Re: [Declude.JunkMail] How accurate is spamcop

2004-04-28 Thread jcochran
 Is it safe to simply delete an email flagged with spamcop?

We weight SpamCop pretty high, but don't delete on it alone.  We hold 
on 10, delete on 30, and give SpamCop a 12.  We were deleting on 20, 
but as we tune the weights we find we need to bump that up to ensure 
we didn't push the filters too high.  Our goal is to delete on 20.

Jeff
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] How accurate is spamcop

2004-04-28 Thread jcochran
 Is it safe to simply delete an email flagged with spamcop?

We weight SpamCop pretty high, but don't delete on it alone.  We hold 
on 10, delete on 30, and give SpamCop a 12.  We were deleting on 20, 
but as we tune the weights we find we need to bump that up to ensure 
we didn't push the filters too high.  Our goal is to delete on 20.

Jeff
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] New Trojan

2004-04-27 Thread jcochran
There's a new trojan floating around with the subject of Osama bin 
Laden Captured and a link to photos which is actually a trojan.  So far 
easy enough to filter with JunkMail, but this has hit a number of law 
enforcement agencies and is apparently very tempting, a number of 
users have opened it.

Sigh...  You can warn them...  :)

Jeff Cochran
City of Naples, Florida
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] New Trojan

2004-04-27 Thread jcochran
 Is there a way to make two tests linked together?
 
 In this case the 
 
 SUBJECT   0   CONTAINSOsama bin Laden Captured
 
 And a 
 
 BODY  0   CONTAINSlink to pictures (whatever the
 link is)
 
 So for the test to trip both conditions would have to be true? In this
 case filtering on the SUBJECT will catch this mail but of course
 anything with the same text.

You can assign each a weight at or just over half your hold weight.  Maybe 
if you hold at 10:

SUBJECT 5   CONTAINSOsama bin Laden Captured
BODY5   CONTAINSlink to pictures...

I just used the subject as a hold in itself, using just Laden Captured but it 
all depends on how you want to handle it.  For us, holf=ding that should be 
a non-issue.  For you it may be.

Jeff

  Goran Jovanovic
  The LAN Shoppe
 
 
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
  [EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent:
  Tuesday, April 27, 2004 11:02 AM To: [EMAIL PROTECTED]
  Subject: [Declude.JunkMail] New Trojan
  
  There's a new trojan floating around with the subject of Osama bin
  Laden Captured and a link to photos which is actually a trojan.  So
 far
  easy enough to filter with JunkMail, but this has hit a number of
  law enforcement agencies and is apparently very tempting, a number
  of users have opened it.
  
  Sigh...  You can warn them...  :)
  
  Jeff Cochran
  City of Naples, Florida
  ---
  [This E-mail scanned for viruses by Declude Virus]
  
  ---
  [This E-mail was scanned for viruses by Declude Virus
  (http://www.declude.com)]
  
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found at
  http://www.mail-archive.com.
 
 [AUTOMATED NOTE: Your mail server [205.150.108.13] is missing a
 reverse DNS entry. All Internet hosts are required to have a reverse
 DNS entry. The missing reverse DNS entry will cause your mail to be
 treated as spam on some servers, such as AOL.]
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 ---
 [This E-mail scanned for viruses by Declude Virus]
 
 


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


CBL:RE: [Declude.JunkMail] Nameserver issues and Spam fighting

2004-04-23 Thread jcochran
  The easy answer to this is to use your own DNS servers -- if you do
 (and
  they are decent DNS servers; BIND is preferred), you won't be
  subject
 to
  the restrictions of ATT, Sprint, and others that block spam
  database lookups.
  
 Since we are running IMail (ie Windows) what is the performance of the
 Windows DNS service? I know that it works but how good/fast is it? If
 you are going to run a Windows DNS server would you recommend running
 it on the IMail box or on another one?

And for another viewpoint, having run both BIND and Windows DNS 
for years, I've migrated solely to Windows DNS.  DNS really isn't a big 
performance hog, so it runs fine on the iMail server itself, though you'll 
want a secondary for redundancy.  That's assuming you're not running 
iMail, IIS, SQL Server, Websphere and whatever else on the system 
as well.  :)

Jeff

(And actually, that's the config of my iMail server...)
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] CBL:Feature request

2004-04-20 Thread jcochran
Unless it already exists and I didn't notice...  :)

How about a log option to display the actual line of a filter file that 
triggered, not just the line number?  I may dink around with a filter file 
enough times during testing that the logs don't match the actual file by 
the time I review them.  Maybe something like:

Message Failed ADULTWORDS Test (Line 20 ANYWHERE 5 
CONTAINS Orgasm, WEIGHT 5)

Instead of:

Message Failed ADULTWORDS Test (Line 20, WEIGHT 5)

By the time I read the log, this is at line 31 and I'm adjusting the weight 
on whatever is now at line 20.  Maybe only Log Level HIGH.

