RE: [Declude.JunkMail] Country code
Can you provide an IP that had this code ? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, July 04, 2007 12:57 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Country code I'm detecting a new country code *F. Can you enlighten me to what this is? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Country code
According to the whois at www.arin.net, 41.0.0.0/8 belings to AFRINIC, and if you go to www.afrinic.net and use the whois there, the numbers break down like this: 41.223.109.25 KE (Kenya) 41.207.19.204 CI(Cote d'Ivoire) 41.207.9.101 CI (Cote d'Ivoire) 41.207.2.163 CI (Cote d'Ivoire) 41.207.1.44 CI (Cote d'Ivoire) 41.221.17.90 DZ (Algeria) etc. So maybe this is just an error in the all_list.dat file. Original Message From: Scott Fisher [EMAIL PROTECTED] Sent: Thursday, July 05, 2007 11:11 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Country code Date Time Test FromDomain IP CountryCode 6/18/2007 6:38:50 AM COUNTRY-UNUSED goodvibesvideo.com 41.223.109.25*F 6/18/2007 4:00:28 AM COUNTRY-UNUSED reefreef.com 41.223.109.25*F 6/27/2007 6:52:38 AM COUNTRY-UNUSED yunishop.com 41.207.19.204*F 6/15/2007 5:29:54 AM COUNTRY-UNUSED farmprogress.com 41.207.9.101 *F 6/23/2007 1:07:05 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:03 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:05 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:02 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:02 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:06 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:00 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:01 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:08 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:06:54 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:22 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:06:53 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:06:54 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:06:54 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:06:45 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:06:53 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:00 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:08 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:02 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:06:54 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:13 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:25 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:22 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:22 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:08 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:08 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:05 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:21 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:23 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/24/2007 1:52:32 PM COUNTRY-UNUSED farmprogress.com 41.207.1.44 *F 6/18/2007 4:35:46 PM COUNTRY-UNUSED yahoo.fr 41.207.2.162 *F 6/10/2007 2:28:58 PM COUNTRY-UNUSED nospammail.net 41.221.17.90 *F 6/2/20073:31:37 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20072:56:14 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20072:56:13 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20072:56:14 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20072:56:14 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20072:56:14 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20072:56:31 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20073:02:02 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20073:02:07 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20072:56:14 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20073:35:02 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/2007
Re: [Declude.JunkMail] Country code
I believe that AFRINIC is a newer RR, an off-shoot of RIPE. Maybe the original data format that Declude uses didn't expect this, or maybe they are applying *F simply for anything from AFRINIC. Matt Gary Steiner wrote: According to the whois at www.arin.net, 41.0.0.0/8 belings to AFRINIC, and if you go to www.afrinic.net and use the whois there, the numbers break down like this: 41.223.109.25 KE (Kenya) 41.207.19.204 CI(Cote d'Ivoire) 41.207.9.101 CI (Cote d'Ivoire) 41.207.2.163 CI (Cote d'Ivoire) 41.207.1.44 CI (Cote d'Ivoire) 41.221.17.90 DZ (Algeria) etc. So maybe this is just an error in the all_list.dat file. Original Message From: Scott Fisher [EMAIL PROTECTED] Sent: Thursday, July 05, 2007 11:11 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Country code Date Time Test FromDomain IP CountryCode 6/18/2007 6:38:50 AM COUNTRY-UNUSED goodvibesvideo.com 41.223.109.25*F 6/18/2007 4:00:28 AM COUNTRY-UNUSED reefreef.com 41.223.109.25*F 6/27/2007 6:52:38 AM COUNTRY-UNUSED yunishop.com 41.207.19.204*F 6/15/2007 5:29:54 AM COUNTRY-UNUSED farmprogress.com 41.207.9.101 *F 6/23/2007 1:07:05 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:03 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:05 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:02 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:02 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:06 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:00 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:01 