[Declude.JunkMail] evaluating declude

2004-01-27 Thread Jim Priest
Yesterday with Scott's help I got JunkMail installed and running on my Imail installation. Currently I have all my actions set to WARN and am using some client side filter/rules to deal with spam. I've got a few filters setup on my local mail client to look for: X-RBL-Warning WEIGHT20

Re: [Declude.JunkMail] evaluating declude

2004-01-27 Thread R. Scott Perry
I've got a few filters setup on my local mail client to look for: X-RBL-Warning WEIGHT20 Currently I'm catching a lot of spam but I'm also seeing some things (like the occasional email from this list) get caught as well. Note that if you have a mail client filter set to catch X-RBL-Warning, you

RE: [Declude.JunkMail] evaluating declude

2004-01-27 Thread Chuck Schick
Jim: You need to modify your settings so you can see the individual tests that are tripping. Here are some of my general guidelines. 1. ) Develop a list of the DNS based tests you want to use - looking through the archives may help. The tests I find catch the most spam with the fewest false

Re[2]: [Declude.JunkMail] evaluating declude

2004-01-27 Thread Jim Priest
Tuesday, January 27, 2004, 2:42:18 PM, Chuck wrote: CS Here are some of my general guidelines. CS 4. ) A few pieces of Spam are always going to get through because spammers CS are always changing their methodology. We are in a reactive mode. Chuck, thanks for all the info. Been digging through

[Declude.JunkMail] MyDoom / Novarg

2004-01-27 Thread Kevin Bilbee
I have been successful trapping most of these viruses with a body filter filtering on the Mail transaction failed. Partial message is available. and has been sent as a binary attachment I placed the extra spaces so they will not get caught by other filters on this list. I then use

[Declude.JunkMail] Mailbox Copy

2004-01-27 Thread Kami Razvan
Sorry posted to wrong list... From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kami RazvanSent: Tuesday, January 27, 2004 3:54 PMTo: [EMAIL PROTECTED]Subject: [Declude.Virus] Mailbox Copy Scott: I am confused as to how add this to JM. Lets say we want to send a copy

Re: [Declude.JunkMail] MyDoom / Novarg

2004-01-27 Thread Mike K
This string is in the beginning of first line of the body of infected emails all buts the zips T_V_q_Q_A_AME This is in the beginning of the first line of the .zips U_E_s_D_B_AoAA Both of these strings produce virus hits on Google NOTE: remove the underscores to get the actual

Re: [Declude.JunkMail] MyDoom / Novarg

2004-01-27 Thread R. Scott Perry
This string is in the beginning of first line of the body of infected emails all buts the zips T_V_q_Q_A_AME This is in the beginning of the first line of the .zips U_E_s_D_B_AoAA Both of these strings produce virus hits on Google IIRC, those are just the encoded beginnings of .exe

Re: [Declude.JunkMail] Declude feature request...

2004-01-27 Thread R. Scott Perry
I do not think Declude can do this now but I would like to be able to hold Spam to different folders especially when I am testing a new test or filter. Presently it appears the HOLD action will route email to a single folder \IMail\spool\spam. It would be a nice feature to be able to specify

RE: [Declude.JunkMail] MyDoom / Novarg

2004-01-27 Thread Kevin Bilbee
Good to know. I did not look tat far into the message. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Mike K Sent: Tuesday, January 27, 2004 2:06 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] MyDoom / Novarg This string is

[Declude.JunkMail] Declude feature request...

2004-01-27 Thread Chuck Schick
I do not think Declude can do this now but I would like to be able to hold Spam to different folders especially when I am testing a new test or filter. Presently it appears the HOLD action will route email to a single folder \IMail\spool\spam. It would be a nice feature to be able to specify

[Declude.JunkMail] Server-Level Rules File?

2004-01-27 Thread Dave Doherty
Hi, everyone- I know this is a little off-topic, but I wonder if anybody here can give me a quick answer. I run an Imail server (v 8.05) with about 500 virtual domains. I would like to establish a server-wide rule to delete all messages with certain characteristics (attachment with .exe

RE: [Declude.JunkMail] Server-Level Rules File?

2004-01-27 Thread Tom
I can't create a rules.ima and use the copy routine to copy Just exclude the user from the rule. That is, write a rule for that user. In other words First let me address the batch file: IF EXISTS or Not then do this or that. Then let me address the rule: if addressed to [EMAIL

RE: [Declude.JunkMail] Server-Level Rules File?

2004-01-27 Thread Tom
First let me address the batch file: To be more specific: if not exist x:\imail\domain\users\username\rules.ima goto ok2do goto getanother Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the

hi

2004-01-27 Thread declude . junkmail
Mail transaction failed. Partial message is available. attachment: body.scr

Re: [Declude.JunkMail] Server-Level Rules File?

2004-01-27 Thread Dave Doherty
Hi Tom- Thanks for the idea. But a number of the domains have their rules in domain-level rules.ima files that would be overwritten in the copy-down process. I wonder if there is a way to make IMail pay attention to three rules files instead of just two (domain root and user-level). -Dave

RE: [Declude.JunkMail] Server-Level Rules File?

2004-01-27 Thread Tom
that would be overwritten in the copy-down process. You can append to the rules instead. Copy a.txt b.txt c.txt The contents of a.txt and b.txt will now be in c.txt you would have to rename the file before you do the copy. Remember the Rule Files work in line of order not randomly.