Scott,
To get around this problem do you think this is possible?
Add a lot of negative weight to the message that has a recipient as
postmaster so it won't get bounced. Then create a test that will route
the message back to the postmaster's account? This would then route the
message to the
I assume this didn't fail the comments test because it is actually not
formatted like a true html comment !--some comment
If you would like to unsub
!pNcTpTxGpDsYxVNtNsvMbEBbWbhHmKgDm
scribe your e-m
!kEnTFsDduWqCeYyOiUqQUxLmDpIeAsPkKtphUnPsFkWo
ail addr
!yvnfYpXnLmThFsDoNmCnGorA
I assume this didn't fail the comments test because it is actually not
formatted like a true html comment !--some comment
That is correct.
!pNcTpTxGpDsYxVNtNsvMbEBbWbhHmKgDm
That isn't an HTML comment. It is a made-up HTML tag.
However, the next release should have a way to automatically get
How about a test to check if the e-mail address in the
subject is the same as the person it was sent to?
Or how about a test that checks for the following dupe names:
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
We're looking into tests that would detect these tricks.
To get around this problem do you think this is possible?
Add a lot of negative weight to the message that has a recipient as
postmaster so it won't get bounced. Then create a test that will route
the message back to the postmaster's account?
It might be possible to do something like that. An
The Message Sniffer rule for this is also being adjusted/broadened.
_M
]-Original Message-
]From: [EMAIL PROTECTED]
][mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
]Sent: Wednesday, March 26, 2003 9:09 AM
]To: [EMAIL PROTECTED]
]Subject: Re: [Declude.JunkMail] Not Failing the comments
Scott,
We have achieved the desired behavior with that setup. I sent a test
message tripping off one of the filters and the mail was delivered to
the postmaster and was not delivered to the other recipients.
This is just a testament on how flexible this product is..
Thanks for the help
Darrell
Hi Scott,
I am a fairly new user of Declude JunkMail Pro and I'm reading the messages on
this list on a daily basis. Excellent discussions and I have already learned a
lot. In order to make the most use of Declude's power in the shortest time
possible, I would need a couple of documents
We have achieved the desired behavior with that setup. I sent a test
message tripping off one of the filters and the mail was delivered to
the postmaster and was not delivered to the other recipients.
Thanks for that update Darrell.
Sounds like something that should be implemented by any one
I second that.
At 08:15 03.26.2003, you wrote:
Hi Scott,
I am a fairly new user of Declude JunkMail Pro and I'm reading the messages on
this list on a daily basis. Excellent discussions and I have already learned a
lot. In order to make the most use of Declude's power in the shortest time
Hello, All,
This sounds very similiar to the request that I made when I first started
using Declude.JunkMail. Unfortunately I don't think these documents exist.
But I could be wrong. Once our management agrees to buy JunkMail Pro for us
I plan on writing up something along these lines.
If I
Title: Message
Hi;
We have a watch
words file that if with an entry in the default file - simply to know if these
words appear and how often.
One such entry in
the spam emails is:
!-- saved from
url="" --
more importantly
the last part: http://internet.e-mail
Does anyone know
if this
One problem with documents on a program like JunkMail is that it is such an
adaptable product that it is hard to explain everything.
For those interested in SpamManager, I am going to be writing up a white
paper on implementing that within Declude.
John Tolmachoff MCSE, CSSA
IT Manager, Network
In order to make the most use of Declude's power in the shortest time
possible, I would need a couple of documents (hopefully they exist):
1. A reference list (beyond the HTML manual at
www.declude.com/JunkMail/manual.html) that lists every single variable
available
and what it represents
The online docs and the mailing list archives tends to be a very good
reference, however since the program is so flexible, even Scott doesn't
know it's full potential. There are often threads where people have
managed to come up with some new and unforseen way of using Declude.
Now, that being
It constantly occurs to me, as it has to many others who have mentioned this
previously, that what we really need is a FAQ compilation that covers
customization and best-practices for various situations and integration of
the add-on tools and who knows what else. Search the archives hasn't
proven
John,
You are absolutely right on this should be implemented instead of
whitelisting the postmaster or abuse account. This week I can't tell
you how many messages got through because postmaster@ was listed as a
recipient.
That shouldn't happen anymore...
Darrell
-Original Message-
Title: Message
Kami,
I seen several messages today that had
that listed right at the top of the message source.,
Darrell
-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan
Sent: Wednesday, March 26, 2003
12:16 PM
To: [EMAIL
It constantly occurs to me, as it has to many others who have mentioned
this
previously, that what we really need is a FAQ compilation that covers
customization and best-practices for various situations and integration of
the add-on tools and who knows what else. Search the archives hasn't
I simply cannot keep up with the constant changes
in JunkMail. News tests, variables, and parameters are listed in the
Release Notes, but the trick is how to integrate those tests into an existing
configuration, where to insert them, how to configure the parameters for new
tests, etc.
For
I simply cannot keep up with the constant changes in JunkMail. News
tests, variables, and parameters are listed in the Release Notes, but the
trick is how to integrate those tests into an existing configuration,
where to insert them, how to configure the parameters for new tests, etc.
