Everything SpamChk
does can be done with SA rules, AFAIK (not that those
rules have been precisely reproduced as yet).
I swear we haven't tried to copy anything from the SA rules.
If there is something similar then because both their and our research has
identified the same good
It is a great program... I wish I had a VB program to do the work.
Same here. Unfortunately I'm not familiar with the VB IDE.
But if someone is interested I've some feature requests:
1.) Option to keep copy of requeued messages in a separate folder for
statistical research.
What test's has
Anyone has a SPAMDOMAINS entry for ebay?
Markus
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.
Just thought I would mention these things since I'm sure you are actively
thinking about alternatives right now.
Thanks -- I appreciate hearing your ideas on MS SMTP and licensing. We are
indeed starting to think about which products/platforms to add support for.
I am cloce to agree with you but as one of those who is tired of Imail and the high
cost on hardware needed to handle mail per
customer comparing to Linux systems I would loved to have declude on linux with
postfix fex.
Declude is the only thing keeping me on Imail.
Benny
-Original
The first is something we've really wanted as well...tracking to help tune
detection settings.
The second is a good idea we will consider if/when Tom releases the code.
Darin.
- Original Message -
From: Markus Gufler [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, April 13,
However I hope to see SURBL soon as an additional Declude test.
I just got caught up on this thread and checked out the website for SURBL
and I agree! This would help with the stuff that passes all of the other
tests.
Sheldon
Sheldon Koehler, Sr. SysAdminhttp://www.tenforward.com
Ten
I use this as my phish filter:
@paypal.com .paypal.
@ebay.com .ebay.
citibank.com.ssmb.com
fleet.com .bkb.com
wellsfargo.com .norwest.com
Scott Fisher
Director of IT
Farm Progress Companies
[EMAIL PROTECTED] 04/13/04 04:06AM
Anyone has a SPAMDOMAINS entry for ebay?
Markus
However I hope to see SURBL soon as an additional Declude test.
I just got caught up on this thread and checked out the website for SURBL
and I agree! This would help with the stuff that passes all of the other
tests.
Sheldon
Hi,
SURBL is surprisingly effective, considering the fact that it
Me too :)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
(Lists)
Sent: Tuesday, April 13, 2004 10:27 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Surbl.org
I would be interested in your script until native support is added
Definitely interested in those scripts!
Cris Porter
JVC America
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Roger Eriksson
Sent: Tuesday, April 13, 2004 9:11 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Surbl.org
However I hope to see
I would be interested in your script also.
Stu
At 08:27 AM 04/13/2004 -0700, you wrote:
I would be interested in your script until native support is added to
Declude.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL PROTECTED]
If anyone is interested, I can make the SURBL script available for
download (together with some other scripts, e.g., the log analysis
and test check scripts that generated the results seen above). The
best solution is of course to have the SURBL test implemented
directly in Declude,
I would also be interested :)
Kevin
-- Original Message --
From: Roger Eriksson [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date: Tue, 13 Apr 2004 17:10:58 +0200
However I hope to see SURBL soon as an additional Declude test.
I just got caught up
And me too :-)
Just an idea... If you ask Scott im sure he will make a link on the webpage for
download
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jason
Sent: 13. april 2004 17:32
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail]
OK, just give me some time to add comments to the scripts. I will
post a download link tomorrow or so.
/Roger
If anyone is interested, I can make the SURBL script available for
download (together with some other scripts, e.g., the log analysis
and test check scripts that generated the
- Original Message -
From: Markus Gufler [EMAIL PROTECTED]
Anyone has a SPAMDOMAINS entry for ebay?
This is what I currently use in my SPAMDOMAINS file:
.ebay.com .emailebay.com
@ebay.com .ebay.com
There may be other variants that could be added to this, but since there's
not a lot
ditto, count me in
- Original Message -
From: ISPHuset Nordic [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, April 13, 2004 11:58 AM
Subject: RE: [Declude.JunkMail] Surbl.org
And me too :-)
Just an idea... If you ask Scott im sure he will make a link on the
webpage for
Where do I find and updated version of the rbl's used per default ? And there settings
Or has they not been changed for the last 6 -8 months ?
Benny
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.
Where do I find and updated version of the rbl's used per default ? And
there settings
Or has they not been changed for the last 6 -8 months ?
We constantly update the config files, as old spam databases are killed off
and new ones are added. You can find the latest config files at
OK, just give me some time to add comments to the scripts. I will
post a download link tomorrow or so.
Very cool Roger!!!
Sheldon
Sheldon Koehler, Sr. SysAdminhttp://www.tenforward.com
Ten Forward Communications 360-457-9023
Nationwide access, neighborhood support!
I have problems with the Imail server falling further behind everyday.
I have a 3.ghz Pentium with Adaptec 29160 and 73g IBM drives.
But It still falls behind.
One of my incoming gateways has over 300,000 emails backed up and it won't
display the imail queue manager.
I have stopped all incoming
Yes, your 8 minute update timeframe has passed. ;)
Jason
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe
Hi Scott -
Since there does seem to be demand, and since you've indicated that you'll
consider this test, perhaps you can give us an estimate of when we might see
you integrate it?
I'm sure you have nothing else to do: the integration of your new web site
is done, you've new ownership and
Since there does seem to be demand, and since you've indicated that you'll
consider this test, perhaps you can give us an estimate of when we might see
you integrate it?
It is very hard to say right now, because of the change in ownership. This
would not be a small new feature that could be
found it out myself... Just have to read all the manual :-)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R.
Scott Perry
Sent: 13. april 2004 18:40
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Updates to the confic file
Where do
Thanks for all responses.
Markus
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can
I have problems with the Imail server falling further behind everyday.
I have a 3.ghz Pentium with Adaptec 29160 and 73g IBM drives.
But It still falls behind.
One of my incoming gateways has over 300,000 emails backed up and it won't
display the imail queue manager.
That's the first problem --
Thanks the only place I didn't look
I now have user her who wants the mail marked in the subject line with SPAM and the
WEIGHT result how do I get that to show up.
Benny
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R.
Scott Perry
Sent: 13.
I now have user her who wants the mail marked in the subject line with
SPAM and the WEIGHT result how do I get that to show up.
To do that, you can use:
WEIGHT20SUBJECT [%WEIGHT%]
which would add the weight to the beginning of the subject of E-mails that
fail the WEIGHT20 test (for
I use the ATTACH action and have edited the .eml to include %WEIGHT% in the subject
line.
-Original Message-
From: ISPHuset Nordic [EMAIL PROTECTED]
Date: Tue, 13 Apr 2004 13:19:37
To:[EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Updates to the confic file
Thanks the only place I
If you're interested we use something like
WEIGHT20SUBJECT [spam %WEIGHT%]
So the message is marked like
Subject: [spam 34] bla bla bla
This will have three benefits:
A.) your users receive what they ask for
B.) most email clients support rules based on the content of subject
Hmm have to use the one doing the easiest job on the server
We are a front server for them and are handling around 300 k off messages for them per
month
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Goran Jovanovic
Sent: 13. april 2004 19:25
I have a utility to do a quick analysis of my decMMDD.log
file to discover test effectiveness.
Wow. Very fast!
Could you explain this numbers?
Message Recipient
Test Name Fail Count %Fail Count %
a message to: [EMAIL PROTECTED] would add one to message count an one to
recipient count for each test failed
A message to: [EMAIL PROTECTED] user2.domain.com would add one to
message count an two to recipient count for each test failed.
-Original Message-
From: [EMAIL PROTECTED]
Nice little utility Bill.
Thanks a bunch.
Adrian
Bill wrote:
Hi,
I have a utility to do a quick analysis of my decMMDD.log file to
discover test effectiveness. If anyone would like to use it, I have it
available for free from my website: http://www.wamusa.com/wamtools
The program
I dl'ed it and tried to analyze a file with it and I get an application
exception. It looks like it is listing out all my tests prior to counting
them (just numbers incrementing from 1 to * followed by testnames). It gets
to number 55 and drops out every time. Here is the output it gives before
What do ya'll have set for your weights?
Where do you delete? where do you us the subject command, etc.
My boss currently wants it set so certain tests tag
the subject and then the client creates a rule in outlook to move them to a spam
folder where they can delete, etc. The problem with
- Original Message -
From: Dan Horne [EMAIL PROTECTED]
I have attached my Global.cfg. The logfile that it was parsing was only
14
megs. Any ideas? Do I need to change something for it to work? I tried
WAMLOG with the debug option, but it did the same thing.
You should really
I only use weighting.
I mark the subject line as spam at 20 and hold the e-mail at 35 (hope to lower this to
30).
These numbers are really subject to what you weigh your tests at. No single test can
cause me to hit 20. I do have a couple of 12's that would combine to over 20 but they
are
Thanks, would you mind sharing your weights?
- Original Message -
From: Scott Fisher [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, April 13, 2004 4:53 PM
Subject: Re: [Declude.JunkMail] Weights
I only use weighting.
I mark the subject line as spam at 20 and hold the e-mail
Title: Message
ding! And
the results are in. After grep'ing something like 5000 messages that that
triggered SpamHaus...
The SBL-XBL
results are organized just as Matt predicted:
127.0.0.2=
SBL
127.0.0.4=
XBL which is practically CBL
127.0.0.6=
BOPM aka BLITZEDALL
So the visuals on
Yes, we're using it for ebay, paypal, hotmail, msn, aol, and some others. It
seems to work very well for us.
-Dave
- Original Message -
From: Markus Gufler [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, April 13, 2004 5:06 AM
Subject: [Declude.JunkMail] ebay spamdomains
Thanks for the offer, Roger
I've noticed that spammers rarely obscure the links, so this simple test
should work really well!
- Original Message -
From: Roger Eriksson [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, April 13, 2004 11:10 AM
Subject: Re: [Declude.JunkMail]
Andrew,
Thanks for the stats.
Regarding last hop checking of SBL (and other static source tests), for
servers with multiple domains where messages may be forwarded through
another server, scanning on multiple hops does help a great deal. You
are right though that SBL spammers are likely to
Hi,
I have a utility to do a quick analysis of my decMMDD.log file to
discover test effectiveness. If anyone would like to use it, I have it
available for free from my website: http://www.wamusa.com/wamtools
The program is designed for LOGLEVEL MID but it may work for other
levels. My
46 matches
Mail list logo
