[Declude.JunkMail] kill file
I have .mx07.com in my kill file. Should it not kill the message below? I even stopped and restarted the smtp service. Received: from mail04-platinum.mx07.com [209.66.76.69] by ncws.com with ESMTP (SMTPD32-8.03) id A4791D5500A6; Sat, 15 Nov 2003 14:11:05 -0800Received: (from [EMAIL PROTECTED])by mail04-platinum.mx07.com (8.8.8/8.8.8) id RAA65653;Sat, 15 Nov 2003 17:05:40 -0500 (EST)Date: Sat, 15 Nov 2003 17:08:08 -0500 (EST)Message-Id: [EMAIL PROTECTED]From: The Platinum List [EMAIL PROTECTED]
Re: [Declude.JunkMail] kill file
Danny, If you are using the fromfile functionality in Declude, it searches the MAILFROM (from the SMTP envelope given in HELO) and not the From address listed in the E-mail's headers. I can certainly be different. You can get Declude to display this by adding the following line to your Global.cfg (on by default): XSENDERON It could also be that the MAILFROM came in as @mx07.com, in which case .mx07.com would miss. I'm not sure if that's what you were getting at though. Matt Danny Klopfer wrote: I have .mx07.com in my kill file. Should it not kill the message below? I even stopped and restarted the smtp service. Received: from mail04-platinum.mx07.com [209.66.76.69] by ncws.com with ESMTP (SMTPD32-8.03) id A4791D5500A6; Sat, 15 Nov 2003 14:11:05 -0800 Received: (from [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]) by mail04-platinum.mx07.com (8.8.8/8.8.8) id RAA65653; Sat, 15 Nov 2003 17:05:40 -0500 (EST) Date: Sat, 15 Nov 2003 17:08:08 -0500 (EST) Message-Id: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] From: The Platinum List [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] kill file
What is the exact lin in the file HELO 5 CONTAINS .mx07.com or HELO 5 IS .mx07.com Ifitis'IS' then, no, if you use 'CONTAINS' or 'ENDSWITH' then yes. Check for a space at the end of the filter line with.mx07.comthat would cause it to fail if you used ENDSWITH Kevin Bilbee -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Danny KlopferSent: Saturday, November 15, 2003 2:20 PMTo: [EMAIL PROTECTED]Subject: [Declude.JunkMail] kill file I have .mx07.com in my kill file. Should it not kill the message below? I even stopped and restarted the smtp service. Received: from mail04-platinum.mx07.com [209.66.76.69] by ncws.com with ESMTP (SMTPD32-8.03) id A4791D5500A6; Sat, 15 Nov 2003 14:11:05 -0800Received: (from [EMAIL PROTECTED])by mail04-platinum.mx07.com (8.8.8/8.8.8) id RAA65653;Sat, 15 Nov 2003 17:05:40 -0500 (EST)Date: Sat, 15 Nov 2003 17:08:08 -0500 (EST)Message-Id: [EMAIL PROTECTED]From: The Platinum List [EMAIL PROTECTED]
[Declude.JunkMail] kill file vs blacklist
A little food for thought on using the Imail kill file versus the declude blacklist... The Imail kill file refuses the mail at the SMTP level which may alert the spammer that your blocking them. Not to mention that the cpu burden is put on smtp32.exe instead of passing it off to declude.exe which we all purchased to handle the spam to begin with. I don't know about you folks but I have been retaliated against many times by spammers :-) and would rather not anger them because they have already proven themselves to be unscrupulous individuals. It is my feeling that quietly accepting the mail and deleting it will defeat and waste the spammers time more effectively. If they think they are delivering their payload then they might not move on to other hosts so readily. just my 2 cents thoughts? Have a great day! Rick Davidson Buckeye Internet Services www.buckeyeweb.com 440-953-1900 - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] kill file vs blacklist
If I use the DELETE option for emails that fail the test for my black list, would that not server the same purpose? Plus make it a bit more friendlier to my server? It would serve the same purpose, *except* that the sender will not know what happened. The load will be a little more than if the Kill List handled it, but less than if the E-mail were delivered. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] kill file vs blacklist
I have been retaliated against many times by spammers :-) and would rather not anger them because they have already proven themselves to be unscrupulous individuals. I have to agree, if we gave them a challenge they will try harder. I would rather them not know what we are doing, though they may be reading this right now. :o Spooky. Regards, Tom --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] kill file vs blacklist
hmmm... decisions... decsions... 1. Let the spammer know we're fighting back in which case they might try other tactics? or change tactics? or ?? or 2. Let them think we're an easy target so they keep on doing what they're doing except more of it and even invite their buddies to join in. I think I'd rather minimize the load and let the kill list do it's thing. I want the spammers know I'm fighting back. Maybe they'll get the message that I may bruise but I don't break and go find a different playground. It's a battle that won't end any time soon, so I'd rather make them work for it. ~JP~ - Original Message - From: Rick Davidson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 18, 2002 5:02 PM Subject: [Declude.JunkMail] kill file vs blacklist A little food for thought on using the Imail kill file versus the declude blacklist... The Imail kill file refuses the mail at the SMTP level which may alert the spammer that your blocking them. Not to mention that the cpu burden is put on smtp32.exe instead of passing it off to declude.exe which we all purchased to handle the spam to begin with. I don't know about you folks but I have been retaliated against many times by spammers :-) and would rather not anger them because they have already proven themselves to be unscrupulous individuals. It is my feeling that quietly accepting the mail and deleting it will defeat and waste the spammers time more effectively. If they think they are delivering their payload then they might not move on to other hosts so readily. just my 2 cents thoughts? Have a great day! Rick Davidson Buckeye Internet Services www.buckeyeweb.com 440-953-1900 - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail scanned for viruses at HNB.com] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .