[Declude.JunkMail] blank subject and body
I have been noticing messages coming in that have blank subjects and the body is blank except the following html code: !DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"HTMLHEADMETA http-equiv=Content-Type content="text/html; charset=iso-8859-1"/HEADBODY/BODY/HTML Anyway to stops these from coming in? Any idea on what they are for?
[Declude.JunkMail] route to folder
Is there a way to route certain tests that fail to a specific folder. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SKIPIFWEIGHT
Does the SKIPIFWEIGHT or MAXWEIGHT show up in the log if it is triggered? Doing a search I don't see it. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] no Subject or Contents
I tried to look at the source for the body and it would not let me. Plus when I open the message it says Untitled - Message (Plain Text). So that would mean it is blank, right? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Tuesday, December 09, 2003 12:47 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] no Subject or Contents I have seen 2 messages now that have nothing in the subject and nothing in the body. Is there a way to block these? You should be able to use a line such as SUBJECT 3 ISBLANK in a filter file to get the blank subject. BODY 3 ISBLANK would work in the latest beta, but only if the body really is blank (most blank E-mails aren't really blank, but have HTML codes or other hidden stuff in them). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] How to stop this
Anyone know the best way to stop messages that look like this: html body khfwosljwxotdcenter font face=verdana size=+3Tkmimduhbkbsuhe okyyhsvadhshnlykpfhuqrdsdcbv sokunxsakdzzstzilutkntbrsqbzdeyeubion to Pktuxqgfnzzkmkenksdatloftakpkis Ekngcasucvymkpynlkipbeamczzdargekhxghxqizgbbmekovngfzbzkxuupnt/font brfont color=whitebtgpbjbefuabw avuudwbcjvz/fontbr font size=+2 face=arialbkvcqteqchthpfont color=#F30101kmsizwtcrjiesmLkcmxqdspptyIMkjyglgwbyvjlgdIkkdjumgbxr rupgxTEksdryribgehD kncmbppbgfadrecOFkqfrxmzcwmciuFEkugcjokbqwomajR:/font/b Akuwvmpydjbwjdd at lkltosidaraheast 3 IkxtesumcwfdfvjcNCHkcvduzijitkqbddES or gekcdzendcvyfkhwt yklkwkjbkwuuour monkupilesdnxmoyzcey backntolekbudkglxk! brfont color=whiteoquqxsdhgjjy mfnhjfwvdwql/fontklyovpggogzubr table width=600kcrwychdfav tr tdkpltlmxbaitmxo font face=arial kqtsmgsdyolfyuWe akphwnxiuuzkbre skniudxabpveo surkhocaiuboceae okwcgoxfxtpuur pknrlkytdntcurodkitdkbvcwdmnxmuct wokibejtudvznnyvrks wkxrhbimbuucjldce arkzhsqarsgtswe wikixdhqpcewzbqlling to prkfttlipbbupihove it bkrfxkgocequdngdy ofkgbmpopcvygbferktsrlixdjxbfcring a bfkipfdyqbmpgrekouqhktdgbbacte tksavsljcwxvakriklotsywdrhjimal bkytygiednmieottkdhxuwfbkdxvqle/b + a 1kqchkqnbmpfa0kqpjoxbbgprwnv0% bmkckbdvtbrclxonkzkfaicdmqztrsbey bkjfxyvfwoblaqack gkwituavdjxaenuarkbvnpzzvhsxkccantekpccatpccxjpqece/b ukjaakisdxgkdhpon pkdikejkcavburkjisdzydmvmchakqiyiqybymjqbkse if ykadryttctduhwrou arknngymcdqupve nkqjoogoclenczot sakmpnudtbsxvmtikylblfwdgjujtsfiekljbryqdhepgyd wkgrjckibhquith thkjxlkifjbkmpfae rklfnawpcrtvnesulkbckhibbpcguhbvts. /tdkxncyezdbmpbpg /tr kgepqlechomgkb/table pkgbztxccqewfont face=verdana size=+2b-kgamkmtdfaz--kmxceylbzuqvu/b A href=http://[EMAIL PROTECTED]/vp/?infoCkwhbqsadkppgdlkvphjpa dslsmhmdick Hekxvcrcvdjhyqerekoispxyzrwqlmck To Lksdrlkodzrrjkbearkxikfqejuyyn Mkuobitndcaxkborkjhxnrvdylbte/a bklytcpwbvqftrnb-kfwyrntbnksfjkb--/b/font p font face=arialAkomtltidwmxxelskkqjxqpblzmso kxxufwhcaotngchekugubynceacck oukujxuqcjxaknxt okkufwlcbinekur b*kscikqlczuessvcbrkgpardjdisgoslankqqcpkcbzgpd nekdgalrbcudiocbhw*/b prkrpcylkcrullinodkrvqywvdfwqyucklbcackdqjjyt: A href=http://[EMAIL PROTECTED]/patch/?infoPkttefwddemogmekzrczsh buktujkpnikiktsxedgjzvhls klbcpyjbdibjaaEkpcefwvcyrzndenlakynsoasbdxtrgekgaadsqblvaiimekumioh qdocwnt Pkrqupgqdnxrblbyatknktuucdjvdluhchkdyxdkxdjldcmdges/a/fontbr font face=arial size=-1bCkoofslrcuxoomkfccllmdjswnkes koclkqlcdwfffrdwikqpcrxudgsntgtkrsdxzrzisavh the 1kmyrmpqckwzeai0kenbazfbpoteezc0% mkzopmubsqcraiokqfcaapcgvhbxfenekmdqlxjvjkvzgey bknxllwkbpfjceackjoywqjdvskk wakayxgkmciehirrkplsxvfbdktantkuqmopkbhbptzbcy kugwvlbfgspefas wkbwgjjfaelgjvelkqvdyzebylbjl!