Yes, you are correct. I do something similar with the BCC and COMMENTS
tests. I think you have an extra "x" in your definitions though.
BCC-1bcc1x10
BCC-3bcc3x10
BCC-5bcc5x10
COMM-20comme
I am sure I can do this but thought I would ask:
SUBJECTSPACES1 subjectspaces 15 x x 10 0
SUBJECTSPACES2 subjectspaces 30 x x 10 0
Any message with 30 or more spaces would get a weight of 20 added, correct?
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com
How about a test like this:
NUMBERSINMAILFROM
It would be similar to SUBJECTSPACES but would count the amount of numbers
in the mail from address. You could then configure it for say if 10 or more,
add 5 to the weight and so forth.
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices F
I asked this question a few days ago.
If test is not going to have a action configured for it, you can omit it.
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTE
Assuming I have, say, 20 tests defined in my global.cfg file, including a
WEIGHT test.
In my default.junkmail file, I don't really care about including any actions
for any of the tests EXCEPT for the WEIGHT test. Can I simply omit all of
the other tests' actions from the junkmail file, or must I i
Bernie,
The DSN failure means that your server isn't set up to receive messages
sent from <> senders (null senders). There's a checkbox for this in
IMail's SMTP configuration menu. You also might want to go to
rfc-ignorant.org and see what you need to do in order to get out of
their list, bu
Doh I ran the wrong test I see now..
Then I don't know.
Best regards,
Eje Gustafsson mailto:[EMAIL PROTECTED]
The Family Entertainment Network http://www.fament.com
Phone : 620-231- Fax : 620-231-4066
- Your Full Time Professionals -
M
I looked at that dnsstuff link you listed... but look at this one
http://www.dnsstuff.com/tools/ptr.ch?ip=12.35.63.10
Bennie
- Original Message -
From: "Eje Gustafsson" <[EMAIL PROTECTED]>
To: "Bennie" <[EMAIL PROTECTED]>
Sent: Tuesday, September 09, 2003 10:49 PM
Subject: Re: [Declude.
Remove your OSRELAY test OSRELAY is DEAD and is blacklisting the
entire world so for your own sake stop using it.
REVDNS you might have it REVDNS'ed but whomever provided you with the
IPs have not delegated it to you yet.
http://www.dnsstuff.com/tools/lookup.ch?name=12.35.63.10&type=A
Details:
m
Hello guys,
i have this in my header of an email i sent to myself. I turned off declude
to test because my emails were not going out...
X-RBL-Warning: OSRELAY: Please stop using relays.osirusoft.com
X-RBL-Warning: DSN: Not supporting null originator (DSN)
X-RBL-Warning: REVDNS: This E-mail was s
Please explain this to me...
X-RBL-Warning: DSN: Not supporting null originator (DSN)
Bennie
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.
I know this is an Ipswitch problem but I think I remember seeing this
mentioned here before.
A couple times today my SMTP stops, I restart and I get all my mail but it
seems to just get stuck in the queue.
Any suggestions?
I noticed this.
http://support.ipswitch.com/kb/IM-19990730-DM01.htm
In
Chipping in my two cents (Hi, I'm back from vacation!) I'm waiting for
something like BODYTEXT instead of BODY so that I can stop getting false
positives from short sequences showing up in attachment encoding.
I had to stop trying to filter:
grx
grx2
t1t
MLM
d0rm
/ad
/ads
because they came up an
I'm sure you are well aware of the problem with gibberish in spam,
especially if you are moving towards Bayes filtering with Declude.
Just for the record, we don't have plans to implement more Bayes filtering
in Declude (we did years ago, before the Paul Graham article, and found
that it just w
Thanks Scott, that explains pretty much everything.