(Unless it's available and I missed a config option...)

Jeff
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] CBL:Feature request

2004-04-20 Thread jcochran
 How about a log option to display the actual line of a filter file
 that triggered, not just the line number?
 
 Actually, at LOGLEVEL HIGH with the latest beta you should see the
 text that caused the E-mail to fail the filter.

Thank you.  :)

I should have realized you'd have thought of any improvements I might 
need.  Congratulations on the new organization, and I look forward to 
the future improvements in store from your new arrangement.  Like a 
manual...  :)

Jeff
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] something is up help

2004-03-25 Thread jcochran
  Subject: Re: Brochure
  X-RBL-Warning: SUBJECTFILTER: Message failed SUBJECTFILTER test
  (332)
 
 If you look at line 332 in the subjectfilter.txt file, it should have
 the text that caused the SUBJECTFILTER test to be triggered.
 
 This is whats on line 332
 SUBJECT 30 CONTAINS room
 
 I would try checking the lines just before and after that one, in case
 of a line numbering discrepancy.

On that note Scott, any chance that in a future version the actual line of 
text caught could be listed in the failure?  Like:

Message failed SUBJECTFILTER (332 room)

Or if not in the headers, how about in the log, maybe at only HIGH 
level?  Sure would help when tuning filters since I might add a half 
dozen lines to a filter between when the message failed and I look at 
the SPAM folder.

Thanks for Declude whether you do this or not.  :)

Jeff

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Manual

2004-01-23 Thread jcochran
 Seems that there is a lot of chatter on the mailing list right now
 with tests etc that are not in the manual. I am curious will a new
 manual be released, or does anyone have any good explanations of some
 of these tests on their sites?
 
 The general rule of thumb is that the manual is updated to include new
 tests (and other features) whenever a released version comes out.  For
 betas (and interim releases), the features are discussed on the list.

Scott, for what it's worth, our Declude maintenance is up for renewal, 
and one of the questions I got asked was when there would be an 
updated printed manual that our less-experienced admins could 
understand.  Don't worry, the maintenance will definitely get paid, but 
now one of my tasks in my free time is to write an admin manual for 
our staff for Declude's products.

Food for thought as some/many of the features of Declude are 
becoming more regularly available from competitors and even 
Ipswitch.

Jeff
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Nigerian Filter Creator Helper

2004-01-23 Thread jcochran
 Why not use Kami's Nigerian Filter?  He's done all of the work for
 you. Just remember to thank him.

That sounds interesting, how about a pointer to Kami's site/email/etc.?  
(Or am I just too far out of it and missed the obvious location 
somehwere...?)

Thanks, and in advance, thanks to Kami and everyone who has 
created a filter which I might ever use or use for inspiration.

Jeff


  -Original Message-
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser
  Sent: Wednesday, December 31, 2003 12:15 PM To:
  [EMAIL PROTECTED] Subject: [Declude.JunkMail] Nigerian
  Filter Creator Helper
  
  
  Hello, All,
  I'm looking for a type of utility that either specifically 
  was written to do
  what I describe below or a utility which is a broad-based text
  massaging/manipulation utility which could be twisted to do 
  the following.
  
  I would like a utility that I could feed the bodies of 
  nigerian scam letters
  into and it would basically create a list of all phrases of 
  world length X
  to Y where X and Y are both numbers.  It would capture 
  information from each
  scam letter that I feed in and would generate an ordered list 
  of each time
  the X to Y word length phrase appears in each letter.
  
  So, for example, if my X and Y were 3 and 5 it would generate 
  a list of all
  3 word, 4 word and 5 word phrases found in each message.  
  Then it would add
  1 to the tally of each time this phrase is found in any given unique
  nigerian scam letter.  After I submit a certain letters, e.g. 20
  (?), I would have a list of very commonly found phrases in Nigerian
  scam letters. I could then create a custom filter for DJM based on
  those phrases.
  
  Ultimately my filter might look something like...
  
  # JunkMail.Filter.Nigerian.txt
  
  BODY 10 CONTAINS Nigerian Federal Ministry
  BODY 10 CONTAINS prayed for ALLAHS devine mercies
  BODY 10 CONTAINS shores of Nigeria
  BODY 10 CONTAINS we solicit for your
  
  I was hoping that their might be a small utility that some of 
  the Nigerian
  scam fighting organizations had released to generate keyphrase
  lists.
  
  Does this sound like a decent idea?  Are there any good 
  utilities to do
  this?  Or is this something I'd have to write myself?  Would it be
  prohibitively complicated to write a program like this for a person
  who hasn't done much programming?  Or is this pretty
  straightforward?
  
