What is the suggested configuration for iMail 8.02's anti-spam features
when using Declude? Or should it just iMail anti-spam be disabled?
Thanks,
Dan
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing
-- Original Message --
From: Dan Star [EMAIL PROTECTED]
What is the suggested configuration for iMail 8.02's anti-spam features
when using Declude? Or should it just iMail anti-spam be disabled?
I use a combination of both ... I have all of the IP4 tests
I am seeing this warning on messages that Declude creates using the
postmaster.eml file for virus notifications.
Is this do to the message ID problem with IMail's mail1.exe?
09/05/2003 00:09:47 Q2967f2315dc Warning: Could not find IP3 end on first
line of datafile (bound)?
That's an odd one that
I am trying to use Sorbs as a new black list.
I put this line in my Global config file.
SORBS-BADCONF ip4rdnsbl.sorbs.net 127.0.0.11 4 0
And I put in the following lines in both the Junkmail and the Global file
SORBS-BADCONF WARN
After running this for 24
Are those the full headers? They do not include any Received: headers.
-Scott
At 12:46 PM 9/5/2003, John Tolmachoff \(Lists\) wrote:
Here is the header: (Retrieved from the Exchange log of the recipient)
Date: Fri, 5 Sep 2003 00:09:47 -0700
Message-Id: [EMAIL PROTECTED]
I just installed SORBS last night and am busy monitoring the results. I
have found that they mostly tagg what others are tagging thus far, but
what will take more time to figure out is if they are finding stuff that
has been slipping through the others. I monitor things that fail with a
Have not personally used sorbs, but I think you choose a very select item
(BADCONF/.11) that would not be triggered often, try to use a wider ranges
of the sorbs tests available.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick
Sent: Friday,
Im glad someone is doing the testing :) please let us know of the FP rate
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matthew Bramble
Sent: Friday, September 05, 2003 7:00 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Configuration Question
I will contact the user and get the full headers.
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Friday, September 05,
The real irony about this is [EMAIL PROTECTED] actually works! Go figure...
Sheldon
Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com
Ten Forward Communications 360-457-9023
Nationwide access, neighborhood support!
Whenever you find yourself on the side of the
After upgrading from Declude v1.65 to v1.75 I noticed my Imail server taking quite a
performance hit. After upgrading my CPU usage went from 50%-55% up to 98%-100%.
Reverting back to v1.65 returned the CPU usage back to normal. I am running Imail
version 7.07. The server is running NT4.0 SP
yahoo also has an abuse address. I send to them on a regulare basis and I
get their atuo response and within a few days I get a resolution.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Sheldon Koehler
Sent: Friday, September 05, 2003
After upgrading from Declude v1.65 to v1.75 I noticed my Imail server
taking quite a performance hit. After upgrading my CPU usage went from
50%-55% up to 98%-100%. Reverting back to v1.65 returned the CPU usage
back to normal. I am running Imail version 7.07. The server is running
NT4.0
The RFC's for abuse and postmaster addresses require more than just a
functioning address or even an appropriate response in certain
situations. From the rfc-ignorant.org site regarding abuse for
instance:
http://www.rfc-ignorant.org/policy-abuse.php
Given that, the listing criterium
This seems to be the wave of the future in spamming. There's a lot of
spam coming in with no text, just other HTML, mainly to display an image
and get by heuristics. Most of this stuff gets caught by the various
lists, but I get a couple a day to addresses pointed at my own account
that
Different message, but same thing. (User had deleted other message)
09/05/2003 15:07:55 Q5ccb2890a00 Warning: Could not find IP3 end on first
line of datafile (bound)?
You can safely ignore that one. The next release will not include that
warning.
This seems to be the wave of the future in spamming. There's a lot of
spam coming in with no text, just other HTML, mainly to display an image
and get by heuristics. Most of this stuff gets caught by the various
lists, but I get a couple a day to addresses pointed at my own account
that
All of the text is in the image, and the image is linked. If that IMG
tag came through to you, follow it and you will see what I am talking
about. A variation on this is to primarily use the image and link for
the content, and include some bogus text, typically random characters
below the
From
what I am reading yahoo not hotmailshould not be listed. They accept mail
to the abuse address, they do not suggest using an alternate reporting method
and they respond to the reports?
Do you
know why they fail the no abuse test?
They
have accepted every mail I have sent to them.
Scott,
The DECODE OFF option; what would it not catch (i.e. Spam) had the option been
turned on? I understand Base64, but what kind of HTML decoding? We have a server at
capacity as well, but we are not adding anymore customers to it, however, at times the
CPU is at 100% which causes
I get bombarded by this kind of spam often, most of it is sleazy porn, and
it passes thru.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matthew Bramble
Sent: Saturday, September 06, 2003 12:41 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail]
The DECODE OFF option; what would it not catch (i.e. Spam) had the
option been turned on? I understand Base64, but what kind of HTML decoding?
This only affects filters. With DECODE OFF, filters will work as they were
designed to work (checking the body of the E-mail for a
Maybe you're not seeing everything that I sent to the list, in which case,
let me reprint the body of the message and modify the links so I don't set
off the filters:
htmlbody
center!--kpz4j815n29--a
href=http://www-dot-wholesale22-dot-com/host/default.asp?ID=omni;img
Ah, I see now. This can get tricky though -- looking for no visible
text at all (just HTML tags) would be easy for spammers to bypass.
Checking for the amount of visible text compared to the amount of HTML
code seems like a good idea at first, except thanks to Microsoft Word
E-mail, that
At 08:04 PM 9/5/2003 -0400, you wrote:
Maybe you're not seeing everything that I sent to the list, in which
case, let me reprint the body of the message and modify the links so I
don't set off the filters:
htmlbody
center!--kpz4j815n29--a
Keith,
Assuming that it's a cascade effect from being near capacity, have you
taken a look at saving processing and/or memory from other tasks. For
instance, real-time anti-virus software can cause significant load on a
busy machine. Even if you have it excluding log files and the like,
Me too, i'm running win2k on a dual processor 933 p3 with 1 gi memory and
it's just humming along at low cpu usage
just my 2 cents
- Original Message -
From: Matthew Bramble [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, September 05, 2003 6:07 PM
Subject: Re:
27 matches
Mail list logo
