Re: [Declude.JunkMail] Clarification

2004-01-23 Thread Dave Doherty
I think Todd pretty much hit the nail on the head.

Remember, I proposed that we would put all negative weight filters first,
then anything we considered mandatory (including particular tests and
filters we want to log), then the QUITIFWEIGHT test would start.

I do understand that it is desirable to run all tests if we want to measure
the worth of each. However, I want to control when I test, and that is not
24/365 on everything.

In production, I want a message to accumulate sufficient points to fail, and
then stop testing it and go on to the next message.

I delete at 30. Why would I care that a message accumulates 600 at the end
of the run when it scores 35 on the first three tests and I could have
tested other messages while this one accumulated the extra points?

-Dave



- Original Message - 
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, January 22, 2004 6:01 PM
Subject: RE: [Declude.JunkMail] Clarification


If a filter is skipped by SKIPIFWEIGHT, at that point I am not concerned
about logging that filter, as I do not want it to run. Remember,
SKIPIFWEIGHT is only for filters.

However, what if a message gets a high weight early, but then would get a
negative weight from a filter? You took action before the message had a
chance to get the negative weight.

What if you are checking to see the effectiveness of one test compared to
others? If processing is stopped short, that test may not be run on all
messages.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Dave Doherty
 Sent: Thursday, January 22, 2004 1:00 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.JunkMail] Clarification

 John-

 Doesn't SKIPIFWEIGHT also defeat the logging of the skipped tests?

 -Dave Doherty
  Skywaves, Inc.

 - Original Message -
 From: John Tolmachoff (Lists) [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Thursday, January 22, 2004 1:04 PM
 Subject: RE: [Declude.JunkMail] Clarification


  I would like to see the SKIPIFWEIGHT option removed.  If we had a
  conditional option to stop when a specific weight is reached, then there
  would be not need for SKIPIFWEIGHT.  In addition, why would anyone use
  SKIPIFWEIGHT on less than every test...and why would anyone define one
  test with a different SKIPIFWEIGHT value than another test?  This leads
  me back to a HOLDIFWEIGHT/DELETEIFWEIGHT logic which optionally stops
  processing when reached.

 Coming in late some my comments may be off.

 Scott has stated before that to stop all processing once a certain weight
 has been reached would be difficult and/or problematic. That is where
 SKIPIFWEIGHT comes in. I use SKIPIFWEIGHT on all body filters, as those
 are
 the most expensive in terms of CPU cost. I then have body filters listed
 in
 order, from most effective to least effective or specific target. Example,
 I
 have a custom body filter on my server for one client only. That is the
 last
 filter to run.

 Also, another reason to not stop processing is if you are doing log
 analysis
 and adjust filters or blocks based on that analysis. If you stop
 processing
 at say 35, but the message would have failed 5 other tests, those tests
 will
 then not show up in log analysis.

 John Tolmachoff
 Engineer/Consultant/Owner
 eServices For You


 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.



 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Email Marketing

2004-01-23 Thread Andy Ognenoff
I need some help with a request I got yesterday from our marketing dept.  I
walk into work yesterday to find that marketing, in their infinite wisdom,
have decided to start doing email marketing.  Of course they didn't involve
any technical people until I stumbled across the rumor of such activity.
They want to use various data sources (like those bowls you drop your
business card into at a restaurant to win a free lunch) to send out
announcements, promotions, special offers etc. I quickly told them that
before they do anything like that they need to sit down and listen to what
some of the ramifications of doing this are.

So here is my dilemma:  These people are VERY non-technical and my greatest
worry as the mail admin is that some bright marketing person is going to
sit down with Outlook, plug a bunch of customer names into their address
book and start sending out spam.  I know we fight external spammers but how
do you combat the possibility of one of your users doing so?

I know the benefits of a well-run email marketing campaign, but as we all
know, the difference between that and SPAM is a very thin line.  For
example, I have no idea if we state anywhere that by dropping your business
card in the bowl you agree to receive commercial messages from us (and
therefore I won't let them use that as a source for this.)  I know on our
web site we ask permission but we have never done anything with these lists
of customers before and frankly I don't know the best way to proceed with
this.

How would you go about explaining the technical ramifications of proceeding
with email marketing (ie: potentially getting blacklisted, setting up a good
double opt-in/opt-out mechanism, etc.) to a set of users that won't
understand it if you tell them that you can't just sit down and start
sending away.

Thanks for the help in advance!

Andy Ognenoff
Online Systems Administrator
Direct: (262)250-2860
[EMAIL PROTECTED]
-
Cousins Submarines, Inc.
http://www.cousinssubs.com


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Manual

2004-01-23 Thread jcochran
 Seems that there is a lot of chatter on the mailing list right now
 with tests etc that are not in the manual. I am curious will a new
 manual be released, or does anyone have any good explanations of some
 of these tests on their sites?
 
 The general rule of thumb is that the manual is updated to include new
 tests (and other features) whenever a released version comes out.  For
 betas (and interim releases), the features are discussed on the list.

Scott, for what it's worth, our Declude maintenance is up for renewal, 
and one of the questions I got asked was when there would be an 
updated printed manual that our less-experienced admins could 
understand.  Don't worry, the maintenance will definitely get paid, but 
now one of my tasks in my free time is to write an admin manual for 
our staff for Declude's products.

Food for thought as some/many of the features of Declude are 
becoming more regularly available from competitors and even 
Ipswitch.

Jeff
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Email Marketing

2004-01-23 Thread Markus Gufler

Ok let me resume: 

1.) it's a non-tecnical person 
2.) his task is to sell more
3.) he don't know what means being flooded with marketing mails because
you filter them out all of this trash.

Solution: disable spam filtering for this guy (or bether the entire
marketing dept)
Say nothing to anyone until they ask you. Then explain that this are the
same mails he want to send out in the future.

Markus ;-)



 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Andy Ognenoff
 Sent: Friday, January 23, 2004 3:37 PM
 To: [EMAIL PROTECTED]
 Subject: [Declude.JunkMail] Email Marketing
 
 I need some help with a request I got yesterday from our 
 marketing dept.  I walk into work yesterday to find that 
 marketing, in their infinite wisdom, have decided to start 
 doing email marketing.  Of course they didn't involve any 
 technical people until I stumbled across the rumor of such activity.
 They want to use various data sources (like those bowls you 
 drop your business card into at a restaurant to win a free 
 lunch) to send out announcements, promotions, special offers 
 etc. I quickly told them that before they do anything like 
 that they need to sit down and listen to what some of the 
 ramifications of doing this are.
 
 So here is my dilemma:  These people are VERY non-technical 
 and my greatest worry as the mail admin is that some bright 
 marketing person is going to sit down with Outlook, plug a 
 bunch of customer names into their address book and start 
 sending out spam.  I know we fight external spammers but how 
 do you combat the possibility of one of your users doing so?
 
 I know the benefits of a well-run email marketing campaign, 
 but as we all know, the difference between that and SPAM is a 
 very thin line.  For example, I have no idea if we state 
 anywhere that by dropping your business card in the bowl you 
 agree to receive commercial messages from us (and therefore I 
 won't let them use that as a source for this.)  I know on our 
 web site we ask permission but we have never done anything 
 with these lists of customers before and frankly I don't know 
 the best way to proceed with this.
 
 How would you go about explaining the technical ramifications 
 of proceeding with email marketing (ie: potentially getting 
 blacklisted, setting up a good double opt-in/opt-out 
 mechanism, etc.) to a set of users that won't understand it 
 if you tell them that you can't just sit down and start sending away.
 
 Thanks for the help in advance!
 
 Andy Ognenoff
 Online Systems Administrator
 Direct: (262)250-2860
 [EMAIL PROTECTED]
 -
 Cousins Submarines, Inc.
 http://www.cousinssubs.com
 
 
 ---
 [This E-mail was scanned for viruses by Declude Virus 
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
 type unsubscribe Declude.JunkMail.  The archives can be 
 found at http://www.mail-archive.com.
 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Email Marketing

2004-01-23 Thread R. Scott Perry

So here is my dilemma:  These people are VERY non-technical and my greatest
worry as the mail admin is that some bright marketing person is going to
sit down with Outlook, plug a bunch of customer names into their address
book and start sending out spam.  I know we fight external spammers but how
do you combat the possibility of one of your users doing so?
The first thing I would do is check to see if your Internet provider has a 
TOS that prohibits spamming (which is very likely).  If so, you may want to 
pass that information on to the marketing department.  If they know that 
their actions could risk the company losing Internet access even 
temporarily, they will likely think twice about it.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Manual

2004-01-23 Thread R. Scott Perry

Scott, for what it's worth, our Declude maintenance is up for renewal,
and one of the questions I got asked was when there would be an
updated printed manual that our less-experienced admins could
understand.  Don't worry, the maintenance will definitely get paid, but
now one of my tasks in my free time is to write an admin manual for
our staff for Declude's products.
Thanks for pointing this out.  A major overhaul to the manual by a 
technical writer is something that has been on the to do list for some time.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Email Marketing

2004-01-23 Thread Andy Ognenoff
 The first thing I would do is check to see if your Internet provider has a
 TOS that prohibits spamming (which is very likely).  If so, you may want
 to
 pass that information on to the marketing department.  If they know that
 their actions could risk the company losing Internet access even
 temporarily, they will likely think twice about it.

