[Declude.JunkMail] Are COUNTRY and COUNTRIES used in same filter cumulative?

2004-04-27 Thread Dan Geiser
Hello, All, If I have X-COUNTRY-CHAIN enabled and I create a filter file which has entries like... COUNTRY50CONTAINScl COUNTRIES50CONTAINScl and I received a piece of e-mail directly from "cl" would the total points added to the weight of the e-mail be 100 or 50? I'd like to have e-mail

Re: [Declude.JunkMail] Are COUNTRY and COUNTRIES used in same filter cumulative?

2004-04-27 Thread R. Scott Perry
If I have X-COUNTRY-CHAIN enabled and I create a filter file which has entries like... COUNTRY 50 CONTAINS cl COUNTRIES 50 CONTAINS cl and I received a piece of e-mail directly from cl would the total points added to the weight of the e-mail be 100 or 50? It would be 100. The filters are

[Declude.JunkMail] Message Not Failing HELOBOGUS

2004-04-27 Thread Dan Geiser
Hello, All, Can someone tell me why the below message did not fail the HELOBOGUS test? - Received: from BLUEJACKET [68.252.33.244] by NexusTechGroup.com (SMTPD32-6.06) id A55B7740146; Tue, 27 Apr 2004 07:34:51 -0400SUBJECT: Symantec AMS AlertMessage-Id: [EMAIL PROTECTED]X-RBL-Warning:

Re: [Declude.JunkMail] Message Not Failing HELOBOGUS

2004-04-27 Thread R. Scott Perry
Can someone tell me why the below message did not fail the HELOBOGUS test? - Received: from BLUEJACKET [68.252.33.244] by NexusTechGroup.com (SMTPD32-6.06) id A55B7740146; Tue, 27 Apr 2004 07:34:51 -0400 X-Declude-Sender: mailto:[EMAIL PROTECTED][EMAIL PROTECTED] [68.252.33.244] This one

[Declude.JunkMail] New Trojan

2004-04-27 Thread jcochran
There's a new trojan floating around with the subject of Osama bin Laden Captured and a link to photos which is actually a trojan. So far easy enough to filter with JunkMail, but this has hit a number of law enforcement agencies and is apparently very tempting, a number of users have opened

RE: [Declude.JunkMail] New Trojan

2004-04-27 Thread Goran Jovanovic
Is there a way to make two tests linked together? In this case the SUBJECT 0 CONTAINSOsama bin Laden Captured And a BODY0 CONTAINSlink to pictures (whatever the link is) So for the test to trip both conditions would have to be true? In this case

RE: [Declude.JunkMail] New Trojan

2004-04-27 Thread jcochran
Is there a way to make two tests linked together? In this case the SUBJECT 0 CONTAINSOsama bin Laden Captured And a BODY 0 CONTAINSlink to pictures (whatever the link is) So for the test to trip both conditions would have to be true? In

Re: [Declude.JunkMail] Are COUNTRY and COUNTRIES used in same filter cumulative?

2004-04-27 Thread Dan Geiser
Scott, Thanks, as always, for your quick replies. On a related note: I know that COUNTRY allows you to check against the last (or direct) country in the country chain before the message was delivered to the recipient mail host. and I know that COUNTRIES allows you to check against all

Re: [Declude.JunkMail] Are COUNTRY and COUNTRIES used in same filter cumulative?

2004-04-27 Thread R. Scott Perry
Has there been any consideration given to creating a filter keyword similar to COUNTRY and COUNTRIES which allows you to check against all countries in the country chain EXCEPT the last (or direct) country? This isn't something that we had thought of doing, but we will look into it.

[Declude.JunkMail] Validate Email address

2004-04-27 Thread Terry Parks
Weve noticed our server delivering email to other accounts even though its addressed to an invalid account. Anyone know how to get Declude or Imail to check the TO: line against the servers Imail address database? Were using Imail 7.14 on a 2003 box and using the Imail user database.

Re: [Declude.JunkMail] WHITELISTFILE Question

2004-04-27 Thread Chuck Shaffer
Scott I was testing the WhitelistLile and found if an entry has an extra space at the end it's not whitelisted. @domain.com @domain.com doesn't whitlistfile Trim leading trailing spaces? Chuck - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent:

Re: [Declude.JunkMail] WHITELISTFILE Question

2004-04-27 Thread R. Scott Perry
I was testing the WhitelistLile and found if an entry has an extra space at the end it's not whitelisted. @domain.com @domain.com doesn't whitlistfile Trim leading trailing spaces? Not in the whitelistfile. -Scott --- Declude JunkMail: The

Re: [Declude.JunkMail] WHITELISTFILE Question

2004-04-27 Thread R. Scott Perry
I have a IM rule, if header contains whitelisted the move to mailbox main But this now sends sent mail from Web messaging to main mailbox not the sent folder. Is there a way to allow the whitelisted message to the user, and still go to the correct folder? I'm not very familiar with IMail rules,

RE: [Declude.JunkMail] Validate Email address

2004-04-27 Thread Colbeck, Andrew
Title: Message If you have JunkMail Pro, and thus text filtering, you could do what I do for a case that soundssimilar to yours. We have a domain which has very few email addresses, and spammers regularly try a certain set of addresses that simply never existed, along with CC'ing or

Re: [Declude.JunkMail] WHITELISTFILE Question

2004-04-27 Thread Chuck Shaffer
Scott I have a IM rule, if header contains whitelisted the move to mailbox main But this now sends sent mail from Web messaging to main mailbox not the sent folder. Is there a way to allow the whitelisted message to the user, and still go to the correct folder? Chuck - Original Message

Re: [Declude.JunkMail] Validate Email address

2004-04-27 Thread Sanford Whiteman
Anyone know how to get Declude or Imail to check the TO: line against the servers Imail address database? You're talking about local addresses in the RFC 822 To: header being matched against the local userbase? It would make more sense to match it against the list of valid

[Declude.JunkMail] How accurate is spamcop

2004-04-27 Thread Doris Dean
Is it safe to simply delete an email flagged with spamcop? TIA Doris

Re: [Declude.JunkMail] How accurate is spamcop

2004-04-27 Thread R. Scott Perry
Is it safe to simply delete an email flagged with spamcop? Someone earlier today received an E-mail from Ipswitch that failed the SPAMCOP test. So I would say no. It's a very good test, but not perfect. -Scott --- Declude JunkMail: The

RE: [Declude.JunkMail] How accurate is spamcop

2004-04-27 Thread Kevin Bilbee
You should never delete a message based on a single test. Especiall spamcop, although spam co is verry accruate it still has false positives. A message that gets flaged by smpacop gets placed in our hold queue for later review. Kevin Bilbee -Original Message-From: [EMAIL

RE: [Declude.JunkMail] How accurate is spamcop

2004-04-27 Thread John Tolmachoff \(Lists\)
NO! John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Doris Dean Sent: Tuesday, April 27, 2004 1:33 PM To: Declude Subject: [Declude.JunkMail] How accurate is spamcop Is

Re: [Declude.JunkMail] How accurate is spamcop

2004-04-27 Thread Scott Fisher
My April totals, show it is 99.4% effective. Which is very good for a test. Could be bad news if your mail is in the other 0.6%. I've seen ipswitch.com, online.com, united.com, bcentral.com, tigeronline.com all fail the SPAMCOP test as 4 other sites in my agriculture world. That said, I do

Re: [Declude.JunkMail] How accurate is spamcop

2004-04-27 Thread Doris Dean
Can I take from your email that you delete after a weight of 20? - Original Message - From: Scott Fisher [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, April 27, 2004 1:43 PM Subject: Re: [Declude.JunkMail] How accurate is spamcop My April totals, show it is 99.4% effective.

Re: [Declude.JunkMail] How accurate is spamcop

2004-04-27 Thread Matt
SpamCop has a serious problem with blacklisting large ISP mail servers. Just yesterday I had three false positives partially caused by SpamCop weighted at about 45% of my hold weight for the domains in question, and hitting E-mail coming from adelphia.net, wanadoo.fr and netvision.net.il, all