[Declude.JunkMail] Non-existent mail addresses

2003-08-02 Thread interactiveaustria
Hi,

I realize that a lot of e-mail goes to the spam folder that is addressed to
non-existent (or not-anymore-existent) addresses. Is there any reason, why
Declude does not check the recipient's name before doing other tests?
Wouldn't it be better to return e-mail to non exiistent addresses instead of
holding it in the spam folder?

+--+
| interactiveaustria   |
| Michael Tobisch EDV-Dienstleistungen |
| Wiesengasse 12, A-8160 Weiz  |
| Tel +43 3172 4930|
| GSM +43 664 2126941  |
| EMail [EMAIL PROTECTED]|
| Web http://www.iaa.at|
+--+
| Kundeninformationen per E-Mail:  |
| http://www.iaa.at/kundeninfo.asp |
+--+



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Non-existent mail addresses

2003-08-02 Thread John Tolmachoff \(Lists\)
 I realize that a lot of e-mail goes to the spam folder that is addressed
to
 non-existent (or not-anymore-existent) addresses. Is there any reason, why
 Declude does not check the recipient's name before doing other tests?
 Wouldn't it be better to return e-mail to non exiistent addresses instead
of
 holding it in the spam folder?

Receiving of messages and verify the recipient is up to Imail, not Declude.
Do you have a nobody alias configured somewhere?

John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Non-existent mail addresses

2003-08-02 Thread Bill Landry
Actually, it would be better to setup IMail not to receive mail for
non-existent e-mail addresses.  In fact, that is the default.  IMail will
only accept e-mail for non-existent e-mail addresses if you have setup a
nobody alias within your domains.  I would suggest removing the nobody
aliases if you do not want to receive e-mails for these non-existent
accounts.

Bill
- Original Message - 
From: interactiveaustria [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, August 01, 2003 11:06 PM
Subject: [Declude.JunkMail] Non-existent mail addresses


 Hi,

 I realize that a lot of e-mail goes to the spam folder that is addressed
to
 non-existent (or not-anymore-existent) addresses. Is there any reason, why
 Declude does not check the recipient's name before doing other tests?
 Wouldn't it be better to return e-mail to non exiistent addresses instead
of
 holding it in the spam folder?

 +--+
 | interactiveaustria   |
 | Michael Tobisch EDV-Dienstleistungen |
 | Wiesengasse 12, A-8160 Weiz  |
 | Tel +43 3172 4930|
 | GSM +43 664 2126941  |
 | EMail [EMAIL PROTECTED]|
 | Web http://www.iaa.at|
 +--+
 | Kundeninformationen per E-Mail:  |
 | http://www.iaa.at/kundeninfo.asp |
 +--+



 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


AW: [Declude.JunkMail] Non-existent mail addresses

2003-08-02 Thread interactiveaustria
I don't have a nobody alias set up. It seems to me that Declude takes the
incoming mail and does the tests (spam, virus) before putting it into the
inbox. If somebody writes to a non-existent mail that fails the test with a
weight that is set to HOLD, it will be stored in the spam folder instead
of returning it. Is this by design?

Michael

 -Ursprüngliche Nachricht-
 Von: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Auftrag von Bill Landry
 Gesendet: Samstag, 02. August 2003 09:11
 An: [EMAIL PROTECTED]
 Betreff: Re: [Declude.JunkMail] Non-existent mail addresses


 Actually, it would be better to setup IMail not to receive mail for
 non-existent e-mail addresses.  In fact, that is the default.  IMail will
 only accept e-mail for non-existent e-mail addresses if you have setup a
 nobody alias within your domains.  I would suggest removing the nobody
 aliases if you do not want to receive e-mails for these non-existent
 accounts.

