Actually, Bill announced today at the RAS conference that Windows XP SP2
should fix the virus issue.
"Beyond the Windows service release, Gates also showed off ``active
protection technologies'' that will gird Windows computers against attacks
by sensing changes in the network that indicate vi
I basically came up with a rule where the (DYNA) test gets 3/4 to 2/3 of
the points, and the (ALL) test gets 1/4 to 1/3 of the points. To air on
the side of caution, I would step the points up on the (DYNA) test until
it reached 3/4 and then I would add another point to the (ALL) test, i.e.
3
I thought I would try out Declude v1.78i3 and what a drastic change there is
to the logging, at least at the "high" level. It outputs to one long space
delimited line. Scott, is that an intentional change?
Doesn't it look better that way? :)
Seriously, though, v1.78i4 at http://www.declude.com
>Anyone have any comments on how effective this will be (or not...)?
What good is this if *everyone* doesn't use it?
Matt Robertson [EMAIL PROTECTED]
MSB Designs, Inc. http://mysecretbase.com
---
I thought I would try out Declude v1.78i3 and what a drastic change there is
to the logging, at least at the "high" level. It outputs to one long space
delimited line. Scott, is that an intentional change?
Bill
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
Web scripts come to mind as an obvious exception that probably won't be
covered by this.
I'm not concerned about this though...Bill Gates said that he would
solve the spam problem by 2005...right after they figure out how to
stop viruses of course...
Matt
Matt Robertson wrote:
Any
Provided you do not turn off the firewall once SP2 is applied. That is
correct, turn off. SP2 is purported to turn on the firewall by default.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PRO
Matt,
For the dyna/dul tests I though the test name had to end with either DYNA or
DUL. I noticed you use (DYNA) - does it (declude) just look for the work
dyna or dul to limit it to one hop?
Darrell
Matt writes:
I basically came up with a rule where the (DYNA) test gets 3/4 to 2/3 of
t
As long as DYNA, DUL or DUHL (v1.78) appears anywhere in the name,
Declude will only use that test on the last hop scanned. I chose to
name my DUL tests with DUL and reserved the DYNA marker for this use so
that it was easier for me to understand.
Note that if you are using any whitelists, i.e
Kinda brakes forwarding doesn't it? Isn't this that SPF stuff?
~Rick
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> Sheldon Koehler
> Sent: Tuesday, February 24, 2004 4:31 PM - FamHost
> To: [EMAIL PROTECTED]
> Subject: [Declude.JunkMail] Yaho
Anyone have any comments on how effective this will be (or not...)?
http://news.com.com/2100-1032_3-5164279.html?tag=nefd_top
Sheldon
Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com
Ten Forward Communications 360-457-9023
Nationwide access, neighborhood support!
"Whe
I've noticed the tests HOUR and IPNOTINMX are preceded by an n in mylogs,
such as nHOUR and nIPNOTINMX.
That means that the a weight was applied because an E-mail did *not* fail
the test.
HOURhour6 20 0 1
IPNOTINMX ipnotinmx x x 0
I've noticed the tests HOUR and IPNOTINMX are preceded by an n in mylogs, such as
nHOUR and nIPNOTINMX.
02/23/2004 00:00:39 Q97050a10012a50e6 CBL:6 DSBL:6 XBL:7 SORBS-DUHL:5 SPAMCOP:9
NOABUSE:2 NOPOSTMASTER:1 CMDSPACE:8 nHOUR:1 SUBJECTCHARS:1 SNIFFER-SNAKEOIL:13 .
Total weight = 59.
02/23/20
Matt,
Thats actually a very good idea I am going to incorporate. How did you come
up with the scoring balance between first and second hop?
Darrell
Matt writes:
You need to segment your tests between Spamtraps/Zombies/Relays and Static
Sources. Static sources such as SBL should have no
You need to segment your tests between Spamtraps/Zombies/Relays and
Static Sources. Static sources such as SBL should have no increase in
FP's over multiple hops, however XBL, SpamCop, ORDB and others will.