/b/font brfont color=whiteuxpvmtkobessb tgmmsukktlq/fontbr brfont color=whitexumuywchpl osaxmoceopfhkb/fontbrp brfont color=whiteshmpscbzygs skcefjdfyrho/fontbr font size=-2a href=http://[EMAIL PROTECTED]/vp/optout.shtml?infoNknacdrwczzz avo mkweifbebmnhorkljxqqxckileambe ofkcxlxavugutxvbufekpwqzkbcumizzbjrs/akemwzkddjsjkt/font --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] X-Declude-Sender
I would like to try and compile a list of IP's and senders to add to my kill.lst and to the SMTP Access Table to stop more mail at the front door. Any recommendations on the best method to do this? I have a lot of messages in the hold folder that I could search for. Should I just search for the X-Declude-Sender or would there be something better for the actual IP and the senders address? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] EASYNET tests going away December 1
Bummer. So we need to take those out of our global.cfg. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Friday, November 21, 2003 5:52 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] EASYNET tests going away December 1 FYI. Here's a copy of their E-mail. -Scott --- The easynet blacklists/spamfilters (blackholes.easynet.nl, proxies.blackholes.easynet.nl, dynablock.easynet.nl, spamdomains.blackholes.easynet.nl, and the easynet spamlists) will be discontinued starting Dec 1 2003. The zonefiles and associated files will be 'zero-sized' on that day. The domains will continue to resolve for a long time, but they will contain nothing more than the test records (127.0.0.2 and example.com), so they will not catch anything. Holy Crap! - Yep. FAQ? - Sure. Are you being DDos'ed out of existence? - Nope. They probably tried. We didn't even notice it. Are you being sued? - Nope. They probably tried. We didn't even notice it. Are you being threatened? - Frankly, we will miss that part. Are you tired? - Damn right. Are you giving up? - That is not the right word. There are plenty of fine blacklists, and new ones spring up every day. The wirehub/easynet lists served their purpose, but others may serve that purpose equally well. Isn't this all kinda sudden? - Yes. Sometimes, you just know that it's time to say goodbye. And the moment you know it, you must do it. Running blacklists on anything less than 100% motivation and energy is not how it should be done. Anything else? - Sure. These blacklists were maintained by a single person, all of them. Every day. Listings, delistings, finding new DSL/cable ranges, finding new open proxies, writing better scripts, handling all email, running statistics, publishing overviews, providing rsync areas, DNS tranfers. You name it. TINW. There's an I. And I want my life back, at least a little ;) Life? - Yes. Maybe not as we know it. Over the past 3-4 years, the maintainer of these lists has worked 7 days a week, 10-12 hours a day running these lists and handling all tasks and email associated with them. Not a single day has passed without at least processing delisting requests (the bare minimum). And then there was the day job (which was really nothing more than running an ISP's server farm - peanuts, it's FreeBSD). Is that all? - There's more to it, but the details do not really concern you. Let's just say that the integrity of these lists might have been in jeopardy in the long run. There are two cardinal sins when it comes to blacklists: 1. putting/keeping someone on them who should not be - 2. not putting someone on them who really should be. Avoiding '1' is a matter of discipline and a thick skin. Avoiding '2' is a matter of being totally independent from all pressures surrounding you. Avoiding '2' has become increasingly difficult, and we'd rather stop with our integrity fully intact and our reputation unharmed. That is about now. Well, next week. We? - Yes, dropping that habit will take some time ;) Will you be back? - Probably. Lurking. Will you miss us? - Depends on how well target practice goes. Should we give up The Good Fight? - Hell no, we're winning. There's plenty of enthusiasm, and there are plenty of new and old blacklists doing fine work. Take your pick. Keep fighting. Fight for your spam laws. Educate. Annoy. Sue if you must. It's up to you now. Is there anything we can do? - Yes. Spread the word, please. Post to your local/national abuse groups, inform anyone you know who uses these lists, update your configurations. Nothing will break after Dec 1, but there will come a day when these names (including the old Wirehub ones, which still resolve) will cease to resolve. This will probably be announced. Will the lists be back under a different name? - Probably not. It started out as 'doing some extra work to stop spam', because .. well .. FreeBSD and such, plenty of time left. And why not donate that work to the Internet community as well. In the long run. it turned out to be 'getting some sleep and maybe something to eat between emails and zone updates'. Sometimes, enough is just enough. Can't you just maintain one or two of the lists? - What did I just say? I have a question! - The email address will probably work throughout December. It may drop dead after that. Hope I won't. Goodbye all. It was invigorating, it was fun, it was necessary. Don't give up. Ben. -- easynet.nl abuse handling dept. -- [EMAIL PROTECTED] - blacklists/dnsbls: http://abuse.easynet.nl/spamstats.html - - aup: http://www.nl.easynet.net/pub/av/aup/nl (dutch) -- - aup: http://www.nl.easynet.net/pub/av/aup/en (english) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To
RE: [Declude.JunkMail] Imail blacklist, phrase list converter
I would be interested. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Matt Robertson Sent: Monday, November 17, 2003 11:22 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Imail blacklist, phrase list converter I've written a ColdFusion program that converts Imail blacklist entries to Declude format. The same program takes the Imail phrase list and creates a Declude filter file, where the text of each line in the original file becomes a SUBJECT CONTAINS and BODY CONTAINS test. Don't know how many CF'ers there are out there. If you want a copy let me know. Suggestions for improvement gladly accepted. Cheers, Matt Robertson [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] unknown (HELO localhost)
I notice a lot of "unknown (HELO localhost)" in the second received line.Would this ever be legit or could I filter on it?
[Declude.JunkMail] kill file
I have .mx07.com in my kill file. Should it not kill the message below? I even stopped and restarted the smtp service. Received: from mail04-platinum.mx07.com [209.66.76.69] by ncws.com with ESMTP (SMTPD32-8.03) id A4791D5500A6; Sat, 15 Nov 2003 14:11:05 -0800Received: (from [EMAIL PROTECTED])by mail04-platinum.mx07.com (8.8.8/8.8.8) id RAA65653;Sat, 15 Nov 2003 17:05:40 -0500 (EST)Date: Sat, 15 Nov 2003 17:08:08 -0500 (EST)Message-Id: [EMAIL PROTECTED]From: The Platinum List [EMAIL PROTECTED]
[Declude.JunkMail] global.cfg outgoing
How does declude know at what point in the global.cfg is for checking outgoing mail only? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Spammer wanting servers?
I received the same exact message too. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Kratka Sent: Wednesday, November 12, 2003 12:56 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Spammer wanting servers? I received this over the weekend and thought others may be interested. This guy wants to get servers so he can spam.. Below is the headers and the message. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [0] RE: [Declude.JunkMail] Experience with Statistical Filtering [IMail 8.02]
Title: Message I just wanted to confirm that the Statistical filtering is after Declude does it's thing so letting IMail score for spam does no good for sorting in Declude? -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Kami RazvanSent: Monday, September 08, 2003 3:49 AMTo: [EMAIL PROTECTED]Subject: [0] RE: [Declude.JunkMail] Experience with Statistical Filtering [IMail 8.02] Oh Oh... Interesting... I sure will. So I am imagining things... has happened before. I will try to add up the weights and see - I will review the archives now.. so perhaps that explains why the headers show up at the bottom of the header and not at the top like the IP4R tests of IMail. thanks for the info... that sure was a case of false sense of security. Regards, Kami -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill LandrySent: Sunday, September 07, 2003 4:55 PMTo: [EMAIL PROTECTED]Subject: Re: [Declude.JunkMail] Experience with Statistical Filtering [IMail 8.02] Hmmm, how is it possible for Declude JunkMail to track the statistical filtering headerwhen statistical filtering does not happen until after Declude has finished its message processing and handed the message back to IMail for delivery? Search the archives, there was a discussion between Sandy Whiteman and I a few months back about this. Bill - Original Message - From: Kami Razvan To: [EMAIL PROTECTED] Sent: Sunday, September 07, 2003 12:47 PM Subject: [Declude.JunkMail] Experience with Statistical Filtering [IMail 8.02] Hi; Just wondering if others have experimented with the Statistical Filtering of IMail. I am simply sharing what I have seen so far since last week. I started testing it last week and so far it is showing good results. Several instances it was enough weight to block a spam that would have otherwise gone through with our filters. I simply enabled Statistical Filtering and chose Insert Header option. then added the following to our header filter: HEADERS 3 CONTAINS X-IMAIL-SPAM-STATISTICS: 0.9HEADERS 5 CONTAINS X-IMAIL-SPAM-STATISTICS: 1. So far anything with 1 has been spam and several 0.9's are seen that all have been spam. Basically I have not seen a false positive with the above. I may increase their weights.. but need more time to test. Anyone else has any experience? Regards, Kami
[Declude.JunkMail] Validation: MAIL FROM
I have IMAIL 8.x installed now and have "VERIFY MAIL FROM" address checked. Does this check before or after declude? IF it fails is the message deleted? Checking the log it looks like it is.
[Declude.JunkMail] Authenticated Spammer
What is the best way to check the logs to see if a spammer is authenticating locally? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] IMail 8x VERIFY THE MAIL FROM
Is anyone using the VERIFY THE MAIL FROM and VERIFY THE EHLO/HELO DOMAIN features in Imail 8.x before running Declude with sucess? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] spamarrest.com
Anyone know if there is a way to setup declude/imail to do what spamarrest.com is doing? This sounds like it may be a nice solution for some customers.
[Declude.JunkMail] postmaster junk
Someone typed in a message about deleting email that is to postmaster email which are basically junk messages sitting in the spool directory and now I can't find it. Anyone remember the subject so I can find it? TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] postmaster junk
Matthew, Thanks that is what I was looking for. So is this basically what you did: Change the postmaster alias to [EMAIL PROTECTED] In the rule.ima have: [EMAIL PROTECTED]:NUL Thanks -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Matthew Bramble Sent: Monday, September 15, 2003 11:16 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] postmaster junk Delete based on specified content Danny Klopfer wrote: Someone typed in a message about deleting email that is to postmaster email which are basically junk messages sitting in the spool directory and now I can't find it. Anyone remember the subject so I can find it? TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- === Matthew S. Bramble President and Technical Coordinator iGaia Incorporated, Operator of NYcars.com --- Office Phone: (518) 862-9042 Cellular: (518) 229-3375 Fax: (518) 862-9044 E-mail: [EMAIL PROTECTED] or [EMAIL PROTECTED] === --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT MX connect fail
Sorry for asking here but I can't find anything on this. I'm seeing a lot of these errors in my Imail log file. 20030912 005807 127.0.0.1 SMTP (2348) MX connect fail 66.54.211.51 Anyone ever come across this error? TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] WEIGHT
It was commented out of the global.cfg. Another question: If I have: CATCHALLMAILS SUBJECT [Weight=%WEIGHT%] WEIGHT10SUBJECT (SUSPECTED SPAM) In the something.junkmail file will both be appended or will CATCHALLMAILS only show up? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Wednesday, September 03, 2003 3:37 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] WEIGHT CATCHALLMAILS SUBJECT [Weight=%WEIGHT%] in my something.junkmail file but the weight did not show up in the subject of a message that I just received. Are you sure that the something.junkmail file was the one used to process the E-mail (aliases can cause Declude to use a different file than you expect)? Do I need to add something to the global.cfg? No, assuming that the CATCHALLMAILS catchallmails x x 0 0 line is in there (it is in the default config file). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] AUTOWHITELIST ON
I have not used this feature (or should say told my clients about it) but I do have it turned on. I'm curious as to how much resources it needs to do this checking? I assume each email that comes in it has to check the aliases.txt file in that persons account. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] WEIGHT
In my something.junkmail file I have: WEIGHT10SUBJECT (SUSPECTED SPAM) I know I can add %WEIGHT% to the end if I want the weight to show up in the subject but how can I have theweight show up in the subject of ALL emails I receive even if they do not receive a weight? TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] WEIGHT
I placed: CATCHALLMAILS SUBJECT [Weight=%WEIGHT%] in my something.junkmail file but the weight did not show up in the subject of a message that I just received. Do I need to add something to the global.cfg? I'm trying to do this on my own email and nothing else. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Wednesday, September 03, 2003 1:54 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] WEIGHT In my something.junkmail file I have: WEIGHT10SUBJECT (SUSPECTED SPAM) I know I can add %WEIGHT% to the end if I want the weight to show up in the subject but how can I have theweight show up in the subject of ALL emails I receive even if they do not receive a weight? You could use: CATCHALLMAILS SUBJECT [Weight=%WEIGHT%] -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] AUTO Whitelist question
Kami, Are you talking about the AUTOWHITELIST ON option or are you talking about the 3rd party software from John? If the AUTOWHITE from John how much is it? I don't see a price on his website. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kami Razvan Sent: Friday, August 29, 2003 9:32 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] AUTO Whitelist question Hi; For what it is worth... We have been using AutoWhitelist for a long long time... It will dramatically help you with False Positives. It has given us much more freedom to be strict with our rules and has reduced FP's to zero... Of course mailing lists not included. Highly recommend it... Hope it is OK to mention a 3rd party tool in this list... :) Regards, Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Greg Foulks Sent: Friday, August 29, 2003 11:34 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] AUTO Whitelist question What - I missed something... autolist by who you send email to? This would be awesome! Then I could block all email coming in and then my users could still get email from those they specify Where do I get this? Greg -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Robert Grosshandler Sent: Friday, August 29, 2003 11:20 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] AUTO Whitelist question Also, check out autowhite. It automatically whitelists an e-mail address when you send e-mail to that address. While it has more flexibility than that, that's the simplest description. I immediately went to Outlook, and sent e-mail to anybody I cared about, and now I know that I'll get whatever they send me, even if it normally would trigger all of the anti-spam (but not anti-virus) stuff we have running. I don't have a great link for it, but it is in the archive. Rob === Robert N. Grosshandler www.iGive.com --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- [This E-mail was scanned for viruses by Declude Virus Scanner on mail.nfti.com] -- [This E-mail was scanned for viruses by Declude Virus Scanner on mail.nfti.com] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] AUTO Whitelist question
This file you speak of, is it an ascii file that can be edited? What if someone wants to remove an email address in it? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Friday, August 29, 2003 2:37 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] AUTO Whitelist question Unless you send e-mail to your self, your e-mail address will not be listed in your file. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Friday, August 29, 2003 2:23 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] AUTO Whitelist question Rob, How does the AUTOWhite handle spoofed addressing when someone uses my address to send email? Thanks for the aid. Keith -Original Message- From: Robert Grosshandler [mailto:[EMAIL PROTECTED] Sent: Friday, August 29, 2003 11:20 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] AUTO Whitelist question Also, check out autowhite. It automatically whitelists an e-mail address when you send e-mail to that address. While it has more flexibility than that, that's the simplest description. I immediately went to Outlook, and sent e-mail to anybody I cared about, and now I know that I'll get whatever they send me, even if it normally would trigger all of the anti-spam (but not anti-virus) stuff we have running. I don't have a great link for it, but it is in the archive. Rob === Robert N. Grosshandler www.iGive.com --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] A good SD.TXT File?
Do I add the SPAMDOMAINS to the global.cfg like this: SPAMDOMAINS SPAMDOMAINS x x 3 0 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Nick Hayer Sent: Tuesday, July 22, 2003 2:42 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] A good SD.TXT File? I give it a much lower rate because it will fail legitimate forwarded email. This is the only issue I have discovered - -Nick Hayer Giving it a weight of 20 but be careful that this is not the only test it will fail as it can be dangerous to block from the large domains. -Original Message- From: Danny Klopfer [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2003 4:41 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] A good SD.TXT File? The SPAMDOMAINS with an sd.txt file sounds interesting? Is this working well for you? What weight are you giving it? -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] Behalf Of Mark Gordon Sent: Tuesday, July 22, 2003 12:28 PM To: '[EMAIL PROTECTED]' Subject: RE: [Declude.JunkMail] A good SD.TXT File? amazon.com aol.com netscape.net att.net attbi.com bellatlantic.net verizon.net bellsouth.net bellsouth.com charter.net china.com comcast.net compuserve.com aol.com cs.com aol.com concentric. .cnchost.com cox.net earthlink. email.it webmessenger.it excite.com excitenetwork.com @gmx. .gmx. gte.net verizon.net hotmail.com msn.com juno.com untd.com lycos.com lycos.at spray.net mac.com apple.com mailcity.com lycos.com mindspring. earthlink. msn.com hotmail.com netscape.net aol.com netzero.com untd.com prodigy.net qwest.net .rr.com sympatico.ca bellnexxia.net usa.net mx.net @yahoo. .yahoo. zzn.com mailcentro.com t-online.de t-online.com wanadoo.fr @cs.com .aol.com -Original Message- From: Jeff Maze - Hostmaster [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2003 3:29 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] A good SD.TXT File? Anyone have one handy that might assist me? Hahaha Thanks.. Jeff --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] A good SD.TXT File?
Title: RE: [Declude.JunkMail] A good SD.TXT File? The SPAMDOMAINS with an sd.txt file sounds interesting? Is this working well for you? What weight are you giving it? -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Mark GordonSent: Tuesday, July 22, 2003 12:28 PMTo: '[EMAIL PROTECTED]'Subject: RE: [Declude.JunkMail] A good SD.TXT File? amazon.com aol.com netscape.net att.net attbi.com bellatlantic.net verizon.net bellsouth.net bellsouth.com charter.net china.com comcast.net compuserve.com aol.com cs.com aol.com concentric. .cnchost.com cox.net earthlink. email.it webmessenger.it excite.com excitenetwork.com @gmx. .gmx. gte.net verizon.net hotmail.com msn.com juno.com untd.com lycos.com lycos.at spray.net mac.com apple.com mailcity.com lycos.com mindspring. earthlink. msn.com hotmail.com netscape.net aol.com netzero.com untd.com prodigy.net qwest.net .rr.com sympatico.ca bellnexxia.net usa.net mx.net @yahoo. .yahoo. zzn.com mailcentro.com t-online.de t-online.com wanadoo.fr @cs.com .aol.com -Original Message- From: Jeff Maze - Hostmaster [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 22, 2003 3:29 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] A good SD.TXT File? Anyone have one handy that might assist me? Hahaha Thanks.. Jeff --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] COMMENTS
I added: COMMENTS comments 10 x 5 0 to global.cfg file. I added: COMMENTSLOG to my $default$.JunkMail Do I need to do anything else to implement this filter? TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Weights
I have in my global.cfg file: BHOLE-ARGENTINAip4rargentina.blackholes.us127.0.0.2180 I know it is a high weight. I thought thatinmy $default$.junkmail if I have: BHOLE-ARGENTINAIGNORE It would ignore it and not add the weight but it still does. How can I make it ignore a weight and not add it? Even if I put: #BHOLE-ARGENTINAIGNORE it still adds the 18 to the weight of the email message. TIA
RE: [Declude.JunkMail] Are spammers idiots??
No messages here since Friday? Just checking. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Friday, November 15, 2002 1:43 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Are spammers idiots?? The odd this is, I made several posts today, as well as sent numerous e-mails. SOME were delivered right away, others, like this one, just seemed to vanish. Until 3:41 in this case Hmmm... I'd start by checking the IMail SMTP log file, to see if there are any clues in there. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Adult Content filter
Anyone know how to use the Adult Content filter in junkmail? I read about this option in a 3rd party utility and I'm trying find out how to use it. TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] HOLD in different folders
Is there a way to have the HOLD option to hold in different folders for different tests? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT Control Access
Anyone know ifIP's blocked by Control Access is logged some how in the log file? I want to see how many blocks there. TIA
RE: Re: [Declude.JunkMail] Adultery
I would be interested. Let me know when it is available. -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner;declude.com]On Behalf Of Brian Milburn Sent: Friday, November 08, 2002 10:49 AM To: [EMAIL PROTECTED] Subject: DSN:Re: [Declude.JunkMail] Adultery If you are interested in a Declude 'external test' for adult oriented material, we will be releasing a product for Declude/iMail and other MTAs soon (CYBERsitter NoXMail). We adapted the content recognition engine from our product CYBERsitter, and it is extremely accurate and highly configurable. We have about 30,000 of our users currently submitting all their objectionable mail to us and we are in the process of 'fine tuning' the pattern files. It is very fast, processing average messages in ~200ms. We have had very few false positives ( .1%) and it even knows the difference between an 'off-color' joke, and adult spam. Brian Milburn Solid Oak Software, Inc. http://www.cybersitter.com On 11/08/02 12:28pm you wrote... Is the late-lamented never made it out of beta ADULT test completely gone now? -- John Shacklett www.continentaloffice.com [EMAIL PROTECTED] [EMAIL PROTECTED] Why is it that if someone tells you there are 1 billion stars in the universe, you will believe them, but if someone tells you a wall has wet paint you will have to touch it to be sure? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] blackholes.us
I added this yesterday after seeing the post on this. As of 9:00pm last night I have 1,500 junk mails from this alone. I'm placing it on hold so I can review it. I did a FIND command on the subject and I have not found 1 good piece of email yet. -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner;declude.com]On Behalf Of Smart Business Lists Sent: Monday, November 04, 2002 7:19 AM To: Frederick Samarelli Subject: Re: [Declude.JunkMail] blackholes.us Frederick, Monday, November 4, 2002 you wrote: FS My provider and is on the blackholes.us list. FS This what they say about it. FS Email_Message : I've inquired of that and there's no signs of FS anyone actually being blackholed. I contacted some of the bigger FS players in the abuse/spam world that started at MFN/AboveNet and FS they lend 0 credibility to this site. I don't use everything there but I find certain things very helpful. These are results just from November so far: --- Rank TestNumber%Total -- ---- 19KOREA 148 3.49% 20CN-KR 126 2.97% 21CHINA 126 2.97% 22BRAZIL 125 2.95% 26ARGENTINA29 0.68% 27JAPAN27 0.64% 28TAIWAN 24 0.57% 29RUSSIA 19 0.45% 30THAILAND 10 0.24% 31SINGAPORE10 0.24% 32MALAYSIA 10 0.24% 33NIGERIA 9 0.21% 35HONGKONG 9 0.21% CN-KR and CHINA are duplicating - I'll probably drop one of them. Not one message in the bunch that was not spam. I checked them personally. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Unwanted E-cards filling email inboxes
What are you filtering for on this E-Card? Or does it filter on all the cards. -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner;declude.com]On Behalf Of Tyran Ormond Sent: Sunday, October 27, 2002 8:59 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Unwanted E-cards filling email inboxes Correct, I added this to our domain rules as soon as I first saw it. A worm is a worm whether it comes with an EULA or not. On 10:11 PM 10/27/2002 -0600, it would appear that Tom Baker | Netsmith Inc wrote: Or use domain processing rules X:\imail\domain_com\rules.ima (gets processed before) X:\imail\domain_com\users\username\rules.ima -Original Message- From: John Tolmachoff [mailto:jtolmachoff;reliancesoft.com] Sent: Sunday, October 27, 2002 9:13 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Unwanted E-cards filling email inboxes Just use a regular rule in your rules.ima file. But then I have to copy that to all users, correct? John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. La Habra, CA 90631 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Tyran Ormond Programmer/LAN Administrator Central Valley Water Reclamation Facility [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Spaces