 Bill
 - Original Message -
 From: interactiveaustria [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Friday, August 01, 2003 11:06 PM
 Subject: [Declude.JunkMail] Non-existent mail addresses


  Hi,
 
  I realize that a lot of e-mail goes to the spam folder that is addressed
 to
  non-existent (or not-anymore-existent) addresses. Is there any
 reason, why
  Declude does not check the recipient's name before doing other tests?
  Wouldn't it be better to return e-mail to non exiistent
 addresses instead
 of
  holding it in the spam folder?
 
  +--+
  | interactiveaustria   |
  | Michael Tobisch EDV-Dienstleistungen |
  | Wiesengasse 12, A-8160 Weiz  |
  | Tel +43 3172 4930|
  | GSM +43 664 2126941  |
  | EMail [EMAIL PROTECTED]|
  | Web http://www.iaa.at|
  +--+
  | Kundeninformationen per E-Mail:  |
  | http://www.iaa.at/kundeninfo.asp |
  +--+
 
 
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
Dieses E-Mail wurde von Declude.Virus auf Virusfreiheit geprueft
Ein Service von interactiveaustria
---




---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Non-existent mail addresses

2003-08-02 Thread R. Scott Perry

I don't have a nobody alias set up.
If you don't have a nobody alias set up, IMail will reject E-mail to 
non-existent accounts, so the E-mail shouldn't be delivered.  However:

It seems to me that Declude takes the
incoming mail and does the tests (spam, virus) before putting it into the
inbox. If somebody writes to a non-existent mail that fails the test with a
weight that is set to HOLD, it will be stored in the spam folder instead
of returning it. Is this by design?
This situation will of course happen if you have the nobody alias set 
up.  However, given that you do not, what could be happening is that the 
E-mail is being addressed to one or more valid accounts and one or more 
non-existent accounts.  In this case, the E-mail will be held, and the 
Q*.SMD file will list the non-existent accounts (in NRCPT TO lines, but 
not R lines).

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Discrepancies in New GLOBAL.CFG

2003-08-02 Thread Phillip B. Holmes

 
   OSSRC is still in GLOBAL.CFG but it has been commented 
 out and moved 
   to the Not Commonly Used section.  Does anyone know why 
 this was 
   changed?  It also still seems to be a valid test and it's 
 not a pay 
   service so I don't understand the move.
 
 The reason for that is that the OSSRC test is the same as 
 SPEWS, and SPEWS 
 intentionally lists lots of legitimate mailservers, and makes 
 it nearly 
 impossible for them to get out.
 
 -Scott
 ---

-

Scott,

I had a problem with SPEWS a while back. But after doing a little research
on NANAE, I realized that the SPEWS strategy is to block the spammer first.
If the ISP does not do anything about the spammer, they expand the block to
include more subnets. This usually gets the ISP's attention and they boot
the spammer. Then and only then is block is removed.

Agree with it or not, it is an effective strategy.

Best Regards,

Sr.Consultant /
Phillip B. Holmes
Media Resolutions Inc.
Macromedia Alliance Partner
http://www.mediares.com
[EMAIL PROTECTED]
1-888-395-4678 |Ext. 101
972-889-0201 |Ext. 101


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Discrepancies in New GLOBAL.CFG

2003-08-02 Thread Keith Johnson
Given that OSSRC and OSSOFT are no longer effective, besides EASYNET-DNSBL and 
SPAMCOP, what are others giving good Weight to, thanks for the info.
 
Keith

-Original Message- 
From: R. Scott Perry [mailto:[EMAIL PROTECTED] 
Sent: Fri 8/1/2003 5:01 PM 
To: [EMAIL PROTECTED] 
Cc: 
Subject: RE: [Declude.JunkMail] Discrepancies in New GLOBAL.CFG




  OSSRC is still in GLOBAL.CFG but it has been commented out and
  moved to the
  Not Commonly Used section.  Does anyone know why this was changed?  It
  also still seems to be a valid test and it's not a pay service so I don't
  understand the move.

The reason for that is that the OSSRC test is the same as SPEWS, and SPEWS
intentionally lists lots of legitimate mailservers, and makes it nearly
impossible for them to get out.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


winmail.dat

[Declude.JunkMail] SUBJECTSPACES test

2003-08-02 Thread Jeff Kratka
Scott,

 This has probably been mentioned but I just heard about it. The
SUBJECTSPACES test, is it an undocumented test? Will it check spaced all in
a row, ie: This MessageHere and the spaces between or does it also
count the space between words.

Jeff Kratka

*
TymeWyse Internet
P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417
tel/fax: (541) 839-6027  -  [EMAIL PROTECTED]
*

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] SUBJECTSPACES test

2003-08-02 Thread Bill Landry
Jeff, this test adds all spaces found in the subject together (including
single spaces between words), not just contiguous spaces.

Bill
- Original Message - 
From: Jeff Kratka [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, August 02, 2003 12:48 PM
Subject: [Declude.JunkMail] SUBJECTSPACES test


 Scott,

  This has probably been mentioned but I just heard about it. The
 SUBJECTSPACES test, is it an undocumented test? Will it check spaced all
in
 a row, ie: This MessageHere and the spaces between or does it
also
 count the space between words.

 Jeff Kratka

 *
 TymeWyse Internet
 P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417
 tel/fax: (541) 839-6027  -  [EMAIL PROTECTED]
 *

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] SUBJECTSPACES test

2003-08-02 Thread R. Scott Perry

 This has probably been mentioned but I just heard about it. The
SUBJECTSPACES test, is it an undocumented test?
It's currently undocumented, but is part of what we are adding to the 
documentation for 1.75.

Will it check spaced all in a row, ie: This MessageHere and the 
spaces between or does it also
count the space between words.
It counts all the spaces, including ones between words.  To define the 
test, you can use a line such as:

SUBJECTSPACES  subjectspaces  20  x  4  0

That line (in the global.cfg file) would define the test so that it would 
be triggered if more than 20 spaces were found in the subject (and would 
add 4 to the weight of the E-mail if this test was triggered).
  -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Report System

2003-08-02 Thread Mike Barnett
Ditto

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Russ Uhte
(Lists)
Sent: Friday, August 01, 2003 6:45 AM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Report System



If you would like to try it out let me know and I will make it 
available..

I'll jump on the bandwagon.  I'd love to try that out as well.

-Russ 

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Ban Attachments

2003-08-02 Thread Paul Navarre
What would be the best way to delete all messages that contain an attachment using Pro?

Thanks,

Paul Navarre 
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Ban Attachments

2003-08-02 Thread Bill Landry
JunkMail is not really geared to do this.  However, if you are running
Declude virus, you can use the BANEXT feature to quarantine e-mail messages
that contain defined attachment extensions.  I don't know if the BANEXT
feature supports a wildcard entry that will let you ban all e-mail messages
with attachments.

One of the problem I could see happening if trying to do this with JunkMail
is that you would end up deleting messages that even reference a file name.

Bill
- Original Message - 
From: Paul Navarre [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, August 02, 2003 3:37 PM
Subject: [Declude.JunkMail] Ban Attachments


 What would be the best way to delete all messages that contain an
attachment using Pro?

 Thanks,

 Paul Navarre
 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Death to Trustic Trustic Service Ending

2003-08-02 Thread Jason Newland


Everyone,

We have decided to close the Trustic service. As has become apparent 
recently, there are several issues with the system as it is designed. As

such, we do not believe Trustic will reach the level of accuracy that we

require. The issue of handling large ISPs that, for the most part, deal 
with spam complaints is one of the main flaws in the Trustic system for 
which we see no apparent solution.

Registrations have been disabled on the site. Within a day the site 
itself will be taken down and replaced with a notice. The DNS blocklist 
will remain for a couple of weeks, but it will be configured to never 
return a match. Please reconfigure your mail servers to not query the 
blocklist.

We remain confident that the problem of spam is a solvable problem. 
Thank you for your help with this great experiment.


Mark

-- 
Mark Fletcher
Trustic, Inc
http://www.trustic.com
http://www.bloglines.com

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.