I'm sure you are well aware of the problem with gibberish in spam,
especially if you are moving towards Bayes filtering with Declude. Is
it possible to come up with a filter like say BODYTEXT that processes
just decoded text and ignores anyth
Regarding the gibberish detection and decoding...I am running the most
recent version and have not disabled decoding, however the following test
message gets a hit on [BODY 0 CONTAINS qi] even though that string
only appears in the link:
Ah, I was mistaken. What happens is Declude JunkMa
Never mind... I found that I had saved it from a web page someone sent me
and I have a text file already. Here is the text in case someone else wants
it:
Personal Whitelist
A personal whitelist allows you to accept email messages from any email
address you want no matter how many Spam tests the m
They are blocking spam from reaching chinese internet users acourding to the
article. Now if they were blocking the servers traffic from leaving china
that would be a victory.
Kevin Bilbee
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Sean Fahey
> S
First, I must correct myself...the SUBJECT test for the ISO/Base64 line
is working without any changes and after further testing. I have no
clue as to how I screwed this up on so many tests, but apparently I did
unless that is related to the other mysterious behavior with my system
not decodin
Oh, they are not blocking the servers from spamming to the REST of the
world, they are only blacklisting servers from delivering mails into China.
E.g., they are targeting servers in Taiwan and elsewhere that are spamming
INTO China.
Servers that are in China and are spamming into the U.S. don't s
Finally.
http://news.com.com/2100-1028_3-5073441.html?tag=fd_top
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declud
When Scott added the AUTOWHITELIST ON option to Declude, someone posted a
wonderful text file explaining to end users how to add email addresses to
their webmail. I cannot find this. Can someone post it or email a copy to me
please?
Sheldon
Sheldon Koehler, Owner/Partnerhttp://www.tenfo
I'm using v1.75i4 right now, is it possible that you are using a version
older than 1.75?
We're using 1.75. I don't know what the sub-version is. I downloaded it
on 7/22.
Maybe Scott could offer an explanation or hint as to why ours works and
yours doesn't.
My guess is some extra spaces/tabs a
Could you let me know what it is exactly a BODY filter will search, and if
this searching happens after BASE64 decoding? Does it search every
character that appears below the header, including things like the message
boundaries and attachments?
The entire body will be searched (including MIME
Mike Leonard wrote:
We got about 10 of these for V-pill over the weekend, that's why I set
it up. I haven't seen any legitimate email get caught by this filter,
but we don't normally get email from any non-English speaking
countries (unless it's spam).
Mike
I've been meaning to share this b
Scott,
I've been trying out a custom gibberish filter made up of two character
strings that are extremely uncommon in order to find a way to detect the
spam that comes through with a linked image and a smattering of text.
So far it's doing a great job of detecting this stuff, however it does
Matthew Bramble wrote:
Mike,
I'm using v1.75i4 right now, is it possible that you are using a
version older than 1.75?
We're using 1.75. I don't know what the sub-version is. I downloaded it
on 7/22.
Maybe Scott could offer an explanation or hint as to why ours works and
yours doesn't.
I tes
Mike,
I'm using v1.75i4 right now, is it possible that you are using a version
older than 1.75?
I tested my setup about 10 times before I gave up on the SUBJECT filter
and moved to using HEADERS?
BTW, regardless of how you do it or how it works, this is a great
filter. It's not that common,
Add www.spamchk.com
Base64 encoded subject lines will be decoded before the keyword-check.
Markus
It's on my list of things to do. That would be the best of both worlds
since this stuff always seems keyword rich.
Right now I'm writing custom filters, and loving the results...
Thanks,
Mat
Have you checked to see if the W2K DNS is passing both tests?
Yeah, it is now, I stopped and restarted the DNS service.
Love it when things just quit working for no reason..job security.
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged "
Sharyn, if your DNS server is on the same box as Imail, set it up to use
127.0.0.1, not the public IP address.
Also, flush the cache on both Imail DNS cache and the W2K DNS.
Have you checked to see if the W2K DNS is passing both tests?
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For
The other possible reason is that your DNS server (24.73.160.163) is
returning the "server failure" error message. If so, you'll need to
check
it out to see what the problem is. It could be that it no longer has
Internet connectivity, for example.
