RE: [Declude.JunkMail] Different Tests Failed for same mail?

2004-02-22 Thread Kornitz, David
Kami, That's for the suggestion, but most of the mail I am filtering is for businesses accounts. These accounts do not have Mailboxes on the Imail server and therefore this option does not work. What we are in the process of doing is writing a front-end for declude using

[Declude.JunkMail] Questions about LOGLEVEL MID

2004-02-22 Thread Darin Cox
Hi Scott, I just switched to LOGLEVEL MID to get more info for reporting and was puzzled by a couple of things: 1. Domains that are whitelisted for incoming mail seem to still be tested: 02/22/2004 10:27:14 Qca3e0543037a1ab3 WARNING: DNS server 10.0.0.32 returned a SERVER FAILURE error

RE: [Declude.JunkMail] Acting as a gateway for domains on other servers

2004-02-22 Thread JR Tatum
Thanks Dan, How timely - we are installing Imail this week as a gateway for an Exchange server. I appreciate your detailed instructions! Thank You, JR Tatum -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Friday, February 20, 2004 4:09

[Declude.JunkMail] phishing scam

2004-02-22 Thread Gerald V. Livingston II
Got bounced from the list because the DNS pointing to my phorce1.net mail servers went away. When it didn't come back after 18 hours of me raising he** I got the DNS admin at the company I work for to set me up on out name servers so I'd have more control in the future. sigh Got a VERY clever

RE: [Declude.JunkMail] Remove dns lookups and just do filter/blacklist?

2004-02-22 Thread R. Scott Perry
Unfortunately, there is currently no way to turn off the reverse DNS lookups. OK, thanks anyway. Is this something realistic to ask for as a new feature? No idea if it's a reasonable request with the current code base. It is something we could probably do -- it wouldn't require a major

Re: [Declude.JunkMail] Questions about LOGLEVEL MID

2004-02-22 Thread R. Scott Perry
I just switched to LOGLEVEL MID to get more info for reporting and was puzzled by a couple of things: 1. Domains that are whitelisted for incoming mail seem to still be tested: Correct. Declude JunkMail gets very complex! For example, if BYPASSWHITELIST is used, then the E-mail may not

Re: [Declude.JunkMail] new dow and hour tests

2004-02-22 Thread Mike Nice
How would you add weight to these testes. Sounds like a variation on Add weight to your member spams!! --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to

Re: [Declude.JunkMail] Questions about LOGLEVEL MID

2004-02-22 Thread Darin Cox
Thanks, Scott. What problems might we see if using SWITCHRECIP ON? I looked through the archives, but only saw a couple of vague references to it not working or a test failing. It would be nice to know what pitfalls we may encounter before putting it into productiongrin. Also curious as to

Re: [Declude.JunkMail] Questions about LOGLEVEL MID

2004-02-22 Thread R. Scott Perry
What problems might we see if using SWITCHRECIP ON? That's up to you to discover. :) Specifically, each E-mail has both an intended recipient (the address the sender types in), and an actual recipient (the one the E-mail is routed to). With most E-mail addresses, both are the same (unless

Re: [Declude.JunkMail] Questions about LOGLEVEL MID

2004-02-22 Thread Darin Cox
Gotcha...I'll try it and let you know what happens... Thanks, Scott. Anyone else had any success or problems using SWITCHRECIPS ON? Darin. - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Sunday, February 22, 2004 3:17 PM Subject: Re:

RE: [Declude.JunkMail] Questions about LOGLEVEL MID

2004-02-22 Thread Andy Schmidt
Yes, I'm using SWITCHRECIP ON - don't know how anyone does not G. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Sunday, February 22, 2004

[Declude.JunkMail] what is REMOTEIP

2004-02-22 Thread Markus Gufler
I've tried to search at mail-archive for REMOTEIP but as this is part af many mailheaders this returns 16 pages and 156 matches. In the manual I can read: %REMOTEIP% Adds the IP address of the remote mail server Question: What is the remote server? Always the first IP in the delivery-chain?

Re: [Declude.JunkMail] what is REMOTEIP

2004-02-22 Thread Bill Landry
- Original Message - From: Markus Gufler [EMAIL PROTECTED] I've tried to search at mail-archive for REMOTEIP but as this is part af many mailheaders this returns 16 pages and 156 matches. In the manual I can read: %REMOTEIP% Adds the IP address of the remote mail server Question:

[Declude.JunkMail] Error on moving Mail Server

2004-02-22 Thread Mark Eslick
I moved mail server to another machine and declude is not catching spam - however declude anti-virus is catching virii. In the junkmail log I see the following: WARNING: BOGUS DNS SERVER ! What did I forget to do? Mark Eslick Unlimited Data Systems, Inc. --- [This E-mail was scanned

Re: [Declude.JunkMail] Error on moving Mail Server

2004-02-22 Thread R. Scott Perry
I moved mail server to another machine and declude is not catching spam - however declude anti-virus is catching virii. In the junkmail log I see the following: WARNING: BOGUS DNS SERVER ! What did I forget to do? That line looks misleading, but it isn't, if you understand what it really is

Re: [Declude.JunkMail] Logging irregularity: subject and from line

2004-02-22 Thread R. Scott Perry
I notice about 20 to 25 of these irregularities a day in my log. Declude Junkmail 1.78 The subject line and the from/to/IP line end up on the same line of the log. Thanks for pointing this out -- it will be fixed in the next release. It will occur when very unusual subjects (typically ones with

[Declude.JunkMail] blank subject and body

2004-02-22 Thread Danny Klopfer
I have been noticing messages coming in that have blank subjects and the body is blank except the following html code: !DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"HTMLHEADMETA http-equiv=Content-Type content="text/html; charset=iso-8859-1"/HEADBODY/BODY/HTML Anyway to

Re: [Declude.JunkMail] Questions about LOGLEVEL MID

2004-02-22 Thread Darin Cox
Well, SWITCHRECIPS ON in the global.cfg isn't causing Declude JM to report the intended address instead of the actual address for me with 1.75...I'm still seeing external addresses for the TO address in the log.. Does the location of the line in the global.cfg make any difference? I placed it

RE: [Declude.JunkMail] phishing scam

2004-02-22 Thread John Tolmachoff \(Lists\)
Below is what I could figure out how to retrieve from Outlook -- I hate Outlook. I've never figured out how to get a real 'exact' copy of what was delivered back out of it the way you can when using any MUA that stores in mbox or maildir format. Ever try searching the MS KB for view headers?