Understood...but what they want to do is not what I would classify as spam
if it's done correctly.  Gathering email addresses from people who opt-in to
receive special offers or news and sending out those special offers to only
those people wouldn't be spam.  My question was really how do I explain what
the technical aspects of running a legit email marketing campaign involve
and perhaps helping me compile a list of those technical aspects so I don't
accidentally leave any out.  

Have no fear...if I can't make them understand the difference between a
legit email campaign and SPAM they won't be doing it at all. :)

- Andy 



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Email Marketing

2004-01-23 Thread Matt




Andy,

Harvesting from business cards dropped in a fish bowl is not a best
practice, even if they feel justified in doing so. Address collection
should be done by a method that follows MAPS standards, and E-mail
campaigns need to follow their same best standards as well. Even if you
do so, you will likely still find yourselves vulnerable to places like
SpamCop.

 Basic Mailing List Management Guidelines for Preventing Abuse
 http://www.mail-abuse.org/manage.html

Matt



Andy Ognenoff wrote:

  
The first thing I would do is check to see if your Internet provider has a
TOS that prohibits spamming (which is very likely).  If so, you may want
to
pass that information on to the marketing department.  If they know that
their actions could risk the company losing Internet access even
temporarily, they will likely think twice about it.

  
  
Understood...but what they want to do is not what I would classify as spam
if it's done correctly.  Gathering email addresses from people who opt-in to
receive special offers or news and sending out those special offers to only
those people wouldn't be spam.  My question was really how do I explain what
the technical aspects of running a legit email marketing campaign involve
and perhaps helping me compile a list of those technical aspects so I don't
accidentally leave any out.  

Have no fear...if I can't make them understand the difference between a
legit email campaign and SPAM they won't be doing it at all. :)

- Andy 



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


  


-- 
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=




RE: [Declude.JunkMail] Nigerian Filter Creator Helper

2004-01-23 Thread jcochran
 Why not use Kami's Nigerian Filter?  He's done all of the work for
 you. Just remember to thank him.

That sounds interesting, how about a pointer to Kami's site/email/etc.?  
(Or am I just too far out of it and missed the obvious location 
somehwere...?)

Thanks, and in advance, thanks to Kami and everyone who has 
created a filter which I might ever use or use for inspiration.

Jeff


  -Original Message-
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser
  Sent: Wednesday, December 31, 2003 12:15 PM To:
  [EMAIL PROTECTED] Subject: [Declude.JunkMail] Nigerian
  Filter Creator Helper
  
  
  Hello, All,
  I'm looking for a type of utility that either specifically 
  was written to do
  what I describe below or a utility which is a broad-based text
  massaging/manipulation utility which could be twisted to do 
  the following.
  
  I would like a utility that I could feed the bodies of 
  nigerian scam letters
  into and it would basically create a list of all phrases of 
  world length X
  to Y where X and Y are both numbers.  It would capture 
  information from each
  scam letter that I feed in and would generate an ordered list 
  of each time
  the X to Y word length phrase appears in each letter.
  
  So, for example, if my X and Y were 3 and 5 it would generate 
  a list of all
  3 word, 4 word and 5 word phrases found in each message.  
  Then it would add
  1 to the tally of each time this phrase is found in any given unique
  nigerian scam letter.  After I submit a certain letters, e.g. 20
  (?), I would have a list of very commonly found phrases in Nigerian
  scam letters. I could then create a custom filter for DJM based on
  those phrases.
  
  Ultimately my filter might look something like...
  
  # JunkMail.Filter.Nigerian.txt
  
  BODY 10 CONTAINS Nigerian Federal Ministry
  BODY 10 CONTAINS prayed for ALLAHS devine mercies
  BODY 10 CONTAINS shores of Nigeria
  BODY 10 CONTAINS we solicit for your
  
  I was hoping that their might be a small utility that some of 
  the Nigerian
  scam fighting organizations had released to generate keyphrase
  lists.
  
  Does this sound like a decent idea?  Are there any good 
  utilities to do
  this?  Or is this something I'd have to write myself?  Would it be
  prohibitively complicated to write a program like this for a person
  who hasn't done much programming?  Or is this pretty
  straightforward?
  
  Thanks In Advance,
  Dan
  
  --
  -
  Sign up for virus-free and spam-free e-mail with Nexus 
  Technology Group 
  http://www.nexustechgroup.com/mailscan
  
  ---
  [This E-mail was scanned for viruses by Declude Virus 
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 ---
 [This E-mail scanned for viruses by Declude Virus]
 
 


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Email Marketing

2004-01-23 Thread Dave Doherty
Hi Andy-

I get this question for my customers a couple of times a month. Of course,
we prohibit such activity. We usually send them to one of the list houses
that specialize in this kind of thing. Microsoft's B-Central lets you create
a list and mail to it, and there are many others that are cheaper. Moving
this activity off your mail server and onto a specialist's limits - but does
not eliminate - the likelihood that you will get on a blacklist. Some
aggressive folks will blacklist anything relating to the sending domain
regardless of its actual source.

Also, be sure to install and use Hijack. Configure it to prevent the kind of
freelance activity you are worried about.

-Dave Doherty
 Skywaves, Inc.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Email Marketing

2004-01-23 Thread John Shacklett
I know this suggestion was kind of tongue-in-cheek, but we did exactly this
for one of our Marketing wonderboys. After 3 days, just three days, he came
into my office waving his white handkerchief and begging for mercy. The
message was sent better than any discussion could have, technical or not.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Markus Gufler
Sent: Friday, January 23, 2004 10:05 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Email Marketing



Ok let me resume:

1.) it's a non-tecnical person
2.) his task is to sell more
3.) he don't know what means being flooded with marketing mails because
you filter them out all of this trash.

Solution: disable spam filtering for this guy (or bether the entire
marketing dept)
Say nothing to anyone until they ask you. Then explain that this are the
same mails he want to send out in the future.

Markus ;-)


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Nigerian Filter Creator Helper

2004-01-23 Thread Kevin Bilbee
I have been testing Kami's Nigerian filter and found that in 3 days it
flagged 56 email and only caught out of 5 nigerian scam emails.

I do not see this as a fault of Kami's effort but a fault of filtering. Some
of the line are very common in ligitimate email. I even lowered all the
weights to match our weighting scores. We will not be using it. Once I did
that then the nigerian scam email did not get enough weight to be flagged
properly.

For the effort it is not worth the results, in my opinion.

Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of
 [EMAIL PROTECTED]
 Sent: Friday, January 23, 2004 7:59 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Nigerian Filter Creator Helper


  Why not use Kami's Nigerian Filter?  He's done all of the work for
  you. Just remember to thank him.

 That sounds interesting, how about a pointer to Kami's site/email/etc.?
 (Or am I just too far out of it and missed the obvious location
 somehwere...?)

 Thanks, and in advance, thanks to Kami and everyone who has
 created a filter which I might ever use or use for inspiration.

 Jeff


   -Original Message-
   From: [EMAIL PROTECTED]
   [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser
   Sent: Wednesday, December 31, 2003 12:15 PM To:
   [EMAIL PROTECTED] Subject: [Declude.JunkMail] Nigerian
   Filter Creator Helper
  
  
   Hello, All,
   I'm looking for a type of utility that either specifically
   was written to do
   what I describe below or a utility which is a broad-based text
   massaging/manipulation utility which could be twisted to do
   the following.
  
   I would like a utility that I could feed the bodies of
   nigerian scam letters
   into and it would basically create a list of all phrases of
   world length X
   to Y where X and Y are both numbers.  It would capture
   information from each
   scam letter that I feed in and would generate an ordered list
   of each time
   the X to Y word length phrase appears in each letter.
  
