[Declude.JunkMail] New guy trying to learn

2004-03-12 Thread Goran Jovanovic
at Matt's Gibberish and GibberishSub filters that I have added. BTW I am using version 1.75 of JunkMail Any thoughts/insight and sample files would be greatly appreciated. If you need to send a file privately please feel free to do so. Thanx Goran Jovanovic The LAN Shoppe 2345 Yonge

[Declude.JunkMail] Options for Junkmail/Virus

2004-03-25 Thread Goran Jovanovic
Hi all, Is it possible to do the following: With IMail host some domains and have some domains simply forwarded (This I know works) Can I Junkmail but not AV one domain Another domain AV but not Junkmail Another domain do both Another Domain do neither Thanx Goran Jovanovic

RE: [Declude.JunkMail] Options for Junkmail/Virus

2004-03-26 Thread Goran Jovanovic
Thank you all. Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

[Declude.JunkMail] NOLEGITCONTENT Test

2004-04-08 Thread Goran Jovanovic
Hi, Is there a description of what the NOLEGITCONTENT test looks for? It is adding -5 to a lot of mails and I would like to understand it better. Thanx Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113

RE: [Declude.JunkMail] NOLEGITCONTENT Test

2004-04-08 Thread Goran Jovanovic
Scott, Would you say that this test is still a valid test? Is it still worth -5 when the e-mail does not fail it? If both SPAM and HAM are almost never tripping it perhaps it is a moot point anyway as all mail will have the -5 added to it. Goran Jovanovic The LAN Shoppe 2345

[Declude.JunkMail] Default Hold and Delete Weights Tracking

2004-04-09 Thread Goran Jovanovic
I know that this question is going to have a lot of it depends answers but here it goes... What are the Default Hold and Delete Weights that people use? It will obviously be based on the tests that you employ and how much weight you assign to them. In reading the JunkMail manual I got the

RE: [Declude.JunkMail] Notification to customers of change of ownership

2004-04-12 Thread Goran Jovanovic
others. Please continue with the great support and answering my newbie questions, I hope to soon learn enough to ask better questions :. Goran Jovanovic The LAN Shoppe E-Mail: [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http

Re: [Declude.JunkMail] Updates to the confic file

2004-04-13 Thread Goran Jovanovic
the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Goran Jovanovic The LAN Shoppe O: (416) 440-1167 x-2113 C: (416) 931-0688 E: [EMAIL PROTECTED] Sent from my Wireless

RE: [Declude.JunkMail] Why Was This E-Mail Marked As HELOBOGUS?

2004-04-15 Thread Goran Jovanovic
Scott, If a sending mail server has an A record but it does not have an MX then it would not fail the HELOBOGUS check? Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of R. Scott Perry

RE: [Declude.JunkMail] [Declude.Virus] Scott, what do you use to generate this report

2004-04-16 Thread Goran Jovanovic
I simply copied a current DEC.log file into the directory I create for WAMLOG and ran Wamlog dec0416.log And it produced a file wamlog.txt in the same directory Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail

RE: [Declude.JunkMail] SURBL filter script

2004-04-16 Thread Goran Jovanovic
and that will get added to the x in the line above. Suggestions would be appreciated. Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe

[Declude.JunkMail] Mark vs Hold vs Delete

2004-04-17 Thread Goran Jovanovic
(hopefully bringing it down to 25). Do you folks mark and send some mail to users, hold some and delete some? Or do you just hold and delete? If you can share some weight ranges with me I would appreciate. Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses

RE: [Declude.JunkMail] ALERT BOUNCE

2004-04-17 Thread Goran Jovanovic
Scott, http://www.declude.com/relnotes.htm Is this the permanent link for the release notes? Currently it is pointing at the 1.78 notes. Are there notes for 1.79? Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com

RE: [Declude.JunkMail] Mark vs Hold vs Delete

2004-04-17 Thread Goran Jovanovic
things loser so that I do not delete real stuff and as I learn more I will tighten the screws. Thanx again Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL

RE: [Declude.JunkMail] Spamdomains.txt file

2004-04-19 Thread Goran Jovanovic
Todd, Would you mind sending me a copy of the spamdomain.txt file as well? I would like to see what you have as a starting point. Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf

RE: [Declude.JunkMail] Blocking on attachment name

2004-04-19 Thread Goran Jovanovic
Scott, If you have both JunkMail and Virus are you able to block/delete an incoming mail message if the attachment had a virus? Actually do you need JunkMail at all in this condition? Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http

[Declude.JunkMail] Per-Domain Config

2004-04-19 Thread Goran Jovanovic
\declude\lanshop.com\whitelist.txt BL-LANSHOP DELETE Not sure if this has been asked before or if I am just doing things the hard way. Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from

RE: [Declude.JunkMail] Weight and Action Question

2004-04-20 Thread Goran Jovanovic
Well, you might also have a WHITELIST action, or a WEIGHT action for a high value that does a DELETE. I guess what is important is to find out the precedence of the ACTION keywords. So if a WEIGHT10 is set with a DELETE action and the test that you are testing has a WEIGHT of 1 and the

[Declude.JunkMail] US Treasury cannot do it right?

2004-04-20 Thread Goran Jovanovic
. X-Country-Chain: Organization: The LAN Shoppe Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED

RE: [Declude.JunkMail] Weight and Action Question

2004-04-20 Thread Goran Jovanovic
Think of it this way -- if you used the HOLD action for E-mail with a weight of 5 or higher, and the DELETE action for E-mail with a weight of 10 or higher, which action would you want taken on an E-mail with a weight of 25? In your description I would want the DELETE taken. I was

RE: [Declude.JunkMail] HELOBOGUS, HELOISIP and HELOISIPX questions

2004-04-20 Thread Goran Jovanovic
through me. Right? Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe

RE: [Declude.JunkMail] HELOBOGUS, HELOISIP and HELOISIPX questions

2004-04-21 Thread Goran Jovanovic
OK I think I was somehow reversed in my tinking Goran Jovanovic The LAN Shoppe Goran Jovanovic wrote: This is parts of a header I received and I just want to check a few things So the spammer thought that he would use my IP address in the HELO line 205.150.108.8

RE: [Declude.JunkMail] Minimum weight of a filter

2004-04-22 Thread Goran Jovanovic
Scott, I working on trapping more Nigerian Scams. What would you do in a filter? Search the body for phrases that are found in these types of e-mails? Goran --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail

RE: [Declude.JunkMail] Nameserver issues and Spam fighting

2004-04-22 Thread Goran Jovanovic
Scott, The easy answer to this is to use your own DNS servers -- if you do (and they are decent DNS servers; BIND is preferred), you won't be subject to the restrictions of ATT, Sprint, and others that block spam database lookups. Since we are running IMail (ie Windows) what is the

RE: [Declude.JunkMail] Nameserver issues and Spam fighting

2004-04-23 Thread Goran Jovanovic
Scott, The performance isn't as important as the reliability, which isn't that high. I would recommend using BIND instead (we actually run BIND on our IMail server, and it works flawlessly). I thought that BIND was the DNS that runs on *NIX. I guess they have ported it. Is BIND free?

RE: [Declude.JunkMail] Phishing attempt- CitiBank

2004-04-24 Thread Goran Jovanovic
John, Do you have a filter that searches for URLs in the BODY and that is what you added it to? Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Saturday

RE: [Declude.JunkMail] OT - Deccon

2004-04-24 Thread Goran Jovanovic
OK what am I missing? There is no console? There are only config files and filters. Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Saturday, April 24

RE: [Declude.JunkMail] OT - Deccon

2004-04-24 Thread Goran Jovanovic
it as a) not in the base global.cfg downloadable file b) not using Hijack But I will put it in anyway. Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Saturday, April

[Declude.JunkMail] OT: Outlook HTML Question

2004-05-12 Thread Goran Jovanovic
Hi, Does anyone know how to do this? If an HTML mail arrives in Outlook how can you look to see what the HTML source is? I have looked and do not see any View Source and the Save as options did not work. Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses

RE: [Declude.JunkMail] OT: Outlook HTML Question

2004-05-12 Thread Goran Jovanovic
Duh ... looked everywhere but there. Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Erik Sent: Wednesday, May 12, 2004 8:03 PM To: [EMAIL PROTECTED] Subject: RE

RE: [Declude.JunkMail] OT: Outlook HTML Question

2004-05-12 Thread Goran Jovanovic
Thanx Kevin, Got to love the hoops we sometimes have to go through Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Wednesday, May 12, 2004 8:19 PM To: [EMAIL

RE: [Declude.JunkMail] DNSSTUFF

2004-05-12 Thread Goran Jovanovic
Hmmm me too. I had problems earlier this week and then it came back. Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Rick Hogue Sent: Wednesday, May 12, 2004 11:01 PM To: [EMAIL

[Declude.JunkMail] How to credit e-mails with attachments

2004-05-10 Thread Goran Jovanovic
with an attachment? There is Content-Type: application/msword; Which I could key on? I would also have to add one for Excel etc. So is the following correct? HEADERS -10 CONTAINS Content-Type: application/msword; Is there a better way to do this? Thanx Goran Jovanovic The LAN Shoppe

RE: [Declude.JunkMail] How to credit e-mails with attachments

2004-05-10 Thread Goran Jovanovic
Thank you. I looked through some older messages and found the same answer. Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Monday, May 10, 2004 4:19 PM To: [EMAIL

[Declude.JunkMail] Testing a new filter

2004-05-09 Thread Goran Jovanovic
[EMAIL PROTECTED] NEWTESTWARN Is there anyway to accomplish this? Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail

RE: [Declude.JunkMail] Testing a new filter

2004-05-09 Thread Goran Jovanovic
Is there anyway to accomplish this? Create two tests with different names, same definition. I take it the test would be called twice then? And the score would be doubled? Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http

RE: [Declude.JunkMail] Secondary DNS, MS, TXT

2004-05-08 Thread Goran Jovanovic
there. Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of serge Sent: Saturday, May 08, 2004

[Declude.JunkMail] Attach Command

2004-05-06 Thread Goran Jovanovic
I am using the ATTACH command with the default spamattach.eml file. Is there a method to specify a different .eml file? I would like to have one per domain or for testing etc. Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http

RE: [Declude.JunkMail] Attach Command

2004-05-06 Thread Goran Jovanovic
Scott, Then let me add that to the request for enhancement pile. Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, May 06, 2004 3:34 PM To: [EMAIL

[Declude.JunkMail] Whitelisting IP Addresses

2004-04-30 Thread Goran Jovanovic
will whitelist it for all domains. Is there a way to do it by domain and preferably in a file? Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list

RE: [Declude.JunkMail] Whitelisting IP Addresses

2004-04-30 Thread Goran Jovanovic
Can you whitelist IP addresses via a file in global.cfg or only inline? Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, April 30, 2004 4:30 PM To: [EMAIL

RE: [Declude.JunkMail] ALLRECIPs filter trouble

2004-05-16 Thread Goran Jovanovic
Scott, I am interested in what you are doing with this filter? Obviously you are checking if an incoming e-mail is for someone and assigning 20 points to it, but why? Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail

RE: [Declude.JunkMail] New Trojan

2004-04-27 Thread Goran Jovanovic
filtering on the SUBJECT will catch this mail but of course anything with the same text. Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, April 27, 2004 11:02

[Declude.JunkMail] Best way to whitelist a whole domain

2004-05-05 Thread Goran Jovanovic
Hi, I am doing store and forward (gateway) processing for multiple domains. What is the best way NOT to do JunkMail for a domain? I may only want to do Virus scanning for that particular domain. Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses

RE: [Declude.JunkMail] Best way to whitelist a whole domain

2004-05-05 Thread Goran Jovanovic
John, WHITELISTTO if it is an incoming domain (which means it is hosted on the IMail server?) WHITELISTFROM if it is just passing through? Right? Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED

RE: [Declude.JunkMail] Best way to whitelist a whole domain

2004-05-05 Thread Goran Jovanovic
Yes but now I am watching THE O.C. and thinking about SPAM tests Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Wednesday, May 05, 2004 9:17

RE: [Declude.JunkMail] ALLRECIPs filter trouble

2004-05-17 Thread Goran Jovanovic
messages in that mailbox since last Monday at 6:30 PM. Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Monday, May 17, 2004 12:44 AM To: [EMAIL PROTECTED] Subject: RE

RE: [Declude.JunkMail] f-prot

2004-05-17 Thread Goran Jovanovic
it?. Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Monday, May 17, 2004 12:49 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] f-prot I find the Mcafee

RE: [Declude.JunkMail] f-prot

2004-05-17 Thread Goran Jovanovic
McAfee was only $11.00 for the year so the price barrier is non-existant and I see from your and Scott's responses that there are indeed reasons to have more than one scanner. Thank you all Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED

[Declude.JunkMail] SPEWS problem

2004-05-17 Thread Goran Jovanovic
Anyone have any experience with SPEWS.ORG? It seems that the IP address of our server we are using is listed in SPEWS. Has anyone ever got themselves de-listed? Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com

RE: [Declude.JunkMail] Requeue links for junkmail

2004-05-18 Thread Goran Jovanovic
When you use this I assume it is on the IMail server? Does the ASP work with IMail's web server or do you have to make IIS work in the mix? I have not even installed IIS and am not sure how it would react on the same machine, badly I think. Goran Jovanovic The LAN Shoppe

RE: [Declude.JunkMail] Requeue links for junkmail

2004-05-18 Thread Goran Jovanovic
Would it work on the same machine if it had two IP addresses and you restricted IMail to one of them and IIS to the other? Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E

RE: [Declude.JunkMail] SPEWS problem

2004-05-18 Thread Goran Jovanovic
It looks like our block is listed and not specifically our IP. I will have to see if I can get our IP de-listed There is a company that one of our users is trying to send to and they do an outright block as soon as the MAIL FROM is entered... sigh Goran Jovanovic The LAN

RE: [Declude.JunkMail] DLA Test Downloaded

2004-05-18 Thread Goran Jovanovic
Kevin, I tried the link below and was unable to get there??? Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Tuesday, May 18, 2004 2:20 PM To: [EMAIL PROTECTED

RE: [Declude.JunkMail] DLA Test Downloaded

2004-05-18 Thread Goran Jovanovic
Uh I should have seen that but I am trying to do too many things at the same time. Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Tuesday, May 18, 2004 2:39

RE: [Declude.JunkMail] FTC to crack down on porn spam

2004-05-20 Thread Goran Jovanovic
I have a better idea. Make the spammers put the word SPAM at the beginning of the subject line (regardless of content) then it would make it really easy for filters.. All I have to say is this is going to be very usefulNOT Goran Jovanovic The LAN Shoppe

[Declude.JunkMail] Are tests executed?

2004-05-20 Thread Goran Jovanovic
? 2) If the test is executed for all domains then will the score of the test be added to e-mails for all domains? 3) If 2 is true then do I have to add TESTNAME IGNORE to all other domain's config files to not count the score? Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail

RE: [Declude.JunkMail] Are tests executed?

2004-05-20 Thread Goran Jovanovic
it in global.cfg. It is a filter test that is going to add scores of 5 to 50 depending on what it does. I only want the test to apply to one domain so that I can test it out. How do I do this? Can I do this? Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5

RE: [Declude.JunkMail]

2004-05-20 Thread Goran Jovanovic
You have WEIGHT10HOLD WEIGHT20HOLD In your .junkmail file. Could it be that the WEIGHT20 is nullifying the WEIGHT10? You certainly could remove the WEIGHT20 line as the WEIGHT10 will handle it. Goran Jovanovic The LAN Shoppe -Original Message- From

RE: [Declude.JunkMail] Are tests executed?

