my hold weight for the test and add additional points if
there is a combination with certain other test. For
'skipifweight'
Erik
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gufler Markus
Sent: Monday, January 09, 2006 12:30 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] CMDSPACE Percent of Weight based on your
(DELETE) action
If you're able
If you're using CDONTS, switch to CSOSYS. You'll be much happier.
Darin.
- Original Message -
From: Bonno Bloksma [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Wednesday, November 16, 2005 6:26 AM
Subject: Re: [Declude.JunkMail] CMDSPACE Failures
Hi,
If MS were to fix
Another way that you could deal with this specific Microsoft
Office Outlook build is to create a filter that contains the
following:
HEADERS -8 CONTAINS Microsoft Office Outlook,
Build 11.0.5510
...but keep in mind that some Spammers write in the headers exactly this
David Barker wrote:
Christian,
Another way that you could deal with this specific Microsoft Office Outlook
build is to create a filter that contains the following:
HEADERS -8 CONTAINS Microsoft Office Outlook, Build 11.0.5510
As a suggestion to limit the collateral damage I would
If MS were to fix it, we wouldn't be detecting a lot of the spam. So, while
on one hand it would be nice if it were fixed... on the other hand the
CMDSPACE test wouldn't be catching nearly as much.
WHITELIST AUTH and custom filters to negate specific senders and servers
that fail this test is
Travis,
This is a known issue - you should auth / whitelist auth all of your local
clients that connect/send email through your mail server.
Darrell
---
Check out http://www.invariantsystems.com for utilities for Declude And
Imail. IMail Queue
Monitoring, Declude Overflow Queue Monitoring, SURBL/URI
integration, MRTG Integration, and Log Parsers.
- Original Message -
From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Sunday, October 23, 2005 6:06 PM
Subject: Re: [Declude.JunkMail
My users get a lot of legit emails that get flagged with both these and
then end up with a weight of 12 and get put in their bulk folder. I mean
a lot. Just regular emails sent from Aetna.com, Principal.com, other big
insurance carriers. Should I reduce the weight of them? Are they working
Thanks. How do I increase the COMMENT threshhold?
Darrell ([EMAIL PROTECTED]) wrote:
My users get a lot of legit emails that get flagged with both these
and then end up with a weight of 12 and get put in their bulk
folder. I mean a lot. Just regular emails sent from Aetna.com,
By the way, I do use WHITELIST AUTH for my own users, but the CMDSPACE
test flags emails sent from other people to our users. So I guess I
don't understand how WHITELIST AUTH would help in that situation.
Darrell ([EMAIL PROTECTED]) wrote:
My users get a lot of legit emails that get flagged
Kevin,
The comments test is defined as
COMMENTS comments a x b 0
where a = the number of comments that are required to add b amount of
weight to the message.
Darrell
-
invURIBL - Intelligent URI filtering. Stops 85% of SPAM with
Generally in regards to this test poorly written spam software and some non
compliant clients fail this test - but legit mail servers often do not. Up
to this point I have not seen a false positive from a legit mail server.
Have others? Usually folks sending mail to you will push it through
: [Declude.JunkMail] CMDSPACE
Generally in regards to this test poorly written spam software and some non
compliant clients fail this test - but legit mail servers often do not. Up
to this point I have not seen a false positive from a legit mail server.
Have others? Usually folks sending mail to you
I weight CMDSPACE at 40 (subject tag at 100, hold at 200, delete at 300).
I show about a 3% false positive rate which includes some list servers. Also
seems to tend combine with helo-bogus and spamheaders hits.
It did detect 43% of all spams here.
I don't use comments...
- Original
, 2005 11:57 AM
Subject: Re: [Declude.JunkMail] CMDSPACE
Kevin,
The comments test is defined as
COMMENTS comments a x b 0
where a = the number of comments that are required to add b amount of
weight to the message.
Darrell
-
invURIBL
Sent: Wednesday, August 24, 2005 11:57 AM
Subject: Re: [Declude.JunkMail] CMDSPACE
Kevin,
The comments test is defined as
COMMENTS comments a x b 0
where a = the number of comments that are required to add b amount of
weight to the message.
Darrell
Up to this point I have not
seen a false positive from a legit mail server.
