[Declude.JunkMail] [OT] iMail 6.06 behind firewall
I know this is off-topic, but I've attempted numerous times to put our server behind a firewall, but upon doing so, the queue grows to an enormous proportion and the only way to clear it is to remove it from behind the firewall. Besides the normal ports 25, 110 and 80 (for web mail), do I also have to keep 1024-65525 open as well for iMail to work properly? Seems stupid to do since normal standardized e-mail should only use the above mentioned three ports (sendmail does). I've contacted Ipswitch about this, and get the same ol' line about upgrading to the latest version and getting full support. But since my boss is cheap and won't upgrade, it makes my life not too pleasant. Thanks for any help you may offer.. -Jeff --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] [OT] iMail 6.06 behind firewall
Jeff Maze - Hostmaster wrote: I know this is off-topic, but I've attempted numerous times to put our server behind a firewall, but upon doing so, the queue grows to an enormous proportion and the only way to clear it is to remove it from behind the firewall. Some firewalls apply the same filters to both incoming and outgoing traffic, others have separate filter rules depending on direction. If the build up is outgoing messages, it sounds like you firewall is one of the latter type -- bugs check in but the can't check out Make sure that port 25 is open *outbound*. -- --- illigitimi non carborundum --- Bud Durland, CNE Mold-Rite Plastics Network Administrator http://www.mrpcap.com --- --- [This E-mail scanned for viruses by Declude Virus / Sophos AV] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] [OT] iMail 6.06 behind firewall
At 07:42 AM 10/6/2003, Jeff Maze - Hostmaster wrote: I know this is off-topic, but I've attempted numerous times to put our server behind a firewall, but upon doing so, the queue grows to an enormous proportion and the only way to clear it is to remove it from behind the firewall. Besides the normal ports 25, 110 and 80 (for web mail), do I also have to keep 1024-65525 open as well for iMail to work properly? Seems stupid to do since normal standardized e-mail should only use the above mentioned three ports (sendmail does). Where does your DNS server sit? If it isn't behind the firewall, you're gonna have to open up ports for DNS. I would recommend udp from mail IP src port 1024-65525 to DNS ip dst port 53. And also the opposite of that, udp from DNS IP src port 53 to mail ip dst port 1024-65525. As a side note, you won't need the reverse rule if your firewall can do UDP stateful inspection. Also, a big clue would be in your IMail logs. Post a clip of those, and I'm sure you'll find your answer. -Russ --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] [OT] iMail 6.06 behind firewall
Besides the normal ports 25, 110 and 80 (for web mail), do I also have to keep 1024-65525 open as well for iMail to work properly? No -- while the ports 1024-65535 are used on the client side, the firewall only cares about the server side ports (since almost all client side ports will be in the 1024-65535 range). The problem here is probably DNS -- if the firewall doesn't allow *outgoing* DNS traffic (UDP port 53 and TCP port 53), it would account for the problem. If you set up your firewall to block all outgoing requests to non-standard ports (so that you can't reach http://www.example.com:, for example), then you would need to add DNS to its list of allowed ports. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Question - Weight 10?
