RE: [Declude.JunkMail] DNS Reports timing out?

2004-02-16 Thread Andy Schmidt
>> good 'ole BIND hung again << Nah - that can't be. Everyone here is beating up on MS DNS and tells us that only BIND is suitable for production use by any sane person because it is infallible? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-ma

RE: [Declude.JunkMail] New Phishing Scam

2004-02-15 Thread Andy Schmidt
Nope, The original link still works: http://www.paypal.com/verification/%?6488820019=20 Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent

RE: [Declude.JunkMail] New Phishing Scam

2004-02-14 Thread Andy Schmidt
Title: Message Of course - it could be that law enforcement asked them to MAINTAIN the site so that they can collect evidence. Best RegardsAndy SchmidtPhone:  +1 201 934-3414 x20 (Business)Fax:    +1 201 934-9206 -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROT

RE: [Declude.JunkMail] OT: IMAIL -> AD

2004-02-09 Thread Andy Schmidt
ssed to an alias!? - Does the Imail/NT/AD integration support (multiple) virtual domains (ip-less) - or will it only create users for the AD domain name? Accordingly, how will it know that two mailboxes and/or aliases by the same name, but on two different mail domains, should be kept as two different entitie

RE: [Declude.JunkMail] Using Imail/Declude as Public Gateway

2004-02-09 Thread Andy Schmidt
Title: Message Matt:   >> gatewayed E-mail accounts.  Since IMail doesn't offer any way to validate gatewayed addresses or fending off dictionary attacks <<  With "gateway" you mean that you are hosting the "public" MX for them (primary and possibly backup MX), but you are NOT hosting their

[Declude.JunkMail] OT: IMAIL -> AD

2004-02-09 Thread Andy Schmidt
but on two different mail domains, should be kept as two different entities in AD? Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Soft

RE: [Declude.JunkMail] [Declude.Junkmail] MS SMTP LDAP Routing

2004-02-09 Thread Andy Schmidt
n IMAIL/LDAP lookup event sink as it would help my SMTP server to "disconnect" on dictionary attacks. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-92

[Declude.JunkMail] OT: IMail LDAP for Virtual Mail Domains?

2004-02-09 Thread Andy Schmidt
Title: Message Matt:   One more angle to that.   Am I mistaken, or does the LDAP lookup only work for "IP based" mail domains?  In other words, if I host a few hundred mail domains sharing the SAME IP address, then it appears as if Imail's LDAP feature ONLY connects to the ONE mail domain t

RE: [Declude.JunkMail] [Declude.Junkmail] MS SMTP LDAP Routing

2004-02-09 Thread Andy Schmidt
p event sink as it would help my SMTP server to "disconnect" on dictionary attacks. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-920

RE: [Declude.JunkMail] How do they do it?

2004-02-06 Thread Andy Schmidt
Rick, I read the "BlackIce" User Guide and various other manuals to see if I want to pursue this software. Which feature/setting blocks Dictionary SMTP attacks? I can't seem to find any setting specific to this? Best Regards Andy Schmidt H&M Systems Software, Inc. 600 E

RE: [Declude.JunkMail] Any sort of Challenge Response tool for Declude/Imail??

2004-02-02 Thread Andy Schmidt
Hi George, >> is there any type of Challenge Response tools available for Imail that you are aware of << Unfortunately - not. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just se

RE: [Declude.JunkMail] Challenge/Response with Declude

2004-01-28 Thread Andy Schmidt
pool and include the parameterized URL in my bounce messages... If I only had the time...) Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://ww

RE: [Declude.JunkMail] LOGLEVEL MID - good?

2004-01-26 Thread Andy Schmidt
previous suggestion had been to expand the summary line to include a "reason" code, e.g., BADHEADER(80001004), SPAMFILTER(37), WHITELIST(IP) for BADHEADER reason code or SPAMFILTER line number or WHITELIST reason. The goal should be to make MID level logging LESS VERBOSE - but NOT less inf

[Declude.JunkMail] SPF.LOG and SPF.NONE -> keep

2004-01-25 Thread Andy Schmidt
Title: Message Hi Scott:   Actually, those two log files may actually be desirable IF we could specify which address blocks we're interested in.   E.g., if the log files would only show MY IP ranges, then I could quickly look at a fairly small SPF.NONE and find out, which DNS records I stil

[Declude.JunkMail] SPF sometimes PASS sometimes not?

