[Declude.JunkMail] Sniffer vs. SURBL

2005-01-08 Thread Andy Schmidt
Title: Message Hi,   Today I finally took the time (I didn't have) and ran both Sniffer and SURBL Tests (using http://www.invariantsystems.com/invURIBL/).   Result:     1,860  tagged by invURIBL only -> gain over Sniffer = 21%   8,926  tagged by BOTH invURIBL AND Sniffer 962  tagged by

[Declude.JunkMail] HELOBOGUS for Email from Postfix Gateway

2005-01-08 Thread Andy Schmidt
Title: Message Hi Scott,   I'm colocating a Postfix gateway for a client - and "external" mail is being routed fine. However, I'm having a problem with Declude triggering on reporting emails that are generated directly ON the gateway itself:   - I have IPBYPASS set for 67.132.45.18 (which

RE: [Declude.JunkMail] HELO Filter not Working?

2005-01-08 Thread Andy Schmidt
The short/direct answer is: Declude gets it from the header. It doesn't "watch" the SMTP conversation. That information is inserted by Imail (or a server you trust by specifying IPBYPASS) by copying it from the HELO string. It only makes sense once I thought about it. Best Regards Andy Schmidt

Re: [Declude.JunkMail] HELO Filter not Working?

2005-01-08 Thread R. Scott Perry
>Both, actually. Declude JunkMail gets the "HELO" from the real HELO/EHLO >from the SMTP envelope. The method Declude JunkMail uses to obtain the >HELO, however, is the headers. Ok, this is clear as mudwhich is it, envelope or headers? The SMTP envelope contains information about the E-mail

RE: [Declude.JunkMail] DLAnalyzer - upgrading from 1.79i16 to 1.82

2005-01-08 Thread Andy Schmidt
Uuuh - okay. Thanks for clearing this up. I was running 1.79i16 before - so the changes occurred between 1.79i16 and 1.82 To be pragmatic, I guess the Log_OK none is no longer really that relevant as it once seemed. Now that at least 80% is spam anyway causing multi-line entries, it really does

Re: [Declude.JunkMail] HELO Filter not Working?

2005-01-08 Thread Darin Cox
>Both, actually. Declude JunkMail gets the "HELO" from the real HELO/EHLO >from the SMTP envelope. The method Declude JunkMail uses to obtain the >HELO, however, is the headers. Ok, this is clear as mudwhich is it, envelope or headers? Or is there a precedence, so in some circumstances it u

RE: [Declude.JunkMail] 1.82 -> Last Action no longer logged for IGNORE

2005-01-08 Thread R. Scott Perry
>>> Can you remind me, what additional messages/log lines I will see if >>> >>> #LOG_OK NONE >>> >>> is commented out? > With v1.82, it will add back the "Message OK" line(s) and the "Tests > Failed" line(s). Please note the subject: I AM running 1.82 (the SpamHeader fix!) Yes, I am aware of

RE: [Declude.JunkMail] 1.82 -> Last Action no longer logged for IGNORE

2005-01-08 Thread Andy Schmidt
Please note the subject: I AM running 1.82 (the SpamHeader fix!) It's only missing if LOG_OK is NONE. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott P

RE: [Declude.JunkMail] 1.82 -> Last Action no longer logged for IGNORE

2005-01-08 Thread R. Scott Perry
Can you remind me, what additional messages/log lines I will see if #LOG_OK NONE is commented out? With v1.82, it will add back the "Message OK" line(s) and the "Tests Failed" line(s). -Scott --- Declude JunkMail: The advanced anti-spam sol

RE: [Declude.JunkMail] HELO Filter not Working?

2005-01-08 Thread R. Scott Perry
>> Remember, Declude JunkMail looks at the HELO/EHLO of the remote mailserver, based on IPBYPASS/HOP << Uh - that's the answer. Thanks for clearing this up. So the "HELO" is not necessarily taken from the HELO, but from the HEADER. Both, actually. Declude JunkMail gets the "HELO" from the real HE