For
Title: Message
I
happen to agree with Glenn. I love my declude setup, but its getting more
difficult to keep up with the changes. Just my two cents, love Declude and keep
up the good work. Maybe if some external people would be willing to help
put together a document. Its not like we don't
At 02:47 PM 3/26/2003, you wrote:
I simply cannot
keep up with the constant changes in JunkMail. News tests,
variables, and parameters are listed in the Release Notes, but the trick
is how to integrate those tests into an existing configuration, where to
insert them, how to configure the
Title: Message
Kami, I think
it'san annotation put there by the bulk mailer as a note to themselves
about the source of the target list (ooh, I'm starting to sound like
*them*).
I saw this in the
body of the html spam I received today:
!-- saved
from
url="" PROTECTED]
--!-- Built by
Based on failing a weight of 40, I have a WEIGHT40 that bounces. I also
have a weight of 60 that will delete. What happens to the mail that falls
in between 41 and 59?
Jim Rooth
Klotron, Inc.
214.244.0979
[EMAIL PROTECTED]
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL
Based on failing a weight of 40, I have a WEIGHT40 that bounces. I also
have a weight of 60 that will delete. What happens to the mail that falls
in between 41 and 59?
They will bounce, since the WEIGHT40 test will be triggered but the
WEIGHT60 will not be triggered.
Note, though, that the
We've got a locked down public Imail server where anyone can register for
a free email, but all users have to authenticate before relaying mail.
We've also got Declude with HiJack in order to stop spammers from using
our system
But somehow we've got registered users sending hundreds of
I've checked, and the Hijack is registered.
The config is set to:
RELAYTHRESHOLD1 10 20
RELAYTHRESHOLD2 30 60
And the log files have not held anything today. Everything went through
as OK with juat a couple not local users.
But I see that [EMAIL PROTECTED] now has about 300 outgoing
Based on failing a weight of 40, I have a WEIGHT40 that bounces. I also
have a weight of 60 that will delete. What happens to the mail that falls
in between 41 and 59?
Jim Jim Jim.
Bounces are not good.
:))
Kind of like trying to get the license number of the car that cut us off.
Does
And the log files have not held anything today. Everything went through
as OK with juat a couple not local users.
Note that Declude Hijack allows unlimited E-mail to local users, and
doesn't count that towards a user's quota.
But I see that [EMAIL PROTECTED] now has about 300 outgoing spam
Thanks Scott.
I've emailed you the file.
We do have a few ALLOWIP's, but I they are for IP's we own.
I checked the W log files and it looks like they are coming in through web messaging
(god knows how they are sending that much email through web messaging) under several
IP's ranging from
I checked the W log files and it looks like they are coming in through web
messaging (god knows how they are sending that much email through web
messaging) under several IP's ranging from Nigeria to Israel. I blocked
those IP's within Imail Control Access.
Ah, that explains what is going on.
I've got you up until the DAISYCHAIN ipsmtp.exe point.
Do you want me to rename the two files and then add the daisychain line above to the
config file of hijack?
Thanks.
b
-- Original Message --
From: R. Scott Perry [EMAIL PROTECTED]
Reply-To: [EMAIL
Will renaming declude.exe to smtp32.exe cause problems with junkmail or virus?
Do I need to rename or make a copy of declude.exe as renamed?
b
-- Original Message --
From: R. Scott Perry [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date: Wed, 26 Mar
I've got you up until the DAISYCHAIN ipsmtp.exe point.
Do you want me to rename the two files and then add the daisychain line
above to the config file of hijack?
That is correct.
Will renaming declude.exe to smtp32.exe cause problems with junkmail or
virus?
No.
Do I need to rename or
Scott,
I made these changes and restarted services.
But then I stopped receiving emails.
When I reverted back, I'm now receiving emails again.
Any thoughts?
Thanks.
b
-- Original Message --
From: R. Scott Perry [EMAIL PROTECTED]
Reply-To: [EMAIL
Not besides that your listed yourself in spamcop and that you need to
take a look at the logs to see what's in them and/or show them to us
so we can see what is failing.
I see a couple of things right of.
1) no reverse DNS for 208.253.112.168 which is your sending ip for you
mailserver.
2) your
The reverse dns is because of a nat'ing scheme we have behind two firewalls and a load
director (posts in the past have already described our config).
The freaking SpamCop is because I apparently have Spammers sending an incredible
amount of spam through our web messaging (i.e. bypassing hijack
First and foremost, look in the web log and see what account they are using
and shut that account off.
John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA 92835
www.reliancesoft.com
-Original Message-
From: [EMAIL PROTECTED]
I made these changes and restarted services.
But then I stopped receiving emails.
Try implementing the DAISYCHAIN function as follows:
(a) COPY SMTP32.EXE to SMTP32.EXB (this step just for backup)
(b) RENAME SMTP32.EXE to IPSMTP32.EXE
(c) COPY DECLUDE.EXE to SMTP32.EXE
(d) Add the
40 matches
Mail list logo