   So, for example, if my X and Y were 3 and 5 it would generate
   a list of all
   3 word, 4 word and 5 word phrases found in each message.
   Then it would add
   1 to the tally of each time this phrase is found in any given unique
   nigerian scam letter.  After I submit a certain letters, e.g. 20
   (?), I would have a list of very commonly found phrases in Nigerian
   scam letters. I could then create a custom filter for DJM based on
   those phrases.
  
   Ultimately my filter might look something like...
  
   # JunkMail.Filter.Nigerian.txt
  
   BODY 10 CONTAINS Nigerian Federal Ministry
   BODY 10 CONTAINS prayed for ALLAHS devine mercies
   BODY 10 CONTAINS shores of Nigeria
   BODY 10 CONTAINS we solicit for your
  
   I was hoping that their might be a small utility that some of
   the Nigerian
   scam fighting organizations had released to generate keyphrase
   lists.
  
   Does this sound like a decent idea?  Are there any good
   utilities to do
   this?  Or is this something I'd have to write myself?  Would it be
   prohibitively complicated to write a program like this for a person
   who hasn't done much programming?  Or is this pretty
   straightforward?
  
   Thanks In Advance,
   Dan
  
   --
   -
   Sign up for virus-free and spam-free e-mail with Nexus
   Technology Group
   http://www.nexustechgroup.com/mailscan
  
   ---
   [This E-mail was scanned for viruses by Declude Virus
  (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
  (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
  ---
  [This E-mail scanned for viruses by Declude Virus]
 
 


 ---
 [This E-mail scanned for viruses by Declude Virus]

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Nigerian Filter Creator Helper

2004-01-23 Thread John Tolmachoff \(Lists\)
Interesting, in my testing it has only produced 3 FP, and those would not
have been held except that they had other problems as well.

As has been said, you mileage may vary.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Kevin Bilbee
 Sent: Friday, January 23, 2004 9:38 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Nigerian Filter Creator Helper
 
 I have been testing Kami's Nigerian filter and found that in 3 days it
 flagged 56 email and only caught out of 5 nigerian scam emails.
 
 I do not see this as a fault of Kami's effort but a fault of filtering.
 Some
 of the line are very common in ligitimate email. I even lowered all the
 weights to match our weighting scores. We will not be using it. Once I did
 that then the nigerian scam email did not get enough weight to be flagged
 properly.
 
 For the effort it is not worth the results, in my opinion.
 
 Kevin Bilbee
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Behalf Of
  [EMAIL PROTECTED]
  Sent: Friday, January 23, 2004 7:59 AM
  To: [EMAIL PROTECTED]
  Subject: RE: [Declude.JunkMail] Nigerian Filter Creator Helper
 
 
   Why not use Kami's Nigerian Filter?  He's done all of the work for
   you. Just remember to thank him.
 
  That sounds interesting, how about a pointer to Kami's site/email/etc.?
  (Or am I just too far out of it and missed the obvious location
  somehwere...?)
 
  Thanks, and in advance, thanks to Kami and everyone who has
  created a filter which I might ever use or use for inspiration.
 
  Jeff
 
 
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser
Sent: Wednesday, December 31, 2003 12:15 PM To:
[EMAIL PROTECTED] Subject: [Declude.JunkMail] Nigerian
Filter Creator Helper
   
   
Hello, All,
I'm looking for a type of utility that either specifically
was written to do
what I describe below or a utility which is a broad-based text
massaging/manipulation utility which could be twisted to do
the following.
   
I would like a utility that I could feed the bodies of
nigerian scam letters
into and it would basically create a list of all phrases of
world length X
to Y where X and Y are both numbers.  It would capture
information from each
scam letter that I feed in and would generate an ordered list
of each time
the X to Y word length phrase appears in each letter.
   
So, for example, if my X and Y were 3 and 5 it would generate
a list of all
3 word, 4 word and 5 word phrases found in each message.
Then it would add
1 to the tally of each time this phrase is found in any given unique
nigerian scam letter.  After I submit a certain letters, e.g. 20
(?), I would have a list of very commonly found phrases in Nigerian
scam letters. I could then create a custom filter for DJM based on
those phrases.
   
Ultimately my filter might look something like...
   
# JunkMail.Filter.Nigerian.txt
   
BODY 10 CONTAINS Nigerian Federal Ministry
BODY 10 CONTAINS prayed for ALLAHS devine mercies
BODY 10 CONTAINS shores of Nigeria
BODY 10 CONTAINS we solicit for your
   
I was hoping that their might be a small utility that some of
the Nigerian
scam fighting organizations had released to generate keyphrase
lists.
   
Does this sound like a decent idea?  Are there any good
utilities to do
this?  Or is this something I'd have to write myself?  Would it be
prohibitively complicated to write a program like this for a person
who hasn't done much programming?  Or is this pretty
straightforward?
   
Thanks In Advance,
Dan
   
--
-
Sign up for virus-free and spam-free e-mail with Nexus
Technology Group
http://www.nexustechgroup.com/mailscan
   
---
[This E-mail was scanned for viruses by Declude Virus
   (http://www.declude.com)]
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.JunkMail.  The archives can be found
   at http://www.mail-archive.com.
  
   ---
   [This E-mail was scanned for viruses by Declude Virus
   (http://www.declude.com)]
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.JunkMail.  The archives can be found
   at http://www.mail-archive.com.
   ---
   [This E-mail scanned for viruses by Declude Virus]
  
  
 
 
  ---
  [This E-mail scanned for viruses by Declude Virus]
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail 

RE: [Declude.JunkMail] Nigerian Filter Creator Helper

2004-01-23 Thread Kevin Bilbee
Correction:
That should be only caught 2 out of 5

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Kevin Bilbee
 Sent: Friday, January 23, 2004 9:38 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Nigerian Filter Creator Helper


 I have been testing Kami's Nigerian filter and found that in 3 days it
 flagged 56 email and only caught out of 5 nigerian scam emails.

 I do not see this as a fault of Kami's effort but a fault of
 filtering. Some
 of the line are very common in ligitimate email. I even lowered all the
 weights to match our weighting scores. We will not be using it. Once I did
 that then the nigerian scam email did not get enough weight to be flagged
 properly.

 For the effort it is not worth the results, in my opinion.

 Kevin Bilbee

  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Behalf Of
  [EMAIL PROTECTED]
  Sent: Friday, January 23, 2004 7:59 AM
  To: [EMAIL PROTECTED]
  Subject: RE: [Declude.JunkMail] Nigerian Filter Creator Helper
 
 
   Why not use Kami's Nigerian Filter?  He's done all of the work for
   you. Just remember to thank him.
 
  That sounds interesting, how about a pointer to Kami's site/email/etc.?
  (Or am I just too far out of it and missed the obvious location
  somehwere...?)
 
  Thanks, and in advance, thanks to Kami and everyone who has
  created a filter which I might ever use or use for inspiration.
 
  Jeff
 
 
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser
Sent: Wednesday, December 31, 2003 12:15 PM To:
[EMAIL PROTECTED] Subject: [Declude.JunkMail] Nigerian
Filter Creator Helper
   
   
Hello, All,
I'm looking for a type of utility that either specifically
was written to do
what I describe below or a utility which is a broad-based text
massaging/manipulation utility which could be twisted to do
the following.
   
I would like a utility that I could feed the bodies of
nigerian scam letters
into and it would basically create a list of all phrases of
world length X
to Y where X and Y are both numbers.  It would capture
information from each
scam letter that I feed in and would generate an ordered list
of each time
the X to Y word length phrase appears in each letter.
   
So, for example, if my X and Y were 3 and 5 it would generate
a list of all
3 word, 4 word and 5 word phrases found in each message.
Then it would add
1 to the tally of each time this phrase is found in any given unique
nigerian scam letter.  After I submit a certain letters, e.g. 20
(?), I would have a list of very commonly found phrases in Nigerian
scam letters. I could then create a custom filter for DJM based on
those phrases.
   
Ultimately my filter might look something like...
   
# JunkMail.Filter.Nigerian.txt
   
BODY 10 CONTAINS Nigerian Federal Ministry
BODY 10 CONTAINS prayed for ALLAHS devine mercies
BODY 10 CONTAINS shores of Nigeria
BODY 10 CONTAINS we solicit for your
   
I was hoping that their might be a small utility that some of
the Nigerian
scam fighting organizations had released to generate keyphrase
lists.
   
Does this sound like a decent idea?  Are there any good
utilities to do
this?  Or is this something I'd have to write myself?  Would it be
prohibitively complicated to write a program like this for a person
who hasn't done much programming?  Or is this pretty
straightforward?
   
