Title: Message
Hi;
There has to be
something that can be done about detecting this...
==
Prev!--info--ent Prema!--info--ture
Agin!--info--!--info--g and
DiseasebrB!--info--uild Lea!--info--ner
Mus!--info--cle
Mas!--info--sbrRe!--info--duce Bo!--info--dy
Fa!--info--t and
Title: Message
Hi;
I am just curious
as to how Declude read this - is the word Whateversomething.com a continous word
or a broken word?
In email bodies
text shows as broken in multiple lines. I am just curious as to when a
word is broken (at least as it appears when we look at the source)
Title: Nachricht
Hi
Kami
SpamChk takes care of this.
There
is a parameter "FakedHTMLComments" that searches for repeated html-comments like
!--xyz-- where "xyz" is even the same. This should not trigger
html-comments in certain newsletters.
Additional SpamChk removes all HTML-Tags before
Is it possible to add an X-HEADER that shows the total weight of the
email without using a zero weighted action?
For instance if a WARN action is applied then the total weight range is
shown:
X-RBL-Warning: SPAM-NONE: Total weight between 0 and 4.
If a SUBJECT action is used only test
I am just curious as to how Declude read this - is the word
Whateversomething.com a continous word or a broken word?
In email bodies text shows as broken in multiple lines. I am just curious
as to when a word is broken (at least as it appears when we look at the
source) - is the word
Is it possible to add an X-HEADER that shows the total weight of the
email without using a zero weighted action?
I think what you are looking for is a variation on:
XINHEADER X-Spam-Tests-Failed: %TESTSFAILED% [%WEIGHT%]
You could change this to something like:
Is it possible to exclude local
users from the Wordfilter test. I have some users that are trying to send out
group messages but some of the content is being caught in the wordfilter and
they have a legitimate reason to use some of these words.
Thanks,
Greg Foulks, MCP NewFound
Scott,
Thanks just the ticket, I couldn't see the wood for the trees.
David
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: 16 January 2003 13:14
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Total weight as X-header
Is
Title: Message
Scott...
Hopefully in one
of the future releases we can come up with a filter that works with before and
after space..
After all how
obscene is the word basement?
Drawings were
being sent to me for our office that were not reaching me! Why? the
filter:
SUBJECT12
Declude does allow spaces.
So, thy this:
Current:
SUBJECT 12 CONTAINS s_e_m_e_n (without the quotes and underscores)
New:
SUBJECT 12 CONTAINS s_e_m_e_n (without quotes and underscores)
John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA 92835
Title: Nachricht
in
SpamChk you can set
#semen#=15
;-)
Markus
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
On Behalf Of Kami RazvanSent: Thursday, January 16, 2003 4:31
PMTo: [EMAIL PROTECTED]Subject:
[Declude.JunkMail] How obscene is Basement?
Is it possible to exclude local users from the Wordfilter test. I have
some users that are trying to send out group messages but some of the
content is being caught in the wordfilter and they have a legitimate
reason to use some of these words.
One option would be to whitelist the users that
Title: Message
Oh, this is all sementics.
:-)
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Kami
RazvanSent: Thursday, January 16, 2003 10:31 AMTo:
[EMAIL PROTECTED]Subject: [Declude.JunkMail] How obscene
is Basement?
Scott...
John, I don't think that a space before the word does anything (unless
support for this has been added to JunkMail recently), but a space after the
word in the filter file would prevent basement from being flagged by the
work semen .
Bill
-Original Message-
From: [EMAIL PROTECTED]
Here is an idea for you.
The word filter tests are in one file as one test.
Create a new test as a fromfile and list the from addresses of your uses and
use a negative fail weight equal to or more than the wordfilter test.
Example:
WORDFILTER1 filter
John, I don't think that a space before the word does anything (unless
support for this has been added to JunkMail recently), but a space after
the
word in the filter file would prevent basement from being flagged by the
work semen .
Bill, good point. I forgot about that.
Scott,
John,
Good point. Questions though about the order that test are run. If adding a fromfile
test how would that effect spam that is sent to
in to our mail server with an internal user as the return address?
Thanks,
Greg Foulks, MCP
NewFound Technologies, Inc.
http://www.nfti.com
Email: [EMAIL
Good point. Questions though about the order that test are run. If adding
a fromfile
test how would that effect spam that is sent to
in to our mail server with an internal user as the return address?
Greg, do you mean an e-mail sent to your local users which has the return or
from address the
Kami,
Just had a few questions on your lists, first, this entry:
.247mail.com 38
What's the 38? The # of times you've caught this name? How many others
use this method? I don't, which is why I ask, I have all I can do just
plowing through all this stuff. But if it helps you to see
Declude Virus looks for the first non-whitespace character after
CONTAINS
to see where to start the filter text. So any spaces/tabs that appear at
the beginning will be ignored, but they will be used if they appear after
the first character of the filter text.
