RE: [Declude.JunkMail] Declude JunkMail v1.78 (beta) released

2004-02-20 Thread Mark Smith
Scott,
Are the additions in the 1.77i release for SKIPIFWEIGHT and MAXWEIGHT
included in 1.78 beta?
Just want to make sure I don't break my Gibberish tests. :)

Thanks!

Mark


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of R.
 Scott Perry
 Sent: Wednesday, February 18, 2004 2:51 PM
 To: [EMAIL PROTECTED]
 Subject: [Declude.JunkMail] Declude JunkMail v1.78 (beta) released

 We have just released Declude JunkMail v1.78 (beta).  See
 http://www.declude.com/junkmail/manual.htm .  Notable changes
 since the last beta include:

  o JM FIX IPBYPASS limit increased from 20 to 100 entries.
  o JM FIX fromfile test type will now stop
 processing at first match.
  o JM FIX BADHEADERS test will no longer fail if To:
 not present but Bcc: is.
  o JM FIX Tests with DUHL in the name will now be
 skipped after first hop..
  o JM FIX HTML code removal will now work with CRLFs
 in HTML tags.
  o JM FIX Fixes an issue with recipients in E-mails
 sent from IMail
 v8 web messaging.
  o JM FIX LOGLEVEL LOW will now have 1 line with
 tests that fail (HELOBOGUS=WARN SPAMCOP=DELETE, etc.).
 LOGLEVEL HIGH will have the old one line per test, with the
 warning message.
  o JM FIX MAILFROM test will now catch just username.
  o JM ADD DOMAINWHITELISTS ON option, to allow for
 per-domain whitelist files at
 \IMail\Declude\example.com\whitelist.txt.
  o JM ADD New tests dow and hour, to allow hour
 and day-of-week detection.  IE HOUR hour 9 16 0 0 for local
 9AM-4:59PM.  DOW dow 1 5 0 0 for Monday through Friday.
  o JM ADD Adds TESTSFAILED searching for filters (for
 tests that have already run).  For example, TESTSFAILED END
 CONTAINS SPAMCOP.
  o JM ADD New test spf added for SPF support.
  o JM ADD Filters can now have WHITELIST command to
 whitelist an E-mail (SUBJECT WHITELIST CONTAINS [Declude.JunkMail])
  o JM ADD Adds NOTENDSWITH option to filters (REVDNS
 0 NOTENDSWITH .aol.com).
  o JM ADD Adds CIDR option to filters (REMOTEIP 0
 CIDR 192.0.2.0/24).
  o JM ADD Adds CMDSPACE test to help detect spamware
 in SMTP commands.
  o JM ADD Now will decode encoded subjects (for use
 in filters).

 Other additions and fixes can be found in the release notes,
 at http://www.declude.com/relnotes.htm . Anyone with an
 up-to-date Service Agreement is entitled to free upgrades
 (see http://www.declude.com/agree.htm for information on the
 Declude Service Agreement).

 ---

 Quick Resource Reference:

 Tech Support:  [EMAIL PROTECTED]
 Mailing List: Send E-mail to [EMAIL PROTECTED] with subscribe
 declude.junkmail your name in the body
 New Releases List: Send E-mail to [EMAIL PROTECTED] with
 subscribe
 declude.releases your name in the body
 Troubleshooting: See manual URL above; look at
 Troubleshooting section
 Emergency Uninstall:  See manual URL above; look at
 Emergency Uninstall
 section
 Urgent Support: urgent @declude.com (for
 urgent/time-sensitive issues only)
 Declude Addons/Tools URL: http://www.declude.com/tools
 Manual: http://www.declude.com/junkmail/manual.htm

 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Declude JunkMail v1.78 (beta) released

2004-02-20 Thread R. Scott Perry

Are the additions in the 1.77i release for SKIPIFWEIGHT and MAXWEIGHT
included in 1.78 beta?
Just want to make sure I don't break my Gibberish tests. :)
Yes.  We only keep one copy of the code, which means that once something 
makes it to an interim release, it will appear in the next beta (except for 
very rare cases where we may decide to remove a feature that was added to 
an interim).

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Declude JunkMail v1.78 (beta) released

2004-02-19 Thread System Administrator
on 2/18/04 2:51 PM, R. Scott Perry wrote:

o JM ADD New test spf added for SPF support.

How do you turn off the separate logs for spf (spf.log and spf.none)?

Greg

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Declude JunkMail v1.78 (beta) released

2004-02-19 Thread R. Scott Perry

o JM ADD New test spf added for SPF support.

How do you turn off the separate logs for spf (spf.log and spf.none)?
Not yet.  The spec for SPF still isn't completely frozen yet.  After the 
spec is frozen and we make the necessary changes, we will either remove 
those log files or have an option for disabling them.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Declude JunkMail v1.78 (beta) released

2004-02-18 Thread R. Scott Perry
We have just released Declude Virus v1.78 (beta).  See 
http://www.declude.com/junkmail/manual.htm .  Notable changes since the 
last beta include:

o AV FIX Had an internal limit of 20 forging viruses; changed to 200.
o AV FIX Prevents false positives where begin  followed by . 
causes uudecoding to occur.
o AV FIX Prevents notifications from being sent out with the 
Outlook CR Vulnerability, if an unusual RCPT TO: occurred with an LF in it.
o AV FIX Fixes an issue where if 2nd virus scanner reported 
filename (not number), it would be used instead of good filename from 
first scanner.

Other additions and fixes can be found in the release notes, at 
http://www.declude.com/relnotes.htm . Anyone with an up-to-date Service 
Agreement is entitled to free upgrades (see 
http://www.declude.com/agree.htm for information on the Declude Service 
Agreement).

---

Quick Resource Reference:

Tech Support:  [EMAIL PROTECTED]
Mailing List: Send E-mail to [EMAIL PROTECTED] with subscribe 
declude.junkmail your name in the body
New Releases List: Send E-mail to [EMAIL PROTECTED] with subscribe 
declude.releases your name in the body
Troubleshooting: See manual URL above; look at Troubleshooting section
Emergency Uninstall:  See manual URL above; look at Emergency Uninstall 
section
Urgent Support: urgent @declude.com (for urgent/time-sensitive issues only)
Declude Addons/Tools URL: http://www.declude.com/tools
Manual: http://www.declude.com/junkmail/manual.htm

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Declude JunkMail v1.78 (beta) released

2004-02-18 Thread [EMAIL PROTECTED]
Looks good Scott,


 o JM FIX IPBYPASS limit increased from 20 to 100 entries.

-Liking this, I'm up to 18



 o JM ADD DOMAINWHITELISTS ON option, to allow for per-domain whitelist
files at \IMail\Declude\example.com\whitelist.txt.

-looks easy enough, can't wait to try it!



 o JM ADD New tests dow and hour, to allow hour and day-of-week
detection.  IE HOUR hour 9 16 0 0 for local 9AM-4:59PM.  DOW dow 1 5 0 0
for Monday through Friday.

-reminds me of a old dialog we had here, anyone have ideas on how best to
use it?



 o JM ADD Adds TESTSFAILED searching for filters (for tests that have
already run).  For example, TESTSFAILED END CONTAINS SPAMCOP.


-Do I understand this correctly, just build FILTER entries that reference
stand alone tests and put them at the top of every FILTER file?



 o JM ADD Adds CMDSPACE test to help detect spamware in SMTP commands.

-Is this a stand alone test like BADHEADERS?



 o JM ADD Now will decode encoded subjects (for use in filters).

-Very nice   :)



Dan


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Declude JunkMail v1.78 (beta) released

2004-02-18 Thread R. Scott Perry

 o JM ADD Adds TESTSFAILED searching for filters (for tests that have
already run).  For example, TESTSFAILED END CONTAINS SPAMCOP.
-Do I understand this correctly, just build FILTER entries that reference
stand alone tests and put them at the top of every FILTER file?
That would work fine.

As Matt pointed out, you can also use this to create groups of tests -- for 
example, a DIALUPS filter that will be triggered if any of several 
dialup-based spam test (DUL, SORBS-DUHL, etc.) gets triggered.  That way, 
you can have E-mail that fails any of a group of tests have the same weight 
applied, no matter how many of the tests it fails.

 o JM ADD Adds CMDSPACE test to help detect spamware in SMTP commands.

-Is this a stand alone test like BADHEADERS?
Yes.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.