I'm attempting to set up a couple black lists per the documentation. Can't
seem to get this to do anything...
1) In GLOBAL.CFG, added:
BLHOLD D:\IMail\Declude\BLHOLD.txt x 5 0
2) Created file called D:\IMail\Declude\BLHOLD.txt with contents:
[EMAIL PROTECTED] These guys are shadey.
3)
The Klez.E virus, and maybe some other ones, fake the from address when
they are sent. Would it be possible to allow administrators the option to
send or not send virus warning messages depending upon the virus?
This has been added to the suggestion database. I can't say for sure
if/when this
I'm attempting to set up a couple black lists per the documentation. Can't
seem to get this to do anything...
1) In GLOBAL.CFG, added:
BLHOLD D:\IMail\Declude\BLHOLD.txt x 5 0
That's where the problem is. The test definitions are always in the format
TESTNAME TESTTYPE So in this
Warning: We just noticed that F-Prot running on our mail server under
Declude let through the W95/FBound.c@mm virus named as an attachment
patch.exe yet it was caught immediately by F-Prot's Real Protector on the
desktop. Both installations of F-Prot are displaying the same set of macro
[Replied to on the Declude.Virus mailing list]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. You
I've seen short replies before, but this one sets a new standard for brevity
g
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, March 18, 2002 10:50 AM
Subject: Re: [Declude.JunkMail] F-Prot not catching W95/FBound.c@mm
[Replied to on
Several people have requested a way for Declude JunkMail to identify E-mail
from certain countries that commonly send a lot of spam. We did not work
on this in the past, as most companies can not block all E-mail from
certain countries. However, with the weighting system, this may be a
Hi Scott:
I'm not certain that a country black list would be sensible (even though
it's tempting). Who can say for certain that they will NEVER get a legit
email from someone in China - EVEN if it is just from someone logging in
from a hotel and sending a trip report from their vacation, or a
Scott,
You know...it must be the just too tired thing I mentioned. I hate when I
do stupid things like that. I know fromfile was there originally because
I cut/pasted directly from the manual web page. Somewhere along the line I
must have cut when I should've copied or something because it
We use Message Sniffer and the following configuration in
$default$.junkmail with very good results...
SNIFFER HOLD
#SNIFFERSUBJECT [SPAM:SNIFFER]
RBL FOOTER [SPAM ALERT RBL - SENDER FOUND IN RBL DATABASE]
DUL FOOTER [SPAM ALERT DUL - SENDER FOUND
I think the weight option would work well.
It could be used in conjunction with the rest of the tests.
John Tolmachoff
IT Manager, Network Engineer
211 E. Imperial Hwy., Suite 106
Fullerton, CA 92835
714-578-7999, ext. 104
[EMAIL PROTECTED]
www.reliancesoft.com
-Original Message-
Perhaps you could have a weight table.. perhaps in a seperate text file
called countries.txt or whatever and have all the country names that might
appear followed by a weight. Then have an other that would be for anything
that doesn't match or if something went wrong figuring out what country the
I tried to do exactly this with a fromfile list of TLDs a couple of weeks
ago, but crashed miserably on the rocks of .co matching to .com as well. A
way to weight individual countries differently would be even better.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL
Hey Scott... Can you whitelist a block of ip's.
the block I am thinking about is
12.105.213.128 subnet 128
Bennie
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, February 19, 2002 2:21 PM
Subject: Re: [Declude.JunkMail] Whitelisting
Hey Scott... Can you whitelist a block of ip's.
the block I am thinking about is
12.105.213.128 subnet 128
You can't whitelist subnets based on the CIDR (such as
12.105.213.128/25). However, in this case you could have a line WHITELIST
IP 12.105.213., which would whitelist all IPs
Is there a way to include a space between the word I put in the Subject field and the
original subject field?
Can I put more than one word in the Subject field? Example:
WEIGHT10SUBJECT This message may be junkmail
Currently my configuration looks like this:
WEIGHT10SUBJECT
Adding weight for foreign email would be great.
A country by country weight would be even better if there were a default
weight for foreign countries so we wouldn't have to set a weight for every
country.
[EMAIL PROTECTED]
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL
Is there a way to include a space between the word I put in the Subject
field and the
original subject field?
If you add a space at the end of the line, that should work. For example,
WEIGHT10 SUBJECT SPAM instead of just WEIGHT10 SUBJECT SPAM.
Can I put more than one word in the Subject
Scott, although that would be the easy way, it appears Bennie only has
half of that block.
Unless I am mistaken, 12.105.213.128 to 12.105.213.255 is the block with
255.255.255.128 as the subnet mask.
John Tolmachoff
IT Manager, Network Engineer
211 E. Imperial Hwy., Suite 106
Fullerton, CA
So does that mean that you can use a subnet mask to define a logical subnet
or supernet for IP whitelisting? E.g.:
No: xxx.xxx.xxx.128/25 Yes: xxx.xxx.xxx.128 255.255.255.128
No: xxx.xxx.xxx.0/23Yes: xxx.xxx.xxx.0 255.255.254.0
Bill
-Original Message-
From: R. Scott Perry
So does that mean that you can use a subnet mask to define a logical subnet
or supernet for IP whitelisting?
No. Declude JunkMail currently uses an exact match, looking for an IP that
contains the exact text you specify. It was originally designed for single
IPs (192.168.101.48), but can
Okay, I understand. Currently it is only single IP addresses or a full
class C and nothing else, due to the matching scheme that is used.
Thanks for the clarification.
Bill
-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]]
Sent: Monday, March 18, 2002 4:20 PM
To:
Define foreign. If I am in the U.S. then is Canada foreign? If I am in
England is Germany foreign? About the only way is to have some default
weight for all unlisted countries (possibly 0) and then add weights to all
the ones you don't trust.
-Josh
- Original Message -
From: [EMAIL
23 matches
Mail list logo