2004-01-25 Thread Andy Schmidt
Title: Message Scott:   Any good idea why several emails within the same minute from <> to [EMAIL PROTECTED] from the exact same IP address sometimes PASS SPF an sometimes do not?   01/25/2004 00:17:23 Q5162108b00b436cc WEB-O-TRUST:-2 nNOLEGITCONTENT:-3 WEIGHTFILTER:3 .  Total weight = -2.0

RE: [Declude.JunkMail] Junk Mail Stats

2004-01-22 Thread Andy Schmidt
Hi, This was an excerpt from Dlanalyzer. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message-

[Declude.JunkMail] Null Sender Messages to Multiple Recipients

2004-01-22 Thread Andy Schmidt
Title: Message Hi:   I noted the following on the SPF site:   "In either case an MTA should reject messages from null senders that have more than one recipient."   Imail only allows to either permit or deny null senders. But, the above statement sounds obvious - an automated bounce message

RE: [Declude.JunkMail] Habeas White list

2004-01-22 Thread Andy Schmidt
Hi, May be I'm must lucky - but yesterday I had: HABEAS..50.04% HIL...1961.57% 5 messages with HABEAS headers - but 195 mails that failed HABEAS' infringer list. Best Regards Andy --- [This E-mail was scanned for viruses by Declude Virus (http:

RE: [Declude.JunkMail] SPF fix?

2004-01-21 Thread Andy Schmidt
Hi Scott: Any progress on the fix for the syntax a:host.domain.name/nn ? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsub

RE: [Declude.JunkMail] Habeas

2004-01-16 Thread Andy Schmidt
I counter-balance Habeas with their own hil blacklist. Right now - 95% of all "habeas" mail is actually coming from a blacklisted server. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 20

RE: [Declude.JunkMail] AOL on SPAMCOP

2004-01-16 Thread Andy Schmidt
Title: Message >>  SpamCop has a very serious and obvious problem, and I think it might be the result of a bug or something because clearly this wasn't always the case.  Imperfect as they may be, SpamCop could fix this problem and greatly improve on their present reliability. <<   Sorry for

RE: [Declude.JunkMail] AOL on SPAMCOP

2004-01-16 Thread Andy Schmidt
. Having SpamCop FP on such a mail server though causes me great pause. Matt Andy Schmidt wrote: >Hi, > >Well, I simply use SPF PASS to assign a negative weight. Since AOL >implemented SPF, that automatically reduces any "SpamCop" effect to a >tolerable level, e.g.,

RE: [Declude.JunkMail] Question about Some Spam Tests

2004-01-16 Thread Andy Schmidt
do use the AHBL EXEMPT for counterweight (which also helps with AOL): AHBLEXEMPT ip4rexemptions.ahbl.org * -8 0 Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414

RE: [Declude.JunkMail] AOL on SPAMCOP

2004-01-16 Thread Andy Schmidt
e-Date: 01/12/2004 22:27:52 [0] X-RCPT-TO: <[EMAIL PROTECTED]> Status: U X-UIDL: 353600159 Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://

RE: [Declude.JunkMail] Question about Some Spam Tests

2004-01-15 Thread Andy Schmidt
Title: Message Hm:   "In the past 772.9 days, it has been listed 19 times for a total of 3.1 days"   Sound's like it works as designed - because of the volume of legit mail, it is only listed for a few hours each time.  A total of THREE days out of roughly 800?   Again - why not use a weight

RE: Re[2]: [Declude.JunkMail] Question about Some Spam Tests

2004-01-15 Thread Andy Schmidt
other tests in a weighting scheme, I would be surprised if anyone would actually hold or delete legit mail!? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of S

RE: [Declude.JunkMail] Why is "FROM" Header wrong?

2004-01-14 Thread Andy Schmidt
Scott: >> the de facto standard is to have a space after the colon in all Internet headers. << There IS space after the colon - do you mean a space after between the quote and the less-than symbol? From: "GOERING iSeries Solutions"<[EMAIL PROTECTED]> Be

[Declude.JunkMail] Why is "FROM" Header wrong?

2004-01-14 Thread Andy Schmidt
Title: Message Hi Scott:   this email failed "This E-mail has headers consistent with spam [4000100f]."? Does Declude want a space after the quote?   Received: from moutng.kundenserver.de [212.227.126.189] by hm-software.com with ESMTP  (SMTPD32-7.07) id A8AB2470013E; Wed, 14 Jan 2004 12:1

RE: [Declude.JunkMail] SFP is catching on...

2004-01-13 Thread Andy Schmidt
If you implement SPF for your own domain, you can safely use it now and benefit. Your own outgoing mail will benefit as it will be less likely to be confused with SPAM. Inbound, you can choose to add a negative weight for any site where SPF passes (at least the domain was not likely spoofed). A

RE: [Declude.JunkMail] Topica and SBL

2004-01-13 Thread Andy Schmidt
Title: Message I guess this goes towards where one chooses to draw the line - spammers vs. "organizations supporting spammers". Someone who knowingly gets involved with a spammer, should probably expect that their email will not longer be delivered reliably.   Similar to blocking an infected

RE: [Declude.JunkMail] 1.77i16 Live... Really!

2004-01-13 Thread Andy Schmidt
Confirmed: X-Declude: Version 1.77i16; D2edc073800b6a083.SMD from corner-office.usa.hm-software.com [63.107.174.136] Scott - I assume this does not yet fix the SPF bug that I reported (Just asking because it was not acknowledged in any way.) Best Regards Andy --- [This E-mail was scanned for vi

RE: [Declude.JunkMail] 1.77i16?

2004-01-13 Thread Andy Schmidt
Same here - downloaded this morning after the announcement and my headers still read: X-Declude: Version 1.77i15; D1bad042a01feaf36.SMD from chris.usa.hm-software.com [63.107.174.138] Best Regards Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fred

RE: [Declude.JunkMail] Tests Used for Deleting?

2004-01-13 Thread Andy Schmidt
on. (I'm using ORF from VAMSOFT to do exactly that on my backup MX running MS SMTP (IIS), as lots of spam now gets directed against the backup MXs). Best Regards Andy Schmidt Argos Networks 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-9411 x20 (Bu

RE: [Declude.JunkMail] More 1.77i15 Log Issues

2004-01-13 Thread Andy Schmidt
Hi Scott: Okay - that's fair enough. So one should think of the line labeled "Tests failed:" as a line that really contains "Actions taken:" Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- [This E-mail was scanned for

[Declude.JunkMail] SPF Bug!

2004-01-12 Thread Andy Schmidt
Title: Message Hi Scott: I believe I found a bug in your SPF implementation.   http://www.infinitepenguins.net/SPF/check.php?action="" PROTECTED]   will "PASS", because 195.127.133.117 matches "a:roedermark.hm-software.com/25"   Yet, Declude (and DNSStuff) FAILS the same combination: http:/

RE: [Declude.JunkMail] More 1.77i15 Log Issues

2004-01-12 Thread Andy Schmidt
and should be complete. HIDETESTS should only be applied against information that is shown "publicly" (e.g., in headers, in bounce/warn messages, and the like). Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- [This E-mail was scanned for vir

RE: [Declude.JunkMail] 1.77i15 Log Issues

2004-01-12 Thread Andy Schmidt
Yes, I'm still using LogLevel=MID. Never changed it - unless someone tells me that LOW or HIGH are more appopriate. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTE

RE: [Declude.JunkMail] 1.77i15 Log Issues

2004-01-12 Thread Andy Schmidt
01/12/2004 17:40:55 Q226b2eb1017c0bfd From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 63.170.102.99 ID: 01/12/2004 17:40:55 Q226b2eb1017c0bfd Tests failed [weight=0]: Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-18

RE: [Declude.JunkMail] 1.77i12 Log Changes

2004-01-12 Thread Andy Schmidt
nged implicitly by inheriting all changes made to LOGLEVEL LOW" Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, January 12, 2004

RE: [Declude.JunkMail] 1.77i12 Logging Behavior

2004-01-12 Thread Andy Schmidt
>> the one-line summary is going to start with "Tests failed [weight=WEIGHT]: " << Thanks. That's what I was hoping/waiting for. If I interpret correctly, this is NOT yet available. (That's fine, just wanted to make sure that I was not "behind".) --- [This E-mail was scanned for viruses by Decl

RE: [Declude.JunkMail] 1.77i12 Bug: Aliases Counted in BYPASSMULTIRECP

2004-01-12 Thread Andy Schmidt
EL HIGH, and [2] To add a one-line summary to LOGLEVEL LOW. No other changes were made. LOGLEVEL MID is not involved" Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com

RE: [Declude.JunkMail] 1.77i12 Bug: Aliases Counted in BYPASSMULTIRECP

2004-01-12 Thread Andy Schmidt
string constant" so that they could easily detect it. I'm confused as to what changes you made after 1.77i12 to Loglevel MID as your answer refers to HIGH and LOW and leaves out MID? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -O

RE: [Declude.JunkMail] 1.77i12 Bug: Aliases Counted in BYPASSMULTIRECP

2004-01-12 Thread Andy Schmidt
;t have to download a new Interim. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, January 12, 2004 08:15 AM To: [EMA

RE: [Declude.JunkMail] 1.77i12 Bug: Aliases Counted in BYPASSMULTIRECP

2004-01-11 Thread Andy Schmidt
Title: Message Hi Scott:   any news on this matter?   Dito - any news with respect to the log entries in medium mode? Best RegardsAndy SchmidtPhone:  +1 201 934-3414 x20 (Business)Fax:    +1 201 934-9206 -Original Message-From: Andy Schmidt [mailto:[EMAIL PROTECTED] Sent

RE: [Declude.JunkMail] Bug: Alias content counted as recipients

2004-01-09 Thread Andy Schmidt
cantly. Of course, with the i12 bug that would be broken - because suddenly email would be penalized even though the sender only used one SINGLE Email address in the "To" field. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original M

RE: [Declude.JunkMail] Bug: Alias content counted as recipients

2004-01-09 Thread Andy Schmidt
ed should not be counted against the email, when assessing it for "spamminess" (e.g., bypassing the whitelist). Otherwise, it would render the entire SWITCHRECIP feature useless (and I know that there was a good reason, why I have this turned on.) Best Regards Andy Schmidt Phone: +1

RE: [Declude.JunkMail] Bug: Alias content counted as recipients

2004-01-08 Thread Andy Schmidt
Hi, Yes, SWITCHRECIP=ON. However, the problem stated with i12, we reproduced the problem at will until we went back to i8 - and then tne problem went away. So, something is wrong with SWITCHRECIP=ON and BYPASSMULTIRECP combination in i12. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20

[Declude.JunkMail] Bug: Alias content counted as recipients

2004-01-08 Thread Andy Schmidt
Title: Message Hi Scott:   here is the info you asked.  Enclosed is a text file with   - IMail Log (showing ONE recipient) - Declude Log (showing 12 recipients) - Declude skipping the whitelisting: "Bypassing whitelisting of E-mail with weight >=15 (17) and at least 4 recipients (12)." -

[Declude.JunkMail] 1.77i12 Bug: Aliases Counted in BYPASSMULTIRECP

2004-01-08 Thread Andy Schmidt
Title: Message Hi Scott:   I just went back to i8. Somewhere between i8 and i12, the handling of aliases broke.   Situation: a) User sends a single email to a single alias: "[EMAIL PROTECTED]" b) The alias distributes to 12 mailboxes c) Declude (with Interim I12) counts it as 12 recipients

RE: [Declude.JunkMail] DNSREPORT "mandates" web site?

2004-01-07 Thread Andy Schmidt
n't want them "solidified" by eventually appearing in search engines, etc. None of their DNS zones are erroneous by anyone's definition, except for DNSreport.com. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message-

[Declude.JunkMail] DNSREPORT "mandates" web site?

2004-01-07 Thread Andy Schmidt
Title: Message Hi,   one of my customer's domains came back with:   ERROR: I couldn't find any A records for www.CPBAKER.COM. But I did find a referral to ns1.webhost.hm-software.com. (and maybe others). If you want a website at www.CPBAKER.COM, you will need an A record for www.CPBAKER.COM.

RE: [Declude.JunkMail] New CMDSPACE test in latest interim release

2004-01-07 Thread Andy Schmidt
Time for someone to contact the tech-press... "New Outlook Bug Increases Spam" Because ISPs have to whitelist mail that appears to originate from Outlook, questionable messages will now start to appear in mailboxes across the Internet... Best Regards Andy Schmidt Phone: +1 201 93

RE: [Declude.JunkMail] New CMDSPACE test in latest interim release

2004-01-07 Thread Andy Schmidt
Okay - so if it fails every Outlook 2003 user, it can only be used with a minimum weight. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent

RE: [Declude.JunkMail] Major Change in Declude Log File Format? Effects Reporting Applications?

2004-01-07 Thread Andy Schmidt
or IP based tests, e.g.: SBL[127.0.0.2]=IGNORE,XBL[127.0.0.4]=IGNORE,... Or, stick THAT information in the weight line: BADHEADERS[n]:5 HELOBOGUS:3 SPAMHEADERS[n]:3 SBL[127.0.0.2]:8 Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:

RE: [Declude.JunkMail] New CMDSPACE test in latest interim release

2004-01-07 Thread Andy Schmidt
and three different sending domains (valid ones) were being tagged. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of System Administrator Sent: Wednesday, January 07,

RE: [Declude.JunkMail] Major Change in Declude Log File Format? Effects Reporting Applications?

2004-01-07 Thread Andy Schmidt
est. The "IP" based stuff is easy to reconstruct from other sources - but the badheaders/spamheaders "reason codes" were helpful when investigating false-positive reports. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original

RE: [Declude.JunkMail] RBL - which DNS Server

2004-01-02 Thread Andy Schmidt
ct: RE: [Declude.JunkMail] RBL - which DNS Server Any one using this yet, and is it helping? John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Andy Schmidt > Sen

RE: [Declude.JunkMail] RBL - which DNS Server

2003-12-27 Thread Andy Schmidt
>> Thus, the DNS server used would need to be the Imail server itself. << Well - since Declude replaces/intercepts a process of the Imail Server, I think it qualifies as "SMTPd" in the context of their specs. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Busine

RE: [Declude.JunkMail] RBL - which DNS Server

2003-12-27 Thread Andy Schmidt
ify, which of your two conflicting answers are ultimately correct. Yes - I'm hoping that those lookups are performed through the Imail configured DNS server (or the one defined in the Declude config file). Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:

RE: [Declude.JunkMail] RBL - which DNS Server

2003-12-27 Thread Andy Schmidt
Okay - so it would NOT fulfill the stated requirements to be a contributor - since it is not going through a "caching" server. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

[Declude.JunkMail] RBL - which DNS Server

2003-12-26 Thread Andy Schmidt
Scott: I'm assessing http://www.njabl.org/contribute.html. Where does Declude fit into this? When declude looks up black lists, does it connect DIRECTLY to each black-lists DNS server - or does it query through the Imail (or Declude) DNS server? Best Regards Andy Schmidt Phone: +1 20

RE: [Declude.JunkMail] SPF Fail & Remote EMail clients.

2003-12-25 Thread Andy Schmidt
server (one hop down)> Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Glen Harvy Sent: Friday, December 26, 2003 12:41 AM To: [EMAIL PROTECTED] Subject: RE: [Dec

RE: [Declude.JunkMail] SPF Fail & Remote EMail clients.

2003-12-25 Thread Andy Schmidt
ed to deliver it to that third party. You implement authenticated SMTP by specifying it in your Email software (e.g., Outlook Express, Outlook, Eudora, Netscape - take your pick). Look for something like "Outgoing Mail Server Requires Authentication"). Best Regards Andy Schmidt Phone:

RE: [Declude.JunkMail] SPF Fail & Remote EMail clients.

2003-12-25 Thread Andy Schmidt
Hi, If you implement SMTP AUTH and white list anyone who is using an authenticated connection, then this will override the SPF FAIL - thus leaving only those to truly fail who are not using authenticated SMTP. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934

RE: [Declude.JunkMail] UNKNOWN entries in spf.log

2003-12-23 Thread Andy Schmidt
Hi Bill: For what it's worth, MY problem was clearly due to a rogue DNS zone. I am using multiple includes - one of them to a zone that really has no use, but it came handy to 'document' the SPF records. Unfortunately, I had not verified the proper configuration of that zone and there had been

RE: [Declude.JunkMail] SPF still broken with v1.77i7?

2003-12-22 Thread Andy Schmidt
Hi Scott: Disregard! I found the DNS problem. It has nothing to do with the information that you are logging, though - it's the "include hmsoftware.de" that's failing on that machine. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-92

RE: [Declude.JunkMail] SPF still broken with v1.77i7?

2003-12-22 Thread Andy Schmidt
/25 ip4:65.119.204.0/24 -all Sorry, the DNS server (63.107.174.65) did not respond with an answer (rcode=2). 63.107.174.147 [EMAIL PROTECTED] [andyshome]: UNKNOWN: v=spf1 ip4:63.107.174.0/25 ip4:65.119.204.0/24 -all Sorry, the DNS server (63.107.174.65) did not respond with an answer (rcode=2). Best Rega

RE: [Declude.JunkMail] SPF still broken with v1.77i7?

2003-12-21 Thread Andy Schmidt
- you are looking for the UNKNOWN information in the wrong spot. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Sunday, December 21, 2003 08:40

RE: [Declude.JunkMail] SPF still broken with v1.77i7?

2003-12-21 Thread Andy Schmidt
ess/failures. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Sunday, December 21, 2003 08:40 PM To: [EMAIL PROTECTED] Subject: RE: [Declude

RE: [Declude.JunkMail] SPF still broken with v1.77i7?

2003-12-21 Thread Andy Schmidt
nitepenguins.net/SPF/check.php?action=spfcheck&ipv4=63.107.17 4.146&helo=andyshome&[EMAIL PROTECTED] Received-SPF: fail (heifong.phase.org: domain of [EMAIL PROTECTED] does not designate 63.107.174.146 as permitted sender) Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (B

[Declude.JunkMail] FOOTER action

2003-12-19 Thread Andy Schmidt
Title: Message Hi Scott:   I assume the FOOTER action only works for the "plain-text" version of an email?  Since most SPAM is using HTML, the footer will never be visible to the viewer?   Sample: 12/19/2003 17:31:29 Q7c3f039300ba7da8 Msg failed WEIGHTFOOTER (Total weight between 5 and 7.).

RE: [Declude.JunkMail] SPF broken with v1.77i4?

2003-12-19 Thread Andy Schmidt
record does not exist). 63.107.174.149 [EMAIL PROTECTED] [TechT1]: UNKNOWN: SPF not supported (the HM-Software.com TXT record does not exist). Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto

[Declude.JunkMail] Why SPF "UNKNOWN"?

