RE: [Declude.JunkMail] Fprot 6

2008-01-27 Thread Michael Thomas - Mathbox
Serge, Frisk licensing for mail server use is not the same as consumer or general business use. Pricing for mail server use is prohibitive. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: SPAM-WARN:Re: [Declude.JunkMail] OT: SPF record question

2007-02-17 Thread Michael Thomas - Mathbox
only from your server to the destination server. Again, excepting very special circumstances like having proxies or gateways, checking SPF any deeper than the first received header would be applying SPF rules incorrectly. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free

RE: SPAM-WARN:Re: [Declude.JunkMail] OT: SPF record question

2007-02-17 Thread Michael Thomas - Mathbox
Darin, I am not sure why, but Gary seems to think SPF checks are run against ALL of the received headers. I am guessing that he has an SPF test action at the end of his Global.cfg, so that it is testing outgoing? Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) -Original

RE: SPAM-WARN:Re: [Declude.JunkMail] OT: SPF record question

2007-02-16 Thread Michael Thomas - Mathbox
mail server. So, the remote mail server (possibly my mail server) would check the SPF to determine if your mail server was listed as a source for the domain of the sending email address. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) -Original Message- From: [EMAIL

RE: SPAM-WARN:Re: [Declude.JunkMail] OT: SPF record question

2007-02-16 Thread Michael Thomas - Mathbox
. For those situations, you could use IPBYPASS and I suppose HOP. You chose a very good example. List mail is a perfectly good example of why you cannot run SPF against the entire chain of received headers. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) -Original Message

RE: SPAM-WARN:Re: [Declude.JunkMail] Per User Filtering

2006-12-15 Thread Michael Thomas - Mathbox
Just create an empty user.junkmail file. As there are no actions, the user will get all of the messages. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Friday

RE: SPAM-WARN:RE: [Declude.JunkMail] DYNHELO

2006-12-08 Thread Michael Thomas - Mathbox
before I sent my original post. The caching only name server on the mail server had not picked up the change and I did not connect the two issues. Bummer. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

[Declude.JunkMail] DYNHELO

2006-12-07 Thread Michael Thomas - Mathbox
. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.

RE: SPAM-WARN:Re: [Declude.JunkMail] RE: On RFC Violation - Declude allows attachments and Virus to pass through untouched and unscanned

2006-10-23 Thread Michael Thomas - Mathbox
Matt, Justa minor point, it doesn't affect your logic. Now according to Michael's tests, the CR-only pattern leads to parsing issues in Declude Virus where it can't even find the attachment to scan it. Actually, it was the "No Cr" (I.E. LF only) test that passed completely undetected. By

[Declude.JunkMail] Different issue - Process flow question

2006-10-23 Thread Michael Thomas - Mathbox
weight as a parameter so it can bail out early if the current weight meets or exceeds the external test's set bail out weight) But regardless of whether the external test decides to bail early, it should still get invoked. Isn't that correct? Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll

RE: SPAM-WARN: Re: [Declude.JunkMail] RE: On RFC Violation - Declude allows attachments and Virus to pass through untouched and unscanned

2006-10-22 Thread Michael Thomas - Mathbox
Hi All, I said in my original email that Declude had been notified of LF only issue. I just looked back through my email and found the report. It was Declude case [06D-0BBF1866-F5A3] on Thu, 30 Mar 2006 22:29:58 -0500. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) --- This E

RE: SPAM-WARN: RE: [Declude.JunkMail] On RFC Violation - Declude allows attachments and Virus to pass through untouched and unscanned

2006-10-20 Thread Michael Thomas - Mathbox
John, Looked normal in Outlook Express and in WebMail Both had an extractable executable. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, October 20

RE: [Declude.JunkMail] On RFC Violation - Declude allows attachments and Virus to pass through untouched and unscanned

2006-10-20 Thread Michael Thomas - Mathbox
John, The link was just before my signature in the original message. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail

RE: SPAM-WARN: Re: [Possible Spam][Declude.JunkMail] On RFC Violation - Declude allows attachments and Virus to pass through untouched and unscanned

2006-10-20 Thread Michael Thomas - Mathbox
. I reported this issue to Declude and the list some time ago regarding spam not being scanned because of this issue. At that time, I was so focused on the spam problem, I did not think about the attachment/virus side of the issue, which should have been obvious to me. Michael Thomas Mathbox 978-683

RE: [Declude.JunkMail] Suge of spam in recient week.

2006-10-19 Thread Michael Thomas - Mathbox
Will, Use Notepad to check the tail end of the file. The Declude headers may be at the end of the file. If the Declude headers are at the end of the file, note whether or not: 1. The Received: lines appear normal 2. There may or may not be some X-Header lines immediately after the

[Declude.JunkMail] Phone number spam

2006-09-11 Thread Michael Thomas - Mathbox
... Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.

[Declude.JunkMail] Phone Number spammers

2006-09-11 Thread Michael Thomas - Mathbox
Hi All, Maybe my last post did not make it through some filters. Anyone interested in discussing spam containing phone numbers with ever changing character patterns? Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) --- This E-mail came from the Declude.JunkMail mailing list

RE: [Declude.JunkMail] Why is Declude Not Scanning This?

2006-09-04 Thread Michael Thomas - Mathbox
Hi, I reported this issue to Declude as follows: Declude v3.10 [30A-0C30A9AC-1BB6] 6/26/2006 Declude V3.11 [040-0C6669E9-2D9E] 8/7/2006 XINHEADERS not appearing in every email message for which scanning is enabled. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free

[Declude.JunkMail] Version 3.1.1 Fails to add headers on COPYTO action

2006-08-11 Thread Michael Thomas - Mathbox
, but I have noted in Declude issue [040-0C6669E9-2D9E], that the problem still exists. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe

RE: [Declude.JunkMail] Number of times per test

2006-07-14 Thread Michael Thomas - Mathbox
If you do not have StopAtFirstHit enabled, then each hit adds the specified points to the total. So, set the MinWeightToFail to 10 and apply 2 point for each hit like: #SKIPIFWEIGHT 10 MINWEIGHTTOFAIL 10 #MAXWEIGHT 15 #STOPATFIRSTHIT BODY 2 CONTAINS replikas Michael Thomas Mathbox 978-683-6718

RE: [Declude.JunkMail] Declude Config File (as shipped)

2006-07-14 Thread Michael Thomas - Mathbox
Hi, A few months back, I submitted a ticket against ENCODEDURL and IPURL in Declude 3.0.x. They did not work. At that time I was told these were non-functional stubs. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) -Original Message- From: [EMAIL PROTECTED] [mailto

RE: SPAM-WARN: RE: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20

2006-07-11 Thread Michael Thomas - Mathbox
Also, doesn't 3.1 have a problem with writing headers under specific conditions (possibly identified in 4.2 as headers sometimes not written with copyfile)? See Declude ticket [30A-0C30A9AC-1BB6]. Michael ThomasMathbox978-683-67181-877-MATHBOX (Toll Free) From: [EMAIL PROTECTED]

RE: SPAM-WARN: [Declude.JunkMail] FW: [SPAM]I must apologize for this unsolicited nature of my email. I am Mr. Lewis Musasike, General Manager (Treasury) of Development Bank of Southern Africa. This i

2006-06-22 Thread Michael Thomas - Mathbox
Hi, You should be able to use subjectchars to nail those birds. Examples from the default global.cfg: SUBCHARS-50 subjectchars 50 x 1 0SUBCHARS-55 subjectchars 55 x 1 0SUBCHARS-60 subjectchars 60 x 1 0 Michael ThomasMathbox978-683-67181-877-MATHBOX (Toll Free) From: [EMAIL

[Declude.JunkMail] Heads Up - Plain Text Base64 Not Decoded

2006-05-22 Thread Michael Thomas - Mathbox
text messages with BASE64 encoding. Because of this, a PayPal phishing message just slipped through. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type

RE: Re[2]: [Declude.JunkMail] Spam

2006-05-20 Thread Michael Thomas - Mathbox
a little weird as it is spam issue not a virus issue. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can

RE: [Declude.JunkMail] Spam

2006-05-19 Thread Michael Thomas - Mathbox
haven't seen one of those messages in a long long time. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Friday, May 19, 2006 9:47 PM To: Declude.JunkMail@declude.com

RE: Re[2]: [Declude.JunkMail] Spam

2006-05-19 Thread Michael Thomas - Mathbox
this as the message was arriving, prior to writing it to disk in the first place. - Snip Do not know why they would want to rewrite the message. They should add a test name for the condition and say it failed the test. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll

RE: [Declude.JunkMail] OT: Recommendations? Updgrading Equipment.

2006-05-03 Thread Michael Thomas - Mathbox
Why is your service offline while you edit text files? Edit your text files. Select the zone in the DNS GUI and click Reload... Mike -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William Stillwell Sent: Wednesday, May 03, 2006 11:22 AM To:

Re: [Declude.JunkMail] Emails not be scanned by Declude

2006-04-25 Thread Michael Thomas - Mathbox
Hi, You might want to look at the entire typical file, in Notepad or Dump it contents as hex values. I have noticed a similar percentage of spam that has no carriage returns. Which means that the Declude headers get added to the end of the file, rather than after the headers. If you also happen

Re: [Declude.JunkMail] Emails not be scanned by Declude

2006-04-25 Thread Michael Thomas - Mathbox
For those who would like to try it, here is the URL to ZIP file containing two tests, NoCrTest.exe and NoLFTest.exe. Per this thread, you may find the NoCrTest useful. See the file NoCrTest.txt, which is included below. Enjoy. http://www.mathbox.com/NoCrTest/NoCrTest.zip Michael Thomas Mathbox

[Declude.JunkMail] NoCrTest and NoLfTest

2006-04-25 Thread Michael Thomas - Mathbox
For those who would like to try it, here is the URL to ZIP file containing two tests, NoCrTest.exe and NoLFTest.exe. Per this thread, you may find the NoCrTest useful. See the file NoCrTest.txt, which is included below. Enjoy. http://www.mathbox.com/NoCrTest/NoCrTest.zip Michael Thomas Mathbox

[Declude.JunkMail] Under specific conditions, action not as specified

2006-02-12 Thread Michael Thomas - Mathbox
Declude Version: 3.0.5.23 In JunkMail, a message scores more than enough points to be DELETED. In VIRUS.CFG AVAFTERJM ON DELETEVULNERABILITIES OFF The result is that the message is moved to the /sppol/virus folder. It should have been deleted Michael Thomas Mathbox 978-683-6718 1-877

[Declude.JunkMail] Apologies

2006-02-12 Thread Michael Thomas - Mathbox
Hi All, I inadvertently sent a plain text message encoded as base64 to list. I had been comparing spammer generated plain text messages encoded as base64 to the same generated by Outlook Express. I forgot to switch it back. My Apologies, Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll

Re: [Declude.JunkMail] SmarterMail 3.x

2006-02-09 Thread Michael Thomas - Mathbox
Kevin, Just a thought here. With the IMail single file storage environment, having an alias trigger a program was a convenient solution. However, the SmarterMail storage is one file per message. It should be fairly simple to set up a directory monitor that watches/checks for new files and

Re: [Declude.JunkMail] [OT] SmarterMail 3.x

2006-02-09 Thread Michael Thomas - Mathbox
and it contains one message per file? Kevin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Michael Thomas - Mathbox Sent: Thursday, February 09, 2006 3:21 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] SmarterMail 3.x

Re: [Declude.JunkMail] OT Snow

2005-12-03 Thread Michael Thomas - Mathbox
Yeah, and the earthquakes are not seasonal at all. :) Mike - Original Message - From: John T (Lists) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, December 03, 2005 2:51 PM Subject: RE: [Declude.JunkMail] OT Snow Now wait just a carn cerned minute. Our time is

Re: [Declude.JunkMail] OT - At wits end

2005-11-30 Thread Michael Thomas - Mathbox
Andrew, I was reading your reponse, thinking This is one of the more lucid responses coming from the list (There is a huge amount of useful information from the list, but not all of it is lucid. Sometimes you have to dig for the gems.). And then I got down to the last paragraph and read hinky

Re: [Declude.JunkMail] OT: SmarterMail auto-create users

2005-10-25 Thread Michael Thomas - Mathbox
Robert, I have not programmed to SmarterMail API's, but I did look at them some time ago. As I recall, the API is just a COM object, which you can call from ASP. I don't believe ASP.NET is required for the management end. Mike - Original Message - From: Robert E. Spivack [EMAIL

[Declude.JunkMail] Adding Filter Match Text to header

2005-09-26 Thread Michael Thomas - Mathbox
Hi, Is there a way to add the matching text from a filter to the headers of the message? I only see a way to indicate that a filter failed: MYFILTER WARN X-Warning: Failed FILTER Thank You, Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail

Re: [Declude.JunkMail] OT: Co-Location Space

2005-06-17 Thread Michael Thomas - Mathbox
WebVCR which was of course shutdown by the MPAA.. - Original Message - From: Michael Thomas - Mathbox [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, June 17, 2005 5:51 PM Subject: [Declude.JunkMail] OT: Co-Location Space Hi All, I have a customer that is looking

Re: [Declude.JunkMail] AutoWhiteList

2004-12-12 Thread Michael Thomas - Mathbox
Serge, The javascript checker shipped with standard web mail templates (V8.05 I have 8.14, but did not test) will not allow @domain.com to be added. The checker requires [EMAIL PROTECTED] Javascript checkers with other template sets may allow it. Or you could modify the checker to allow it. You