[Declude.JunkMail] MUA/MTA
Anyone know what the log means when it says, Message was sent from an MUA/MTA X.X.X.X ...? Philip Butler Internal Systems Engineer Region VI ESC phone 936.435.2503 fax 936.295.1447 [EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] MUA/MTA
Anyone know what the log means when it says, Message was sent from an MUA/MTA X.X.X.X ...? That just means that the E-mail was sent from a mail client (MUA or Message User Agent) or a mail server (MTA or Message Transport Agent). The real information is whatever comes after that, which indicates the problem. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Spaces
I read a few days back where someone was asking if declude would detect spaces in the subject since a lot of spam has a subject line like: Your car might not make it GYJ I created a rule in Imail to look for 5 spaces and forward any mail to spam box. I'm catching a lot of spam this way. Is there a better way to do this for the spam with spaces? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] MUA/MTA
Er... An unfortunate lapse of consciousness on my part resulted in my removing my heuristic spam test code on my live config file and my backup. Anyone have a code sample I can use? :D --Matt Robertson-- MSB Designs, Inc. http://mysecretbase.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Damaged attached HTML Mail?
when I'm getting attached spam, most (all??) Html mails are damaged, so I can read the source, but I can't see the mail. Also there is no From/To/Subject. Is this a config error or should it be like that? It looks like everything is set up properly. I'm guessing that the mail client isn't handling the E-mail correctly -- it seems that some mail clients handle standard text E-mails as attachments properly, while not handling HTML E-mails as attachments properly. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Best Rule Tweaks
Thank you for the tips. I'm particularly happy to hear that the archives are available. I only joined this list because I couldn't find any such resource. I apologize for posting redundant, newbieish questions. I humbly recommend that Declude make the archives a bit more accessible. Ideally, a link to the archives would appear on the Tech Support page. If security is a concern, the link can be cloaked from robots in a number of ways. Secondly, I recommend that a link to the archives be placed in the list membership welcome message. This is one last chance to disuade new members from posting redundant questions. Lastly, a discussion forum (not merely a list) would be a real nice to have and typically facilitates simple and powerful searching. Just my 2p for Declude. I hope it is helpful and not considered too critical. Thanks again, Terry. Dave Smart Business Lists wrote: David, Tuesday, October 8, 2002 you wrote: DD What are your favorite tweaks to the default rules and actions? Employ a weight system. I use a simple system with only two weights but others have more complex systems. This will take some effort depending upon your particular universe. LOOSENSPAMHEADERS is helpful. DSN, NOABUE, NOPOSTMASTER, BADHEADERS, HELOBOGUS, MAILFROM, PERCENT, REVDNS, SPAMHEADERS - all worthwhile but you have to experiment with weights. ordb, osirusoft, spamcop, monkeys, wirehub tests are effective but I don't trap on any of them alone. I've tried many test and fewer tests and for me fewer tests works better. DD Are sender blacklists worth the effort? I still have a blacklist but have replaced it pretty much with filters (a + and a -) since it became available. I find it easier to manage filters. DD Are commercial subscriptions (MAPS, etc.) worth the expense? IMO not MAPS but SNIFFER is certainly worth the price - http://www.sortmonster.com/ DD Perhaps more importantly, is there an effectiveness ranking or DD reporting system available for various spam-trap rules or DD third-party services? See Scott's web http://www.declude.com/ Search Archives too as Scott posts monthly results and the subject has been discussed at length. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Weighting systems
I am fairly new to declude junkmail product and am having fairly good success, but what I am running into is a few accounts that can not get email from certain accounts such as aol or yahoo and I think this is due to some of my weightings ...I was wondering if someone could provide their weightings that they are happy with, such as a weighting example of a tight weighting system and one of a middle of the road system or average weightingwould really help me with comparing what I have and maybe see what I am doing right and wrong... thanks in advance gb --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Prevent Scanning local users
How do I prevent from scanning local users for spamming? Philip Butler Internal Systems Engineer Region VI ESC phone 936.435.2503 fax 936.295.1447 [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Wednesday, October 09, 2002 2:23 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Best Rule Tweaks I humbly recommend that Declude make the archives a bit more accessible. Ideally, a link to the archives would appear on the Tech Support page. Thanks for the suggestion -- that page has been updated to include links to the archives. Lastly, a discussion forum (not merely a list) would be a real nice to have and typically facilitates simple and powerful searching. Could you define your version of a discussion forum? My definition is similar enough to a mailing list that I'm not sure what you are looking for. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] FILTER based on certain SPAMHEADER test results
Is there a way to bounce or filter out messages that failed specific BADHEADER or SPAMHEADER tests? Philip Butler Internal Systems Engineer Region VI ESC phone 936.435.2503 fax 936.295.1447 [EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Prevent Scanning local users
How do I prevent from scanning local users for spamming? If the local users are all on the LAN, and the Imail server is on the LAN, you could use Declude Hijack which keeps track of how many messages come from one IP in a period of time. John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SPAM meanings
Greetings, I tried searching the Declude web site for the meanings of a few SPAM signatures. It gives info on things like WEIGHT, MAILFROM, BADHEADERS, SPAMHEADERS, etc., but I was trying to find something on BADADDRESS. I know that it's probably supposed to be self-descriptive, but I would like the official meaning of everything that Declude is testing for. if that's possible. Any help (or link) would be most appreciated. Thanks. Jim James Colunio Network/System Administrator Elmira College Elmira, NY 14901 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] FILTER based on certain SPAMHEADER testresults
Is there a way to bounce or filter out messages that failed specific BADHEADER or SPAMHEADER tests? No -- you can take an action based on either test, but not for the specific reason(s) that an E-mail fails the test. For example, you can bounce all E-mail that fails the SPAMHEADERS test, but you can not bounce all E-mail that is missing a Message-ID: header (without also bouncing E-mail that fails the SPAMHEADERS test for other reasons). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] SPAM meanings
I tried searching the Declude web site for the meanings of a few SPAM signatures. It gives info on things like WEIGHT, MAILFROM, BADHEADERS, SPAMHEADERS, etc., but I was trying to find something on BADADDRESS. I know that it's probably supposed to be self-descriptive, but I would like the official meaning of everything that Declude is testing for. if that's possible. Any help (or link) would be most appreciated. Thanks. BADADDRESS isn't a test that Declude JunkMail runs by default. If Declude JunkMail is running a test called BADADDRESS, it's one that you added. :) -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Best Rule Tweaks
Thanks for the suggestion -- that page has been updated to include links to the archives. Wow, THAT was fast! Thank you, Scott! Could you define your version of a discussion forum? My definition is similar enough to a mailing list that I'm not sure what you are looking for. I define a "discussion forum" as a web-based, threaded discussion site, whereas newsgroups, mailing lists, listservs, etc. are e-mail-based. I'm not sure that mine is the publicly recognized standard parlance or not. It could just be me. My favorite example of a slick and useful web discussion forum would have to be the Macromedia Support Forums, at http://webforums.macromedia.com/coldfusion/ , for example. Thanks again. I am increasingly impressed by Declude. Goin' public anytime soon? Dave
Re: [Declude.JunkMail] Best Rule Tweaks
Thanks for the suggestion -- that page has been updated to include links to the archives. Wow, THAT was fast! Thank you, Scott! We aim to please. :) Could you define your version of a discussion forum? My definition is similar enough to a mailing list that I'm not sure what you are looking for. I define a discussion forum as a web-based, threaded discussion site, whereas newsgroups, mailing lists, listservs, etc. are e-mail-based. I'm not sure that mine is the publicly recognized standard parlance or not. It could just be me. My favorite example of a slick and useful web discussion forum would have to be the Macromedia Support Forums, at http://forums.macromedia.comhttp://webforums.macromedia.com/coldfusion/ , for example. Ah, gotcha. That's something that we may look into, although if we do so, we would likely have it act as a mirror to the mailing list (so that people could choose whether or not to use the web interface). Thanks again. I am increasingly impressed by Declude. Goin' public anytime soon? Nope, sorry. :) -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Best Rule Tweaks
I'd sure buy some stock if you did decide to go public! Jim Rooth KLOTRON,INC. Office: 817.654.3018.103 Home: 972.606.6341 Mobile: 214.244.0979 [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Wednesday, October 09, 2002 17:42 To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Best Rule Tweaks Thanks for the suggestion -- that page has been updated to include links to the archives. Wow, THAT was fast! Thank you, Scott! We aim to please. :) Could you define your version of a discussion forum? My definition is similar enough to a mailing list that I'm not sure what you are looking for. I define a discussion forum as a web-based, threaded discussion site, whereas newsgroups, mailing lists, listservs, etc. are e-mail-based. I'm not sure that mine is the publicly recognized standard parlance or not. It could just be me. My favorite example of a slick and useful web discussion forum would have to be the Macromedia Support Forums, at http://forums.macromedia.comhttp://webforums.macromedia.com/coldfusio n/ , for example. Ah, gotcha. That's something that we may look into, although if we do so, we would likely have it act as a mirror to the mailing list (so that people could choose whether or not to use the web interface). Thanks again. I am increasingly impressed by Declude. Goin' public anytime soon? Nope, sorry. :) -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