Have others?
Yes.
Older version of Tobit Infocenter has failed CMDSPACE. I've send them some
informations about the effectiveness of the CMDSPACE test and as I know they
have changed their MTA in never releases.
If their is a space in one of the commands where there should not be per the
RFC's during the smtp transaction it will cause this test to be failed. One
thing to note Outlook fails this test every time so you should compensate
for this.
Darrell
---
According to a note I found in the archives, CMDSPACE needs Imail v8, with
SMTP-Authentication, and AUTOWHITELIST ON in global.cfg to work correctly.
Otherwise, you get false positives from Outlook clients.
Not quite correct. AUTOWHITELIST is not needed in conjunction with CMDSPACE.
However,
I was wondering what exactly the CMDSPACE test is. I wasn't able to
find anything about it in the Junkmail manual..
It's part of the latest beta, which means that it is currently only covered
in the release notes ( http://www.declude.com/relnotes.htm ) and on the
mailing list.
According to a note I found in the archives, CMDSPACE needs Imail v8, with
SMTP-Authentication, and AUTOWHITELIST ON in global.cfg to work correctly.
Otherwise, you get false positives from Outlook clients.
As we are not on Imail v8, I ran into that problem. I handled it by reduced
the weight on
I'm curious what caused this message to fail CMDSPACE?
It failed because the mailserver sending the E-mail doesn't follow the RFCs
exactly (specifically, it had a space in one of the SMTP commands where it
should not have).
-Scott
---
Declude
So the problem is with the sending mail server at 64.72.97.82, not the
sending client (OE 6)? Just trying to understand.
Glenn Z.
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, April 14, 2004 12:46 PM
Subject: Re: [Declude.JunkMail
So the problem is with the sending mail server at 64.72.97.82, not the
sending client (OE 6)? Just trying to understand.
The E-mail came from 64.72.97.82, so the SMTP software running on there is
at fault (it could be a mail client or a mail server -- SMTP does not
distinguish between the
Now when I look inthe logs I see this:
03/31/2004 11:32:03 Qf2702a4 Tests failed [weight=5]: CMDSPACE=WARN
03/31/2004 11:32:09 Qf27f25e Tests failed [weight=5]: CMDSPACE=IGNORE
Why do some lines show Ignore, and others Warn??
That's because Declude JunkMail chooses the actions based on each
Hello guys,
I may be wrong but I think I read somewhere on the list that an email
failed the CMDSPACE test when it shouldn't have?
Would somebody mind checking these headers to see if this email should
have failed the CMDSPACE test also? If you need anything else please let
me know, Thanks!
I may be wrong but I think I read somewhere on the list that
an email failed the CMDSPACE test when it shouldn't have?
As I know all - or at least most - Microsoft Outlook clients that connect
directly to your Imail-Server will fail the CMDSPACE test.
The solution: Use Imail v8 with
They also fail the helobogus. These would not normally be a problem
because the vast majority of clients are within our dialup/xDSL or lease
line range that is already white listed. This client unfortunately has
broadband through another provider!
I had a (mini) brain storm and added WHITELIST
The solution: Use Imail v8 with SMTP-Authentication and
Declude Junkmail Pro with the parameter AUTOWHITELIST ON in
the global.cfg file.
Sorry
I meant WHITELIST AUTH instead of AUTOWHITELIST ON
Markus
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
I had a (mini) brain storm and added WHITELIST AUTH to
declude, but it didn't work. When I checked the declude
release notes it stated you needed Imail 8. We have Imail 8,
but it isn't installed yet.
?
WHITELIST AUTH can work only if you use SMTP-Authentication to allow
relaying trough
WHITELIST AUTH can work only if you use SMTP-Authentication
to allow relaying trough your server.
Yep I know. But as we're only using Imail 6 ATM the WHITELIST AUTH does
not work (although the clients are authing).
If your clients connects from a defined IP range(s) you can
use the same
The reason WHITELIST AUTH only works with Imail 8 and above is
because Imail
adds a line in the Q file in version 8 and above indicating the sender
authenticated to Imail.
It does not add a line it changes the S to an A at the beginning ot the
envelope sender line.
Kevin Bilbee
---
49 matches
Mail list logo
