Define "foreign". If I am in the U.S. then is Canada foreign? If I am in
England is Germany foreign? About the only way is to have some default
weight for all unlisted countries (possibly 0) and then add weights to all
the ones you don't trust.
-Josh
- Original Message -
From: <[EMAIL PR
Okay, I understand. Currently it is only single IP addresses or a full
class "C" and nothing else, due to the matching scheme that is used.
Thanks for the clarification.
Bill
-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]]
Sent: Monday, March 18, 2002 4:20 PM
To: [EM
>So does that mean that you can use a subnet mask to define a logical subnet
>or supernet for IP whitelisting?
No. Declude JunkMail currently uses an exact match, looking for an IP that
contains the exact text you specify. It was originally designed for single
IPs ("192.168.101.48"), but can
So does that mean that you can use a subnet mask to define a logical subnet
or supernet for IP whitelisting? E.g.:
No: xxx.xxx.xxx.128/25 Yes: xxx.xxx.xxx.128 255.255.255.128
No: xxx.xxx.xxx.0/23Yes: xxx.xxx.xxx.0 255.255.254.0
Bill
-Original Message-
From: R. Scott Perry [mailto:
>Scott, although that would be the easy way, it appears Bennie only has
>half of that block.
>
>Unless I am mistaken, 12.105.213.128 to 12.105.213.255 is the block with
>255.255.255.128 as the subnet mask.
Yes, you are correct.
-Scott
---
[This E-mail was scanned for vir
Scott, although that would be the easy way, it appears Bennie only has
half of that block.
Unless I am mistaken, 12.105.213.128 to 12.105.213.255 is the block with
255.255.255.128 as the subnet mask.
John Tolmachoff
IT Manager, Network Engineer
211 E. Imperial Hwy., Suite 106
Fullerton, CA 928
>Is there a way to include a space between the word I put in the Subject
>field and the
>original subject field?
If you add a space at the end of the line, that should work. For example,
"WEIGHT10 SUBJECT SPAM " instead of just "WEIGHT10 SUBJECT SPAM".
>Can I put more than one word in the Su
Adding weight for foreign email would be great.
A country by country weight would be even better if there were a "default"
weight for foreign countries so we wouldn't have to set a weight for every
country.
[EMAIL PROTECTED]
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMA
Is there a way to include a space between the word I put in the Subject field and the
original subject field?
Can I put more than one word in the Subject field? Example:
WEIGHT10SUBJECT "This message may be junkmail"
Currently my configuration looks like this:
WEIGHT10SUBJEC
>Hey Scott... Can you whitelist a block of ip's.
>
>the block I am thinking about is
>
>12.105.213.128 subnet 128
You can't whitelist subnets based on the CIDR (such as
12.105.213.128/25). However, in this case you could have a line "WHITELIST
IP 12.105.213.", which would whitelist all IP
Hey Scott... Can you whitelist a block of ip's.
the block I am thinking about is
12.105.213.128 subnet 128
Bennie
- Original Message -
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, February 19, 2002 2:21 PM
Subject: Re: [Declude.JunkMail] Whiteli
I tried to do exactly this with a fromfile list of TLDs a couple of weeks
ago, but crashed miserably on the rocks of .co matching to .com as well. A
way to weight individual countries differently would be even better.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On
Perhaps you could have a weight table.. perhaps in a seperate text file
called countries.txt or whatever and have all the country names that might
appear followed by a weight. Then have an "other" that would be for anything
that doesn't match or if something went wrong figuring out what country th
I think the weight option would work well.
It could be used in conjunction with the rest of the tests.
John Tolmachoff
IT Manager, Network Engineer
211 E. Imperial Hwy., Suite 106
Fullerton, CA 92835
714-578-7999, ext. 104
[EMAIL PROTECTED]
www.reliancesoft.com
-Original Message-
F
We use Message Sniffer and the following configuration in
$default$.junkmail with very good results...
SNIFFER HOLD
#SNIFFERSUBJECT [SPAM:SNIFFER]
RBL FOOTER [SPAM ALERT RBL - SENDER FOUND IN RBL DATABASE]
DUL FOOTER [SPAM ALERT DUL - SENDER FOUND
Scott,
You know...it must be the "just too tired" thing I mentioned. I hate when I
do stupid things like that. I know "fromfile" was there originally because
I cut/pasted directly from the manual web page. Somewhere along the line I
must have cut when I should've copied or something because it
Hi Scott:
I'm not certain that a country "black list" would be sensible (even though
it's tempting). Who can say for certain that they will NEVER get a legit
email from someone in China - EVEN if it is just from someone logging in
from a hotel and sending a trip report from their vacation, or a
I am just starting to setup declude Junkmail and am looking for some
feedback as to what everyone is running for their rules configuration. I
would like to block most of the junk that is coming into our domain but try
not to block anything legitimate. I have tried a couple different settings
suc
Several people have requested a way for Declude JunkMail to identify E-mail
from certain countries that commonly send a lot of spam. We did not work
on this in the past, as most companies can not block all E-mail from
certain countries. However, with the weighting system, this may be a
usefu
I've seen short replies before, but this one sets a new standard for brevity
- Original Message -
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, March 18, 2002 10:50 AM
Subject: Re: [Declude.JunkMail] F-Prot not catching W95/FBound.c@mm
> [Replied to
[Replied to on the Declude.Virus mailing list]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". Yo
It could also be another case of Declude's MIME decoder garbling an
imperfect MIME attachment to the point that the command line decoder can't
recognize the virus. If you still have the virus file in your mailbox, be
certain NOT to delete it so that Scott can inspect it.
I see that at least 50 -
Warning: We just noticed that F-Prot running on our mail server under
Declude let through the W95/FBound.c@mm virus named as an attachment
patch.exe yet it was caught immediately by F-Prot's Real Protector on the
desktop. Both installations of F-Prot are displaying the same set of macro
definitio
>I'm attempting to set up a couple black lists per the documentation. Can't
>seem to get this to do anything...
>
>1) In GLOBAL.CFG, added:
>
>BLHOLD D:\IMail\Declude\BLHOLD.txt x 5 0
That's where the problem is. The test definitions are always in the format
"TESTNAME TESTTYPE ...". So in
>The Klez.E virus, and maybe some other ones, fake the "from" address when
>they are sent. Would it be possible to allow administrators the option to
>send or not send virus warning messages depending upon the virus?
This has been added to the suggestion database. I can't say for sure
if/when
I'm attempting to set up a couple black lists per the documentation. Can't
seem to get this to do anything...
1) In GLOBAL.CFG, added:
BLHOLD D:\IMail\Declude\BLHOLD.txt x 5 0
2) Created file called D:\IMail\Declude\BLHOLD.txt with contents:
[EMAIL PROTECTED] These guys are shadey.
3) Ch
Scott,
The Klez.E virus, and maybe some other ones, fake the "from" address when
they are sent. Would it be possible to allow administrators the option to
send or not send virus warning messages depending upon the virus?
Thanks,
Greg
---
[This E-mail scanned for viruses by Declude Virus]
---
Does anyone have a utility that will scan the log file and extract only the
items you specify.
I am looking to extract Subject line, the to: from: line for all that have a
wiegh that exceeds my limit.
Fred
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
28 matches
Mail list logo