I stopped and restarted the DNS service a
It appears that the DNS server is not responding.
Whos is it?
It's MINE!
But I have verified internet connectivity, mail is going out, mail is
coming in, I can resolve websites, I can send and receive mail from that
machine. Mailserver and DNS server are the same box. I have checked the
window
One is that the remote DNS server (the one at oasisfoodsco.com) is
returning an error message
I am seeing this error for almost every email that JM is processing so I
don't think it's on the remote server end.
The other possible reason is that your DNS server (24.73.160.163) is
returning the
It appears that the DNS server is not responding.
Whos is it?
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Sharyn Schmidt
Sent: Tuesday, September 09, 2003 7:18 AM
I am all of a sudden seeing a ton of these errors in my JM log.
WARNING: DNS server 24.73.160.163 returned a SERVER FAILURE error for MX
or A for oasisfoodsco.com.
Not just for the above domain, but for a lot.
There are two possible reasons for this.
One is that the remote DNS server (the one
Title: Message
I have
since REM'd out the tests I added but I am now getting this warning on almost
every email being processed by JM.
This
just started happening a few hours ago.
I did
a search in the archives and saw this topic addressed but I don't see a
solution.
Would
stopping a
Title: Error in JM log
I am all of a sudden seeing a ton of these errors in my JM log.
WARNING: DNS server 24.73.160.163 returned a SERVER FAILURE error for MX or A for oasisfoodsco.com.
Not just for the above domain, but for a lot.
The only thing I have done in the last hour is added t
Title: Message
Thanks.
The
basic ins and outs will do.
Please
email it to me offlist, don't wanna get hollered at!
Sharyn
([EMAIL PROTECTED])
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of IS - Systems Eng. (Karl Drugge)Sent: Tuesday,
Title: JM log analyzer
If
you need something that is configurable on the fly, the DLAnalyzer
is about your best bet. Damn good tool, and it gets
the job done.
If you just need to know basic
ins-n-outs, you can try my PERL script.. I posted it a
few weeks back. Reply and I can email it
I've attempted to setup classless reverse DNS delegation for a customer of
mine. I think I have it done correctly, but I don't understand exactly
what I'm seeing on www.dnsstuff.com when I do a reverse DNS query. The
specific address I'm testing is 12.161.105.129. It appears that if
ns2.par
> Any suggestion on how to block these.
Add www.spamchk.com
Base64 encoded subject lines will be decoded before the keyword-check.
Markus
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
uns
Matthew Bramble wrote:
Use a text filter and add something like:
SUBJECT 40 CONTAINS =?ISO-8859-1?b?
to it.
I tried this all the way down to ust ?b? and a SUBJECT filter didn't
catch it. The SUBJECT filter also doesn't catch the decoded text.
I sent one to myself before I posted, just to
Greetings-
I've attempted to setup classless reverse DNS delegation for a customer of
mine. I think I have it done correctly, but I don't understand exactly
what I'm seeing on www.dnsstuff.com when I do a reverse DNS query. The
specific address I'm testing is 12.161.105.129. It appears that
Sharyn,
Please check out DLAnalyzer. DLAnalyzer can produce the reports you are
looking for and in much greater detail.
DLAnalyzer can produce Overall server summaries, Domain Test Summaries, and
Advanced Reports Based on User, Domain, and Test. In addition, these reports
can be formatted
Title: JM log analyzer
Good morning,
I know a lot of you use some of the JM log analyzer tools that are listed on the Declude site.
I am unsure which one is best suited to our needs.
I am looking for something which will parse the JM logs, tell me how many emails have been processed and
is it possible for you to create a test that would use imail's
antispam-table-ini.txt ?
No.
In order to do that, we would need to create a naive Bayes test that works
exactly like the one that Ipswitch created. I'm sure we could come up with
a better algorithm. :)
47 matches
Mail list logo