2003-12-19 Thread Andy Schmidt
Title: Message Hi:   I have lots of SPF "unknown" in the SPF.log file - most look as if they should have FAILED:   12.219.157.132   [EMAIL PROTECTED] [family]: UNKNOWN   Here the Imail log:   12:18 23:10 SMTPD(16C9012A) [63.107.174.78] connect 12.219.157.132 port 449312:18 23:10 SMTPD(16C90

[Declude.JunkMail] SPF -> Altavista

2003-12-19 Thread Andy Schmidt
Title: Message I'm impressed who is already on board:   http://www.dnsstuff.com/tools/lookup.ch?name=altavista.net&type=TXT http://www.dnsstuff.com/tools/lookup.ch?name=softhome.net&type=TXT   It's been catching a few spammers already.   Best RegardsAndy SchmidtPhone:  +1 201 934-3414 x20 (B

RE: [Declude.JunkMail] How did this "PASS" SPF?

2003-12-18 Thread Andy Schmidt
Excellent! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, December 18, 2003 06:47 PM To: [EMAIL PROTECTED] Subject: Re

RE: [Declude.JunkMail] SPF vs. Form Mail

2003-12-18 Thread Andy Schmidt
e "?all" since any of our users may be "sending" mail through a third party web site. Of course, ?all means that there will never be a "FAIL" - which is equivalent to giving no or little weight. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescen

[Declude.JunkMail] Declude-Date header in 1.77i3?

2003-12-18 Thread Andy Schmidt
Title: Message Hi,   X-Declude: Version 1.77i3; D2acb18b6021e5887.SMD from sccrmhc12.comcast.net [204.127.202.56] X-Declude-Date: 12/18/2003 22:37:23 [5]   Is this something I can turn off, or will it eventually be removed from this beta/interim? Best RegardsAndy SchmidtH&M Systems Softwar

[Declude.JunkMail] How did this "PASS" SPF?

2003-12-18 Thread Andy Schmidt
Title: Message I noticed that local form mails seem to "PASS" SPF?  That's nice - but how/why?   Example:   12/18/2003 17:21:45 Q28781b8a01d045e5 SPFPASS:-5 .  Total weight = 5. ...12/18/2003 17:21:45 Q28781b8a01d045e5 Msg failed SPFPASS (SPF returned PASS for this E-mail.). Action="">12/18

RE: [Declude.JunkMail] SPF vs. Form Mail

2003-12-18 Thread Andy Schmidt
y the owner of each domain and thus are more likely to be accurate. But we can't reach block based on SPF failures without ignoring the reality of the www? Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone:

RE: [Declude.JunkMail] SPF caught SPAM already

2003-12-18 Thread Andy Schmidt
Wow, With only a few hundred domains registered, what were the chances that it would already catch spam: 12/18/2003 16:32:17 Q1cd609ef0252d469 DSBL:5 SPAMCOP:7 NJABLDUL:4 SORBS-DUL:5 CBL:7 SPFFAIL:8 . Total weight = 36. 12/18/2003 16:32:17 Q1cd609ef0252d469 Bypassing whitelisting of E-mail with

RE: [Declude.JunkMail] SPF support to be added to next beta

2003-12-18 Thread Andy Schmidt
Hi Scott: A) Is there an %SPFSTATUS% variable for use in the headers (that will show FAIL/PASS/UNKNOWN)? B) If not, is there a "generic" SPF test in the global.cfg, so that I can use one line to create a WARN action e.g. SPF spf * x x x Best Regards Andy Sc

RE: [Declude.JunkMail] Outbound Port 25, was -> Virginia Indicts Indicts

2003-12-18 Thread Andy Schmidt
ocked, messages could pass to those people who truly wanted to know what items are new at Walmart. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://

RE: [Declude.JunkMail] SPF support to be added to next beta

2003-12-18 Thread Andy Schmidt
Thanks. I set up my primary domains. I still have to review client domains to determine the proper setup for those that are used for emailing. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto

RE: [Declude.JunkMail] AOL and Reverse DNS

2003-12-17 Thread Andy Schmidt
he mail was actually sent from AOL's mail servers. When I trace the TRUE source of the email, it usually is never truly from AOL. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PRO

RE: [Declude.JunkMail] AOL and Reverse DNS

2003-12-17 Thread Andy Schmidt
arty often (if ever). Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From: [EMAIL PROTECTED]

RE: [Declude.JunkMail] Discussing of Anti-Spam filters. Was Web-o-Trust

2003-12-17 Thread Andy Schmidt
uot; (not "ignorant") server faults, rather than being able to mail from every machine in the universe, things are much more manageable. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:

RE: [Declude.JunkMail] Does anyone not have Reverse DNS?

