COPYTO or COPYFILE ?
%$^^$%**($^$##$*(*^t$%%^
Thanks for the wake up call. Boy, do I feel dumb.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail
Below is a copy of a message we received:
---
This is an automatic reply to your email message to
[EMAIL PROTECTED]
This email address is protected by EarthLink spamBlocker. Your email message
has
been redirected to
Hey, John. How about a 3-fer test to archive messages, like so:
HIDETESTS HOURCOPY
#Mar-23-2004 AC Testing two new features with one go. Archive all
# messages if sent in the hour of 11PM and give a
# weight of none.
HOURCOPY hour 23 23 0 0
HOURCOPY
Hi Tom-
They've been doing this for a while, and it IS a pain. It seems to be a way
of keeping an individual-level whitelist. I think this only happens once in
most cases, and that once you're approved the mail flows normally.
It's annoying to think that you've responded to someone only to find
I also forgot to mention that I can't contact Adrian to arrange a
whitelist (should any of our users need to send to his users) because my
messages will be blacklisted.
Todd Holt
Xidix Technologies, Inc
Las Vegas, NV USA
702.319.4349
www.xidix.com
-Original Message-
From: [EMAIL
Below is a message that did not fail a filter test, GreyFilter3. What am I
missing that it did not get caught?
From Imail SMTPD log:
2004-03-27 08:49:39 Local7.Debug127.0.0.1 SMTPD (2AD30026)
[67.94.227.39] connect 68.164.114.3 port 3017
2004-03-27 08:49:39 Local7.Debug
Actually your e-mail did hit my hold weight... maybe I should lower those
rev DNS weights I just put in..
Are you using Charters SMTP or your own?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Todd Holt
Sent: Monday, March 29, 2004 12:22 PM
To: [EMAIL
We use IMail 7.15 on a static IP (in fact we have a block of static IPs)
from MPower, but they will not delegate or customize the RDNS entries
for any customers. As I know from many previous threads, this is VERY
common among ISPs. Not having an RDNS entry is a very reliable measure
of SPAM, but
here is also a list of rbl's that we trust and directly bounce:
(most of them are spam traps, open relay lists or filters by country so
you
should be safe)
What if we get a lot of legit email from these countries?
Sheldon
Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com
Ten
Most of my false
positives are coming from e-commerce sites, where automatic email are generated
after an order has been placed. What sort of counter weighting do you guys
use to balance out these types of messages? I can't decide on anything to
identify these types of messages with that
Below is a message that did not fail a filter test, GreyFilter3. What am I
missing that it did not get caught?
Line in GreyFilter3:
HELO5 IS srv1.eservicesforyou.net
Full Headers:
Received: from srv1.eservicesforyou.net [68.164.114.3] by
mail.eservicesforyou.net
We just use a negative weight list, and add new
domains to the list as needed. Note that it's not a good idea to have any
of your hosted domain in the negative weight list, or ISP domains such as aol,
yahoo, msn, etc. as you'll just end up letting a lot of spam through that
way.
It looks like this should have been caught. Are there any spaces/tabs at
the end of the line in the filter file? Is that the last line on the file
(if so, the cursor needs to be able to go to the line below it, by hitting
ENTER at the end of the line if necessary)?
Bingo. Was the last line
On 29 Mar 2004 at 14:35, Technical Support wrote:
What
sort of counter weighting do you guys use to balance out these types
of messages? I can't decide on anything to identify these types of
messages with that spammers don't already try to fake. Any help would
be much appreciated.
As
Wesetup Store and Forward (Imail 8.05, Declude JunkMail Pro) and everything
seems to work correctly.
But, The manual and archives talk about Outgoing Actions.
We have a declude/domainname.com directory with a $default$.junkmail file.
Do those tests get performed on the outbound email or is
Wesetup Store and Forward (Imail 8.05, Declude JunkMail Pro) and everything
seems to work correctly.
But, The manual and archives talk about Outgoing Actions.
We have a declude/domainname.com directory with a $default$.junkmail file.
Do those tests get performed on the outbound email or is there
Thanks Scott.
I think I understand. I guess I'll wait and see what happens.
[EMAIL PROTECTED]
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Monday, March 29, 2004 4:33 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail]
Has anyone noticed these yet:
Subject: Lower your monthly payment today !
Between the words are space like characters that aren't spaces. I can only
view them using symbol or dingbat fonts and my email client can't even
search for them in a folder of messages. I'm inclined to make a filter
Hi,
Tried searching mail-archive.com for these but didn't turn up anything.
Subject: pass on the fun [random subjects]
Body: This message has attach [random too]
[random attachments but always ends in .htm]
I didn't open it with IE but with a text editor.
Starts with script
Yes, I have been seeing them too. They are java scripts that run. Definitly
spam.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Kevin
Sent: Monday, March 29, 2004 4:37 PM
Has anyone set up a filter to catch thesewe get a lot of them...
gb
At 04:41 PM 3/29/2004 -0800, you wrote:
Yes, I have been seeing them too. They are java scripts that run. Definitly
spam.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL
Between the words are space like characters that aren't spaces. I can only
view them using symbol or dingbat fonts and my email client can't even
search for them in a folder of messages. I'm inclined to make a filter for
them, but I don't know how Declude will react.
Those are high bit (8-bit)
Nice.
From: R. Scott Perry [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date: Mon, 29 Mar 2004 20:10:52 -0500
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Crazy Characters
Between the words are space like characters that aren't spaces. I can only
view them using symbol or
23 matches
Mail list logo