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:08 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:06:54 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:22 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:06:53 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:06:54 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:06:54 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:06:45 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:06:53 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:00 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:08 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:02 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:06:54 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:13 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:25 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:22 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:22 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:08 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:08 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:05 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:21 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/23/2007 1:07:23 AM COUNTRY-UNUSED yahoo.fr 41.207.2.163 *F 6/24/2007 1:52:32 PM COUNTRY-UNUSED farmprogress.com 41.207.1.44 *F 6/18/2007 4:35:46 PM COUNTRY-UNUSED yahoo.fr 41.207.2.162 *F 6/10/2007 2:28:58 PM COUNTRY-UNUSED nospammail.net 41.221.17.90 *F 6/2/20073:31:37 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20072:56:14 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20072:56:13 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20072:56:14 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20072:56:14 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20072:56:14 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20072:56:31 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20073:02:02 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20073:02:07 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/20072:56:14 AM COUNTRY-UNUSED yahoo.fr 41.207.4.221 *F 6/2/2007
RE: [Declude.JunkMail] Country code
Effing spammers? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Tuesday, July 03, 2007 9:57 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Country code I'm detecting a new country code *F. Can you enlighten me to what this is? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Country code
lol, I will have to find out Thursday as the office is closed today. I will post then. From: Colbeck, Andrew [EMAIL PROTECTED] Sent: Wednesday, July 04, 2007 3:37 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Country code Effing spammers? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Tuesday, July 03, 2007 9:57 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Country code I'm detecting a new country code *F. Can you enlighten me to what this is? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Country Code
Here are the special codes: # # Special Codes # #*1 Multi-Regional #*2 Europe #*3 North America #*4 Central/South America #*5 Pacific Rim #*A ARIN Unlisted (North America/South Africa) #*B Public Data Network #*E RIPE Unlisted (Europe, North Africa, Middle East) #*I Private IP #*L Loopback #*M Multicast #*P APNIC Unlisted (Asia Pacific) #*R IANA Reserved #*U Unknown Generally the 2 digit country codes are used. Add EU for European Union - Original Message - From: scott_powner To: declude.junkmail@declude.com Sent: Tuesday, December 05, 2006 9:54 AM Subject: [Declude.JunkMail] Country Code Ok - an oldie but a goodie: I was trying to display the actual country code in the header. I have the %countrychain% displaying but I seem to be missing a few country codes in my filter so I was trying to find out what codes the filter uses. Any ideas on how to display them? Thank you, Scott T Powner Scott T. Powner Director of Information Technology Midwestern Intermediate Unit IV 453 Maple St. Grove City, Pa. 16127 724.458.6700 ex 273 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
re: [Declude.JunkMail] Country Code
Declude has an entry in their Knowledge Base that lists the regions: http://support.declude.com/Customer/KBArticle.aspx?articleid=35KBSearchID=6746 As for country codes, the most official source is probably the IANA: http://www.iana.org/root-whois/index.html Thought they probably get their info from ISO 3166: http://www.iso.org/iso/en/prods-services/iso3166ma/02iso-3166-code-lists/list-en1.html The country codes change every so often. For example, the last change was in September 2006 when the country of Serbia and Montenegro (CS) was broken up into two elements, the Republic of Serbia (RS) and the Republic of Montenegro (ME). So if you have a filter for country codes, it is good to compare it to the ISO list for changes every so often. Gary Original Message From: scott_powner [EMAIL PROTECTED] Sent: Tuesday, December 05, 2006 11:11 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Country Code Ok - an oldie but a goodie: I was trying to display the actual country code in the header. I have the %countrychain% displaying but I seem to be missing a few country codes in my filter so I was trying to find out what codes the filter uses. Any ideas on how to display them? Thank you, Scott T Powner Scott T. Powner Director of Information Technology Midwestern Intermediate Unit IV 453 Maple St. Grove City, Pa. 16127 724.458.6700 ex 273 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Country Code test
