Hi Guys,
This is aimed at Interceptor users
I am battling some disk latency issues (exceeding max achievable IOPS for
system), I am trying to move my spool folder to a RAM disk.
I updated the paths in Alligate to point to the RAM drive but Declude doesn't
know to look there, any ideas aside
Message-
From: Rick Davidson [mailto:rdavid...@nat.com]
Sent: Thursday, November 03, 2011 10:38 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Regex Greed Issue
well based on your response I guessed you couldn't reproduce it with the
example I sent, I confirmed that, and I am
I am trying to use the following regex to catch phishing URLs like
http://www.usps.com.scam.com
http\:\/\/www.*?\.com\..*?\.com
The issue is the question marks do not stop the greediness of the *
it will catch
Subject: RE: [Declude.JunkMail] Regex Greed Issue
Hi Rick,
Are you sure your regex catches the long URL how did you test it ?
David
-Original Message-
From: Rick Davidson [mailto:rdavid...@nat.com]
Sent: Thursday, November 03, 2011 6:38 PM
To: Declude.JunkMail@declude.com
Subject
have you tried just adding BALCOMLAWHOLD f:\Balcomlawhold to the
default.junkmail file in the declude root?
--
Rick
-Original Message-
From: Heimir Eidskrem [mailto:decl...@i360.net]
Sent: Wednesday, October 12, 2011 5:41 PM
To: Declude.JunkMail@declude.com
Subject:
in the global.cfg you can use
WHITELIST TO some...@domain.com
in a filter you can use something like this
ALLRECIPS WHITELIST CONTAINS some...@domain.com
--
Rick
From: Harry Vanderzand [mailto:ha...@intown.net]
Sent: Tuesday, September 27, 2011 4:25 PM
To: Declude.JunkMail@declude.com
Subject:
How would one go about triggering on a message with a blank or missing TO
field?
--
Rick
CONFIDENTIALITY NOTICE
This e-mail message and any attachments contain confidential and/or privileged
information for the sole use of the intended recipient. If you are not the
intended recipient, you
CONTAINS X-Spam-Flag: YES
http://postmaster.aol.com/Postmaster.FAQ.php
Andrew.
From: Rick Davidson [mailto:rdavid...@nat.com]
Sent: Tuesday, September 06, 2011 3:06 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] AOL Header Test
Hello,
I have
Hello,
I have a combo test for scrutinizing AOL and the large webmail providers, I am
trying to trigger on an AOL X header with this
HEADERS 0 CONTAINS X-SPAM-FLAG: YES
any idea why this wouldn't hit?
--
Rick
CONFIDENTIALITY NOTICE
This e-mail message and any
I am working on a combo filter to catch the aol/hotmail/yahoo url spam
is there a way to use a regular expression with IS
body 0 IS/PCRE (?i:^http\:\/\/.*\.(html|htm|php)$)
any suggestions welcome
--
Rick
CONFIDENTIALITY NOTICE
This e-mail message and any attachments contain confidential
dbar...@declude.com wrote:
The expression is the IS
Can you post a few examples of what you trying to catch ?
-Original Message-
From: Rick Davidson [mailto:rdavid...@nat.com]
Sent: Tuesday, August 09, 2011 2:34 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail
Thanks Sandy, interesting response, it got me thinking a bit
wouldnt the spammer/attacker need to have delegated authority over the source
ip address space and control of DNS infrastructure to forge a PTR record? I
have been doing this a while and I dont recall ever seeing a message
Why not use the HELO or REVDNS? REVDNS is going to be the safest because of the
difficulty in forging it
HELO -10 CONTAINS smtp.declude.com
or
HELO WHITELIST CONTAINS smtp.declude.com
REVDNS -10 CONTAINS smtp.declude.com
or
REVDNS WHITELIST CONTAINS smtp.declude.com
or even blanket the headers
Login to the interim area
Go to interceptor
There is a dir called 3.4.10.59
Swap out the decludeproc.exe files
I am running it this morning and indeed that issue does not exist, however the
diags.txt says it is 3.4.10.49
--
rick
From: Harry Vanderzand [mailto:ha...@intown.net]
Sent: Tuesday,
and someo...@nat.commailto:someo...@nat.com from
some...@msn.commailto:some...@msn.com instead of what was contained in the
headers
Rolled back to previous version…
--
Rick
From: Rick Davidson
Sent: Tuesday, April 05, 2011 8:37 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail
Look for these messages in your log files
WARNING: EOF in multipart processing
I had that problem when I upgraded to Interceptor 3.4.10.48 back in Feb, I had
to roll back to the previous version I was running which is 3.4.42
I have yet to hear back on that one, if anyone has a fix I’d like to
-
From: Rick Davidson rdavid...@nat.com
Sent 4/4/2011 8:33:10 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] RE: email being delivered with blank body. What
happened to body?