  Thanks In Advance,
  Dan
  
  --
  -
  Sign up for virus-free and spam-free e-mail with Nexus 
  Technology Group 
  http://www.nexustechgroup.com/mailscan
  
  ---
  [This E-mail was scanned for viruses by Declude Virus 
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 ---
 [This E-mail scanned for viruses by Declude Virus]
 
 


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Design Concept/Process Question

2003-12-17 Thread jcochran
Okay, we've been using Declude quite successfully for some time, and 
we're finally trying to clean up all the original mistakes and misuses 
and misconfigurations.  :)

I'm looking for suggestions on how others handle some situations and 
setup.

Currently we use a WORDFILTER to delete messages with specific 
words in subject or body.  Such as that V drug that helps some men.  
Occasionally, we get a legitimate message deleted due to this.  We 
also delete for high weights as well.  I'm thinking of instead of deleting, 
moving these messages to a folder for temporary storage and using a 
scheduled task to delete anything more than seven days old.  Is this 
similar to what others are doing or is there a better way I might 
consider?

Thanks,

Jeff
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] .pif.htm attachments

2003-08-28 Thread jcochran
 Is anyone else seeing mails come through with a document_9446.pif.htm
 attachments intact?

No.  But then I do a delete using a WORD FILTER for 
document_9446.  :)

I also block attachments in iMail, so we trap a number of these types 
there as well as in JunkMail.

Jeff
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] VIAGRA won't die

2003-06-25 Thread jcochran
 Apparently, this means Generic Viagra as revealed in the Declude Log
 file:
 
  =?iso-8859-1?B?R2VuZXJpYyBWaWFncmE=?=
 
 What can you do about obfuscated subjects using ISO character sets? I
 was thinking of filtering them based on partial string, like this:
 
 SUBJECT 30 CONTAINS =?iso-8859
 
 Is it safe to filter this? In other words, would a legitimate or
 casual sender ever use such a method to display a subject? Is there a
 list of ISO charcter sets that can be filtered?

We have several automated systems that send us email using ISO 
character sets, and I wish I had an easy method to filter this stuff too. 
The best we've come up with has been WORDFILTER on subject 
and/or body, which catches most.

Except I didn't know there were so many ways to spell V-1-A-G-R-A...  
:)

Jeff
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Whitelist subject?

2003-06-24 Thread jcochran
 I have a situation where email from a particular mailing list is
 failing a test for which I HOLD.  I can't whitelist the domain or
 address as the domain provides plenty of SPAM and the address changes
 (they use a bounce FROM address on the list that includes the
 receipient's account).  But the list messages all arrive with the
 list name in the subject line similar to [Declude.JunkMail].  I'd
 like to bypass JunkMail tests on these messages, is there a method I
 haven't figured out yet to bypass based on a match in the SUBJECT? 
 Or is there a better method?
 
 The latest beta version will let you use a line such as WHITELIST
 SUBJECT [Declude.JunkMail] in the \IMail\Declude\global.cfg file.  If
 you aren't using the latest beta, you can use WHITELIST ANYWHERE
 [Declude.JunkMail] (which is a bit more CPU intensive).

Cool.  Grabbing latest Beta now...  :)

Jeff
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Whitelist subject?

2003-06-24 Thread jcochran
I didn't think of that solution, thanks.  Though I may have an issue from 
one of the mailing lists, since we HOLD from that domain, but it may 
work on other issues I have.

Jeff

 Also, if you have the PRO version, you can set up a filter file and
 then filter on SUBJECT -50 CONTAINS ?
 
 John Tolmachoff MCSE CSSA
 Engineer/Consultant
 eServices For You
 www.eservicesforyou.com
 
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
  [EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, June
  20, 2003 8:38 AM To: [EMAIL PROTECTED] Subject: Re:
  [Declude.JunkMail] Whitelist subject?
  
  
  I have a situation where email from a particular mailing list is
  failing
 a
  test for which I HOLD.  I can't whitelist the domain or address as
  the domain provides plenty of SPAM and the address changes (they
  use a bounce FROM address on the list that includes the
  receipient's account).  But the list messages all arrive with the
  list name in the subject line similar to [Declude.JunkMail].  I'd
  like to bypass JunkMail tests on these messages, is there a method
  I haven't figured out yet to bypass based on a match in the
  SUBJECT?  Or is there a better method?
  
  The latest beta version will let you use a line such as WHITELIST
  SUBJECT [Declude.JunkMail] in the \IMail\Declude\global.cfg file. 
  If you aren't using the latest beta, you can use WHITELIST ANYWHERE
  [Declude.JunkMail] (which is a bit more CPU intensive).
  
-Scott
  ---
  Declude JunkMail: The advanced anti-spam solution for IMail
  mailservers. Declude Virus: Catches known viruses and is the leader
  in mailserver vulnerability detection. Find out what you have been
  missing: Ask for a free 30-day evaluation.
  