2003-12-17 Thread Andy Schmidt
eantime, why not relay your outbound mail through your ISP? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Holt Sent: Wednesday, December 17, 2003 01:33 A

RE: [Declude.JunkMail] AOL and Reverse DNS

2003-12-16 Thread Andy Schmidt
e.g., define a smart host), their mails won't be delivered to the outside world. Nothing wrong with that. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf O

[Declude.JunkMail] AOL and Reverse DNS

2003-12-16 Thread Andy Schmidt
Title: Message Hi,   I just noticed that AOL has stepped up their policies another notch.   They used to say that "AOL  **MAY**" not accept email from servers without Reverse DNS. In the last two weeks, that changed: http://postmaster.aol.com/guidelines/standards.html   AOL's servers wi

RE: [Declude.JunkMail] MSG Failed Routing. Why?

2003-12-16 Thread Andy Schmidt
constructively as possible. (I'm confused about your remark about the GeoLocation extra setup - I don't recall any complexities?) Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414

RE: [Declude.JunkMail] MSG Failed Routing. Why?

2003-12-16 Thread Andy Schmidt
he COUNTRIES variables? If so, would it make sense to upgrade the routing test so it uses the same information as COUNTRIES? Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fa

RE: [Declude.JunkMail] JunkMail config files...

2003-12-16 Thread Andy Schmidt
milar entry in their mail server). Their provider will know that they are a valid customer IP address and the provider's SMTP server will (hopefully) not be black-listed - certainly not in DUHL-SORBS. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suit

RE: [Declude.JunkMail] RR.COM

2003-12-12 Thread Andy Schmidt
n. So - they are spamming me with virus notifications that I don't want to see, they don't stop the infected message and they do nothing to stop the infected PC from sending. Bunch o'morons. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upp

RE: [Declude.JunkMail] Interim Releases - A Suggestion

2003-12-12 Thread Andy Schmidt
- if anything, the person was very thorough and acted entirely reasonable. I concur that it is necessary to keep the "easily accessible" interims release as "mainline code" and to place "debug code" at a unique URL. Best Regards Andy Schmidt H&M Systems Software,

RE: [Declude.JunkMail] HIDETESTS not working?

2003-12-12 Thread Andy Schmidt
Okay - thanks. Just wanted to make sure that you were aware that the bug was not related to "WEIGHT..." tests only. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business)

RE: [Declude.JunkMail] HIDETESTS not working?

2003-12-12 Thread Andy Schmidt
quot;SORBS" in my HIDETESTS - it's the end of the line. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ --- [Th

RE: [Declude.JunkMail] Interim Releases - A Suggestion

2003-12-12 Thread Andy Schmidt
- and you could keep the "interims" code strictly for one-on-one situations. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-So

RE: [Declude.JunkMail] installed.bin readable?

2003-12-12 Thread Andy Schmidt
-readable and has been for as long as I can remember. Does anyone out there have an installed.bin file that is NOT? Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 2

RE: [Declude.JunkMail] HIDETESTS not working?

2003-12-12 Thread Andy Schmidt
d. Declude Hijack Status: NOT REGISTERED: No activation code. End of diagnostics. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http:

[Declude.JunkMail] HIDETESTS not working?

2003-12-12 Thread Andy Schmidt
Title: Message My installed.bin says = 1.77i2.   My Global.cfg contains a line:   HIDETESTS  CATCHALLMAILS IPNOTINMX NOLEGITCONTENT WEIGHT8 WEIGHT10 WEIGHTHDR NJABL AHBL SORBS   My $Default$.Junkmail contains a line:   WEIGHTHDR WARN X-RBL-Warning: Failed %TESTSFAILED% [%WEIGHT%] My .EML te

<    1   2   3   4   5   6   7   8   9   10   >