Look for these messages in your log files
WARNING: EOF in multipart processing
I had that problem when
I used Imail and Declude as a gateway and will continue to do so when we
convert our users to exchange
Rick Davidson
North American Title Group
National Systems Manager
4667 MacArthur Blvd. Suite 240
Newport Beach, CA 92660
Phone: 951-233-6342
Fax: 949-251-9283
Email: [EMAIL PROTECTED
Just setup the new domain on your gateways and
script them the same way, my company grows through aquisition, I have 5 domains
on my gateways and use the aliases trick.
Rick DavidsonNational Systems ManagerNorth American Title
Group-
- Original Message -
From:
Mark
Smith
let me know if you get the BANEXT .snow working, we got 24 inches yesterday
and last night, good ol Lake Erie lake effect snow... sigh
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Markus Gufler [EMAIL PROTECTED]
To: Declude.JunkMail
this patch.
Rick Davidson
National Systems Manager
North American Title Group
- Original Message -
From: William Stillwell [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Thursday, July 28, 2005 1:10 PM
Subject: [Declude.JunkMail] IMail 8.21 Update
Anybody install this yet? Any
8.2 hf2
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Chris Patterson [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Friday, June 10, 2005 1:13 PM
Subject: RE: [Declude.JunkMail] Insufficient system resources error
Hey Rick
'? (7 to 20
Megabytes)
I wouldn't be surprised by some type of logging problem. I
occasionally
see truncated/incomplete log lines in the file. This would certainly
seem
to be some sort of bug related to logging.
- Original Message -
From: Rick Davidson [EMAIL PROTECTED
this definately is not a declude issue
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Chris Patterson [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Friday, June 03, 2005 3:13 PM
Subject: RE: [Declude.JunkMail] Insufficient
the gateways
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Mike Nice [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Wednesday, June 08, 2005 2:15 PM
Subject: Re: [Declude.JunkMail] Insufficient system resources error
Have you looked at Plesk?
http://www.sw-soft.com/
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Richard Lanard [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Friday, March 18, 2005 11:53 AM
Subject: Re: [Declude.JunkMail] Off
www.astaro.com has a fantastic solution, firewall, IPS, Content filtering,
transparent DNS, HTTP and SMTP proxies, anti-virus and anti-spyware for the
HTTP SMTP streams.
some of the features are ala carte and can get pricy but it is one very nice
all in one solution
Rick Davidson
National
Can a CIDR range be used with the IPBYPASS option
We just acquired a company who has Postini in the loop and I need to skip
their IPs
IPBYPASS 64.18.0.0/20
Rick Davidson
National Systems Manager
North American Title Group
---
[This E-mail was scanned for viruses by Declude Virus (http
from an authed account?
Coincidentally the header I grabbed for the sample in this post contained a
funny HELO :-)
Received: from unknown (HELO ASS) ([EMAIL PROTECTED]@4.41.173.154
with login)
Rick Davidson
National Systems Manager
North American Title Group
---
[This E-mail was scanned
Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED]; Inc [EMAIL PROTECTED]
To: Rick Davidson [EMAIL PROTECTED]
Sent: Thursday, December 16, 2004 4:30 PM
Subject: Re: [Declude.JunkMail] New info in Yahoo
of the Postini systems keep changing so using the CIDR range is my
only option until I can get their email moved entirely.
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Colbeck, Andrew [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, December 16
10.10.0.72(0) - 10.10.9.18(0), 1 packet
permitted udp 10.10.0.98(0) - 10.10.9.10(0), 1 packet
I have ALOT of lines with many source and destination addresses, the IPs are
valid for the network
Thanks for any help
Rick Davidson
National Systems Manager
North American Title Group
-
---
[This E-mail
Yes, it nails alot of spam
Rick DavidsonNational Systems ManagerNorth American Title
Group-
- Original Message -
From:
Doug Anderson
To: [EMAIL PROTECTED]
Sent: Tuesday, November 30, 2004 3:11
PM
Subject: [Declude.JunkMail]
Spamhaus
Anyone use the xbl db
.
:)
Rick Davidson
National Systems Manager
North American Title Group
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe
Pull them from a database dynamicly so the page actually has to be visited
to display the addys
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Dan Geiser [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 10, 2004 11:26 AM
hey thats pretty cool!
:-)
Rick Davidson
National Systems Manager
North American Title Group
-
script language=Javascript
!--
emailname = EmailRecipient
emailserver = server.example.com
document.write(font face='Verdana' size=2);
document.write(a href='mailto:; + emailname + @ + emailserver
I implemented Scott Fishers spamdomains filters yesterday afternoon and
caught all the paypal mydoom variants with the SD-PHISH filter
Thanks Scott!
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Nick [EMAIL PROTECTED]
To: [EMAIL PROTECTED
around 70K messages a day, I run extensive filtering files
and barely push the CPUs
Rick Davidson
National Systems Manager
North American Title Group
440-953-9346 - Office
440-953-0925 - Fax
440-487-7344 - Mobile
[EMAIL PROTECTED]
-
- Original Message -
From: Markus Gufler [EMAIL PROTECTED
in $default$.junkmail
works wonders for me
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: marc catuogno [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, November 06, 2004 5:38 PM
Subject: [Declude.JunkMail] Suggestion: Most stringent test
the ability to index and search attachment content :-)
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Pete McNeil [EMAIL PROTECTED]
To: Matt [EMAIL PROTECTED]
Sent: Thursday, October 28, 2004 11:42 PM
Subject: Re[2]: [Declude.JunkMail
, its up
to you to keep adjusting your filters.
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Sheldon Koehler [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 28, 2004 1:29 PM
Subject: Re: [Declude.JunkMail] Spam getting through
I have seen an increase in volume the past week but have had very little
make it to the users
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Colbeck, Andrew [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 28, 2004 1:49 PM
Great article! Ipswitch wouldnt be the first company destroyed by an MBA,
they seem to be so enamoured with their MBA status that they overlook the
reason the company was succesful in the first place...
I bet the MBAs and Marketing people at Ipswitch ride to and from work in a
short bus
Rick
That is correct, declude virus processes before junkmail
I did look at quite a few zip viruses and didnt see any of them using the
Content-Type: application/x-zip-compressed in the mime info
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From
and remove attachments
would you? :-)
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Matt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, October 27, 2004 2:58 PM
Subject: Re: [Declude.JunkMail] Determining a BCC Recipient
That's
Thanks Sandy,
I will look into those, the boss wants me to do this on the cheap, the sql
idea was first so we could at least say we were archiving the email.
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Sanford Whiteman [EMAIL PROTECTED
of large attachments to deal with.
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Matt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, October 27, 2004 3:53 PM
Subject: Re: [Declude.JunkMail] Determining a BCC Recipient
That's funny
After all these suggestions I think concatenating the Q and D file and
maintaining a text file is a much better way to go, dtsearch definately
looks attractive.
Thanks again for the suggestions.
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message
from a utility to import Imail
users into workgroupshare, smells like marketing people to me.
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Mark E. Smith [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, October 26, 2004 4:46 AM
Subject
and I can be fairly
restrictive
I will see if I can get my configs somewhere for download, I am willing to
share my work because I hate spam and spammers so much... man do i hate
them.
Rick Davidson
National Systems Manager
North American Title Group
-
# Anti Anti-Spam
#
# This file is used
: Rick Davidson [EMAIL PROTECTED]
To: Undisclosed-Recipient:;
Subject: test
I assume the BCC info is lost once the message hits the senders SMTP server
correct?
Rick Davidson
National Systems Manager
North American Title Group
-
---
[This E-mail was scanned for viruses by Declude Virus (http
readjusting for
better catch rate and fewer false positives
This is how I do it.
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Chris Ulrich [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, October 25, 2004 10:37 AM
Subject
- Original Message -
From: Kevin Bilbee
We could also use MSSMTP as our gateway and what ever backend we want.
That would be a great option!
Rick Davidson
National Systems Manager
North American Title Group
-
---
[This E-mail was scanned for viruses by Declude Virus (http
is it actually necessary to use two tests?
Wouldnt DOW dow 6 0 2 0 work?
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Darin Cox [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, October 19, 2004 5:25 PM
Subject: Re: [Declude.JunkMail
I live in Cleveland so I am no stranger to baseball heart breaks, but one
thing Indians and Red Sox fans agree on is that we hate the Yankees!
I heard music to my ears on NPR this morning...
The Yankees are the only team in history to lose a 7 game series after
winning the first three games
Yes, including the html tags themselves
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Danny K [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, October 19, 2004 5:47 PM
Subject: [Declude.JunkMail] WordFilter BODY
Will a wordfilter
Can STOPALLTESTS be used in place of the weight in the global config?
For example:
SENDERDB ip4r pub.senderdb.net 127.0.0.2 STOPALLTESTS 0
Rick Davidson
National Systems Manager
North American Title Group
-
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com
whatever action in the junk.mail
file? I tried this and spam started slipping through that would have failed
prior to using that keyword
If I add STOPATFIRSTHIT to the top of my holding filters will it fail the
test on the first hit?
Rick Davidson
National Systems Manager
North American Title
positives from
blacklisting these ranges but I admin a private company. You would be
surprised how much junk comes from these two ranges.
REMOTEIP 0 CIDR 64.151.64.0/19
REMOTEIP 0 CIDR 69.59.128.0/18
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message
to counter this problem?
Rick Davidson
National Systems Manager
North American Title Group
-
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED
I pulled this from your header,
X-Mailer: Microsoft Office Outlook, Build 11.0.6353
I am not sure what the build number is for Outlook 2003 but that is what you
would want to look for, for example:
HEADERS -X CONTAINS Outlook, Build 11.0.
Rick Davidson
National Systems Manager
North American
I have seen an increase in graphic porn that only fails minor tests as well
hard to stop that stuff with the crazy misspellings they use
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Glenn Brooks [EMAIL PROTECTED]
To: [EMAIL PROTECTED
Its HEADERS
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Chris Patterson [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, July 19, 2004 12:05 PM
Subject: [Declude.JunkMail] Types of Filters
I have a myfilter test that has been
I messed around with this and found you can do the following
HEADERS 0 CONTAINS Subject: -- with two spaces after it
The header formating is Subject: with one space after it so theoreticly
add a second space in your filter rule and it will do what you want.
Rick Davidson
National Systems
yea it works, but I have been running a test with that today and havent
caught a single spam message but have caught over 30 legit messages...
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED
most of them look like web mailers or automated systems that have the
subject coded incorrectly with an extra leading space.
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent
I hold mail if the HELO matches my servers IP address, is there a situation
I am overlooking where this would be a bad idea?
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Kevin Bilbee [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday
I got nailed by that to i use BYPASSWHITELIST bypasswhitelist 30 4 0 0
first number is the weight and the second number is the number of
recipients, leave the other numbers 0
so if the message reached a weight of 30 and had four or more recipients the
whitelist would be bypassed.
Rick
.
version 1.79i6
Ideas?
Rick Davidson
National Systems Manager
North American Title Group
-
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED
or deletion
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Dave Doherty [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, June 17, 2004 8:18 AM
Subject: [Declude.JunkMail] Declude and attachments
Hi-
Many of my users are personnel
I am not sure which Imail release included the log anylizer, 8.1 I think, if
you have that version you can run the anylizer on your declude log files and
just select unknown log lines It is a dirty way to do it but it gives you
the info you are looking for
Rick Davidson
National Systems Manager
message rules to search those strings. You still have to recieve the mail
but you can decisively delete it or hold it.
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: John Moore (by way of R. Scott Perry [EMAIL PROTECTED])
[EMAIL PROTECTED
heh i learned the hard way with specialist as well
dont forget that declude will honor the space at the end of a filtering
string, .czspace should have been used... learned the hard way on that to
:-)
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message
:-)
your English is great its alot better than quite a few groups of people here
in the US
Rick Davidson
National Systems Manager
North American Title Group
440-953-9346 - Office
440-953-0925 - Fax
440-487-7344 - Mobile
[EMAIL PROTECTED]
-
- Original Message -
From: Gufler Markus [EMAIL
69.59.128.0/18
It seems to me that it could be pretty effective, have it run with the DNS
tests and before the filters so it could be used in testsfailed end lines
My list of URLs is getting huge and I am sure alot of them are obsolete now.
What do you think? Doable?
Rick Davidson
National Systems Manager
I downloaded the surbl code but have not implemented it yet cause of all the
monkey business associated with it, I am working on getting it going
thanks for that batch file!
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Scott Fisher
Many Thanks!
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Franco Celli [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, June 10, 2004 11:18 AM
Subject: Re: [Declude.JunkMail] COMBO-Filter solution for todays german
polite emails
Thanks again,
Can you send me the headers from Markus's email so I can figure out whats
grabbing his email, over the years he has been a useful contributor here so
I would like to see his posts
thanks for your time
Rick Davidson
National Systems Manager
North American Title Group
50 contains .cz
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Goran Jovanovic [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, June 09, 2004 11:01 AM
Subject: [Declude.JunkMail] Blacklist one Country for one Domain
Hi,
I have
You can do that in Imail on the SMTP Security tab
be careful doing that cause it will affect alot of legit mail where gateways
are used
for example my mail domian is nat.com but the mx records point to my
gateways which use the domain nat-mail.com
Rick Davidson
National Systems Manager
North
Cool, can you specify CIDR ranges like IP 0 IS x.x.x.x/x?