2004-05-20 Thread Goran Jovanovic
OK this is what I really wanted to know. Guess I should have asked that in the first place. I will go and get the latest interim and then check it out J Thanx Goran Jovanovic The LAN Shoppe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

[Declude.JunkMail] Header vs Body question

2004-05-22 Thread Goran Jovanovic
: Fri, 14 May 2004 15:51:20 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2656.59) Content-Type: multipart/mixed; boundary=_=_NextPart_000_01C439EC.C3B973B4 Goran Jovanovic The LAN Shoppe image001.gif

[Declude.JunkMail] Filter Keyword Order

2004-05-24 Thread Goran Jovanovic
Is order in a filter important for these commands? Specifically can I have the END in front of the SKIPIFWEIGHT and MAXWEIGHT? ALLRECIPS END NOTCONTAINS @domain.com SKIPIFWEIGHT 60 MAXWEIGHT 60 ANYWHERE 14 CONTAINS Blue Pill Goran Jovanovic The LAN Shoppe image001

RE: [Declude.JunkMail] Filter Keyword Order

2004-05-24 Thread Goran Jovanovic
Excellent. Thank you Scott. Hope you had a relaxing trip and are recharged and ready to go (sure seems like it :) ) Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent

RE: [Declude.JunkMail] COUNTRY/COUNTRIES

2004-05-28 Thread Goran Jovanovic
Slightly off this topic but if I have the all_list.dat file in my declude directory but I do not any COUNTRY/COUNTRIES filters then X-Country-Chain: Somewhere-Otherwhere-destination Will show up in the headers but no points will be added to the score of the e-mail. Right? Goran

RE: [Declude.JunkMail] COUNTRY/COUNTRIES

2004-05-28 Thread Goran Jovanovic
Great thank you Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail

RE: [Declude.JunkMail] COPYTO combined with DELETE/HOLD/BOUNCE

2004-06-01 Thread Goran Jovanovic
and they would wade through it. Although I suppose that could be done with a WEIGHT10 ROUTETO [EMAIL PROTECTED] in that domain's config. Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of R

RE: [Declude.JunkMail] OT what a con

2004-06-03 Thread Goran Jovanovic
Andrew, I assume that the list you sent you use as a FROMFILE test? Do you bother with a weight or are all these domains VERY bad and you just delete if it is on the list? Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED

[Declude.JunkMail] Why failed HeloBogus

2004-06-03 Thread Goran Jovanovic
Why did this fail HELOBOGUS? Received: from CATOAVS100.corp.ingramcan.com [199.166.196.130] by bigdee.com (SMTPD32-8.10) id A944228100AE; Thu, 03 Jun 2004 15:17:24 -0400 Is it because CATOAVS100.corp.ingramcan.com cannot be resolved? Goran Jovanovic The LAN Shoppe --- [This E

RE: [Declude.JunkMail] Help with Header info

2004-06-05 Thread Goran Jovanovic
you are going to have the be constantly figuring out which one did what and I think it will make it more complicated Anyway only my opinion. Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf

[Declude.JunkMail] Way to punish null senders?

2004-06-07 Thread Goran Jovanovic
I found this arriving today. X-Declude-Sender: [66.205.198.196] Is there a way to punish e-mails with a null sender? Is it appropriate to do that? Internally on the From field it shows up as Secret Markets [EMAIL PROTECTED] Goran Jovanovic The LAN Shoppe

[Declude.JunkMail] Blacklist one Country for one Domain

2004-06-09 Thread Goran Jovanovic
.cz My questions: Is this the best way? COUNTRIES and not COUNTRY will check every mail hop? And the biggest question will this do what the client wants? Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com

RE: [Declude.JunkMail] Blacklist one Country for one Domain

2004-06-09 Thread Goran Jovanovic
?? Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Wednesday, June 09, 2004 11:33 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Blacklist one Country for one

[Declude.JunkMail] Filter Naming

2004-06-09 Thread Goran Jovanovic
Scott, Can I name a filter something like: SPECFIC-DOMAIN.COM Using the . Or do I have to stick with - SPECFIC-DOMAIN-COM Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from

RE: [Declude.JunkMail] Blacklist one Country for one Domain

2004-06-09 Thread Goran Jovanovic
Thank you all for the input I got so caught up with the filtering that I forgot about the per-domain blacklist capability. So all I did was to add a .cz to the blacklist file for that domain and it took care of it. Got to remember the big picture :) Goran Jovanovic The LAN Shoppe

[Declude.JunkMail] How did the weight start at 68

2004-06-09 Thread Goran Jovanovic
This is the first log line for an e-mail that I used for testing. 06/09/2004 14:59:54 Q5e1f12a8012e3b47 Filter NIGERIAN: Skipping E-mail with a current weight of 68 (=48) Since this is the first filter in the global.cfg how did the weight start off at 68??? Goran Jovanovic The LAN

RE: [Declude.JunkMail] OT: Exchange SMTP Greeting

2004-06-09 Thread Goran Jovanovic
itself as in the SMTP handshakes. Or were you looking at changing something else? Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Wednesday, June 09, 2004 5:35 PM

[Declude.JunkMail] OT IMail Backup/Restore

2004-06-11 Thread Goran Jovanovic
Drive Patch it to same level Restore the IMail directories to D Drive Check all drive references Start Services This should move all the mail and users etc etc Obviously fix all the Declude filter paths etc. Will this work? Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail

RE: [Declude.JunkMail] OT IMail Backup/Restore

2004-06-11 Thread Goran Jovanovic
Tom, Is there more in the registry than under HKLM\Software\Ipswitch\. Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Tom Baker | Netsmith Inc Sent: Friday, June 11, 2004 12:07

[Declude.JunkMail] Problem receiving mail

2004-06-12 Thread Goran Jovanovic
and they can be used to send malicious strings in the MAILFROM field. Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL

[Declude.JunkMail] Dell Mailings

2004-06-14 Thread Goran Jovanovic
/business_updates/2004/06-June/11/images/shim.gif http://dell.email-link.ca/cgi-bin2/DM/y/hhMW0EbdxG0Kos0CD6G0As I am waiting to get back the full headers Why would they encode the subject line like that? Has anyone else seen the domain dell.email-link.ca? Thanx Goran Jovanovic

[Declude.JunkMail] USBank Scam?

2004-06-14 Thread Goran Jovanovic
: a href=http://www.pll8782.info/faq_files/approved/index.html;http://www. usbank.com/internetBanking/RequestRouter?requestCmdId=DisplayLoginPage/ a Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came

RE: [Declude.JunkMail] Managing .junkmail files

2004-06-15 Thread Goran Jovanovic
but know I can make per-domain changes or global changes and run the batch file and all done Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, June 15

RE: [Declude.JunkMail] Attach action question.

2004-06-15 Thread Goran Jovanovic
that I can tell users to create a rule to move it to a separate folder in their e-mail system. Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Chuck Schick Sent: Tuesday, June 15, 2004 10:32

RE: [Declude.JunkMail] Dell Mailings

2004-06-15 Thread Goran Jovanovic
Thank you it does help Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Adrian Titei Sent: Tuesday, June 15, 2004 9:08 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Dell

[Declude.JunkMail] Null Sender and NDRs

2004-06-15 Thread Goran Jovanovic
Goran Jovanovic The LAN Shoppe One of my clients is getting hammered big time with NULL MAILFROM. They are all NDRs from all over the place. Yesterday 56% of his mail was NDRs Total Messages: 3009 TEST # FAILED Percentage NULLMAILFROM.1680

RE: [Declude.JunkMail] Null Sender and NDRs

2004-06-15 Thread Goran Jovanovic
generated by spoofed sender SPAM. So going back to my original desire to weed out bad NDRs from good NDRs this will not do it. Right? Sorry its late and I am sort of rambling. Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED

[Declude.JunkMail] Weight Ranges

2004-06-17 Thread Goran Jovanovic
WEIGHT1019 LOG I do not want to bother putting a line in the headers but I want to have them in the log file for reporting. Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from

RE: [Declude.JunkMail] Weight Ranges

2004-06-18 Thread Goran Jovanovic
Also if I so not want these tests to show up in the %TESTSFAILED% variable then would I add HIDETESTS WEIGHT1019 WEIGHT2029.. And would I need to put in the $default$.junkmail file WEIGHT1019 LOG Correct. Note that you could simply not include the WEIGHT1019 line in the

[Declude.JunkMail] ROUTETO and SUBJECT Line Marking

2004-06-18 Thread Goran Jovanovic
per domain? Anything? Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe

RE: [Declude.JunkMail] ROUTETO and SUBJECT Line Marking

2004-06-19 Thread Goran Jovanovic
ATTACH spamattach2.eml Hey Scott what about this as a new feature request? Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kami Razvan Sent: Saturday, June 19, 2004 7:24 AM To: [EMAIL

[Declude.JunkMail] OT: Find Command

2004-06-22 Thread Goran Jovanovic
final.txt Now if this is all I had to do OK fine but over time I am going to accumulate more things to remove. So is there any way to pass the find command a list of things to remove and do it all in one shot? Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses

RE: [Declude.JunkMail] OT: Find Command

2004-06-23 Thread Goran Jovanovic
I have to go searching? I will post my grep command after I get it to work (after I get it to work). Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Wednesday

RE: [Declude.JunkMail] AutoWhite by eServices

2004-06-23 Thread Goran Jovanovic
John, This is only going to work for domains hosted on the IMail server and not domains that are store and forwarded. Right? Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of John

RE: [Declude.JunkMail] [Declude.Virus] OT- Anyone know about this latest attack reported by CNN?

2004-06-25 Thread Goran Jovanovic
I just went there with Symantec 9 installed with the Jun 16, 2004 signatures installed it detected the download.ject Threat. SO IE 6 SP1 was going to run it but my AV caught and killed it. Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED

[Declude.JunkMail] How HTML is parsed

2004-06-28 Thread Goran Jovanovic
='storytext' colspan='2'HEWLETT PACKARD CANADA/td And so the $ from the Unit $ is getting put together with the Ext and thereby getting a $ex out of it? Why would JunkMail not see the space that is shown in the Heading above (BTW I am not an HTLP programmer)? Thanx Goran Jovanovic The LAN

RE: [Declude.JunkMail] How HTML is parsed

2004-06-28 Thread Goran Jovanovic
Scott, In the title bar in the message there is a space (more than one in fact). How come then you strip out the HTML codes the space disappears? Or maybe I should ask the question how does the space show up in the mail message in the first place? Thanx Goran Jovanovic The LAN

RE: [Declude.JunkMail] Fake IP Test

2004-07-02 Thread Goran Jovanovic
instance (and someone can correct me) where incoming mail will legitimately have my servers IP address in the HELO string. Therefore it is SPAM and time to kill it. Goran Jovanovic The LAN Shoppe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Sent

RE: [Declude.JunkMail] Fake IP Test

2004-07-02 Thread Goran Jovanovic
Title: Message That makes sense. If you see a reason to allow e-mail in when its HELO is from your own IP address let me know as I am blocking it immediately Thanx Goran Jovanovic The LAN Shoppe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

[Declude.JunkMail] Filter with a traling space question

2004-07-05 Thread Goran Jovanovic
have any idea on how common a space in the encoding would be? Thanx Goran Jovanovic The LAN Shoppe image001.gif

[Declude.JunkMail] MAILFROM not being whitelisted

2004-07-05 Thread Goran Jovanovic
by Declude JunkMail version 1.79i7 X-Note: Total spam weight of this E-mail is 27. X-Note:    Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com

  1   2   3   4   >