Thanks. I am sure you mean
Just like what Scott said. What if I create this fromfile and add a negative weight of
20 and a Spam message comes in with a From or
Return address that matches one of the address in the fromfile. Won't it then take 20
points away from the weight of the message?
I guess the other part of the
Hi;
Those numbers are nothing - for all practical purposes. They are reference
numbers that help us find it.
The same goes with Tom's list. The number is internally made allowing them
to monitor it.
Beside that it really does not nothing in Declude.
About our number -- that is simply the
Just like what Scott said. What if I create this fromfile and add a
negative weight of
20 and a Spam message comes in with a From or
Return address that matches one of the address in the fromfile. Won't it
then take
20 points away from the weight of the message?
Yes it would. Welcome to the
SpamChk takes care of this.
There is a parameter FakedHTMLComments that searches for repeated
html-comments like !--xyz-- where xyz is even the same. This
should not trigger html-comments in certain newsletters.
Caught this late, what is SpamChk...?
Additional SpamChk removes all HTML-Tags
I would think a simple stripping of all HTML comments from mail
before JunkMail processing would take care of this. Is this
something that has been considered? I realize the load it may
make on heavier traffic systems.
It has been considered, but like other similar ideas (such as decoding
All,
Would this command below catch APPLE if it was in a BASE64 attachment? Are
Attachments considered part of the body.
BODY 15 CONTAINS APPLE
Thanks
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing
Would this command below catch APPLE if it was in a BASE64 attachment? Are
Attachments considered part of the body.
BODY 15 CONTAINS APPLE
Yes and no. :)
A base64 attachment is part of the body of the E-mail (Declude JunkMail
scans the entire body, attachments and all). So yes, it will be
Thanks Scott, my concern is text that is BASE64 encoded to APPLE being
caught by the check.
Thanks again.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Thursday, January 16, 2003 11:36 AM
To: [EMAIL PROTECTED]
Subject: Re:
]Something that we are also considering is a test that checks for more than
]X HTML comments in an E-mail (preferably just counting ones in the middle
]of words, such as unsub!-- user --scribe, rather than to !--
]user --
]unsubscribe, as the former prevents filtering whereas the latter
]does
I know this question must have been asked about Declude, but thought
I'd ask again anyway as I do not recall if there is a method possible.
Is it possible to make a Declude domain or user setting that enables a
whitelist of email sender addresses in the Pro version whereby all
emails are
Is it possible to make a Declude domain or user setting that enables a
whitelist of email sender addresses in the Pro version whereby all
emails are rejected or bounced accept a whitelist of senders? In other
words reject or bounce all senders accept those that the user wishes
to
Reply to: R. Scott Perry
Re: [Declude.JunkMail] WhiteList Per User or Domain? on Thursday 3:13:03 PM
Thanks. But a catchall is exactly what I don't want. What I want is a
bounce so the sender knows his mail was not accepted... maybe a
catchall if cannot deliver to sender...
Is it possible to make a Declude domain or user setting that enables a
whitelist of email sender addresses in the Pro version whereby all
emails are rejected or bounced accept a whitelist of senders? In other
words reject or bounce all senders accept those that the user wishes
to
Given the huge rise in BASE64 encoded message text I've seen, matching BODY
on decoded message text would be welcome indeed. Likewise, I've seen a few
(rare) false positives when BODY matched text within an attachment.
Not that I'm trying to re-invent Declude Virus, but what I found was that:
... what is SpamChk...?
It's an external test for declude and makes content based tests.
At the moment it's in beta phase by some users on this list and on the
declude spamtrap (www.declude.com/spamtrap.htm)
We're preparing a website where everyone can read more about and
download it for
I think I mentioned this to you
earlier, Scott; If you could have the user edit their addressbook in
Imail web mail as a whitelist, and Declude used this, then the user
could manage their own whitelist.
This is something that we are also giving some serious thought to (perhaps
an
I think I mentioned this to you
earlier, Scott; If you could have the user edit their addressbook in
Imail web mail as a whitelist, and Declude used this, then the user
could manage their own whitelist.
Try the Personal SPAManager Whitelist page at http://209.227.3.6 (user demo,
password
Reply to: R. Scott Perry
Re: [Declude.JunkMail] WhiteList Per User or Domain? on Thursday 5:57:27 PM
Scott, the only thing that would concern me is that I use multiple
disk drives for my users accounts, for example:
activatormail.com d:\actmail
techknow.com c:\Imail\techknow
38 matches
Mail list logo
