Re: [Declude.JunkMail] Declude not taking action

Not related to your problem but do yourself a favor block @mcsi.net only thing I ever seen from there is spam. Best regards, Eje Aya Gustafsson mailto:[EMAIL PROTECTED] The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax :

Re: [Declude.JunkMail] failed to fail test ?

Thanks Scott for clearing things up for me.. Since all my dailup and highspeed customers have correct revdns and everyone outside our network have to use smtp auth (running WHITELIST AUTH) then there should be no implications to do a spamdomain with fament.com. If this is the case then time to add

[Declude.JunkMail] failed to fail test ?

I have the following two tests in my global.cfg (along with others) HELOBOGUS helovalid x x 6 0 IPNOTINMX ipnotinmx x x 0 -3 REVDNS revdnsexistsx x 7 0 NOLEGITCONTENT nolegitcontent x x 0

Re: [Declude.JunkMail] blocking spam faked as coming from local address

Talking about SPAMDOMAINS anyone have a list they would like to share with me (on or offlist). I just setup this test and put in the ones I could THINK of of top of my head (yahoo, msn, hotmail and a couple of others) but my list was no more then about 10-12 before I ran out of domains I could

Re: [Declude.JunkMail] Whitelisting

to avoid having to many $default$.junkmail files because that means when new features are added and lists dies etc I have to manually edit multiple files. The less files to edit the better IMO. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] The Family Entertainment

Re: [Declude.JunkMail] SORBS-SPAM

. So of course someone that host spammers will demand they never be tested. Almost should be a case for immediate blocking IMO. Either way with declude there is not reason to directly block anything just use a weighted system where each test add to the total weight. Best regards, Eje Gustafsson

Re: [Declude.JunkMail] OSRELAY etc

Seems like it according to the news and information that been released. Another rbl list that been killed by nasty DoS attacks more then likely caused by spammers. sorbs.net seems to be a decent replacement. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] The Family

Re: [Declude.JunkMail] Another new test

--- DM [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 eBay UserID : macahan

Re: [Declude.JunkMail] OT: Fraud Alert

to post a dang warning on their website about this fraud. Only way to fight misinformation such as this one is with information. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] The Family Entertainment Network http://www.fament.com Phone : 620-231-

Re: [Declude.JunkMail] My domain failing HELOBOGUS

You need to have a MX record for hasna.jeeran.com which you don't have. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 - Your Full Time

[Declude.JunkMail] Request for new/enhanced feature

since it has the around the text. This messages X-Tests-Failed: IPNOTINMX, SUBJECTSPACES, LONGSUBJECT. IMO this should also have failed HTMLCOMMENTS which it did not. So my question.. Would it be possible to add the above junk as detected html comment ? Best regards, Eje Gustafsson

Re: SPAMCOP:Re: [Declude.JunkMail] HiJack Not Working ?

the Declude.JunkMail mailing list. To BC unsubscribe, just send an E-mail to [EMAIL PROTECTED], and BC type unsubscribe Declude.JunkMail. The archives can be found BC at http://www.mail-archive.com. BC --- BC [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson

Re[2]: [Declude.JunkMail] Q: help with fixing client-side?

-archive.com. DP --- DP [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 eBay UserID : macahan

[Declude.JunkMail] HELO contains

? If it really is the HELO string then I don't see this as a problem since my understanding is that my mail server do NOT connect to itself and should then never send the helo imail.fament.com to itself ?! Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family

Re[2]: [Declude.JunkMail] HELO contains

unsubscribe Declude.JunkMail. The archives can be found RSP at http://www.mail-archive.com. RSP --- RSP [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone

Re: [Declude.JunkMail] Store and Forward w/JunkMail Question

spamreview rocks. Only wish it could do filters with wildcards. Hate the darn spammers that uses mail123.domain.tld mail124.domain.tld and so on do *.domain.tld and take care of them for good. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] The Family Entertainment

[Declude.JunkMail] Base64 encoded

+DQo8UD48QlI+PFVuZGlz Y2xvc2VkLVJlY2lwaWVudD rest of the base64 is cut off. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 eBay UserID : macahan

Re[2]: [Declude.JunkMail] Base64 encoded

unsubscribe, just send an E-mail to [EMAIL PROTECTED], and RSP type unsubscribe Declude.JunkMail. The archives can be found RSP at http://www.mail-archive.com. RSP --- RSP [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED

Re[4]: [Declude.JunkMail] Base64 encoded

for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 eBay UserID : macahan - Your Full Time Professionals

Re: [Declude.JunkMail] Base64 encoded

Hello Dan, I see. Thanks for the clearification. This particular message was a html encoded message where the html part got encoded. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] The Family Entertainment Network http://www.fament.com Phone : 620-231-

Re: [Declude.JunkMail] Ipswitch Newsletter

Hello Michael, Looks like your giving mail that fail the spamheaders test a negative 1 in weight. Funny that ipswitch's newsletter fails this test.. At least it's not a message or newsletter from Scott now that would be really REALLY amusing consider the guys skills and knowledge ;) -Eje ML

Re: [Declude.JunkMail] I can't believe this would even work.

can be found CF at http://www.mail-archive.com. CF --- CF [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax

Re: [Declude.JunkMail] With new release this git through

they want. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 - Your Full Time Professionals - eBay UserID : macahan -- JH Hi Scott, JH Happy Holidays

Re: [Declude.JunkMail] With new release this git through

Thanks. I guess that is what you get for not following a threat to closely. =) Back to my Christmas drinks =) Cheers and Merry Christmas. - Eje My understanding is that Outlook Express can't filter based on headers... SW Joe's talking about the HEADER action, which isn't inserting an RFC822

Re: [Declude.JunkMail] With new release this git through

blah and I can't type right either. THREAD not threaT doh.. EG Thanks. I guess that is what you get for not following a threat to EG closely. =) EG Back to my Christmas drinks =) EG Cheers and Merry Christmas. EG - Eje My understanding is that Outlook Express can't filter based on

[Declude.JunkMail] Chinanet

Anyone knows of any spam list that got chinanet.cn.net ips blocked ? Like for example the different blackholes.us lists that block china, Argentina etc Their damn spam keep coming through and I keep block it but they always surface from different IP. Best regards, Eje Gustafsson

Re: [Declude.JunkMail] FrontPage form to email SPAMHEADERS

have to fix missing Date: header (which Imail also fixes if it's missing but Declude will complain since it's happens before Imail fixes it) Best regards, Eje Gustafsson mailto:MacAhan;fament.com The Family Entertainment Network http://www.fament.com Phone : 620-231-

Re[2]: [Declude.JunkMail] BASE64 problem!?

mailing list. To ST unsubscribe, just send an E-mail to [EMAIL PROTECTED], and ST type unsubscribe Declude.JunkMail. The archives can be found ST at http://www.mail-archive.com. ST --- ST [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson

Re: [Declude.JunkMail] Date Header wrong - REALLY?

, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 eBay UserID : macahan - Your Full Time Professionals - --- [This E-mail scanned for viruses by Declude

Re[2]: [Declude.JunkMail] Fighting the Menace of Unwanted E-Mail

the Declude.JunkMail mailing list. To ADG unsubscribe, just send an E-mail to [EMAIL PROTECTED], and ADG type unsubscribe Declude.JunkMail. The archives can be found ADG at http://www.mail-archive.com. ADG --- ADG [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson

Re: [Declude.JunkMail] Fighting the Menace of Unwanted E-Mail

from the Declude.JunkMail mailing list. To KR unsubscribe, just send an E-mail to [EMAIL PROTECTED], and KR type unsubscribe Declude.JunkMail. The archives can be found KR at http://www.mail-archive.com. KR --- KR [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson

[Declude.JunkMail] Paypal scammer

-To: [EMAIL PROTECTED] Subject: URGENT: PayPal Account Update is part of the headers. Do your clients and customers a favour block this person from the look of it this scum bag (pardon my language but this is the works of a con artists that seems to been around for a longer time). Best regards, Eje

Re[2]: [Declude.JunkMail] Spammer tools - why do these sites exist

unsubscribe Declude.JunkMail. The archives can be found JT at http://www.mail-archive.com. JT --- JT [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620

[Declude.JunkMail] Please someone tell me it's friday..

Just found this e-mail in Spam Review.. Check out the subject.. almost made me fall out of the chair laughing. / Eje Received: from opt-in-email-4-sale.com [65.245.26.62] by imail.fament.com (SMTPD32-7.07) id A4B854A011E; Sun, 04 Aug 2002 22:44:56 -0500 From: Fred [EMAIL PROTECTED] To: [EMAIL

Re: [Declude.JunkMail] What Action Do you take?

to [EMAIL PROTECTED], and DL type unsubscribe Declude.JunkMail. The archives can be found DL at http://www.mail-archive.com. DL --- DL [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network

Re[2]: [Declude.JunkMail] Whitelist Not Working What Am I doing wrong

PROTECTED] for assistance. You can visit our web DL site at http://www.declude.com . DL --- DL [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone

Re: OSSRC:RE: BLARSBL:Re: [Declude.JunkMail] problem with spamreview software

RH [EMAIL PROTECTED] for assistance. You can visit our web RH site at http://www.declude.com . RH --- RH [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http

Re: [Declude.JunkMail] problem with spamreview software

-mail to [EMAIL PROTECTED], and EC type unsubscribe Declude.JunkMail. You can E-mail EC [EMAIL PROTECTED] for assistance. You can visit our web EC site at http://www.declude.com . EC --- EC [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson

Re: BLARSBL:Re: [Declude.JunkMail] problem with spamreview software

ago. Now after updating to .44 I see it's time to do another donation because he added a couple of things that I asked for. =) A great time saving tool. Well worth a donation. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] The Family Entertainment Network http

[Declude.JunkMail] weight of 63 passed ??

Strangeness. I'm curious how this message manage to get through and be delivered. I have weight20 set to hold and weight30 to delete. This message made weight63. The address it was delievered to is granted located on a unix box but the messages get relayed through imail and obviously declude

[Declude.JunkMail] nice disclaimer

Systems, PO Box 116-3015 San Rafael de Heredia, CR 011-506-267-7139 I hate spammers.. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620

Re[2]: [Declude.JunkMail] nice disclaimer

from your address. You may utilize the removal link RD below if you do not wish to receive this mailing. Please Remove Me Saf-E Mail Systems, PO Box RD 116-3015 San Rafael de Heredia, CR 011-506-267-7139 I hate spammers.. Best regards, Eje Gustafsson

IPWHOIS:Re[2]: Is there a feature list for the JunkMail beta? Fw: [Declude.JunkMail] New filter test

, just send an E-mail to [EMAIL PROTECTED], and RD type unsubscribe Declude.JunkMail. You can E-mail RD [EMAIL PROTECTED] for assistance. You can visit our web RD site at http://www.declude.com . RD --- RD [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson

IPWHOIS:Re[2]: [Declude.JunkMail] My Word Filtering File

. You can visit our web GW site at http://www.declude.com . Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 eBay UserID : macahan

IPWHOIS:Re[2]: [Declude.JunkMail] My Word Filtering File

] for assistance. You can visit our web RSP site at http://www.declude.com . RSP --- RSP [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231-

[Declude.JunkMail] IPWHOIS:More McAfee spam

Now their spam starts to get very annoying. I know they are really an opt-in/subscribtion list but gosh darn it I have no idea what they done but they must changed spam err mail engine and new one is very RFC incompliant so getting stuck. But I guess one can not expect anything better from a

IPWHOIS:Re[2]: [Declude.JunkMail] Coldfusion Declude front end?

can visit our web TBNI site at http://www.declude.com . TBNI --- TBNI [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231-

[Declude.JunkMail] IPWHOIS:Ip block

? FYI ip is 62.254.178.50 Also if anyone out there is using FormMail 1.9 then UPDATE. Had a domain that used 1.9 that the spammers found this morning. Updated it to 1.9sp7 and the spammers where killed. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family

IPWHOIS:Re[2]: [Declude.JunkMail] IP Blakclist

[This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 eBay UserID : macahan - Your Full Time

IPWHOIS:Re[2]: [Declude.JunkMail] Minus One Address.

Declude.JunkMail. You can E-mail T [EMAIL PROTECTED] for assistance. You can visit our web T site at http://www.declude.com . T --- T [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network

IPWHOIS:Re[2]: [Declude.JunkMail] Coldfusion Declude front end?

can visit our web WOD site at http://www.declude.com . WOD --- WOD [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231-

Re: [Declude.JunkMail] Handling Held Spams

Hello Mark, I use a weighted system. requires a lot more then badheaders to hold a message. badheaders have a weight of 4. Need 15 to get held. We use spamreview http://www.slsoft.com/spamreview.htm to go through the held messages. In spam review we create filters that delete what is obvious

Re: [Declude.JunkMail] False positives for Spamheaders

If anyone would understand that then well world be so much easier. Get it when someone like microsoft don't support postmaster and abuse.. Their mailservers don't have any rev dns configured and to boot has invalid headers (this was what I saw on a MSN passport lost password requests that got

[Declude.JunkMail] Maybe something real will come out of this one.

http://msn.com.com/2100-1105-916931.html Maybe finally a real usable law might come out of that one... One can always hope.. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from

Re[2]: [Declude.JunkMail] Enhancements - unknown sender must reply to ack

unsubscribe Declude.JunkMail. You can E-mail TH [EMAIL PROTECTED] for assistance. You can visit our web TH site at http://www.declude.com . TH --- TH [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family

Re: [Declude.JunkMail] Bounce strategies?

-mail to [EMAIL PROTECTED], and MR type unsubscribe Declude.JunkMail. You can E-mail MR [EMAIL PROTECTED] for assistance. You can visit our web MR site at http://www.declude.com . MR --- MR [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson

Re[2]: [Declude.JunkMail] Bounce strategies?

- GW From: [EMAIL PROTECTED] GW [mailto:[EMAIL PROTECTED]] On Behalf Of Eje Gustafsson GW Sent: Monday, May 20, 2002 10:38 AM GW To: Matt Robertson GW Subject: Re: [Declude.JunkMail] Bounce strategies? GW Don't bounce from your postmaster acct. That is just bad. Rather create GW

Re: [Declude.JunkMail] Wish List

Hello Tom, Would i tbe possible to have SpamReview submit mailservers to like DSBL like test systems and possible Spamcop (maybe look in header to check for what Declude test message didn't fail and submit to those that it passed). Not sure how really useful it would be but it was a thought I

Re: [Declude.JunkMail] hotmail !?

PROTECTED] [64.4.30.124] EG X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. EG X-Note: This E-mail was sent from oe20.pav1.hotmail.com. ([64.4.30.124]). EG X-Tests-Failed: OSSRC. EG Best regards, EG Eje Gustafsson mailto:[EMAIL PROTECTED] EG

[Declude.JunkMail] Why is this one getting held?

) Any way to configure Declude to always write what check the message failed ? Because like this message have no Junk Mail Warnings. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231-

Re[2]: [Declude.JunkMail] XBL:Just added new spam tests... opinions?

Welcome to the club a while back when I started on this list there was a post to a tool called delog which I downloaded and setup and ran. Since I started running that one (infrequently usage) I always get the depressing results 62-67% junk that is getting blocked by declude :( This weekend is

Re[2]: [Declude.JunkMail] Why is this one getting held?

I know I seen it somewhere but being monday I couldn't find it. =O Next time I will know thanks to this little trick. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231-

Re: [Declude.JunkMail] DSBL

Not many hits yet for dsbl but seen a few Delog Version 1.05b Detailed Report for: 04/10/2002 10:10:46 Log file examined: I:\IMail\spool\dec0409.log Unique Message Count: 7957 Failed Message Count: 4891 Total Percentage of Spam: 61%

Re: [Declude.JunkMail] Declude Virus Junkmail

Hello Adam, we run both on one server. A Dual P-II 350 /w 256MB ram. Imail deliver about 4k e-mails each day and we have about 8-8.5k incoming e-mails of which 4-4.5k gets blocked by declude junkmail. Rarely gets over 10% load. This is on about 60+ domains which one domain is for our dial-up

[Declude.JunkMail] Relaying configuration WAS HELP: I just got listed on ORDB

A little netiq please.. Trim your posts. The original message was 11.2k for less then 1k worth of comment... Just want to chimn in and say that MSN also blocks outbound smtp and you have to use their mailservers. But on top of that you HAVE to use SPA smtp authentication which is something evil

Re: [Declude.JunkMail] Relaying configuration WAS HELP: I just got listed on ORDB

Hello Timm, Hmm Never thought about that. I could do that on my firewall redirect connections for port 125 to 25. Sunday, March 31, 2002, 18:48:20 PM, you wrote: TJ I got around the SMTP filtering issue by setting up a small daemon on my TJ server that accepted connections on port 125

[Declude.JunkMail] More wounderful SWBell.net

I know there was a discussion a few days ago about SWBells wounderfull DNS service. Well thought I give a true sad story. About a year ago we ran MailMax and McAfee Webshield SMTP. We did an update of mailmax to latest version less then a week later our server got hijacked and used as a

Re: FW: [Declude.JunkMail] MISSING_REVERSE_DNS:FW: IMail Server 7.06 Hotfix 1

roflmao.. Now why don't that suprise me at all.. They recently upgraded their servers. Figures they screwed it up. Their QoS is very poor to say the least trust me I had a T1 from them for some time now and when the contract is up I will not renew with them.. Sunday, March 10, 2002, 20:27:13

Re[2]: [Declude.JunkMail] Spamcop issue

for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 eBay UserID : macahan - Your fulltime professionals

Re[2]: [Declude.JunkMail] Spamcop issue

scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 eBay UserID : macahan - Your fulltime