[Declude.JunkMail] Wordfilter RouteTo
Title: Message hi; Two simple questions for Beta 1.56: In the Word Filter: WEIGHT15SUBJECT [SPAM]WEIGHT15ROUTETO [EMAIL PROTECTED] We get the RouteTo emails but they are not marked as SPAM. The above is in the $default$.junkmail file. Also: In the WordFilter: BODY5CONTAINSADULT MATERIAL Does one need quotes around the target word or Declude takes the entry as is. I believe it is safe to assume that the word is filtered exactly as is rather than the words being combined using AND/OR. In other words, it is not the presence of both words rather than the exact entry of "Adult Material". Regards, Kami
Re: [Declude.JunkMail] Wordfilter RouteTo
WEIGHT15 SUBJECT [SPAM] WEIGHT15 ROUTETO mailto:[EMAIL PROTECTED][EMAIL PROTECTED] We get the RouteTo emails but they are not marked as SPAM. The above is in the $default$.junkmail file. That is correct. You can see the Multiple actions per test section of the manual for information on how to accomplish that by having multiple copies of the same test. In the WordFilter: BODY 5 CONTAINS ADULT MATERIAL Does one need quotes around the target word or Declude takes the entry as is. No quotes are necessary. Declude looks at everything after the CONTAINS. I believe it is safe to assume that the word is filtered exactly as is rather than the words being combined using AND/OR. Yes, that is correct. In other words, it is not the presence of both words rather than the exact entry of Adult Material. Correct. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Allowing all sites through
Quick Question... I have one domain that does not want to use the spam filtering...how do I allow just one of the virtual domains on the email server to not use the spam filtering...seems like I heard on this group to just make a domain folder for them and not include the global.cfg fileis this correct? And should I put any other file in their folder? Glenn Brooks WebWize, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
KITHRUP:RE: [Declude.JunkMail] mailfrom failing
You might make a myfilter.txt entry that gives a negative weight to that particular domain. I have a similar problem where a client uses a mainframe to send out txt messages. It fails badheaders and REVDNS constantly. I gave it a -15 weight and now the messages go through from that server. HTH Jim Rooth Klotron, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Josh Piche Sent: Tuesday, July 23, 2002 9:18 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] mailfrom failing MessageHoping someone can explain this. We're having messages sent to us from Air Canada, specifically electronic tickets from [EMAIL PROTECTED], fail the mailfrom test. However, an nslookup (using the same dns iMail uses) for aircanada.ca shows both MX and A records. Here's the log entries: 07/22/2002 14:44:05 Q527302d7013e817a Msg failed MAILFROM (Domain AIRCANADA.CA has no MX/A records.). 07/22/2002 14:44:05 Q527302d7013e817a Msg failed REVDNS (This E-mail was sent from a mail server 206.47.209.234 with no reverse DNS entry.). 07/22/2002 14:44:05 Q527302d7013e817a Msg failed WEIGHT9 (Weight of 17 reaches or exceeds the limit of 9.). 07/22/2002 14:44:05 Q527302d7013e817a Msg failed WEIGHT14 (Weight of 17 reaches or exceeds the limit of 16.). 07/22/2002 14:44:05 Q527302d7013e817a Subject: AIR CANADA - ELECTRONIC TICKET ITINERARY/RECEIPT 07/22/2002 14:44:05 Q527302d7013e817a From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] The dns lookup looks like this: aircanada.canameserver = ns.RezoNet.NET aircanada.canameserver = ns.InterLink.NET aircanada.ca primary name server = ns.InterLink.NET responsible mail addr = root.ns.InterLink.NET serial = 2002072203 refresh = 3600 (1 hour) retry = 900 (15 mins) expire = 2419200 (28 days) default TTL = 3600 (1 hour) aircanada.caMX preference = 30, mail exchanger = mail.q aircanada.caMX preference = 10, mail exchanger = mail.a aircanada.cainternet address = 206.45.20.197 aircanada.canameserver = ns.RezoNet.NET aircanada.canameserver = ns.InterLink.NET ns.RezoNet.NET internet address = 198.168.54.8 ns.InterLink.NETinternet address = 198.168.73.8 mail.qc.uunet.cainternet address = 198.168.54.17 mail.qc.uunet.cainternet address = 198.168.54.16 mail.aircanada.ca internet address = 206.47.209.234 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.377 / Virus Database: 211 - Release Date: 7/15/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.377 / Virus Database: 211 - Release Date: 7/15/2002 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] mailfrom failing
MessageHoping someone can explain this. We're having messages sent to us from Air Canada, specifically electronic tickets from [EMAIL PROTECTED], fail the mailfrom test. However, an nslookup (using the same dns iMail uses) for aircanada.ca shows both MX and A records. What is the primary DNS server listed in the IMail SMTP settings? It may be that the DNS server has corrupt entries for AIRCANADA.CA. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Allowing all sites through
Scott, I think this will solve a problem I'm having but is I have another one now... ;) Here is my dilemma; I have 3 weighted tests. WEIGHT10 is warn WEIGHT20 Adds Text to the subject line WEIGHT30 Deletes the e-mail Now even when I whitelist FROM @company.com it can still get the text added to the subject line. Does this make sense? I need it so that if its whitelisted from @company.com their e-mails won't even be scanned... Is this possible? Thanks, Aaron Caviglia -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Tuesday, July 23, 2002 7:33 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Allowing all sites through I have one domain that does not want to use the spam filtering...how do I allow just one of the virtual domains on the email server to not use the spam filtering...seems like I heard on this group to just make a domain folder for them and not include the global.cfg fileis this correct? Actually, there is now an easier way with the latest release (1.53) -- you can add a line WHITELIST TODOMAIN @example.com, which will whitelist all E-mail to the @example.com domain. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] OT Cold Fusion log parser
Anyone ever wrote a cold fusion log parser for dec.log files? I am thinking of one that will easily search for entries like WEIGHTXX test and return all the info for the particular Q###(or more in Imail7) file. Craig. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] mailfrom failing
The primary for Imail is our own dns server, 204.92.1.144. I used the same dns server to do my lookup in the original message. Josh - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 23, 2002 10:36 AM Subject: Re: [Declude.JunkMail] mailfrom failing MessageHoping someone can explain this. We're having messages sent to us from Air Canada, specifically electronic tickets from [EMAIL PROTECTED], fail the mailfrom test. However, an nslookup (using the same dns iMail uses) for aircanada.ca shows both MX and A records. What is the primary DNS server listed in the IMail SMTP settings? It may be that the DNS server has corrupt entries for AIRCANADA.CA. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Whitelisted - why?