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
  
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found at
  http://www.mail-archive.com.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 ---
 [This E-mail scanned for viruses by Declude Virus]
 
 


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Whitelist subject?

2003-06-20 Thread jcochran
I have a situation where email from a particular mailing list is failing a 
test for which I HOLD.  I can't whitelist the domain or address as the 
domain provides plenty of SPAM and the address changes (they use a 
bounce FROM address on the list that includes the receipient's 
account).  But the list messages all arrive with the list name in the 
subject line similar to [Declude.JunkMail].  I'd like to bypass JunkMail 
tests on these messages, is there a method I haven't figured out yet to 
bypass based on a match in the SUBJECT?  Or is there a better 
method?

Thanks,

Jeff
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Need Some Advise

2003-01-21 Thread jcochran
 Discussion being continued off-list unless anyone else is interested..

I'd be interested, but could be included off-list if nobody else is...

Jeff Cochran
City of Naples, Florida
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] More more !--UserID--

2003-01-16 Thread jcochran
 SpamChk takes care of this.
 There is a parameter FakedHTMLComments that searches for repeated
 html-comments like !--xyz-- where xyz is even the same. This
 should not trigger html-comments in certain newsletters.

Caught this late, what is SpamChk...?

 Additional SpamChk removes all HTML-Tags before the Keyword-search
 begin.

I would think a simple stripping of all HTML comments from mail 
before JunkMail processing would take care of this.  Is this 
something that has been considered?  I realize the load it may 
make on heavier traffic systems.

BTW, thanks Scott for Declude products.  Just filled out the credit 
card for another year's service agreement. So far, had only one 
occasion to email for support, but you're worth the money.  
Besides, our budget got lopped for all kinds of other stuff, if we 
don't spend what we *do* have allocated we won't get it next year... 
 :)

Jeff
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Message Sniffer Confidence

2002-11-12 Thread jcochran
 That is exactly what we do...  But we don't delete weight20, we route
 it to a mail box, that way if a customer calls, we can retrieve the
 email, look at all the test it failed, if it needs whitelisted, we can
 do that, and then forward the message on...  We've had 0 problems with
 it!! -Russ

What about forwarding to a second mailbox for the client and 
allowing them to look it up or delete it?

Jeff
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Feedback

2002-11-05 Thread jcochran
 We are a small ISP in Southeastern Massachusetts. We presently use
 IMail as our mail server platform.  Would be interested to here from
 some folks who've used Declude's JunkMail software (Opinions). Any
 feedback would be appreciated.

Phenomenal.  After some tuning and testing, we now delete about 
98% of all junk mail automatically.  Another 1-2% gets hand sorted 
and the occasional one slips through.  We are not an ISP, and 
don't use Declude Junkmail or Virus on multiple mail domains, so 
you may want to seek opinions on those aspects.

With iMail's filters, we caught about 50% of the junk mail, and 
spent a lot of time hand sorting.

Jeff
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



BLARSBL:Re: [Declude.JunkMail] Wish List

2002-05-22 Thread jcochran

 Would it not be great if we could assign an e-Mail or a number of
 e-Mails that if someone sends a message to they will automatically
 get blacklisted?  This would immediately save all the junk they will
 manage to send through.
 
 It is a good idea.  The question though is what to block -- the remote
 mailserver, the return address, or something else?

One thing I've always done is add a bogus email account to our 
web pages which have contact info.  Anything sent to that account 
is from having our addresses scraped from the web site, so I know 
it's a spam list.

Perhaps a possibility create a blocked sender or blocked mail 
server based upon a destination address?

The other cool addition would be a method to date blacklist entries, 
any entry could be blocked for 90 days from an inception date for 
example.  I could use some scripting techniques to add temporary 
blocks to the list that way.

Okay, just dreaming I guess, still a great product.

Thanks,

Jeff
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.JunkMail] BLARS:Newbie, possibly dumb question

2002-02-18 Thread jcochran

Now that I'm getting a handle on Declude, when I have email on 
hold in the Spam folder, can I just move the file in Windows 
Explorer to the \\Imail\spool folder to have it delivered?  I have a few 
items that are getting caught while I adjust the test processes that 
I need to send back out.

Jeff
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] BLARS:Newbie, possibly dumb question

2002-02-18 Thread jcochran

 Now that I'm getting a handle on Declude, when I have email on
 hold in the Spam folder, can I just move the file in Windows
 Explorer to the \\Imail\spool folder to have it delivered?
 
 Yes -- but you need to make sure to copy both files (the D*.SMD file
 that has the contents of the E-mail, as well as the Q*.SMD file that
 has the list of recipients).

Gotcha.  That's why my tests weren't working the way I thought 
they should.

Thanks,

Jeff
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .