ADVISORY:
Spam Haus, the only public black list I trust outside of a weighted system just added
this to their roster: http://spamhaus.org/SBL/sbl.lasso?query=SBL5618
Its a large (8000+) range thats chuck full of spammers. Unfortunately, it also has
legit email servers, I've already had 2 cli
> We have our smtp server running Declude...The smtp server is then
> forwarding the emails to our pop server
This is a perfectly fine configuration, and does not constitute a
multistage relay UNLESS you have your POP3 server set to relay for/to
the IP of your SMTP server; if you have it
We have our smtp server running Declude with the Percent test enabled (with
a weight large enough to hold the message).
Good. :)
The smtp server is then
forwarding the emails to our pop server (no declude). The strange thing is
that the first @ sign is replaced by % by the smtp server before
>> If you can explain how you come up with that analysis, I
>> would be willing to do that here.
>
>It's simple if you have not too much msg/day.
I meant so other way than F3.
>I'm not sure if you understand was I mean. I think that it's absolutely not
important
>how much of the total in process
> ...a spammer sends anemailto
> [EMAIL PROTECTED]@myvaliddomain.com. The imail server is
> accepting the email since @myvaliddomain.com is a local domain and
> then sending the message to [EMAIL PROTECTED]
Only if your IMail relay permissions a
We have our smtp server running Declude with the Percent test enabled (with
a weight large enough to hold the message). The smtp server is then
forwarding the emails to our pop server (no declude). The strange thing is
that the first @ sign is replaced by % by the smtp server before sending it
to t
Is there anything we can do to prevent someone from sending an email with
multiple @ signs in the To field? e.g. a spammer sends an email to
[EMAIL PROTECTED]@myvaliddomain.com. The imail server is accepting the
email since @myvaliddomain.com is a local domain and then sending the
message to [EMA
Is there anything we can do to prevent someone from sending an email with
multiple @ signs in the To field? e.g. a spammer sends an email to
[EMAIL PROTECTED]@myvaliddomain.com. The imail server is accepting the
email since @myvaliddomain.com is a local domain and then sending the
message to [EMAIL
> It's a cool tool but I don't understand the interface.
Please visit http://www.imagefxonline.net/apps/delog
then click on INTERFACE on the left side.
> Can anyone help with a couple of questions?
Ok...
> 1) The meter-Does this show how much spam is sent to the domain
> as a percentage of the
> Out of 1829, 37 SPAM messages failed POPULARDOMAINS. That is about 2%.
> Out of 1829, 26 valid messages failed POPULARDOMAINS. That is
> about 1.4%. I am not including the 4 that you have changed
> the configuration for.
I'm not sure if you understand was I mean. I think that it's absolutely
OK, humor me here:
Out of 1829, 37 SPAM messages failed POPULARDOMAINS. That is about 2%.
Out of 1829, 26 valid messages failed POPULARDOMAINS. That is about 1.4%. I
am not including the 4 that you have changed the configuration for.
The ratio of positive to false positive is about 1.4 to 1. Tha
This isn't completely Declude stuff here, but it IS spam related, so here
goes, hope someone cam help.
Anyone have dealings with Wirehub-Dyna? just because we seem to be listed
there, We've e-mailed them, kindly of course, and hopefully we'll be removed
from that list.
What brought this up was a
There may be truth to the cafe tale. I have an instructor who used a
friend's apartment complex cafe for email and now is getting hit with
tons of stuff. We can trace some of it back through the air2lan.net
system (cafe provider).
John C.
Sanford Whiteman wrote:
However he does travel qu
Hi all who are interested on this,
I've checked our declude logfiles for the last 24 hours and came to
this result:
In messages processed: 1829
Identified as spam: 102
>From this 37 spam messages has had a popular domain as from address.
>From this 21 has had enough points to be catched wi
It's a cool tool but I don't understand the interface. Can anyone help with a couple
of questions?
1) The meter-Does this show how much spam is sent to the domain as a percentage of the
total amount of email sent to the domain?
2) Interactive mode doesn't seem to work that well
3) Failed count
> However he does travel quite a lot for our company and meet with
> clients, so his profile is much more public than mine.
If applicable, you should tell him to be particularly careful at
Internet cafes abroad. I have heard tell of numerous cases in which a
business trip, and a lo
I know too many users get suckered by the "unsubscribe" link. But this particular boss
is hip to
those tricks. He's a former UNIX programmer and network engineer who has been involved
in the
emergence of the Internet. However he does travel quite a lot for our company and meet
with clients,
so h
Matt,
Monday, December 9, 2002 you wrote:
MR> Does this sound familiar?
MR> DAY 1: mgmt-type (i.e. drooling idiot) gets 1 spam.
MR>Dutifully asks to be removed.
MR> DAY 2: 2 spams and 2 happy-go-lucky removal requests.
MR> DAY 3: 4 spams, 4 removal clicks.
MR> DAY 5: 256 spams and ...
John Shacklett wrote:
> I suspect your Veep has similar skeletons in his flipper door.
Does this sound familiar?
DAY 1: mgmt-type (i.e. drooling idiot) gets 1 spam.
Dutifully asks to be removed.
DAY 2: 2 spams and 2 happy-go-lucky removal requests.
DAY 3: 4 spams, 4 removal clicks.
DAY
Our CFO, who has "never given his email address out to ANYONE!" fills out
every reader reply card for a free trade magazine, belongs to the board of
something called the Financial Executives Institute, and answers every
telephone survey-research phone call that crosses his desk. I suspect your
Veep
Disgruntled employee sign him up for porno?
>> We're trying to figure out why my boss -- a vice president -- receives
much more spamthan I do. I get about two spam a day, while he gets 50. His
email address is not on any of our public
---
[This E-mail was scanned for viruses by Declude Virus (h
We're trying to figure out why my boss -- a vice president -- receives
much more spam than I do.
The two most common reasons for this would be [1] His E-mail address is
more readily found, or [2] His E-mail address is has a common username (for
example, "[EMAIL PROTECTED]" will typically rece
Keith,
Monday, December 9, 2002 you wrote:
KP> We're trying to figure out why my boss -- a vice president --
KP> receives much more spam than I do. I get about two spam a day,
KP> while he gets 50.
2 out of 4 might be bad but 50 out of 1,000 might not be. I handle
500+ messages per day an
No. I've checked the headers of spam that's getting to him. It is getting marked by
Declude, but
isn't failing enough tests to be automatically deleted.
Keith Purtell, Web/Network Administrator
VantageMed Operations (Kansas City)
Email: [EMAIL PROTECTED]
CONFIDENTIALITY NOTICE: This email messa
Have you inadvertently whitelisted his e-mail address?
Bill
-Original Message-
From: Keith Purtell [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 09, 2002 10:47 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Do spammers rank recipients
We're trying to figure out why my boss --
We're trying to figure out why my boss -- a vice president -- receives much more spam
than I do. I
get about two spam a day, while he gets 50. His email address is not on any of our
public sites. He
does not submit his address at Web sites. Is it possible someone acquired and sold his
address as
Hi John,
With my settings at the moment a mail from one off this popular domains
will have a "default value" of 70%
40% POPULARDOMAINS
15% NOPOSTMASTER
15% NOABUSE
Now I asume that no real message from this domains will trigger a
junkmail test that is heavy weightet (BASE64, BADHEADERS, SPAMCOP
Assuming the big guys spool OUT from their INBOUND MX records I think that
would hold true
But for example here at my office, we have (2) MX records, which are our
inbound filter gateways. However outbound mail spools through DIFFERENT
gateways, so all mail leaving my organization should actua
What if you set the positive weight of the popular domains equal to the
negative weight of the IPNOTINMX test?
Won't only invalid mail from these domains add to the accumulated weight?
Cris Porter
JVC America
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf
>I'm missing something that could trigger false positives?
What if I send you a note from my yahoo.com account that just happens to
trigger one of your filters because I am telling you about a new spam
technique?
With the way you have it set, just me sending a mail to you from my
yahoo.com accoun
Hi all,
In the last 48 hours I've tested a blacklist that includes the following
domains:
yahoo.com
yahoo.co.uk
hotmail.com
msn.com
email.com
aol.com
mail.com
lycos.co.uk
As we know each of them is often used in spam as sender domai
31 matches
Mail list logo
