Yesterday with Scott's help I got JunkMail installed and running on my
Imail installation. Currently I have all my actions set to WARN and
am using some client side filter/rules to deal with spam.
I've got a few filters setup on my local mail client to look for:
X-RBL-Warning
WEIGHT20
I've got a few filters setup on my local mail client to look for:
X-RBL-Warning
WEIGHT20
Currently I'm catching a lot of spam but I'm also seeing some things
(like the occasional email from this list) get caught as well.
Note that if you have a mail client filter set to catch X-RBL-Warning,
you
Jim:
You need to modify your settings so you can see the individual tests that
are tripping.
Here are some of my general guidelines.
1. ) Develop a list of the DNS based tests you want to use - looking through
the archives may help. The tests I find catch the most spam with the fewest
false
Tuesday, January 27, 2004, 2:42:18 PM, Chuck wrote:
CS Here are some of my general guidelines.
CS 4. ) A few pieces of Spam are always going to get through because spammers
CS are always changing their methodology. We are in a reactive mode.
Chuck, thanks for all the info. Been digging through
I have been successful trapping most of these viruses with a body filter
filtering on the
Mail transaction failed. Partial message is available.
and
has been sent as a binary attachment
I placed the extra spaces so they will not get caught by other filters on
this list. I then use
Sorry posted to wrong list...
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kami
RazvanSent: Tuesday, January 27, 2004 3:54 PMTo:
[EMAIL PROTECTED]Subject: [Declude.Virus] Mailbox
Copy
Scott:
I am confused as
to how add this to JM.
Lets say we want
to send a copy
This string is in the beginning of first line of the body of infected emails
all buts the zips
T_V_q_Q_A_AME
This is in the beginning of the first line of the .zips
U_E_s_D_B_AoAA
Both of these strings produce virus hits on Google
NOTE: remove the underscores to get the actual
This string is in the beginning of first line of the body of infected emails
all buts the zips
T_V_q_Q_A_AME
This is in the beginning of the first line of the .zips
U_E_s_D_B_AoAA
Both of these strings produce virus hits on Google
IIRC, those are just the encoded beginnings of .exe
I do not think Declude can do this now but I would like to be able to hold
Spam to different folders especially when I am testing a new test or filter.
Presently it appears the HOLD action will route email to a single folder
\IMail\spool\spam. It would be a nice feature to be able to specify
Good to know. I did not look tat far into the message.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Mike K
Sent: Tuesday, January 27, 2004 2:06 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] MyDoom / Novarg
This string is
I do not think Declude can do this now but I would like to be able to hold
Spam to different folders especially when I am testing a new test or filter.
Presently it appears the HOLD action will route email to a single folder
\IMail\spool\spam. It would be a nice feature to be able to specify
Hi, everyone-
I know this is a little off-topic, but I wonder if anybody here can give me
a quick answer.
I run an Imail server (v 8.05) with about 500 virtual domains. I would like
to establish a server-wide rule to delete all messages with certain
characteristics (attachment with .exe
I can't create a rules.ima and use the copy routine to copy
Just exclude the user from the rule. That is, write a rule for that
user. In other words
First let me address the batch file:
IF EXISTS or Not then do this or that.
Then let me address the rule:
if addressed to [EMAIL
First let me address the batch file:
To be more specific:
if not exist x:\imail\domain\users\username\rules.ima goto ok2do
goto getanother
Regards,
Tom
Image`fx
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the
Mail transaction failed. Partial message is available.
attachment: body.scr
Hi Tom-
Thanks for the idea.
But a number of the domains have their rules in domain-level rules.ima files
that would be overwritten in the copy-down process. I wonder if there is a
way to make IMail pay attention to three rules files instead of just two
(domain root and user-level).
-Dave
that would be overwritten in the copy-down process.
You can append to the rules instead.
Copy a.txt b.txt c.txt
The contents of a.txt and b.txt will now be in c.txt
you would have to rename the file before you do the copy.
Remember the Rule Files work in line of order not randomly.
17 matches
Mail list logo