What I do is trick Declude into splitting the test scores giving the
last hop a higher
Actually with the kill.lst, you don't waste the bandwidth, you do on the
envelope rejection, but it is a fraction of what it would be if you just
accepted the message. We had them in the kill.lst, but after seeing
thousands of these per day, even after they get the reject notice, we
ended up putti
What concerns me is how they intend to make money. Consider the fact
that they aren't making it directly from their software, hopefully
there's a plan there that first requires acceptance and mass, though
whether or not that would go over will with those here is a different
story. I wouldn't
We are setup currently using "HOPHIGH 1". With using a HOPHIGH setting of
1. What we are seeing is an increase in messages that are gettng caught
with XBL, DSBL, SORBS, and other tests along this line on the second HOP
even though they were legit messages that were sent through normal ISP
ser
I know it is best to handle mail based on test results, but ... for
those FROM addresses we wish to block (the Flowgo's and the like), is it
better to:
1 - put in the Imail kill file and return the 501 message,
or
2 - accept the message, but then delete before delivery and not send the
501 messag
- Original Message -
From: "Dan Geiser" <[EMAIL PROTECTED]>
Sent: Tuesday, February 24, 2004 12:31 PM
Subject: Re: [Declude.JunkMail] OT Plaxo.com
> If I knew then (when I first tried Plaxo) what I know now (when I
discovered
> some bothersome issues and have since uninstalled) I would ne
I just noticed that some Outlook clients are triggering CMDSPACE.
Yes, it does appear that some mail clients are triggering CMDSPACE.
However, if local users are whitelisted, it should take care of the problem.
-Scott
---
Declude JunkMail: The a
Scott:
I just noticed
that some Outlook clients are triggering CMDSPACE.
===
X-MSMail-Priority:
NormalX-Mailer: Microsoft Outlook IMO, Build 9.0.2416
(9.0.2910.0)X-MimeOLE: Produced By Microsoft MimeOLE
V6.00.2800.1165Importance: NormalX-RBL-Warning: IPNOTINMX:
X-RBL-War
- Original Message -
From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, February 24, 2004 11:40 AM
Subject: [Declude.JunkMail] OT Plaxo.com
> Any one have any comments on them, good or bad?
>
> A client is asking about it.
We ban them at work. See
John,
If I knew then (when I first tried Plaxo) what I know now (when I discovered
some bothersome issues and have since uninstalled) I would never have
installed Plaxo.
The 2 things that leap to mind:
1) Plaxo installs a stub program on your computer which constantly runs in
the background. It
Please everyone be sure to patch your IMail 8 installations with the hotfix
for the LDAP vulnerability.
- Original Message -
From: "3APA3A" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, February 24, 2004 11:19 AM
Subject: [Full-Disclosure] Scans for IPSwitch IMail LDAP vuil
No problems here. I use it, not extensively.
Rob
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
(Lists)
Sent: Tuesday, February 24, 2004 10:41 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] OT Plaxo.com
Any one have any comments
Any one have any comments on them, good or bad?
A client is asking about it.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscr
Oh Oh...
We are... I just wasn't aware of it.. Let me check.. Check back in a
minute..
Kami
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser
Sent: Tuesday, February 24, 2004 10:52 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] GLOBAL.BAK
Hello, All,
Would anyone who is using the BLARS DNSBL extensively be willing to share
their GLOBAL.CFG entries with me?
Thanks In Advance,
Dan Geiser
[EMAIL PROTECTED]
---
Sign up for virus-free and spam-free e-mail with Nexus Te
Kami,
I noticed that your current GLOBAL.BAK file is 0 bytes. Are you no longer
sharing the contents of that file with others?
Just Curious,
Dan Geiser
[EMAIL PROTECTED]
---
Sign up for virus-free and spam-free e-mail with Nexus
30 matches
Mail list logo