I read a few days back where someone was asking if declude would detect spaces in the subject since a lot of spam has a subject line like: Your car might not make it GYJ I created a rule in Imail to look for 5 spaces and forward any mail to spam box. I'm catching a lot of spam this way. Is there a better way to do this for the spam with spaces? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] School system needs advice
I'm curious as to what weight you are setting sniffer at? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Tom Baker | Netsmith Inc Sent: Tuesday, September 03, 2002 2:39 PM To: '[EMAIL PROTECTED]' Subject: RE: [Declude.JunkMail] School system needs advice Double that. Using declude + sniffer I have not seen a piece of porn get through. Only rarely do I see any spam get through. I would highly suggestion getting sniffer, as much (adult + non-adult) spam often passes all HEADER checks (which is what declude does alone), so you must rely on something that checks the message body (sniffer). Well worth the $$$! (try their Free Demo to get a glimpse of what it does. Keep in mind you are using old body definitions with their demo, and they give almost daily updates once you register). -Original Message- From: Sheldon Koehler [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 03, 2002 4:31 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] School system needs advice I need good suggestions, both general and specific. Spam is always going to get through at one time or another. BUT, we have had success adding Sniffer (www.sortmonster.com) into the Declude Junkmail mix. Our local competition uses Postini and the amount of spam that gets by that over priced service is incredible. I have a friend who's work place uses them and he laughs at the amount of spam he does not have to see our service. We also have an IMGate box (http://imgate.meiway.com) as our first line of defense. By doing all of the above, our spam level is very low. I am always tweaking the settings and spend more time on it than I would like. As an ISP, I have to be more open to some of the known junk places for our users that like getting coupons and junk on a daily basis. As a school district, you will be able to get away with rejecting EVERYTHING Sniffer wants to reject. newsletters included as they are not related to school needs. And Sniffer seems to do a great job at catching porno spam!!! Sheldon Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com Ten Forward Communications 360-457-9023 Nationwide access, neighborhood support! Whenever you find yourself on the side of the majority, it's time to pause and reflect. Mark Twain --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Who is sending you spam?
How do you create this list? Is it from the declude spam log? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Tom Sent: Friday, August 16, 2002 6:07 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Who is sending you spam? Here is a list of know spam addresses reported to us on 08/15/02 Keep in mind that, this is not our list, however, it is similar. Declude Log Count Identifier Address in Kill File found:106 ID-20020815-000473 @yourbigvote.com found: 90 ID-20020815-000677 .currentmail.com found: 60 ID-20020815-000620 .n0o1.com found:190 ID-20020815-000456 @vmadmin.com found: 74 ID-20020815-000476 @z-offer.com found:103 ID-20020815-000673 .m0.net found:186 ID-20020815-000167 .etracks.com found: 40 ID-20020815-000182 @clickthisway.com found: 60 ID-20020815-31 .CYNERGEN.NET found: 44 ID-20020815-000405 @quickinspirations.com found:236 ID-20020815-000163 .topica.com found: 78 ID-20020815-000198 .mb00.net found: 66 ID-20020815-000472 @yourbigfun.com found: 64 ID-20020815-000334 .torpedomail.com found:128 ID-20020815-000162 .azoogle.com found:134 ID-20020815-000529 .takemetothesavings.com found: 98 ID-20020815-000223 @flowgo.com found: 70 ID-20020815-000187 @dailyripple.com found: 56 ID-20020815-000166 .azogle.com found: 50 ID-20020815-000709 .IREAYE.COM found: 98 ID-20020815-000362 @mpc10.com found: 54 ID-20020815-000467 @xmr3.com found: 52 ID-20020815-000378 .homesavingsplace.com found: 58 ID-20020815-000918 .mailvalue.net found: 50 ID-20020815-000859 .JOBSONLINE.COM This report shows how many times spam was sent to the mail server along with each spam address. I don't know about you, but I think the Government should be doing something about this. We should forward all the spam to Congress and perhaps then they will get off their asses. Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] WHITELIST for Client
Is it possible to have a whitelist on an indivdual basis? like in the clientname.junkmail How many whitelist can we have in the global.cfg? Do we need to restart smtp if we add a whitelist? TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Default JunkMail file
Is it possible to have more then one action? Example: RBL WARN (Can I have SUBJECT also?) Danny Klopfer 530-477-6293 http://www.ncws.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
