[Declude.JunkMail] ENVFROM test
I could not find this test in the Junkmail Manual. I have a customer who is getting false negatives with this test. I wanted to see what triggers this but could not find any documentation. Could someone please fill me in? Thanks, Don --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] ENVFROM test
MAILFROM This test checks the SMTP envelope Mail From: address (which should be the sender of the E-mail) and makes sure that the domain name it is coming from is valid. This way, if mail is sent from [EMAIL PROTECTED], it will get caught (since $$$success$$$.com is not a valid domain). David B -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, February 28, 2008 12:59 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] ENVFROM test I could not find this test in the Junkmail Manual. I have a customer who is getting false negatives with this test. I wanted to see what triggers this but could not find any documentation. Could someone please fill me in? Thanks, Don --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] envfrom test
Then how about a test to check if the MAILFROM is syntax correct, meaning has some characters, the at sign, some characters, a period, and some more characters? This will be changed for the next release. I can't think of any other reason (aside from bounces, using ) that an address without an @ would be used in the return address. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] envfrom test
Hello Scott. FYI, I have seen some spam, maybe 5 out of 1500, that had only @ as the mail from address. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, January 01, 2004 10:48 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] envfrom test Then how about a test to check if the MAILFROM is syntax correct, meaning has some characters, the at sign, some characters, a period, and some more characters? This will be changed for the next release. I can't think of any other reason (aside from bounces, using ) that an address without an @ would be used in the return address. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] envfrom test
How come this does not fail the MAILFROM (envfrom) test? X-Declude-Sender: more [64.201.120.245] John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] envfrom test
How come this does not fail the MAILFROM (envfrom) test? X-Declude-Sender: more [64.201.120.245] Because Declude JunkMail automatically skips over usernames with no domains. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] envfrom test
Then how about a test to check if the MAILFROM is syntax correct, meaning has some characters, the at sign, some characters, a period, and some more characters? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, December 31, 2003 11:20 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] envfrom test How come this does not fail the MAILFROM (envfrom) test? X-Declude-Sender: more [64.201.120.245] Because Declude JunkMail automatically skips over usernames with no domains. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] envfrom test
Then how about a test to check if the MAILFROM is syntax correct, meaning has some characters, the at sign, some characters, a period, and some more characters? Seems to me that this would be appropriate to have as the default envfrom test behavior, with a LOOSENENVFROM ON option in case admins know that users at their site commonly send using unqualified usernames (which usually would be whitelistable using other means, yet in either case should be very rare). I can't think of a reason why external senders using unqualified usernames should be presumed innocent. Can anyone? --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[2]: [Declude.JunkMail] envfrom test
In this war on spam, if it is not clean, it is not presumed innocent, IMHO. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Wednesday, December 31, 2003 2:49 PM To: John Tolmachoff (Lists) Subject: Re[2]: [Declude.JunkMail] envfrom test Then how about a test to check if the MAILFROM is syntax correct, meaning has some characters, the at sign, some characters, a period, and some more characters? Seems to me that this would be appropriate to have as the default envfrom test behavior, with a LOOSENENVFROM ON option in case admins know that users at their site commonly send using unqualified usernames (which usually would be whitelistable using other means, yet in either case should be very rare). I can't think of a reason why external senders using unqualified usernames should be presumed innocent. Can anyone? --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