Good morning all. I blocked weight 10 and found it blocking too many legitimate mail. I went back to Warn for weight 10 and starting getting more spam. Below is the headers from a spam message that is failing the weight 10 test. It is spam and I want to find another way to block mail like this. How would you block this message, since you cannot block weight 10 and still get legitimate mail? Thanks for any help. Samantha Microsoft Mail Internet Headers Version 2.0 Received: from apollo.misd.net ([64.88.0.98]) by xmail1.macombisd.org with Microsoft SMTPSVC(5.0.2195.6713); Sun, 5 Oct 2003 19:28:08 -0400 Received: from SMTP32-FWD by apollo.misd.net (SMTP32) id A00FA0303; Sun, 5 Oct 2003 19:24:26 -0400 Received: from pc1.passfelt.com [207.134.164.19] by apollo.misd.net (SMTPD32-8.02) id A829F477014E; Sun, 05 Oct 2003 19:24:25 -0400 Message-Id: [EMAIL PROTECTED] From: Student Loans [EMAIL PROTECTED] To: [EMAIL PROTECTED] Reply-to: [EMAIL PROTECTED] Subject: CUT YOUR STUDENT LOAN PAYMENTS BY UP TO 50% Date: Sun, 5 Oct 2003 19:10:58 -0400 ID: MSG_12412951-10673063-felton4 X-Info: Please report any abuse from the part of list owner to [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe X-RBL-Warning: SBL: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL10878 X-RBL-Warning: IPNOTINMX: X-RBL-Warning: WEIGHT10: Weight of 10 reaches or exceeds the limit of 10. X-Declude-Sender: [EMAIL PROTECTED] [207.134.164.19] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: RELAY, SBL, IPNOTINMX, WEIGHT10 [10] X-IMAIL-SPAM-STATISTICS: 1. Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 05 Oct 2003 23:28:08.0627 (UTC) FILETIME=[55BD6030:01C38B98] --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe Content-Type: text/plain; charset = iso-8859-1; Content-Disposition: inline Content-Transfer-Encoding: 8bit --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe Content-Type: text/html; charset = iso-8859-1; Content-Disposition: inline Content-Transfer-Encoding: 8bit --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe-- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Question - Weight 10?
I have used spamchk (an add on for declude) www.spamchk.com and its pretty good at catching such emails, as long as the filters are configured correctly. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bridges, Samantha Sent: Monday, October 06, 2003 3:15 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Question - Weight 10? Good morning all. I blocked weight 10 and found it blocking too many legitimate mail. I went back to Warn for weight 10 and starting getting more spam. Below is the headers from a spam message that is failing the weight 10 test. It is spam and I want to find another way to block mail like this. How would you block this message, since you cannot block weight 10 and still get legitimate mail? Thanks for any help. Samantha Microsoft Mail Internet Headers Version 2.0 Received: from apollo.misd.net ([64.88.0.98]) by xmail1.macombisd.org with Microsoft SMTPSVC(5.0.2195.6713); Sun, 5 Oct 2003 19:28:08 -0400 Received: from SMTP32-FWD by apollo.misd.net (SMTP32) id A00FA0303; Sun, 5 Oct 2003 19:24:26 -0400 Received: from pc1.passfelt.com [207.134.164.19] by apollo.misd.net (SMTPD32-8.02) id A829F477014E; Sun, 05 Oct 2003 19:24:25 -0400 Message-Id: [EMAIL PROTECTED] From: Student Loans [EMAIL PROTECTED] To: [EMAIL PROTECTED] Reply-to: [EMAIL PROTECTED] Subject: CUT YOUR STUDENT LOAN PAYMENTS BY UP TO 50% Date: Sun, 5 Oct 2003 19:10:58 -0400 ID: MSG_12412951-10673063-felton4 X-Info: Please report any abuse from the part of list owner to [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe X-RBL-Warning: SBL: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL10878 X-RBL-Warning: IPNOTINMX: X-RBL-Warning: WEIGHT10: Weight of 10 reaches or exceeds the limit of 10. X-Declude-Sender: [EMAIL PROTECTED] [207.134.164.19] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: RELAY, SBL, IPNOTINMX, WEIGHT10 [10] X-IMAIL-SPAM-STATISTICS: 1. Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 05 Oct 2003 23:28:08.0627 (UTC) FILETIME=[55BD6030:01C38B98] --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe Content-Type: text/plain; charset = iso-8859-1; Content-Disposition: inline Content-Transfer-Encoding: 8bit --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe Content-Type: text/html; charset = iso-8859-1; Content-Disposition: inline Content-Transfer-Encoding: 8bit --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe-- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Question - Weight 10?
I guess I might add more weight to SAL, maybe reduce the negative weight of IPNOTINMX to start. I have some of the following in a filter file to add little weight, I don't know if it is a great idea but it usually helps. HEADERS 0 CONTAIN Bargains.net HEADERS 0 CONTAIN Bargain.net HEADERS 0 CONTAIN Deals.com HEADERS 0 CONTAIN free-gifts HEADERS 0 CONTAIN TailWaggingOffer HEADERS 0 CONTAIN specialoffer HEADERS 0 CONTAIN freeoffers HEADERS 0 CONTAIN dealz These are just some of the little weights I add, so if a mail has enough of this it will get held (hopefully deleted). I'm assuming that you are using Declude Pro Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Bridges, Samantha Sent: Monday, October 06, 2003 09:15 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Question - Weight 10? Good morning all. I blocked weight 10 and found it blocking too many legitimate mail. I went back to Warn for weight 10 and starting getting more spam. Below is the headers from a spam message that is failing the weight 10 test. It is spam and I want to find another way to block mail like this. How would you block this message, since you cannot block weight 10 and still get legitimate mail? Thanks for any help. Samantha Microsoft Mail Internet Headers Version 2.0 Received: from apollo.misd.net ([64.88.0.98]) by xmail1.macombisd.org with Microsoft SMTPSVC(5.0.2195.6713); Sun, 5 Oct 2003 19:28:08 -0400 Received: from SMTP32-FWD by apollo.misd.net (SMTP32) id A00FA0303; Sun, 5 Oct 2003 19:24:26 -0400 Received: from pc1.passfelt.com [207.134.164.19] by apollo.misd.net (SMTPD32-8.02) id A829F477014E; Sun, 05 Oct 2003 19:24:25 -0400 Message-Id: [EMAIL PROTECTED] From: Student Loans [EMAIL PROTECTED] To: [EMAIL PROTECTED] Reply-to: [EMAIL PROTECTED] Subject: CUT YOUR STUDENT LOAN PAYMENTS BY UP TO 50% Date: Sun, 5 Oct 2003 19:10:58 -0400 ID: MSG_12412951-10673063-felton4 X-Info: Please report any abuse from the part of list owner to [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe X-RBL-Warning: SBL: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL10878 X-RBL-Warning: IPNOTINMX: X-RBL-Warning: WEIGHT10: Weight of 10 reaches or exceeds the limit of 10. X-Declude-Sender: [EMAIL PROTECTED] [207.134.164.19] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: RELAY, , IPNOTINMX, WEIGHT10 [10] X-IMAIL-SPAM-STATISTICS: 1. Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 05 Oct 2003 23:28:08.0627 (UTC) FILETIME=[55BD6030:01C38B98] --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe Content-Type: text/plain; charset = iso-8859-1; Content-Disposition: inline Content-Transfer-Encoding: 8bit --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe Content-Type: text/html; charset = iso-8859-1; Content-Disposition: inline Content-Transfer-Encoding: 8bit --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe-- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Question - Weight 10?
Hello Samantha. While the default WEIGHT10 and WEIGHT20 settings are good starting points, I firmly believe that more granular control is needed. This is accomplished using the weight range settings. Example, here is my configuration: WEIGHT9 IGNORE WEIGHTRANGE10-14IGNORE WEIGHTRANGE15-19IGNORE WEIGHTRANGE20-24IGNORE WEIGHTRANGE25-29HOLD WEIGHTRANGE30-34HOLD WEIGHTRANGE35-39DELETE WEIGHTRANGE40-44DELETE WEIGHTRANGE45-59DELETE WEIGHT50DELETE Then, when ever I make changes to the tests, I can easily adjust the actions for a couple of days to make sure the changes I make do not cause problems. This way also, I force higher weights and higher allowances for FP. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Bridges, Samantha Sent: Monday, October 06, 2003 6:15 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Question - Weight 10? Good morning all. I blocked weight 10 and found it blocking too many legitimate mail. I went back to Warn for weight 10 and starting getting more spam. Below is the headers from a spam message that is failing the weight 10 test. It is spam and I want to find another way to block mail like this. How would you block this message, since you cannot block weight 10 and still get legitimate mail? Thanks for any help. Samantha Microsoft Mail Internet Headers Version 2.0 Received: from apollo.misd.net ([64.88.0.98]) by xmail1.macombisd.org with Microsoft SMTPSVC(5.0.2195.6713); Sun, 5 Oct 2003 19:28:08 -0400 Received: from SMTP32-FWD by apollo.misd.net (SMTP32) id A00FA0303; Sun, 5 Oct 2003 19:24:26 -0400 Received: from pc1.passfelt.com [207.134.164.19] by apollo.misd.net (SMTPD32-8.02) id A829F477014E; Sun, 05 Oct 2003 19:24:25 -0400 Message-Id: [EMAIL PROTECTED] From: Student Loans [EMAIL PROTECTED] To: [EMAIL PROTECTED] Reply-to: [EMAIL PROTECTED] Subject: CUT YOUR STUDENT LOAN PAYMENTS BY UP TO 50% Date: Sun, 5 Oct 2003 19:10:58 -0400 ID: MSG_12412951-10673063-felton4 X-Info: Please report any abuse from the part of list owner to [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe X-RBL-Warning: SBL: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL10878 X-RBL-Warning: IPNOTINMX: X-RBL-Warning: WEIGHT10: Weight of 10 reaches or exceeds the limit of 10. X-Declude-Sender: [EMAIL PROTECTED] [207.134.164.19] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: RELAY, SBL, IPNOTINMX, WEIGHT10 [10] X-IMAIL-SPAM-STATISTICS: 1. Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 05 Oct 2003 23:28:08.0627 (UTC) FILETIME=[55BD6030:01C38B98] --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe Content-Type: text/plain; charset = iso-8859-1; Content-Disposition: inline Content-Transfer-Encoding: 8bit --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe Content-Type: text/html; charset = iso-8859-1; Content-Disposition: inline Content-Transfer-Encoding: 8bit --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe-- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] maybe its just one of AOL's servers???
Received: from imo-d05.mx.aol.com [205.188.157.37] by mail.prudentialrand.com with ESMTP (SMTPD32-7.15) id A3811E61010A; Mon, 06 Oct 2003 14:25:05 -0400 Received: from [EMAIL PROTECTED] by imo-d05.mx.aol.com (mail_out_v36_r1.1.) id e.48.230ffa47 (30960) for [EMAIL PROTECTED]; Mon, 6 Oct 2003 14:24:04 -0400 (EDT) From: [EMAIL PROTECTED] Message-ID: [EMAIL PROTECTED] Date: Mon, 6 Oct 2003 14:24:04 EDT Subject: test To: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Mailer: AOL 5.0 for Windows sub 138 X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED] X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] X-RBL-Warning: FILTER: Message failed FILTER test (1083) X-Declude-Sender: [EMAIL PROTECTED] [205.188.157.37] X-Declude-Spoolname: Db3811e61010a193e.SMD X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: NOABUSE, NOPOSTMASTER, IPNOTINMX, NOLEGITCONTENT, FILTER, WEIGHT10 [10] X-Country-Chain: X-Note: This E-mail was sent from imo-d05.mx.aol.com ([205.188.157.37]). X-RCPT-TO: [EMAIL PROTECTED] Status: U X-UIDL: 352564684 Received: from SMTP32-FWD by mail.prudentialrand.com (SMTP32) id A0698; Mon, 6 Oct 2003 14:23:55 -0400 Received: from imo-r05.mx.aol.com [152.163.225.101] by mail.prudentialrand.com with ESMTP (SMTPD32-7.15) id A33924750044; Mon, 06 Oct 2003 14:23:53 -0400 Received: from [EMAIL PROTECTED] by imo-r05.mx.aol.com (mail_out_v36_r1.1.) id e.189.1fa140d3 (30950) for [EMAIL PROTECTED]; Mon, 6 Oct 2003 14:21:49 -0400 (EDT) From: [EMAIL PROTECTED] Message-ID: [EMAIL PROTECTED] Date: Mon, 6 Oct 2003 14:21:49 EDT Subject: [HOLD weight]your so stupid!!! To: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Mailer: AOL 5.0 for Windows sub 138 X-RBL-Warning: SPAMCOP: Blocked - see http://www.spamcop.net/bl.shtml?152.163.225.101 X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED] X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] X-RBL-Warning: FILTER: Message failed FILTER test (1361) X-RBL-Warning: WEIGHT25: Weight of 27 reaches or exceeds the limit of 25. X-Declude-Sender: [EMAIL PROTECTED] [152.163.225.101] X-Declude-Spoolname: Db3392475004400aa.SMD X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SPAMCOP, NOABUSE, NOPOSTMASTER, IPNOTINMX, NOLEGITCONTENT, FILTER, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25 [27] X-Country-Chain: X-Note: This E-mail was sent from imo-r05.mx.aol.com ([152.163.225.101]). Status: U X-UIDL: 352564683 --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hurah!
Ok, Joshie, I'll bite. You received a NXDOMAIN response when querying for a .com TLD, which means... Verisign is no longer hijacking, I mean wildcarding, all non-existent .com and .net domains to 64.94.110.11 The VERISCAM test is now useless. -Original Message- From: Joshua Levitsky [mailto:[EMAIL PROTECTED] Sent: Saturday, October 04, 2003 5:53 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Hurah! Anyone notice what is so wonderful about the query below? ; DiG 9.2.2 skjsakjsajkas.com ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NXDOMAIN, id: 29043 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;skjsakjsajkas.com. IN A ;; AUTHORITY SECTION: com.10800 IN SOA a.gtld-servers.net. nstld.verisign-grs.com. 2003100400 1800 900 604800 86400 -- Joshua Levitsky, CISSP, MCSE System Engineer AOL Time Warner [5957 F27C 9C71 E9A7 274A 0447 C9B9 75A4 9B41 D4D1] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Is all of AOL listed in spamcop?
What is up with this? I just sent a test message to myself from AOL and I got the same thing SPAMCOP BLOCKED, as if I didn't have enough trouble getting AOL e-mail through, between the noabuse, no postmaster and occasional BASE64 encoding. IS there a test that can give aol address a nice negative weight if they come from aol mail servers?? Help - Thanks - Marc Received: from imo-r05.mx.aol.com [152.163.225.101] by mail.prudentialrand.com with ESMTP (SMTPD32-7.15) id A58F13840122; Mon, 06 Oct 2003 12:17:19 -0400 Received: from [EMAIL PROTECTED] by imo-r05.mx.aol.com (mail_out_v36_r1.1.) id e.4f.35155d5a (4340) for [EMAIL PROTECTED]; Mon, 6 Oct 2003 12:16:46 -0400 (EDT) From: [EMAIL PROTECTED] Message-ID: [EMAIL PROTECTED] Date: Mon, 6 Oct 2003 12:16:45 EDT Subject: [SPAM]Re: FW: (no subject) To: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=part1_4f.35155d5a.2cb2ef6d_boundary X-Mailer: 6.0 sub 10577 X-RBL-Warning: SPAMCOP: Blocked - see http://www.spamcop.net/bl.shtml?152.163.225.101 X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED] X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] X-RBL-Warning: FILTER: Message failed FILTER test (1083) X-RBL-Warning: WEIGHT10: Weight of 27 reaches or exceeds the limit of 10. X-RBL-Warning: WEIGHT25: Weight of 27 reaches or exceeds the limit of 25. X-Declude-Sender: [EMAIL PROTECTED] [152.163.225.101] X-Declude-Spoolname: D958f138401221f51.SMD X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SPAMCOP, NOABUSE, NOPOSTMASTER, IPNOTINMX, NOLEGITCONTENT, FILTER, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25 [27] X-Country-Chain: X-Note: This E-mail was sent from imo-r05.mx.aol.com ([152.163.225.101]). --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hurah!
Don't worry, with the politics of the situation and the money to be made, it will return. Just wait. Todd Holt Xidix Technologies, Inc Las Vegas, NV USA www.xidix.com 702.319.4349 -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Monday, October 06, 2003 11:20 AM To: '[EMAIL PROTECTED]' Subject: RE: [Declude.JunkMail] Hurah! Ok, Joshie, I'll bite. You received a NXDOMAIN response when querying for a .com TLD, which means... Verisign is no longer hijacking, I mean wildcarding, all non-existent .com and .net domains to 64.94.110.11 The VERISCAM test is now useless. -Original Message- From: Joshua Levitsky [mailto:[EMAIL PROTECTED] Sent: Saturday, October 04, 2003 5:53 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Hurah! Anyone notice what is so wonderful about the query below? ; DiG 9.2.2 skjsakjsajkas.com ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NXDOMAIN, id: 29043 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;skjsakjsajkas.com. IN A ;; AUTHORITY SECTION: com.10800 IN SOA a.gtld-servers.net. nstld.verisign-grs.com. 2003100400 1800 900 604800 86400 -- Joshua Levitsky, CISSP, MCSE System Engineer AOL Time Warner [5957 F27C 9C71 E9A7 274A 0447 C9B9 75A4 9B41 D4D1] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] maybe its just one of AOL's servers???
What is your NOLEGITCONTENT test? X-Spam-Tests-Failed: NOABUSE, NOPOSTMASTER, IPNOTINMX, NOLEGITCONTENT, FILTER, WEIGHT10 [10] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] maybe its just one of AOL's servers???
in the global config file: NOLEGITCONTENT nolegitcontent x x 0 -4 If you're asking me what it does I can only paraphrase Scott. It looks for things that are uncommon in spam but common in legitimate e-mails so that it can give it some negative weight. Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Keith Anderson Sent: Monday, October 06, 2003 03:44 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] maybe its just one of AOL's servers??? What is your NOLEGITCONTENT test? X-Spam-Tests-Failed: NOABUSE, NOPOSTMASTER, IPNOTINMX, NOLEGITCONTENT, FILTER, WEIGHT10 [10] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] Happy days are here again...
and don't tell me you wouldn't do the same... That's a curious sentiment to post on an anti-spam list! I'd have hoped everyone here believes we should be regulated by ethics as well as statutes. Otherwise, why aren't we spamming for a living? As the three-way rubber-stamping between DoC, ICANN, and V$ has taken its many sickening turns over the years, I have never for one moment empathized with their mixture of collusion, bumbling, price gouging, and lies. Sucked it up, yes. But no, I wouldn't do the same. If that prevents us from becoming an 800-pound gorilla, fine; at least I can sleep at night. I don't think that's so yesterday. -Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: Re[2]: [Declude.JunkMail] Happy days are here again...
Frankly, i applaud your sense of duty and moral fortitude and character, it is very lacking in business today... that is all i was trying to say , my point was that although it's a sad truth about the world we live in, and it ain't getting any better most big corporations put their bottomline before anything... case in point, Worldcom , Enron etc. etc. to name a few get my drift? As far as anti-spam sentiments go... i'm just being realistic about this war we are waging i ( among others) challenged everyone to pull together and beat them at their own game rather than admitting defeat are you saying they are smarter than us... i find that hard to believe just my 2 cents worth. :) - Original Message - From: Sanford Whiteman [EMAIL PROTECTED] To: Webmaster Oilfield Directory [EMAIL PROTECTED] Sent: Monday, October 06, 2003 6:13 PM Subject: Re[2]: [Declude.JunkMail] Happy days are here again... That's a curious sentiment to post on an anti-spam list! I'd have hoped everyone here believes we should be regulated by ethics as well as statutes. Otherwise, why aren't we spamming for a living? As the three-way rubber-stamping between DoC, ICANN, and V$ has taken its many sickening turns over the years, I have never for one moment empathized with their mixture of collusion, bumbling, price gouging, and lies. Sucked it up, yes. But no, I wouldn't do the same. If that prevents us from becoming an 800-pound gorilla, fine; at least I can sleep at night. I don't think that's so yesterday. -Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hurah!
On Oct 6, 2003, at 2:19 PM, Colbeck, Andrew wrote: Verisign is no longer hijacking, I mean wildcarding, all non-existent .com and .net domains to 64.94.110.11 The VERISCAM test is now useless. Correct about the VERISCAM test, but NXDOMAIN is a good thing. It's how the Internet is supposed to work. -Josh -- Joshua Levitsky, CISSP, MCSE System Engineer AOL Time Warner [5957 F27C 9C71 E9A7 274A 0447 C9B9 75A4 9B41 D4D1] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[4]: [Declude.JunkMail] Happy days are here again...
most big corporations put their bottomline before anything... case in point, Worldcom , Enron etc. etc. to name a few get my drift? Those are cases of high-dollar abuse, and of course there are thousands of smaller-time abuses going on all the time. My disagreement was with your idea that *anyone* could/would do the same if the money were right. Just because evil is a constant doesn't mean it's universal (I hope). -Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