Thanks In Advance,
Dan
   
--
-
Sign up for virus-free and spam-free e-mail with Nexus
Technology Group
http://www.nexustechgroup.com/mailscan
   
---
[This E-mail was scanned for viruses by Declude Virus
   (http://www.declude.com)]
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.JunkMail.  The archives can be found
   at http://www.mail-archive.com.
  
   ---
   [This E-mail was scanned for viruses by Declude Virus
   (http://www.declude.com)]
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.JunkMail.  The archives can be found
   at http://www.mail-archive.com.
   ---
   [This E-mail scanned for viruses by Declude Virus]
  
  
 
 
  ---
  [This E-mail scanned for viruses by Declude Virus]
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

 ---
 [This E-mail was scanned for 

Re: [Declude.JunkMail] Nigerian Filter Creator Helper

2004-01-23 Thread Dave Doherty



Matt,

 this filter won't get run unless an E-mail gets past almost everything 
else with a score less than 28 on my system

How are you accomplishing that? Are you uising SKIPIFWEIGHT on 
the filter?

-Dave



Re: [Declude.JunkMail] Nigerian Filter Creator Helper

2004-01-23 Thread Matt




Kevin,

I also have been using Kami's Nigerian stuff, however I modified it a
great deal and removed some of the lines that I felt were too common, I
reduced scores, and capped the score at 80% of my hold weight. The
result is that it only hit 0.06% of my total mail volume across a 3 day
period earlier this week, however this filter won't get run unless an
E-mail gets past almost everything else with a score less than 28 on my
system, which is about 85% on average. I feel that this is working
correctly, and it does score some things that are very hard to catch
with other filters. Sniffer also does a good job with this stuff, so
between the two, I think I'm pretty well protected.

Attached is a copy of Kami's filter that was modified as described
above. I think this may improve your results.

Matt



Kevin Bilbee wrote:

  I have been testing Kami's Nigerian filter and found that in 3 days it
flagged 56 email and only caught out of 5 nigerian scam emails.

I do not see this as a fault of Kami's effort but a fault of filtering. Some
of the line are very common in ligitimate email. I even lowered all the
weights to match our weighting scores. We will not be using it. Once I did
that then the nigerian scam email did not get enough weight to be flagged
properly.

For the effort it is not worth the results, in my opinion.

Kevin Bilbee

  
  
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of
[EMAIL PROTECTED]
Sent: Friday, January 23, 2004 7:59 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] "Nigerian" Filter Creator Helper




  Why not use Kami's Nigerian Filter?  He's done all of the work for
you. Just remember to thank him.
  

That sounds interesting, how about a pointer to Kami's site/email/etc.?
(Or am I just too far out of it and missed the obvious location
somehwere...?)

Thanks, and in advance, thanks to Kami and everyone who has
created a filter which I might ever use or use for inspiration.

Jeff




  
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Dan Geiser
Sent: Wednesday, December 31, 2003 12:15 PM To:
[EMAIL PROTECTED] Subject: [Declude.JunkMail] "Nigerian"
Filter Creator Helper


Hello, All,
I'm looking for a type of utility that either specifically
was written to do
what I describe below or a utility which is a broad-based text
massaging/manipulation utility which could be twisted to do
the following.

I would like a utility that I could feed the bodies of
nigerian scam letters
into and it would basically create a list of all phrases of
world length X
to Y where X and Y are both numbers.  It would capture
information from each
scam letter that I feed in and would generate an ordered list
of each time
the X to Y word length phrase appears in each letter.

So, for example, if my X and Y were 3 and 5 it would generate
a list of all
3 word, 4 word and 5 word phrases found in each message.
Then it would add
1 to the tally of each time this phrase is found in any given unique
nigerian scam letter.  After I submit a certain letters, e.g. 20
(?), I would have a list of very commonly found phrases in Nigerian
scam letters. I could then create a custom filter for DJM based on
those phrases.

Ultimately my filter might look something like...

# JunkMail.Filter.Nigerian.txt

BODY 10 CONTAINS Nigerian Federal Ministry
BODY 10 CONTAINS prayed for ALLAHS devine mercies
BODY 10 CONTAINS shores of Nigeria
BODY 10 CONTAINS we solicit for your

I was hoping that their might be a small utility that some of
the Nigerian
scam fighting organizations had released to generate keyphrase
lists.

Does this sound like a decent idea?  Are there any good
utilities to do
this?  Or is this something I'd have to write myself?  Would it be
prohibitively complicated to write a program like this for a person
who hasn't done much programming?  Or is this pretty
straightforward?

Thanks In Advance,
Dan

--
-
Sign up for virus-free and spam-free e-mail with Nexus
Technology Group
http://www.nexustechgroup.com/mailscan

---
[This E-mail was scanned for viruses by Declude Virus

  
  (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]


  


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude 

Re[2]: [Declude.JunkMail] Nigerian Filter Creator Helper

2004-01-23 Thread Madscientist
Hello Kevin,

Friday, January 23, 2004, 12:37:37 PM, you wrote:

KB I have been testing Kami's Nigerian filter and found that in 3 days it
KB flagged 56 email and only caught out of 5 nigerian scam emails.

KB I do not see this as a fault of Kami's effort but a fault of filtering. Some
KB of the line are very common in ligitimate email. I even lowered all the
KB weights to match our weighting scores. We will not be using it. Once I did
KB that then the nigerian scam email did not get enough weight to be flagged
KB properly.

KB For the effort it is not worth the results, in my opinion.

Sniffer has a number of rules for nigerian scam email. So far we've
never had a reported false positive for one of those rules. Perhaps
the reason is that we can provide more complex filtering matching
combinations of phrases from different segments of the message.

_M
__
Peter G McNeil (Madscientist, CodeDweller)
President, MicroNeil Research Corporation.
Chief SortMonster, www.SortMonster.com

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Nigerian Filter Creator Helper

2004-01-23 Thread Matt




Yes. I also have it very near the bottom of my list because it has a
lot of body searches, and it rarely gets hit. Even so, setting
SKIPIFWEIGHT to 28 while holding at 10 and deleting at 25 means that my
best custom filter tops out at 3% of total mail volume. Even GIBBERISH
only gets hit 1.21% of the time, however without SKIPIFWEIGHT and
proper ordering, it would probably do over 5 times that amount. Here's
some stats, but note that SNIFFER was a trial version for this period
and would have scored much higher. My weight tests are as follows:

 HIGH-MAILPURE - Scored between 10 and 24 and was held.
 MED-MAILPURE - Scored between 13 and 24 and was held.
 LOW-MAILPURE - Scored between 16 and 24 and was held.
 DELETE - Scored 25+ and was deleted.


Matt


TEST # FAILED Percentage
NOLEGITCONTENT...22,816...86.96%
DELETE...21,592...82.30%
IPNOTINMX21,551...82.14%
SPAMCOP(ALL).17,664...67.33%
SPAMCOP(DYNA)17,281...65.87%
SNIFFER-GENERAL..15,120...57.63%
CMDSPACE.13,911...53.02%
MAILPOLICE-BULK..10,104...38.51%
DSBL(ALL).9,606...36.61%
DSBL(DYNA)9,520...36.29%
SBL...8,716...33.22%
XBL(ALL)..8,422...32.10%
XBL(DYNA).8,259...31.48%
FIVETEN-SPAM(ALL).7,522...28.67%
FIVETEN-SPAM(DYNA)7,270...27.71%
SORBS-DUL.6,471...24.66%
NJABL-DYNA6,297...24.00%
RFC-NOABUSE(DUL)..6,253...23.83%
AHBL-SOURCES..5,296...20.19%
BADHEADERS5,204...19.84%
RFC-NOPOSTMASTER(DUL).5,008...19.09%
HELOBOGUS.4,207...16.04%
NJABL-SOURCES.3,812...14.53%
NJABL-PROXIES(ALL)3,582...13.65%
NJABL-PROXIES(DYNA)...3,435...13.09%
SORBS-SPAM(ALL)...3,191...12.16%
SORBS-SPAM(DYNA)..3,152...12.01%
SPAMDOMAINS...3,065...11.68%
FIVETEN-SUPPORT...2,897...11.04%
SORBS-SOCKS(ALL)..2,750...10.48%
SORBS-SOCKS(DYNA).2,650...10.10%
ROUTING...2,645...10.08%
SORBS-HTTP(ALL)...2,5049.54%
SORBS-HTTP(DYNA)..2,4109.19%
BRAMBSTER.2,3999.14%
AHBL-PROXIES(ALL).2,3709.03%
AHBL-PROXIES(DYNA)2,2928.74%
RFC-DSN(DUL)..2,0807.93%
CONCEALED.1,8176.93%
SPAMHEADERS...1,3865.28%
BASE641,2874.91%
SPAMINDICATIVE..9713.70%
NJABL-DUL...9573.65%
BLITZEDALL(ALL).9563.64%
BLITZEDALL(DYNA)8763.34%
MAILFROM7772.96%
SUBSPACE-15.6972.66%
FIVETEN-BULK6142.34%
HIGH-MAILPURE...6122.33%
PSEUDO-WHITE5652.15%
SBBL(ALL)...5432.07%
SBBL(DYNA)..5402.06%
SOLID(ALL)..5262.00%
RFC-BOGUSMX(DUL)5021.91%
MED-MAILPURE4951.89%
DYNAMIC.4731.80%
SOLID(DYNA).4261.62%
SUBSPACE-25.4161.59%
LOW-MAILPURE4101.56%
FORGEDHTML..4031.54%
ATTACHMENT..3801.45%
COMMMENTS...3351.28%
KAMI-COMBINED...3321.27%
GIBBERISH...3171.21%
FOREIGN.2520.96%
SUBSPACE-40.2510.96%
WORDFILTER-BODY.2360.90%
SNIFFER-MALWARE.2350.90%
NJABL-RELAYS(ALL)...2200.84%
BADCOUNTRYNOREVDNS..2160.82%
NJABL-RELAYS(DYNA)..2150.82%
BOUNCED.1980.75%
SPAMPOSITIVE1800.69%
SORBS-MISC(ALL).1770.67%
WORDFILTER-SUBJECT..1710.65%
MAILPOLICE-PORN.1630.62%
SORBS-MISC(DYNA)1610.61%
ORDB(ALL)...1590.61%
ORDB(DYNA)..1370.52%
BASE64SUB...1240.47%
IPLINKED1100.42%
DEADMAIL.920.35%
PUBLICADDRESS890.34%
PSEUDO-BLACK.760.29%
GIBBERISHSUB.620.24%
NONENGLISH...500.19%
@LINKED..350.13%
FORGEDHELO-IP350.13%
TLD-WESTERNEUROPEAN..350.13%
WORDFILTER-MAILFROM..350.13%
FORGEDFROM...340.13%
ORDB-MODULE(DYNA)330.13%
ANTIVIRUS260.10%

RE: [Declude.JunkMail] Email Marketing

2004-01-23 Thread Andy Ognenoff
 Basic Mailing List Management Guidelines for Preventing Abuse
 http://www.mail-abuse.org/manage.html

Thanks Matt...that was exactly what I was looking for.  Would a place like
EmailLabs (http://www.emaillabs.com) be a good place to investigate or does
anyone else have the name of a good (read best-practice-following) list
hosting service?

- Andy 



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Manual

2004-01-23 Thread Kevin Bilbee
I agree that a manual is greatly needed. the value of all the new tests is
greatly diminished if there is not adequate documentation.

Searching through the archives and reading the discussions my be a good
thing to do if you are having trouble understanding the manual but to search
the archives to learn the features in the first place is prohibitive for
anyone who is performing multiple functions.

Once you release your next version I would suggest taking the time to create
a comprehensive manual. that will be more value to your customers than new
features.

If they do not know how to implement the current features then new features
are not going to be of any value either.

For the people that can spend the time and monitor the group full time and
experiment with new features when they are in beta I commend you. But not
all of us have the time to do that.

WE NEED A MANUAL TO QUICKLY AND EFFICITENTLY IMPLEMENT DECLUDES FEATURES.

If you document the usage of the new features while you are creating them
you would save yourself and your customers a lot of time.

Make the documentation part of your development cycle If you hire a
technical writer they are going to require it, so start it now, make the
usage notes available, it will save us all time and aggravation.

Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
 Sent: Friday, January 23, 2004 7:07 AM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.JunkMail] Manual



 Scott, for what it's worth, our Declude maintenance is up for renewal,
 and one of the questions I got asked was when there would be an
 updated printed manual that our less-experienced admins could
 understand.  Don't worry, the maintenance will definitely get paid, but
 now one of my tasks in my free time is to write an admin manual for
 our staff for Declude's products.

 Thanks for pointing this out.  A major overhaul to the manual by a
 technical writer is something that has been on the to do list
 for some time.

 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
 Declude Virus: Catches known viruses and is the leader in mailserver
 vulnerability detection.
 Find out what you've been missing: Ask about our free 30-day evaluation.

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Manual

2004-01-23 Thread Ken Hirosumi
I agreebetter documentation...please!
- Original Message - 
From: Kevin Bilbee [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, January 23, 2004 11:06 AM
Subject: RE: [Declude.JunkMail] Manual


 I agree that a manual is greatly needed. the value of all the new tests is
 greatly diminished if there is not adequate documentation.

 Searching through the archives and reading the discussions my be a good
 thing to do if you are having trouble understanding the manual but to
search
 the archives to learn the features in the first place is prohibitive for
 anyone who is performing multiple functions.

 Once you release your next version I would suggest taking the time to
create
 a comprehensive manual. that will be more value to your customers than new
 features.

 If they do not know how to implement the current features then new
features
 are not going to be of any value either.

 For the people that can spend the time and monitor the group full time and
 experiment with new features when they are in beta I commend you. But not
 all of us have the time to do that.

 WE NEED A MANUAL TO QUICKLY AND EFFICITENTLY IMPLEMENT DECLUDES FEATURES.

 If you document the usage of the new features while you are creating them
 you would save yourself and your customers a lot of time.

 Make the documentation part of your development cycle If you hire a
 technical writer they are going to require it, so start it now, make the
 usage notes available, it will save us all time and aggravation.

 Kevin Bilbee

  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
  Sent: Friday, January 23, 2004 7:07 AM
  To: [EMAIL PROTECTED]
  Subject: Re: [Declude.JunkMail] Manual
 
 
 
  Scott, for what it's worth, our Declude maintenance is up for renewal,
  and one of the questions I got asked was when there would be an
  updated printed manual that our less-experienced admins could
  understand.  Don't worry, the maintenance will definitely get paid, but
  now one of my tasks in my free time is to write an admin manual for
  our staff for Declude's products.
 
  Thanks for pointing this out.  A major overhaul to the manual by a
  technical writer is something that has been on the to do list
  for some time.
 
  -Scott
  ---
  Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
  Declude Virus: Catches known viruses and is the leader in mailserver
  vulnerability detection.
  Find out what you've been missing: Ask about our free 30-day evaluation.
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 ---
 [This E-mail was scanned for viruses by The Calsoft Anti-Virus Scanner]




---
[This E-mail was scanned for viruses by The Calsoft Anti-Virus Scanner]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Email Marketing

2004-01-23 Thread Matt




Listservs that service small companies are commonly very dirty and have
RBL issues, bCentral for instance is terrible. As far as other
companies go, you need to make sure that they don't also operate under
other identities, or service dirty lists as a practice.
Experian/exactis.com,
MindShareDesign.com/PostMasterGeneral.com/pm0.com/mb00.com/ms00.net/mg00.net/etc.,
and BriteTrusted.com/BriteCast.com all have a mix of legit
"best-practices" senders as well as stuff that is collected through
third parties and what we would generally consider to be spam, despite
their own claimed policies. EmailLabs has not come up on my radar
screen as of yet, but a great way to research them would be to check
the abuse newsgroups, but you need to weed out the complaints from
people that consider all advertising to be spam, nothing comes up
absolutely clean.


http://groups.google.com/groups?hl=enlr=ie=ISO-8859-1scoring=dq=EmailLabs+group%3A*abuse*btnG=Google+Search

Also search for the domains that they use, which you should be able to
find.

Matt



Andy Ognenoff wrote:

  
Basic Mailing List Management Guidelines for Preventing Abuse
http://www.mail-abuse.org/manage.html

  
  
Thanks Matt...that was exactly what I was looking for.  Would a place like
EmailLabs (http://www.emaillabs.com) be a good place to investigate or does
anyone else have the name of a good (read best-practice-following) list
hosting service?

- Andy 



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


  


-- 
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=




Re: [Declude.JunkMail] Manual

2004-01-23 Thread Mike K
I have not renewed my Junkmail SA due to the lack of an updated manual.

If Scott would spend the same amount of time updating the manul as he does
explaining to the list how features work, the manual would be current.

Monitoring and researching list archives is fine for free or diy software
but for a paid product with stable features it's unacceptable.

Mike



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Manual

2004-01-23 Thread R. Scott Perry

I have not renewed my Junkmail SA due to the lack of an updated manual.

