It means that it wasn't in Declude's local country list database on your
server. The IP in question was registered on 30-Jan-2006 so you'll need to
contact Declude for an update.
- Original Message -
From: Gary Steiner [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent:
Actually, those variable codes are listed at the bottom of the online manual.
Dean
On 4/4/06, Scott Fisher [EMAIL PROTECTED] wrote:
I doubt you'll get a list. I imagine this is proprietary information forDeclude.- Original Message -
From: Dan [EMAIL PROTECTED]To:
I know some of you have seen such before, but the text below is the most
extreme (useless) attempt to get around filters I've seen. It looks like
something my son would text message.
LOL
John
Your c a redi z t doesn't matter to us ! lf you O n WN real e O st 6 at x e
and want IMMED beIA when
Yet, it still amazes me that someone out there will respond to that spam
thus making it worth the senders wild to keep on spamming.
Darrell
---
Check out http://www.invariantsystems.com for utilities for Declude,
SmarterMail, and Imail. IMail/Declude
Actually the grammar reminds me of Matt :)
-Nick
John Carter wrote:
I know some of you have seen such before, but the text below is the most
extreme (useless) attempt to get around filters I've seen. It looks like
something my son would text message.
LOL
John
Your c a redi z t doesn't
Hi Dan,
I am not sure that there is a list of codes. I think the codes are generated
and then decoded by the headers page. It is a tool that Scott Perry wrote so
I am not that familiar with it I would have to look into it further.
David B
www.declude.com
-Original Message-
From: [EMAIL
Hi All,
I've run Junkmail and EVA Pro products for the past couple of years, but not Hijack. I'm a little confused with the docs though and just want to make sure that I am reading them correctly. With Hijack, there is no per domain and per user configuration, correct? The only way to opt-out
Hi Dean -
Dean Lawrence wrote:
First, what thresholds are most of you using, that causes minimal
screaming phone calls from client? 8-)
RELAYTHRESHOLD11020
RELAYTHRESHOLD23040
Secondly, how are you handling non-fixed IP users that may send large
(over the thresholds),
It's off-topic for this off-topic thread, but Google Analytics at
http://www.google.com/analytics/
is pretty nifty for non-ISP purposes. To get it working though, you need
to edit every page your want to report on with a bit of javascript which
phones home to Google; it doesn't work by analyzing
And ideas on how I would stop these from getting through.
Thanks,
Todd Hunter
Smart Mail
--
Received: from mail2.smart-mail.net [65.16.167.134] by net.smart-mail.net
(SMTPD32-8.15) id A67D1E10156; Mon, 03
Release notes still are not updated. Guess I will never know what else
is new/fixed in Declude 4.1
-Jay
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jay Sudowski -
Handy Networks LLC
Sent: Monday, April 03, 2006 4:45 PM
To:
A lot of spam has been getting through lately and at first I was thinking my
Declude needed some tweaking. I am seeing some funny stuff though. I find
emails where emails contain items that should have triggered filters but did
not. I am on IMail 8.15 and Declude 2.06.
Here is a header
Todd,
We would really need to see the Declude log entries for that message to
better determine the issue. Can you post that message entry.
Darrell
---
Check out http://www.invariantsystems.com for utilities for Declude, Imail,
mxGuard, and ORF.
I send a request to support on Monday and they said they were waiting for
the notes from development. It supprises me that it takes so long. Not many
people are going to update until the release notes are available.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
You could use something like Message Sniffer or a URI filter like INVURIBL.
I also add weight for it the reverse dns from a dsl line.
You might also run the reverse dns against the mailpolice dynamic black
list:
MAILPOLICE-REVDNS dnsbl %REVDNS%.dynamic.rhs.mailpolice.com 127.0.0.2 0 0
Todd,
The best key on those messages is the URI that is listed in it. They are
listed in the common URIBL's. I have seen that domain being picked up for
the last couple days with our URI tool (invURIBL).
masakel . com.multi.surbl.org. 900 IN A 127.0.0.118
masakel .
To reduce false positives NOLEGITCONTENT and IPNOTINMX are hidden tests,
check your global.cfg you should see the -5
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Todd
Sent: Wednesday, April 05, 2006 12:22 PM
To:
04/01/2006 22:28:20 Q52D60D410090E5F8 Could not load filter file
d:\imail\declude\filters\navsmtpspam.txt.txt.
04/01/2006 22:28:20 Q52D60D410090E5F8 L1 Message OK
04/01/2006 22:28:20 Q52D60D410090E5F8 Tests failed [weight=30]:
SUBJECTSPACES7=WARN SUBJECTSPACES10=WARN SPFPASS=WARN SPAMCHK=WARN
Thanks David, both of these tests are not hidden and show up in the
headers.
Todd
- Original Message -
From: David Barker [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Wednesday, April 05, 2006 11:47 AM
Subject: RE: [Declude.JunkMail] This doesnt add up
To reduce
Todd
Check for the possibility of tests that were PASSED, which would also reduce
the score. X-Spam-Tests-Failed will only show those test FAILED. I went
through this some time back and had to run DEBUG mode for a while to
understand it.
John C
-Original Message-
From: [EMAIL
Todd,
Can you post your gibberish, spamchk, and spfpass lines from your global.cfg
as well.
Darrell
Todd writes:
04/01/2006 22:28:20 Q52D60D410090E5F8 Could not load filter file
d:\imail\declude\filters\navsmtpspam.txt.txt.
04/01/2006 22:28:20 Q52D60D410090E5F8 L1 Message OK
04/01/2006
I recently changed the Gibberish weight from 30 to 40.
SPFPASS spf pass x 0 0
GIBBERISH filter d:\imail\declude\filters\gibberish.txt x 40
0
SPAMCHK external weight d:\imail\declude\spamchk\spamchk.exe
- Original Message -
From:
Todd,
I do not see them in the headers ?
X-Spam-Tests-Failed: SUBJECTSPACES7, SUBJECTSPACES10, SPFPASS, SPAMCHK,
GIBBERISH, CATCHALLMAILS [30]
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Todd
Sent: Wednesday, April 05, 2006
Hi Nick,
Thanks for your input. I didn't see anything related to ALLOWADDR in the manual, are there other commands available?
Thanks,
Dean
On 4/5/06, Nick Hayer [EMAIL PROTECTED] wrote:
Hi Dean -Dean Lawrence wrote: First, what thresholds are most of you using, that causes minimal
screaming
Here is another one. Spamcheck reports a weight of 90 but Declude only
gives it a weight of 55. This is the same reduction of 35 points as on the
other email. I have looked through my global.cfg and all my filters for any
line containing a weight of -35 that might cause the reduction but I
I've been seeing this for weeks. I reported it, and I believe they are
working on a fix.
Sometimes Declude doesn't put ANYTHING in the headers. Kind of hard to
figure out why something got through in the meantime, though..
Karl Drugge
-Original Message-
From: [EMAIL
I should have been clearer. They show up in the headers of the emails where
they are triggered. Here is an example that again does not add up (30 +
35 - 15 - 15 + 10 = 45) to the weight of 75 Declude has given it.
FIVETENSRC ip4r blackholes.five-ten-sg.com 127.0.0.2 30
0
You are assigning 30/40 points for the failure of the gibberish filter.
Are you also scoring points within the gibberish filter.
a body 15 contains text would score 15 for that line matching plus the 30
for the filter matching.
- Original Message -
From: Todd [EMAIL PROTECTED]
To:
Anoth
- Original Message -
From: IS - Systems Eng. (Karl Drugge) [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Wednesday, April 05, 2006 1:02 PM
Subject: RE: [Declude.JunkMail] This doesnt add up
I've been seeing this for weeks. I reported it, and I believe they are
working
The gibberish filter has only body 0 so no weight is posted in the
filter. Weight is only assigned by Declude upon failure of the gibberish
filter.
- Original Message -
From: Scott Fisher [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Wednesday, April 05, 2006 1:13 PM
Gee, I thought it looked like a perl script...
I sometimes wonder if the spammers write stuff like this because they
lose the thread and forget that they are trying to convince people to
buy their stuff, and not just to craft their message to get past the
antispam filters!
Andrew 8)
I've been able to assemble these valid codes
http://www.declude.com/tools/header.php?code=c020040c
http://www.declude.com/tools/header.php?code=420f
http://www.declude.com/tools/header.php?code=6000410f
http://www.declude.com/tools/header.php?code=8004000e
Dan,
The code is sort of bitmasked in a way (using hex values). So these
codes actually reflect combinations. There are literally hundreds of
combinations.
Matt
Dan wrote:
I've been able to assemble these valid codes
http://www.declude.com/tools/header.php?code=c020040c
Sweet Matt, thanks!
On Apr 5, 2006, at 13:56, Matt wrote:
Dan,
The code is sort of bitmasked in a way (using hex values). So
these codes actually reflect combinations. There are literally
hundreds of combinations.
Matt
Dan wrote:
I've been able to assemble these valid codes
Unfortunately it is not in the manual. Too bad.. but it is
in the release notes
http://www.declude.com/Articles.asp?ID=122
1.69
[Beta, 16 Apr 2003]
ADDED
ALLOWADDR option, to
allow up to 20 E-mail addresses to send unlimited E-mail.
Panda Consulting S.A.
Luis Alberto Arango E.
Release notes don't show any other commands
Luis Arango
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Panda Consulting
S.A. Luis Alberto Arango
Sent: Miércoles, 05 de Abril de 2006 04:48 p.m.
To:
I have upgraded to declude 3.0.6.4
, created a declude.cfg add the line INVITEFIX ON , put my footer lines back in
the virus.cfg file , the invites work fine , but my footer is not being
added , so I tried setting the INVITEFIX OFF , still no footers showing up .
Howard Smith
Thanks Luis,
I should know to check the release notes for these little tidbits that have not made it into the manual.
Dean
On 4/5/06, Panda Consulting S.A. Luis Alberto Arango [EMAIL PROTECTED] wrote:
Release notes don't show any other commandsLuis Arango
From:
38 matches
Mail list logo