Scott, any chance that the "FROM hm-software.com" whitelist picked up on the Return-Path: 36-809-hm-software.com?[EMAIL PROTECTED] ? Obviously, the intent is to ONLY whitelist things that END with "hm-software.com". WHITELISTANYWHERE [EMAIL PROTECTED]WHITELISTIP63.107.174.WHITELISTIP65.86.89.162WHITELISTFROMhm-software.comWHITELISTFROMger-studioline.net#WHITELISTFROMt-online.deWHITELISTFROMnetworksolutions.comWHITELISTFROMverisign.net#WHITELISTIP128.192.1.101WHITELISTIP130.160.4.249WHITELISTIP199.232.158.102WHITELISTFROMnytimes.comWHITELISTIP148.100.1.2WHITELISTIP64.65.65.2WHITELISTFROMlists.cnn.comWHITELISTFROMtimeinc.comWHITELISTFROMdeepmetrix.comWHITELISTIP67.89.150.4WHITELISTFROMuni.deWHITELISTIP206.242.213.5WHITELISTIP206.64.5.31WHITELISTFROMstellenmarkt.deWHITELISTIP64.119.137. WHITELISTFROMfx-solutions.com 07/23/2002 15:51:14 Qb3ab045201d434d3 SPAMCOP:7 HEUR9:3 WEIGHTFILTER:8 . Total weight = 1807/23/2002 15:51:14 Qb3ab045201d434d3 This E-mail was whitelisted - automatically passing all spam tests -Original Message- Received: from stdout-03.superstorespecials.com [198.64.151.132] by hm-software.com (SMTPD32-7.07) id A3AB45201D4; Tue, 23 Jul 2002 15:51:07 -0400From: ContentAudit [EMAIL PROTECTED]Subject: Advisory: Hidden file dangerTo: [EMAIL PROTECTED]X-Track: 36;GSGOGEBHRLBVGVGNGKGHGEBEEQGNGKCKBVGLGGBEBBGSBCGRCOGVGLGKMIME-Version: 1.0Content-Type: multipart/alternative; boundary="102745310521054"X-vmp-Text: yesDate: Tue, 23 Jul 2002 15:51:07 ESTX-Mailer: 0.35 [Jul 4 2002, 21:14:52]Message-ID: 809$[EMAIL PROTECTED]X-Declude: Version 1.56i; Db3ab045201d434d3.SMD from stdout-03.superstorespecials.com. [198.64.151.132]Return-Path: 36-809-hm-software.com?[EMAIL PROTECTED]X-RCPT-TO: [EMAIL PROTECTED]Status: UX-UIDL: 323387411 From: ContentAudit [mailto:[EMAIL PROTECTED]]Sent: Tuesday, July 23, 2002 04:51 PMTo: [EMAIL PROTECTED]Subject: Advisory: Hidden file danger You are receiving this message because while visiting SuperStoresSpecials' partner site, Mindseti, you opted in to receive special online information and discounts.As a member of SuperStoresSpecials you'll be amongst the first to find out about great shoppingdiscounts and offers from name brand companies.If you do not wish to continue to receive these offers simply click here - Unsubscribe Did you know that your computer AUTOMATICALLY SAVES every PICTURE from every WEBSITE you visit? This function helps your PC access your favorite websites more quickly, but it also allows EXPLICIT adult pictures to be saved to your computer if adult websites have been accidentally or intentionally visited! FREE, confidential online PC check! Safely detect offensive files in just minutes! www.contentwatch.com (Note: Scan will not display images--only file names that may indicate the presence of offensive material.) We strongly oppose the continued sending of unsolicited email and do not want to send email to anyone who does not wish to receive our special mailings. If you would prefer to not receive these messages in the future, please Click Here . We practice responsible mailing by honoring all remove requests and following all U.S. laws. We are in compliance with all state and Federal Laws regarding commercial email solicitations. The e-mail subscription address is: [EMAIL PROTECTED] TM:36;GSGOGEBHRLBVGVGNGKGHGEBEEQGNGKCKBVGLGGBEBBGSBCGRCOGVGLGK
Re: [Declude.JunkMail] Whitelisted - why?
WHITELIST FROM hm-software.com Change it to: WHITELIST FROM @hm-software.com I believe this will do what you need. At least I hope so as this is what I have been doing... Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications360-457-9023 Nationwide access with neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