If Scott would spend the same amount of time updating the manul as he does
explaining to the list how features work, the manual would be current.
Monitoring and researching list archives is fine for free or diy software
but for a paid product with stable features it's unacceptable.
There seem to be two main issues with the manual.

[1] It needs an overhaul by a technical writer.
[2] It does not include all the features that are available in the latest 
beta, and

#1 is something that has been an issue for some time.  We actually did look 
for a technical writer a while back, but there was a snag that prevented it 
from being completed.  We are definitely planning on addressing this.

As far as #2 goes, unfortunately, if we add beta features to the manual, 
there are several problems.  First, customers are going to get frustrated 
that they cannot use features shown in the manual (which would cost us more 
for support, too).  Second, we would have to make many changes to the 
manual as beta features are altered.  Third, I'm sure that if we were to 
add beta features to the manual, a lot of people would then expect them for 
interim releases.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: Re[2]: [Declude.JunkMail] Nigerian Filter Creator Helper

2004-01-23 Thread Glenn \\\\ WCNet
Hmmm.  I tag the subject on weight 14 to 19, delete on 20+.  I've had
Sniffer weighted at 18 for a while.  Reduced it to 16 a couple days ago
after adding some additional SORBS tests that are in the lastest global.cfg.
Anyway, I've had several Nigerian-type scam emails come through without
failing ANY tests.

Glenn Z.


- Original Message - 
From: Madscientist [EMAIL PROTECTED]
To: Kevin Bilbee [EMAIL PROTECTED]
Sent: Friday, January 23, 2004 12:15 PM
Subject: Re[2]: [Declude.JunkMail] Nigerian Filter Creator Helper


 Hello Kevin,

 Friday, January 23, 2004, 12:37:37 PM, you wrote:

 KB I have been testing Kami's Nigerian filter and found that in 3 days it
 KB flagged 56 email and only caught out of 5 nigerian scam emails.

 KB I do not see this as a fault of Kami's effort but a fault of
filtering. Some
 KB of the line are very common in ligitimate email. I even lowered all
the
 KB weights to match our weighting scores. We will not be using it. Once I
did
 KB that then the nigerian scam email did not get enough weight to be
flagged
 KB properly.

 KB For the effort it is not worth the results, in my opinion.

 Sniffer has a number of rules for nigerian scam email. So far we've
 never had a reported false positive for one of those rules. Perhaps
 the reason is that we can provide more complex filtering matching
 combinations of phrases from different segments of the message.

 _M
 __
 Peter G McNeil (Madscientist, CodeDweller)
 President, MicroNeil Research Corporation.
 Chief SortMonster, www.SortMonster.com

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Manual

2004-01-23 Thread nrmathew
Keep it up guys and you'll be forced to wait for a full release to get some of these new features that add such extreme functionality to this product. If you don't like the way Scott does this, only use the latest full release with features covered in the manual. My $.02.N. Mathews[EMAIL PROTECTED] wrote: -To: [EMAIL PROTECTED]From: "Mike K" [EMAIL PROTECTED]Sent by: [EMAIL PROTECTED]Date: 01/23/2004 02:50PMSubject: Re: [Declude.JunkMail] ManualI have not renewed my Junkmail SA due to the lack of an updated manual.If Scott would spend the same amount of time updating the manul as he doesexplaining to the list how features work, the manual would be current.Monitoring and researching list archives is fine for free or diy softwarebut for a paid product with stable features it's unacceptable.Mike---[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Manual

2004-01-23 Thread Mike K
Scott:

Your abilities as a writer are fine. I have seem many of your explanations
on use of features and for most I think they would suffice. They just need
to be put in the online manual at the same time you post a message to the
list.

I agree that beta features should not be in the main manual but could be
listed in a separate change.log file or in a beta/interim release file.

Mike

- Original Message - 
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, January 23, 2004 3:02 PM
Subject: Re: [Declude.JunkMail] Manual



 I have not renewed my Junkmail SA due to the lack of an updated manual.
 
 If Scott would spend the same amount of time updating the manul as he
does
 explaining to the list how features work, the manual would be current.
 
 Monitoring and researching list archives is fine for free or diy software
 but for a paid product with stable features it's unacceptable.

 There seem to be two main issues with the manual.

 [1] It needs an overhaul by a technical writer.
 [2] It does not include all the features that are available in the latest
 beta, and

 #1 is something that has been an issue for some time.  We actually did
look
 for a technical writer a while back, but there was a snag that prevented
it
 from being completed.  We are definitely planning on addressing this.

 As far as #2 goes, unfortunately, if we add beta features to the manual,
 there are several problems.  First, customers are going to get frustrated
 that they cannot use features shown in the manual (which would cost us
more
 for support, too).  Second, we would have to make many changes to the
 manual as beta features are altered.  Third, I'm sure that if we were to
 add beta features to the manual, a lot of people would then expect them
for
 interim releases.

 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
 Declude Virus: Catches known viruses and is the leader in mailserver
 vulnerability detection.
 Find out what you've been missing: Ask about our free 30-day evaluation.

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Manual

2004-01-23 Thread Matt Robertson
DITTO!

The manual is completely updated right now, unless you have volunteered yourself for 
the beta program. :-)



--
---
 Matt Robertson, [EMAIL PROTECTED]
 MSB Designs, Inc. http://mysecretbase.com
---

--
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: Re[2]: [Declude.JunkMail] Nigerian Filter Creator Helper

2004-01-23 Thread Kevin Bilbee
Does the junkmail fire redirect work for aliased domains. It origionally did
not.

For example I have an alias setup as [EMAIL PROTECTED] and that
points to [EMAIL PROTECTED] and I put

REDIRECT @mail.internal d:\junkmailfiles\strict.junkmail

In the $default$.junkmail file will it use the redirect file or use the
settings in the $default$.junkmail.


Kevin Bilbee




 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Glenn \\ WCNet
 Sent: Friday, January 23, 2004 12:04 PM
 To: [EMAIL PROTECTED]
 Subject: Re: Re[2]: [Declude.JunkMail] Nigerian Filter Creator Helper


 Hmmm.  I tag the subject on weight 14 to 19, delete on 20+.  I've had
 Sniffer weighted at 18 for a while.  Reduced it to 16 a couple days ago
 after adding some additional SORBS tests that are in the lastest
 global.cfg.
 Anyway, I've had several Nigerian-type scam emails come through without
 failing ANY tests.

 Glenn Z.


 - Original Message -
 From: Madscientist [EMAIL PROTECTED]
 To: Kevin Bilbee [EMAIL PROTECTED]
 Sent: Friday, January 23, 2004 12:15 PM
 Subject: Re[2]: [Declude.JunkMail] Nigerian Filter Creator Helper


  Hello Kevin,
 
  Friday, January 23, 2004, 12:37:37 PM, you wrote:
 
  KB I have been testing Kami's Nigerian filter and found that
 in 3 days it
  KB flagged 56 email and only caught out of 5 nigerian scam emails.
 
  KB I do not see this as a fault of Kami's effort but a fault of
 filtering. Some
  KB of the line are very common in ligitimate email. I even lowered all
 the
  KB weights to match our weighting scores. We will not be using
 it. Once I
 did
  KB that then the nigerian scam email did not get enough weight to be
 flagged
  KB properly.
 
  KB For the effort it is not worth the results, in my opinion.
 
  Sniffer has a number of rules for nigerian scam email. So far we've
  never had a reported false positive for one of those rules. Perhaps
  the reason is that we can provide more complex filtering matching
  combinations of phrases from different segments of the message.
 
  _M
  __
  Peter G McNeil (Madscientist, CodeDweller)
  President, MicroNeil Research Corporation.
  Chief SortMonster, www.SortMonster.com
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Manual

2004-01-23 Thread Russ Uhte \(Lists\)
At 03:36 PM 1/23/2004, Mike K wrote:
Scott:

Your abilities as a writer are fine. I have seem many of your explanations
on use of features and for most I think they would suffice. They just need
to be put in the online manual at the same time you post a message to the
list.
I agree that beta features should not be in the main manual but could be
listed in a separate change.log file or in a beta/interim release file.
I agree with this completely.  Just a simple change.log file that has the 
skeleton for the added test, and maybe just a brief definition, would be 
more than sufficient.  I would imagine that Scott and his boys (and 
possibly girls.. :) probably keep some type of log like this anyways.  But 
definitely keep this stuff out of the main manual.

My .02.

-Russ 

---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Manual

2004-01-23 Thread Matt




I think the beta/interim features debate has been done recently,
however there are two different things that this effects, first, more
info about what these things do, and eventually converging these things
into the manual (they're not all there in final release format).
Second, and more importantly, bug fixes need to be announced. I've
spent time researching things, trying to document them appropriately in
order to not waste anyone's time, only to find that the issue was fixed
in a more recent interim release. For those that have issues with
crashes and other serious matters, the announcement of such things is
critical and should be done proactively.

I will side with Scott about not announcing new interim functionality
outside of this list until it is in final release format because such
things always cause a lot of questions and that's a bit
counterproductive, but after they hit Beta, they should be documented
somewhere, and after a release, they should make it to the manual, even
the little things that you can only find in the release notes with one
line of text. But bug fixes of any sort should be announced, maybe to
an announcement list for those of us that want to sign up.

Since I monitor this list closely, I'm very much ahead of the curve,
though not completely, and for those that don't read every message
here, they lose out on a lot of things.

Matt



Mike K wrote:

  Scott:

Your abilities as a writer are fine. I have seem many of your explanations
on use of features and for most I think they would suffice. They just need
to be put in the online manual at the same time you post a message to the
list.

I agree that beta features should not be in the main manual but could be
listed in a separate change.log file or in a beta/interim release file.

Mike

- Original Message - 
From: "R. Scott Perry" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, January 23, 2004 3:02 PM
Subject: Re: [Declude.JunkMail] Manual


  
  

  I have not renewed my Junkmail SA due to the lack of an updated manual.

If Scott would spend the same amount of time updating the manul as he
  

  
  does
  
  

  explaining to the list how features work, the manual would be current.

Monitoring and researching list archives is fine for free or diy software
but for a paid product with stable features it's unacceptable.
  

There seem to be two main issues with the manual.

[1] It needs an overhaul by a technical writer.
[2] It does not include all the features that are available in the latest
beta, and

#1 is something that has been an issue for some time.  We actually did

  
  look
  
  
for a technical writer a while back, but there was a snag that prevented

  
  it
  
  
from being completed.  We are definitely planning on addressing this.

As far as #2 goes, unfortunately, if we add beta features to the manual,
there are several problems.  First, customers are going to get frustrated
that they cannot use features shown in the manual (which would cost us

  
  more
  
  
for support, too).  Second, we would have to make many changes to the
manual as beta features are altered.  Third, I'm sure that if we were to
add beta features to the manual, a lot of people would then expect them

  
  for
  
  
interim releases.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus

  
  (http://www.declude.com)]
  
  
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



  
  

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


  


-- 
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=




RE: Re[2]: [Declude.JunkMail] Nigerian Filter Creator Helper

2004-01-23 Thread R. Scott Perry

Does the junkmail fire redirect work for aliased domains. It origionally did
not.
For example I have an alias setup as [EMAIL PROTECTED] and that
points to [EMAIL PROTECTED] and I put
REDIRECT @mail.internal d:\junkmailfiles\strict.junkmail

In the $default$.junkmail file will it use the redirect file or use the
settings in the $default$.junkmail.
In this case, Declude JunkMail should use the 
d:\junkmailfiles\strict.junkmail file.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Manual

2004-01-23 Thread Nick Hayer
Scott,

A better manual would be nice. I grumble when I see you changed it 
and cannot find where *BUT* if creating a new one takes away from 
your literal instant tech support, advice on OT subjects, I can live 
with the system.  

From my perspective isn't fair for folks that want new features daily 
like me to also ask for a spiffy manual. I feel it has to be one or 
the other and for that reason no complaints at all on my end. Great 
job!

-Nick Hayer


Subject:Re: [Declude.JunkMail] Manual
From:   [EMAIL PROTECTED]
To: [EMAIL PROTECTED]

 Keep it up guys and you'll be forced to wait for a full release to get
 some of these new features that add such extreme functionality to this
 product. If you don't like the way Scott does this, only use the
 latest full release with features covered in the manual. My $.02.
 
 N. Mathews
 [EMAIL PROTECTED] wrote: -
 
 To: [EMAIL PROTECTED]
 From: Mike K [EMAIL PROTECTED]
 Sent by: [EMAIL PROTECTED]
 Date: 01/23/2004 02:50PM
 Subject: Re: [Declude.JunkMail] Manual
 
 I have not renewed my Junkmail SA due to the lack of an updated
 manual.
 
 If Scott would spend the same amount of time updating the manul as
 he does explaining to the list how features work, the manual would
 be current.
 
 Monitoring and researching list archives is fine for free or diy
 software but for a paid product with stable features it's
 unacceptable.
 
 Mike
 
 
 
 ---
 [This E-mail was scanned for viruses by Declude Virus 
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list. To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
 unsubscribe Declude.JunkMail. The archives can be found at
 http://www.mail-archive.com.
 
 --- [This E-mail was scanned for viruses by Declude Virus 
 (http://www.declude.com)] --- This E-mail came from the 
 Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to
 [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The
 archives can be found at http://www.mail-archive.com. 


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Manual

2004-01-23 Thread Matt




Maybe beta's should be by invitation/request only, and distributed only
to that group like a normal beta program? At the same time, bug fixes
can be applied to the last release, as well as the most recent beta, or
only to the beta's if that's all that is affected? It's a bit more
work to maintain two different sets of code in this way, but it keeps
the bugs relating to full releases from requiring you to upgrade to a
beta interim release. This would also cut down dramatically on the
overhead of releasing betas to the general public and having to deal
with the potential pitfalls of this (i.e. too much discussion).

Matt



paul wrote:

  
  
  
  
  I'll add my .02 worth to this
discussion:
  
  What I feel would be the best as a
user:
  
  1: Maybe instead of 1.76 betato
1.77 beta, it should've been 1.76 Release, with an update to the manual
about the new features of 1.76. 
  
  2: Betas should have a page devoted
to the new features with a disclaimer "These may not be in the next
release - use at your own risk" That way, those that don't use the
betas and wait for an actual release get what they want, and beta users
get what they want as well.
  
  Paul


-- 
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=




RE: [Declude.JunkMail] Manual

2004-01-23 Thread Colbeck, Andrew
Title: Message



I'm all in favour 
of the manual being sync'ed with the releases. That's a 
no-brainer.

Beta support 
handling is a bone of contention, and I'd rather that support maintenance of 
those featuresnot interfere with the stellar support we already get from 
Declude.

Therefore, I 
suggest that:

1) Create a new 
mailing list for Declude.JunkMail.Beta that those who live on the bleeding edge 
can join. Cross-posting to Declude.JunkMail and Declude.Virus is 
discouraged. Announcements of features would be done 
there.

2) As suggested 
already, simple documentation of new features under testing beprovided, 
e.g. sample usage and obvious gotchas, rather than the support/beta list getting 
clogged with people discovering a beta feature and asking how to use 
it.

3) Tracking 
what's in the Release and what's in the Beta then makes it irrelevant what's 
ina given Interim. Declude could then e-mail out a "new release 
announcement" to the customer base (that'd be us). A lot of traffic in 
this support list is based on administrators who are quite far behind but are 
seeing "new" tests discussed and want to get up to speed.

4) Perhaps: 
prefix the Beta feature names with BETA, e.g. BETAHIDETESTS, BETASPFPASS; the 
onus is then on we the mail administrators to do search and replace when we 
implement the Release version...? Valuable or pointless? Strict or 
customer-abusive?Judgingbythediscussion 
today,somewould prefer the clarity... but then, I only deal with one 
global.cfg and one $default$.junkmail so my judgement is 
limited.

Andrew.

  
  -Original Message-From: Matt 
  [mailto:[EMAIL PROTECTED] Sent: Friday, January 23, 2004 1:34 
  PMTo: [EMAIL PROTECTED]Subject: Re: 
  [Declude.JunkMail] ManualMaybe beta's should be by 
  invitation/request only, and distributed only to that group like a normal beta 
  program? At the same time, bug fixes can be applied to the last release, 
  as well as the most recent beta, or only to the beta's if that's all that is 
  affected? It's a bit more work to maintain two different sets of code in 
  this way, but it keeps the bugs relating to full releases from requiring you 
  to upgrade to a beta interim release. This would also cut down 
  dramatically on the overhead of releasing betas to the general public and 
  having to deal with the potential pitfalls of this (i.e. too much 
  discussion).Mattpaul wrote:
  



I'll add my .02 worth to this 
discussion:

What I feel would be the best as a 
user:

1: Maybe instead of 1.76 betato 1.77 
beta, it should've been 1.76 Release, with an update to the manual about the 
new features of 1.76. 

