[Declude.JunkMail] kill file

2003-11-15 Thread Danny Klopfer



I have .mx07.com in 
my kill file. Should it not kill the message below? I even stopped 
and restarted the smtp service.

Received: from 
mail04-platinum.mx07.com [209.66.76.69] by ncws.com with ESMTP 
(SMTPD32-8.03) id A4791D5500A6; Sat, 15 Nov 2003 14:11:05 -0800Received: 
(from [EMAIL PROTECTED])by 
mail04-platinum.mx07.com (8.8.8/8.8.8) id RAA65653;Sat, 15 Nov 2003 
17:05:40 -0500 (EST)Date: Sat, 15 Nov 2003 17:08:08 -0500 
(EST)Message-Id: [EMAIL PROTECTED]From: 
The Platinum List [EMAIL PROTECTED]


Re: [Declude.JunkMail] kill file

2003-11-15 Thread Matthew Bramble
Danny,

If you are using the fromfile functionality in Declude, it searches 
the MAILFROM (from the SMTP envelope given in HELO) and not the From 
address listed in the E-mail's headers.  I can certainly be different.  
You can get Declude to display this by adding the following line to your 
Global.cfg (on by default):

   XSENDERON

It could also be that the MAILFROM came in as @mx07.com, in which case 
.mx07.com would miss.  I'm not sure if that's what you were getting at 
though.

Matt

Danny Klopfer wrote:

I have .mx07.com in my kill file.  Should it not kill the message 
below?  I even stopped and restarted the smtp service.
 
Received: from mail04-platinum.mx07.com [209.66.76.69] by ncws.com 
with ESMTP
  (SMTPD32-8.03) id A4791D5500A6; Sat, 15 Nov 2003 14:11:05 -0800
Received: (from [EMAIL PROTECTED] mailto:[EMAIL PROTECTED])
 by mail04-platinum.mx07.com (8.8.8/8.8.8) id RAA65653;
 Sat, 15 Nov 2003 17:05:40 -0500 (EST)
Date: Sat, 15 Nov 2003 17:08:08 -0500 (EST)
Message-Id: [EMAIL PROTECTED] 
mailto:[EMAIL PROTECTED]
From: The Platinum List [EMAIL PROTECTED] 
mailto:[EMAIL PROTECTED]


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] kill file

2003-11-15 Thread Kevin Bilbee



What 
is the exact lin in the file

HELO 5 
CONTAINS .mx07.com

or


HELO 5 
IS .mx07.com

Ifitis'IS' then, no, if you use 'CONTAINS' or 
'ENDSWITH' then yes.

Check for a space at the 
end of the filter line with.mx07.comthat would cause it to fail if you used 
ENDSWITH


Kevin 
Bilbee

  -Original Message-From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]On Behalf Of Danny 
  KlopferSent: Saturday, November 15, 2003 2:20 PMTo: 
  [EMAIL PROTECTED]Subject: [Declude.JunkMail] kill 
  file
  I have .mx07.com 
  in my kill file. Should it not kill the message below? I even 
  stopped and restarted the smtp service.
  
  Received: from 
  mail04-platinum.mx07.com [209.66.76.69] by ncws.com with ESMTP 
  (SMTPD32-8.03) id A4791D5500A6; Sat, 15 Nov 2003 14:11:05 -0800Received: 
  (from [EMAIL PROTECTED])by 
  mail04-platinum.mx07.com (8.8.8/8.8.8) id RAA65653;Sat, 15 Nov 2003 
  17:05:40 -0500 (EST)Date: Sat, 15 Nov 2003 17:08:08 -0500 
  (EST)Message-Id: [EMAIL PROTECTED]From: 
  The Platinum List [EMAIL PROTECTED]


[Declude.JunkMail] kill file vs blacklist

2002-06-18 Thread Rick Davidson

A little food for thought on using the Imail kill file versus the declude
blacklist...

The Imail kill file refuses the mail at the SMTP level which may alert the
spammer that your blocking them. Not to mention that the cpu burden is put
on smtp32.exe instead of passing it off to declude.exe which we all
purchased to handle the spam to begin with. I don't know about you folks but
I have been retaliated against many times by spammers :-) and would rather
not anger them because they have already proven themselves to be
unscrupulous individuals.

It is my feeling that quietly accepting the mail and deleting it will defeat
and waste the spammers time more effectively. If they think they are
delivering their payload then they might not move on to other hosts so
readily.

just my 2 cents
thoughts?

Have a great day!
Rick Davidson
Buckeye Internet Services
www.buckeyeweb.com
440-953-1900
-

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] kill file vs blacklist

2002-06-18 Thread R. Scott Perry


If I use the DELETE option for emails that fail the test for my black
list, would that not server the same purpose? Plus make it a bit more
friendlier to my server?

It would serve the same purpose, *except* that the sender will not know 
what happened.  The load will be a little more than if the Kill List 
handled it, but less than if the E-mail were delivered.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] kill file vs blacklist

2002-06-18 Thread Tom

 I have been retaliated against many times by spammers :-) and 
 would rather not anger them because they have already proven 
 themselves to be unscrupulous individuals.

I have to agree, if we gave them a challenge they will try harder.
I would rather them not know what we are doing, though they may be
reading this right now. :o

Spooky.


Regards,
Tom




---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] kill file vs blacklist

2002-06-18 Thread J Porter

hmmm... decisions... decsions...
1. Let the spammer know we're fighting back in which case they might try
other tactics? or change tactics? or ??
or
2. Let them think we're an easy target so they keep on doing what they're
doing except more of it and even invite their buddies to join in.

I think I'd rather minimize the load and let the kill list do it's thing. I
want the spammers know I'm fighting back. Maybe they'll get the message that
I may bruise but I don't break and go find a different playground.

It's a battle that won't end any time soon, so I'd rather make them work for
it.

~JP~

- Original Message -
From: Rick Davidson [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 18, 2002 5:02 PM
Subject: [Declude.JunkMail] kill file vs blacklist


 A little food for thought on using the Imail kill file versus the declude
 blacklist...

 The Imail kill file refuses the mail at the SMTP level which may alert the
 spammer that your blocking them. Not to mention that the cpu burden is put
 on smtp32.exe instead of passing it off to declude.exe which we all
 purchased to handle the spam to begin with. I don't know about you folks
but
 I have been retaliated against many times by spammers :-) and would
rather
 not anger them because they have already proven themselves to be
 unscrupulous individuals.

 It is my feeling that quietly accepting the mail and deleting it will
defeat
 and waste the spammers time more effectively. If they think they are
 delivering their payload then they might not move on to other hosts so
 readily.

 just my 2 cents
 thoughts?

 Have a great day!
 Rick Davidson
 Buckeye Internet Services
 www.buckeyeweb.com
 440-953-1900
 -

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---

 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .
 ---
 [This E-mail scanned for viruses at HNB.com]



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .