Re: [Declude.JunkMail] amazing....
While going through my filtered e-mail, I always see multiple e-mails from the same persons with the same ad but am amazed by how 1 has a weight of 29 - ROUTE, and 1 has a weight of 21 - COPY - That's actually fairly common -- and why the weighting system works so well. :) Most spam tests work based on the source of the E-mail (the IP), so it is common for the exact same message sent from two different sources to have different weights. What do you guys see as the best approach to this? Blacklist @specials.bargain-jungle.com which I did? or specials@longname or both? or something totally different? You'll need to block based on the return address (MAIL FROM in the IMail SMTP log files, or X-Declude-Sender: header if you use the XSENDER ON option). That isn't always the same as the From: or Reply-To: addresses. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] client Question
I had a similar situation with a client who uses VPop to pop a common mail box and sort it localy, not only that, their email, which he says is very critical, is running on a 486 (and he is very proud of that fact)... well anyway... I disabled the filtering for his domain, he called the next day and retracted his doubt. Have a great day! Rick Davidson Buckeye Internet Services www.buckeyeweb.com 440-953-1900 - - Original Message - From: grb [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 24, 2002 3:44 PM Subject: [Declude.JunkMail] client Question This is a little off topic, but related to a customer service question concerning declude. What I have is one client out of about 80 that swears that declude is a piece of junk and does not work. In trying to explain to this client how declude works and the weighting system I run into a stumbling block. They are using a email system called Time Matters which does not show headers or header information, so when I try to explain that I need to see the email and the related header information to see the tests that have failed, I have nothing to go on to illustrate this. This seems to be an issue in Outlook also. Does anyone have any ideas of how to explain solve this issue of trying to illustrate this to this client or has anyone had experience with Time Matters...I have not had any luck with the support staff with time matters. If anyone has anything written or can point me in a directions of an article on how declude works that maybe this guy can understand, it would be greatly appreciated. thanks in advance GB --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HELOBOGUS Question
I'm running Declude 1.60. I've had exactly one message flagged by HELOBOGUS - I'll take a look at the DNS-based tests and pick this thread up in the morning. Thanks, -Bill -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner;declude.com]On Behalf Of R. Scott Perry Sent: Thursday, October 24, 2002 2:17 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] HELOBOGUS Question The header info you requested is listed below. Received: from declude.com [66.189.58.123] by mail.jamesoninns.com with ESMTP (SMTPD32-7.13) id A01E19250134; Thu, 24 Oct 2002 13:38:38 -0400 X-Declude-Sender: [EMAIL PROTECTED] [66.189.58.123] These two headers show that Declude did use the top Received: header, and should have used declude.com for the HELOBOGUS test (which is correct). Are other DNS-based spam tests working properly? Are you running a recent version of Declude JunkMail? Has at least one E-mail failed the HELOBOGUS test? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] HELOBOGUS Suddenly kicked in
I've had declude junkmail pro running well for a few months now...Just bumped up declude.exe to 1.60 last night. Seemed to be receiving things normally and didn't notice an immediate change in filter characteristics. But just this morning, round 11:00, noticed most if not all messages started failing HELOBOGUS. Seems odd. Commented out HELOBOGUS test for now. Any thoughts on what happened?? The HELOBOGUS test was added in 1.54, so if you were running a version before that, the HELOBOGUS test wouldn't have done anything. I'm guessing that if you look at all those E-mails failing the HELOBOGUS test, you'll see that (guess what?) they are using an invalid domain in their HELO data (which you can see on the top Received: header). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] HELOBOGUS Suddenly kicked in
OK, well, not 'all messages' but many legit messages which had not previously been caught. Perhaps the version I had in place previously didn't support this test? (was using previous release, not beta) I'll dig through the release notes. Thanks. -- Original Message -- From: Dan Cummings [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Thu, 24 Oct 2002 14:44:41 -0500 Quick question I hope, I've had declude junkmail pro running well for a few months now...Just bumped up declude.exe to 1.60 last night. Seemed to be receiving things normally and didn't notice an immediate change in filter characteristics. But just this morning, round 11:00, noticed most if not all messages started failing HELOBOGUS. Seems odd. Commented out HELOBOGUS test for now. Any thoughts on what happened?? Thanks! -Dan -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Dan Cummings Manage.net LLC [EMAIL PROTECTED] (612) 821-5000 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] client Question
This is a little off topic, but related to a customer service question concerning declude. What I have is one client out of about 80 that swears that declude is a piece of junk and does not work. In trying to explain to this client how declude works and the weighting system I run into a stumbling block. They are using a email system called Time Matters which does not show headers or header information, so when I try to explain that I need to see the email and the related header information to see the tests that have failed, I have nothing to go on to illustrate this. This seems to be an issue in Outlook also. Does anyone have any ideas of how to explain solve this issue of trying to illustrate this to this client or has anyone had experience with Time Matters...I have not had any luck with the support staff with time matters. If anyone has anything written or can point me in a directions of an article on how declude works that maybe this guy can understand, it would be greatly appreciated. thanks in advance GB --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] WHITELIST Question
How would one setup this type of scenario with the PRO version ? You could accomplish this by having a \IMail\Declude\example.com\$default$.JunkMail file with all tests set to use the IGNORE action, and then a \IMail\Declude\example.com\jdoe.JunkMail file for the user who wants their mail scanned. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] WHITELIST Question
WHITELIST TODOMAIN @example.com in the global.cfg file will let all spam go through to any email address at domain example.com. So if you create a subdirectory off of declude named example.com and in the subdirectory example.com have a file named jdoe.JunkMail with configurations for jdoe in controlling email, then all spam will still go to every email address at domain example.com but will be checked for [EMAIL PROTECTED] I don't know how to take a breather in that question, but is that correct thinking ? -- Avolve Support 740 467 3338 -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HELOBOGUS Question
The header info you requested is listed below. Received: from declude.com [66.189.58.123] by mail.jamesoninns.com with ESMTP (SMTPD32-7.13) id A01E19250134; Thu, 24 Oct 2002 13:38:38 -0400 X-Declude-Sender: [EMAIL PROTECTED] [66.189.58.123] These two headers show that Declude did use the top Received: header, and should have used declude.com for the HELOBOGUS test (which is correct). Are other DNS-based spam tests working properly? Are you running a recent version of Declude JunkMail? Has at least one E-mail failed the HELOBOGUS test? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HELOBOGUS Question
We do not have a backup mailserver or gateway - any other ideas? Could you post the complete headers of this E-mail? That may provide some clues. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HELOBOGUS Question
We do not have a backup mailserver or gateway - any other ideas? -Bill -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner;declude.com]On Behalf Of R. Scott Perry Sent: Thursday, October 24, 2002 1:01 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] HELOBOGUS Question I've just recently put junkmail into a test phase on my server and have noticed that I am getting almost no hits on the HELOBOGUS test - specifically one hit over a three day/10,000 message period. From what I've been reading on this forum, I'd expect more than that and was wondering what might be inhibiting the HELOBOGUS test. Do you have a backup mailserver or a gateway mailserver that receives the mail before IMail does? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] HELOBOGUS Question
I've just recently put junkmail into a test phase on my server and have noticed that I am getting almost no hits on the HELOBOGUS test - specifically one hit over a three day/10,000 message period. From what I've been reading on this forum, I'd expect more than that and was wondering what might be inhibiting the HELOBOGUS test. Thanks, -Bill Naber --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] client Question
I use the following line in my $default$.junkmail to change the subject for quick testing and demos to customers. Once they decide they like what they see it can be changed to delete or left for them to use email client rules. WEIGHT18 SUBJECT SPAM[%WEIGHT%-%TESTSFAILED%]: Darin. - Original Message - From: Rick Davidson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 24, 2002 4:11 PM Subject: Re: [Declude.JunkMail] client Question I had a similar situation with a client who uses VPop to pop a common mail box and sort it localy, not only that, their email, which he says is very critical, is running on a 486 (and he is very proud of that fact)... well anyway... I disabled the filtering for his domain, he called the next day and retracted his doubt. Have a great day! Rick Davidson Buckeye Internet Services www.buckeyeweb.com 440-953-1900 - - Original Message - From: grb [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 24, 2002 3:44 PM Subject: [Declude.JunkMail] client Question This is a little off topic, but related to a customer service question concerning declude. What I have is one client out of about 80 that swears that declude is a piece of junk and does not work. In trying to explain to this client how declude works and the weighting system I run into a stumbling block. They are using a email system called Time Matters which does not show headers or header information, so when I try to explain that I need to see the email and the related header information to see the tests that have failed, I have nothing to go on to illustrate this. This seems to be an issue in Outlook also. Does anyone have any ideas of how to explain solve this issue of trying to illustrate this to this client or has anyone had experience with Time Matters...I have not had any luck with the support staff with time matters. If anyone has anything written or can point me in a directions of an article on how declude works that maybe this guy can understand, it would be greatly appreciated. thanks in advance GB --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] HELOBOGUS Question
I've just recently put junkmail into a test phase on my server and have noticed that I am getting almost no hits on the HELOBOGUS test - specifically one hit over a three day/10,000 message period. From what I've been reading on this forum, I'd expect more than that and was wondering what might be inhibiting the HELOBOGUS test. Do you have a backup mailserver or a gateway mailserver that receives the mail before IMail does? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] client Question
At 02:44 PM 10/24/2002 -0500, grb wrote: What I have is one client out of about 80 that swears that declude is a piece of junk and does not work. I don't have a client that uses that software, but I do have one that insisted the filtering was bad and they were getting more Spam then ever before. So I suggested they drop the filter, which they did. 48 hours later they wanted back on Declude and took the time to read our filter request page and fill it out. The previous Spam filtering we were doing didn't give the customer the option of setting their own filters. Many now leave things at the default for the server, others have refined their filters to their liking. Still others don't have any idea what the filters do, and what they don't understand is a bad thing. Offer them a run for a couple of days outside the filter and they'll get the picture. -- Rich Griebel [EMAIL PROTECTED] http://www.kendra.com Scanned for Viruses using Declude and F-Prot --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] client Question
Just a note of appreciation. I want to thank everyone for their suggestionsand they were all great and I will use them to illustrate the effectiveness of the software Over the last nine years of web development, hosting, etcI have been subscribed to many lists for support. Cold Fusion from NT side, Netcloak from the Mac side, Graphics software.and many more. I must say, this is as good, if not better and as professional a group of users as I have been associated with... thanks again for all your support and quick responses and also to the declude developers and their strong support of a productit takes a lot of non-billable hours to support such a product... Thanks again guys and girls... Glenn Brooks WebWize, Inc. At 07:10 PM 10/24/02, you wrote: At 02:44 PM 10/24/2002 -0500, grb wrote: What I have is one client out of about 80 that swears that declude is a piece of junk and does not work. I don't have a client that uses that software, but I do have one that insisted the filtering was bad and they were getting more Spam then ever before. So I suggested they drop the filter, which they did. 48 hours later they wanted back on Declude and took the time to read our filter request page and fill it out. The previous Spam filtering we were doing didn't give the customer the option of setting their own filters. Many now leave things at the default for the server, others have refined their filters to their liking. Still others don't have any idea what the filters do, and what they don't understand is a bad thing. Offer them a run for a couple of days outside the filter and they'll get the picture. -- Rich Griebel [EMAIL PROTECTED] http://www.kendra.com Scanned for Viruses using Declude and F-Prot --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] client Question
Hey Rich, Not sure I understand you correctly, are you offering a system in which a client can adjust their weighting on their own? If so, do you have an example of this feature of your service? This sounds great. After reading this, you got me thinking, I could write a Cold Fusion application that could create weighting through a Access DB and client based admin systemhas someone already done this...if not, I may be able to come up with something for those running Cold Fusion. for those that run CF, my email is [EMAIL PROTECTED] if ya'll want to discuss this. If I understand declude correctly, if a change is made to the default or global file within a given directory, we do not have to restart the smtp service with Imail or restart the smtp service under the services control panel, correct? Declude pulls these files each time and would read any change that is made on the fly, correct? thanks gb The previous Spam filtering we were doing didn't give the customer the option of setting their own filters. Many now leave things at the default for the server, others have refined their filters to their liking. Still others don't have any idea what the filters do, and what they don't understand is a bad thing. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] client Question
Thats correct...It reads it each time a message is received. We plan to work on a similar tool using ASP here in the next month or two. Bill -Original Message- From: grb Sent: Thu, 24 Oct 2002 19:54:47 -0500 Subject: Re: [Declude.JunkMail] client Question Hey Rich, Not sure I understand you correctly, are you offering a system in which a client can adjust their weighting on their own? If so, do you have an example of this feature of your service? This sounds great. After reading this, you got me thinking, I could write a Cold Fusion application that could create weighting through a Access DB and client based admin systemhas someone already done this...if not, I may be able to come up with something for those running Cold Fusion. for those that run CF, my email is [EMAIL PROTECTED] if ya'll want to discuss this. If I understand declude correctly, if a change is made to the default or global file within a given directory, we do not have to restart the smtp service with Imail or restart the smtp service under the services control panel, correct? Declude pulls these files each time and would read any change that is made on the fly, correct? thanks gb The previous Spam filtering we were doing didn't give the customer the option of setting their own filters. Many now leave things at the default for the server, others have refined their filters to their liking. Still others don't have any idea what the filters do, and what they don't understand is a bad thing. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] HELOBOGUS Suddenly kicked in
Yup, very typical in MS exchange setups where the Exchange server is running on a Win2K box with some internal naming convention or the like. Thanks, Declude's working just fineand I actually read the release notes now! ;) -- Original Message -- From: R. Scott Perry [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Thu, 24 Oct 2002 15:59:01 -0400 I've had declude junkmail pro running well for a few months now...Just bumped up declude.exe to 1.60 last night. Seemed to be receiving things normally and didn't notice an immediate change in filter characteristics. But just this morning, round 11:00, noticed most if not all messages started failing HELOBOGUS. Seems odd. Commented out HELOBOGUS test for now. Any thoughts on what happened?? The HELOBOGUS test was added in 1.54, so if you were running a version before that, the HELOBOGUS test wouldn't have done anything. I'm guessing that if you look at all those E-mails failing the HELOBOGUS test, you'll see that (guess what?) they are using an invalid domain in their HELO data (which you can see on the top Received: header). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