2: Betas should have a page devoted to the new 
features with a disclaimer "These may not be in the next release - use at 
your own risk" That way, those that don't use the betas and wait for an 
actual release get what they want, and beta users get what they want as 
well.

Paul-- 
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=


[Declude.JunkMail] REDIRECT Command

2004-01-23 Thread Kevin Bilbee
Thank you Scott,

 and sorry to the list for not changing the subject

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
 Sent: Friday, January 23, 2004 12:50 PM
 To: [EMAIL PROTECTED]
 Subject: RE: Re[2]: [Declude.JunkMail] Nigerian Filter Creator Helper
 
 
 
 Does the junkmail fire redirect work for aliased domains. It 
 origionally did
 not.
 
 For example I have an alias setup as [EMAIL PROTECTED] and that
 points to [EMAIL PROTECTED] and I put
 
 REDIRECT @mail.internal d:\junkmailfiles\strict.junkmail
 
 In the $default$.junkmail file will it use the redirect file or use the
 settings in the $default$.junkmail.
 
 In this case, Declude JunkMail should use the 
 d:\junkmailfiles\strict.junkmail file.
 
 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
 Declude Virus: Catches known viruses and is the leader in mailserver 
 vulnerability detection.
 Find out what you've been missing: Ask about our free 30-day evaluation.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Manual

2004-01-23 Thread Kevin Bilbee



I 
think this is the best idea. This also give the admin that wants to or needs to 
use the new features/bug fixes can and they understand their functionality. This 
also gives the admin the ability to decide wether using the beta is worth the 
hassle of possible bugs in features they are not currently ready to use. but 
they can understand the new features that are in the beta with out spending 
valuable time trolling the archives for possible outdate information on the beta 
features.

Scott 
how does this suggestion sound? A seperate manpage just for the beta 
features Who cares if it does not look pretty


Kevin 
Bilbee

  -Original Message-From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]On Behalf Of 
  paulSent: Friday, January 23, 2004 1:20 PMTo: 
  [EMAIL PROTECTED]Subject: Re: [Declude.JunkMail] 
  Manual
  I'll add my .02 worth to this 
  discussion:
  
  What I feel would be the best as a 
  user:
  
  1: Maybe instead of 1.76 betato 1.77 beta, 
  it should've been 1.76 Release, with an update to the manual about the new 
  features of 1.76. 
  
  2: Betas should have a page devoted to the new 
  features with a disclaimer "These may not be in the next release - use at your 
  own risk" That way, those that don't use the betas and wait for an actual 
  release get what they want, and beta users get what they want as 
  well.
  
  Paul


RE: [Declude.JunkMail] Manual

2004-01-23 Thread Todd Holt
Title: Message









I agree with this approach. It would separate the BETA users from the
curious RELEASE users (who probably should wait for the release).





Todd Holt 
Xidix Technologies, Inc 
Las Vegas, NV USA 
www.xidix.com 
702.319.4349 







-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew
Sent: Friday, January 23, 2004
2:16 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [Declude.JunkMail]
Manual





I'm all in favour of the manual being
sync'ed with the releases. That's a no-brainer.











Beta support handling is a bone of
contention, and I'd rather that support maintenance of those featuresnot
interfere with the stellar support we already get from Declude.











Therefore, I suggest that:











1) Create a new mailing list for
Declude.JunkMail.Beta that those who live on the bleeding edge can join.
Cross-posting to Declude.JunkMail and Declude.Virus is discouraged.
Announcements of features would be done there.











2) As suggested already, simple
documentation of new features under testing beprovided, e.g. sample usage
and obvious gotchas, rather than the support/beta list getting clogged with
people discovering a beta feature and asking how to use it.











3) Tracking what's in the Release and
what's in the Beta then makes it irrelevant what's ina given
Interim. Declude could then e-mail out a new release
announcement to the customer base (that'd be us). A lot of traffic
in this support list is based on administrators who are quite far behind but
are seeing new tests discussed and want to get up to speed.











4) Perhaps: prefix the Beta feature names
with BETA, e.g. BETAHIDETESTS, BETASPFPASS; the onus is then on we the mail
administrators to do search and replace when we implement the Release
version...? Valuable or pointless? Strict or
customer-abusive?Judgingbythediscussion
today,somewould prefer the clarity... but then, I only deal with
one global.cfg and one $default$.junkmail so my judgement is limited.











Andrew.





-Original
Message-
From: Matt
[mailto:[EMAIL PROTECTED] 
Sent: Friday, January 23, 2004
1:34 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail]
Manual

Maybe beta's should be by invitation/request only, and
distributed only to that group like a normal beta program? At the same
time, bug fixes can be applied to the last release, as well as the most recent
beta, or only to the beta's if that's all that is affected? It's a bit
more work to maintain two different sets of code in this way, but it keeps the
bugs relating to full releases from requiring you to upgrade to a beta interim
release. This would also cut down dramatically on the overhead of
releasing betas to the general public and having to deal with the potential
pitfalls of this (i.e. too much discussion).

Matt



paul wrote:





I'll add my .02 worth to this discussion:











What I feel would be the best as a user:











1: Maybe instead of 1.76 betato 1.77 beta, it
should've been 1.76 Release, with an update to the manual about the new
features of 1.76. 











2: Betas should have a page devoted to the new
features with a disclaimer These may not be in the next release - use at
your own risk That way, those that don't use the betas and wait for an
actual release get what they want, and beta users get what they want as well.











Paul







-- =MailPure custom filters for Declude JunkMail Pro.http://www.mailpure.com/software/=










Re: [Declude.JunkMail] Manual

2004-01-23 Thread Dave Doherty
Scott-

I'll cast my vote for this approach.

Just a simple beta-only html page on your website. Contents: What's in each
interim release, a one-line explanation, and a .config file and/or .junkmail
file example would be fine with me. Once we know what's in the release, we
can search this list for details. That would have the added benefit of
getting the users hooked into earlier-adopters' experiences with each test
before they try it on their own.

Even niftier, a huge convenience, and no big deal to execute: A link from
the test's name to the list archive search page.

-d


- Original Message - 
From: Mike K [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, January 23, 2004 3:36 PM
Subject: Re: [Declude.JunkMail] Manual


 Scott:

 Your abilities as a writer are fine. I have seem many of your explanations
 on use of features and for most I think they would suffice. They just need
 to be put in the online manual at the same time you post a message to the
 list.

 I agree that beta features should not be in the main manual but could be
 listed in a separate change.log file or in a beta/interim release file.

 Mike


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Interim Log Level Low and IP

2004-01-23 Thread Matt
Scott,

This is a feature request concerning the new/interim format of Log Level 
Low.  It would be nice to have the IP logged at this level, and the need 
for this would otherwise cause me to have to go to a higher log level 
currently, but I much prefer working with the much smaller files (almost 
1/10th the size).  Would you please consider adding the IP to this log 
level.

If others think this is unnecessary, please chime in, I don't want to 
push features that are exclusive to my own needs.

Thanks,

Matt

--
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Interim Log Level Low and IP

2004-01-23 Thread R. Scott Perry

This is a feature request concerning the new/interim format of Log Level 
Low.  It would be nice to have the IP logged at this level, and the need 
for this would otherwise cause me to have to go to a higher log level 
currently, but I much prefer working with the much smaller files (almost 
1/10th the size).  Would you please consider adding the IP to this log level.
Actually, with the latest interim release, if you use LOGLEVEL MID, you'll 
get the IP without all those Msg failed lines.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Interim Log Level Low and IP

2004-01-23 Thread Matt
I'll give that a try tonight. This might be a very nice happy medium.

Thanks,

Matt



R. Scott Perry wrote:


This is a feature request concerning the new/interim format of Log 
Level Low.  It would be nice to have the IP logged at this level, and 
the need for this would otherwise cause me to have to go to a higher 
log level currently, but I much prefer working with the much smaller 
files (almost 1/10th the size).  Would you please consider adding the 
IP to this log level.


Actually, with the latest interim release, if you use LOGLEVEL MID, 
you'll get the IP without all those Msg failed lines.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

--
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] SPF Logging

2004-01-23 Thread Bill Landry
Scott, is there a way to turn off the separate SPF logging that is currently
being written to c:\spf.log and c:\spf.none?  If not, when do you plan to
remove this logging from the Declude code?

Bill

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] SPF Logging

2004-01-23 Thread R. Scott Perry

Scott, is there a way to turn off the separate SPF logging that is currently
being written to c:\spf.log and c:\spf.none?
Not right now.

If not, when do you plan to
remove this logging from the Declude code?
It should be removed before the next beta.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.