Rick Davidson
National Systems Manager
North American Title Group
440-953-9346 - Office
440-953-0925 - Fax
440-487-7344 - Mobile
[EMAIL PROTECTED]
-
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED
Is it me or did ARIN drop of the face of the Internet today?
Rick Davidson
National Systems Manager
North American Title Group
-
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just
else IP whois info is available?
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, June 02, 2004 12:36 PM
Subject: Re: [Declude.JunkMail] Where is ARIN?
Is it me or did
ARIN is alive again!
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Pete McNeil [EMAIL PROTECTED]
To: Glenn \\ WCNet [EMAIL PROTECTED]
Sent: Wednesday, June 02, 2004 1:43 PM
Subject: Re[2]: [Declude.JunkMail] Where is ARIN?
No problem
Is it possible to run the DNS RBL tests in a file other than the global
config file?
For example have them all in separate filter file that I can abort with
TESTFAILED END CONTAINS
Rick Davidson
National Systems Manager
North American Title Group
440-953-9346 - Office
440-953-0925 - Fax
440-487
o the simplicity of it all :-)
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Scott Fisher [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, May 28, 2004 11:21 AM
Subject: Re: [Declude.JunkMail] DNS tests in separate file?
You could
Make sure the system you are gatewaying for allows relay from the gateway
host.
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Bridges, Samantha [EMAIL PROTECTED]
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Wednesday, May 26, 2004 1:27
Can anybody point out reasons why it would be a bad idea for me to use this
line to stop filtering messages with file attachments? This is mainly for
PDF files which seem to get caught for strange reasons.
BODY END CONTAINS Content-Type: application/octet-stream
Rick Davidson
National Systems
of the search results?
Rick Davidson
National Systems Manager
North American Title Group
-
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type
Yep hotmail is not accepting from us either, I am seeing connection resets
from them
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Colbeck, Andrew [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, May 11, 2004 2:44 PM
Subject
Interesting, IANA recognizes them as a country, sure would be nice if Israel
and the rest of the non cyber world did to.
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday
Yea I understand that but I am catching words like p*nis and c*nt that
should have a heavy weight and for some reason it seems to be only PDF file
attachments. Just thought it would be possible to skip that portion of the
body due to the formating.
Rick Davidson
National Systems Manager
North
Thanks Matt, the trailing space trick will do...
I have the luxury of being tough on specific words so I am :-)
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Matt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, April 12, 2004 2:21
exceptions and then heavily penalize common relay countries such as korea,
china and poland and then assign full hold weight to countries that should
never be sending us mail. My spam dropped off significantly once I got it
tweaked right.
Sure would hate to loose the countries test
Rick Davidson
sweet!
that will work perfectly
thanks man!
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: System Administrator [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, April 09, 2004 2:17 PM
Subject: Re: [Declude.JunkMail] Whitelist
is incoming and what is outgoing in the config and junkmail file? I
only have one set of tests defined in each file assuming it will just go
with the outgoing, does it look for duplicates or line breaks to determine
which is incoming or outgoing?
Running current interim 30 and running imail8.05
Rick
You can use the Imail message rules to do that, search the ipswitch
knowledge base for how to
Rick Davidson
National Systems Manager
North American Title Company
-
- Original Message -
From: Brent Brashear [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, March 03, 2004 3:42 PM
Disabling the SMTP Fixup Protocol at the firewall disables ESMTP and allows
only SMTP
Anyone using Imail peering will not be able to disable ESMTP
Rick Davidson
Buckeye Internet Inc
www.buckeyeweb.com
440-953-1900 ext: 222
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED
Correct. It will disable SMTP AUTH as well
The fixup was added to IOS to allow ESMTP
its quite a pickle
Rick Davidson
Buckeye Internet Inc
www.buckeyeweb.com
440-953-1900 ext: 222
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, June 26
of these other DNS tests if they are pulling from a RBL we
are already querying? its like repeating the same test.
Would it make sense to have Declude check for this situation?
Rick Davidson
Buckeye Internet Inc
www.buckeyeweb.com
440-953-1900 ext: 222
---
[This E-mail was scanned for viruses
1 - 100 of 136 matches
Mail list logo