KOREA-KR-UNITED STATES-destinationwould trigger COUNTRIES 1 IS KR But KOREA-KR-UNITED STATES-destination would not trigger COUNTRY 1 IS KR - Original Message - From: Kyle Fisher To: Declude.JunkMail@declude.com Sent: Friday, April 22, 2005 8:08 AM Subject: [Declude.JunkMail] Country Code test Can someone look at this header and tell me why it didnt fail my country code test for Korea, is it because the final country code was the US. Kyle Received: from new-murphey.tenet.edu [198.213.2.103] by esc5.net(SMTPD32-8.15) id A3D312F022A; Thu, 21 Apr 2005 21:39:15 -0500Received: (qmail 121684 invoked by uid 4244); 22 Apr 2005 02:39:15 -Delivered-To: [EMAIL PROTECTED]Received: (qmail 123298 invoked from network); 22 Apr 2005 02:39:14 -Received: from unknown (HELO 198.213.2.103) (168.126.18.65)by new-murphey.tenet.edu with SMTP; 22 Apr 2005 02:39:14 -Received: from dire5.fibertel.com.ar by mt84.fibertel.com.ar (7.0.015)id 405D7AEB00499223 for [EMAIL PROTECTED]; Fri, 22 Apr 2005 12:33:29 -0700From: "Y Helms Corp." [EMAIL PROTECTED]Date: Fri, 22 Apr 2005 22:34:29 +0300To: [EMAIL PROTECTED]Subject: Mr.$averMessage-Id: [EMAIL PROTECTED]X-Sender: [EMAIL PROTECTED]X-RBL-Warning: SD-STRONG-SPAMDOMAINS: Spamdomain '@hush.com' found: Address of [EMAIL PROTECTED] sent from invalid new-murphey.tenet.edu.X-Declude-Sender: [EMAIL PROTECTED] [198.213.2.103]X-Declude-Spoolname: D63D3012F022A3398.SMDX-Note: This E-mail was scanned by Region 5 ESC using Declude JunkMail for spam.X-Country-Chain: KOREA-KR-UNITED STATES-destinationX-Note: Total spam weight of this E-mail is 5X-Note: Spam tests: IPNOTINMX, NOLEGITCONTENT, SPFFAIL, SD-STRONG-SPAMDOMAINSX-Note: Reverse DNS: new-murphey.tenet.edu ([198.213.2.103])X-Note: HELO/EHLO Received: new-murphey.tenet.eduX-Note: Header code: eX-Note: Queue name: D63D3012F022A3398.SMDX-RCPT-TO: [EMAIL PROTECTED]Status: RX-UIDL: 398308930
RE: [Declude.JunkMail] Country Code test
Thanks. I will create a COUNTRIES filter with STARTSWITH Kyle From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Friday, April 22, 2005 10:36 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Country Code test COUNTRY will match only the connecting hop (prior to IPBYPASS settings) and should contain only one value. COUNTRIES will contain from the first to the last (connecting) hop, and you should be able to test for the first country with a STARTSWITH filter. Your filter didn't match because the connecting hop was US. The following filter would have hit if you were looking for Korea being the originating hop: COUNTRIES 5 STARTSWITH KR Alternatively, if you only wanted to know if Korea was anywhere in the chain, especially considering that some zombie spammers will forge headers to mask the true point of origination, you would do the following: COUNTRIES 5 CONTAINS KR Matt Kyle Fisher wrote: So are there different test for COUNTRIES and COUNTRY. I have my country-3point.txt test COUNTRY 5 IS KR Do I need another test for COUNTRIES? Kyle From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott Fisher Sent: Friday, April 22, 2005 8:52 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Country Code test KOREA-KR-UNITED STATES-destinationwould trigger COUNTRIES 1 IS KR But KOREA-KR-UNITED STATES-destination would not trigger COUNTRY 1 IS KR - Original Message - From: Kyle Fisher To: Declude.JunkMail@declude.com Sent: Friday, April 22, 2005 8:08 AM Subject: [Declude.JunkMail] Country Code test Can someone look at this header and tell me why it didnt fail my country code test for Korea, is it because the final country code was the US. Kyle Received: from new-murphey.tenet.edu [198.213.2.103] by esc5.net (SMTPD32-8.15) id A3D312F022A; Thu, 21 Apr 2005 21:39:15 -0500 Received: (qmail 121684 invoked by uid 4244); 22 Apr 2005 02:39:15 - Delivered-To: [EMAIL PROTECTED] Received: (qmail 123298 invoked from network); 22 Apr 2005 02:39:14 - Received: from unknown (HELO 198.213.2.103) (168.126.18.65) by new-murphey.tenet.edu with SMTP; 22 Apr 2005 02:39:14 - Received: from dire5.fibertel.com.ar by mt84.fibertel.com.ar (7.0.015) id 405D7AEB00499223 for [EMAIL PROTECTED]; Fri, 22 Apr 2005 12:33:29 -0700 From: Y Helms Corp. [EMAIL PROTECTED] Date: Fri, 22 Apr 2005 22:34:29 +0300 To: [EMAIL PROTECTED] Subject: Mr.$aver Message-Id: [EMAIL PROTECTED] X-Sender: [EMAIL PROTECTED] X-RBL-Warning: SD-STRONG-SPAMDOMAINS: Spamdomain '@hush.com' found: Address of [EMAIL PROTECTED] sent from invalid new-murphey.tenet.edu. X-Declude-Sender: [EMAIL PROTECTED] [198.213.2.103] X-Declude-Spoolname: D63D3012F022A3398.SMD X-Note: This E-mail was scanned by Region 5 ESC using Declude JunkMail for spam. X-Country-Chain: KOREA-KR-UNITED STATES-destination X-Note: Total spam weight of this E-mail is 5 X-Note: Spam tests: IPNOTINMX, NOLEGITCONTENT, SPFFAIL, SD-STRONG-SPAMDOMAINS X-Note: Reverse DNS: new-murphey.tenet.edu ([198.213.2.103]) X-Note: HELO/EHLO Received: new-murphey.tenet.edu X-Note: Header code: e X-Note: Queue name: D63D3012F022A3398.SMD X-RCPT-TO: [EMAIL PROTECTED] Status: R X-UIDL: 398308930 -- =MailPure custom filters for Declude JunkMail Pro.http://www.mailpure.com/software/=
RE: [Declude.JunkMail] Country Code for Palestine?
Hello, I was wondering if there was a way to decode the Mime encoding of a message so that I could build filters to catch the Vi*agra portion of the subject line. I'm included both what the subject line looks like in an e-mail client and what the internet headers of the message looks like. Thanks.. Subject: Overnight Delivery of L\evitra, Vi*agra, Phentermine Subject: =?iso-8859-1?B?T3Zlcm5pZ2h0IERlbGl2ZXJ5IG9mIExcZXZpdHJhLCBWaSphZ3JhLCBQaGVud GVybWluZQ==?= --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Country Code for Palestine?
I was wondering if there was a way to decode the Mime encoding of a message so that I could build filters to catch the Vi*agra portion of the subject line. I'm included both what the subject line looks like in an e-mail client and what the internet headers of the message looks like. The latest beta will automatically decode HTML MIME segments, and the latest interim will decode encoded subjects. The filters will automatically be applied to both the encoded and unencoded versions. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Country Code for Palestine?
Does anyone know what the Country Code for Palestine is? I just received an e-mail which Declude's X-COUNTRY-CHAIN identified as Palestine yet the official country code list, http://www.iana.org/cctld/cctld-whois.htmhttp://www.iana.org/cctld/cctld-whois.htm, makes no mention of Palestine. It's ps. Note that there may be some countries that do not have their own ccTLD, but that may have Internet access available to them (so they would not appear at the IANA URL). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Country Code for Palestine?
Thanks, Markus. But your file didn't contain the country code for Palestine. - Original Message - From: Markus Gufler To: [EMAIL PROTECTED] Sent: Monday, May 10, 2004 12:16 PM Subject: RE: [Declude.JunkMail] Country Code for Palestine? Hi Dan, Attached you can find a NON WORKING country filter file. At the end of every line you can find the full name of the country. Markus From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan GeiserSent: Monday, May 10, 2004 4:25 PMTo: [EMAIL PROTECTED]Subject: [Declude.JunkMail] Country Code for Palestine? All, Does anyone know what the Country Code for Palestine is? I just received an e-mail which Declude's X-COUNTRY-CHAIN identified as Palestine yet the "official" country code list, http://www.iana.org/cctld/cctld-whois.htm, makes no mention of Palestine. Thanks In Advance, Dan Geiser [EMAIL PROTECTED]
RE: [Declude.JunkMail] Country Code for Palestine?
COUNTRIES20CONTAINSps # Occupied Palestinian Territories (i.e., West Bank and Gaza Strip) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan GeiserSent: Monday, May 10, 2004 6:35 PMTo: [EMAIL PROTECTED]Subject: Re: [Declude.JunkMail] Country Code for Palestine? Thanks, Markus. But your file didn't contain the country code for Palestine.
OT- Re: [Declude.JunkMail] Country Code for Palestine?
Interesting, IANA recognizes them as a country, sure would be nice if Israel and the rest of the non cyber world did to. Rick Davidson National Systems Manager North American Title Group - - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, May 10, 2004 10:33 AM Subject: Re: [Declude.JunkMail] Country Code for Palestine? Does anyone know what the Country Code for Palestine is? I just received an e-mail which Declude's X-COUNTRY-CHAIN identified as Palestine yet the official country code list, http://www.iana.org/cctld/cctld-whois.htmhttp://www.iana.org/cctld/cctld- whois.htm, makes no mention of Palestine. It's ps. Note that there may be some countries that do not have their own ccTLD, but that may have Internet access available to them (so they would not appear at the IANA URL). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: OT- Re: [Declude.JunkMail] Country Code for Palestine?
Interesting, IANA recognizes them as a country, sure would be nice if Israel and the rest of the non cyber world did to. As I know Isreal in the meantime does recognize Palestine. The question is only how large PS is. ...and if things continue like last months if there will remain someone who can write emails from those countries. :-| Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Country Code for Palestine?
Thats interesting I thought their country code would be more representative of Palenstine. Perhaps .ter for terrorists! ;) Todd Holt Xidix Technologies, Inc Las Vegas, NV USA 702.319.4349 www.xidix.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Monday, May 10, 2004 8:45 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Country Code for Palestine? COUNTRIES20CONTAINSps # Occupied Palestinian Territories (i.e., West Bank and Gaza Strip) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Monday, May 10, 2004 6:35 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Country Code for Palestine? Thanks, Markus. But your file didn't contain the country code for Palestine.
