Re: [Declude.JunkMail] timeout test on Spam
I use a variant of Matt's badcountrynorevdns test to punish timeout's from spam haven countries: BadCountryREVDNSTimeout.txt: REVDNS END NOTIS (Timeout) COUNTRY 50 IS CN COUNTRY 50 IS KR COUNTRY 40 IS RU - Original Message - From: Imail Admin [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, March 01, 2005 3:18 PM Subject: [Declude.JunkMail] timeout test on Spam Hi All, We get a fair amount of spam that slips through without triggering anything (including Sniffer). I notice in the headers for these messages a line like the following: X-Note: This E-mail was sent from (timeout) ([213.213.213.56]). Should I be using the timeout as a test for spam? If so, how? Thanks, Ben BC Web --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] timeout test on Spam
That usually indicates your are having DNS issues. Are you sure your DNS server is healthy and responding to queries quickly? Darrell Imail Admin writes: Hi All, We get a fair amount of spam that slips through without triggering anything (including Sniffer). I notice in the headers for these messages a line like the following: X-Note: This E-mail was sent from (timeout) ([213.213.213.56]). Should I be using the timeout as a test for spam? If so, how? Thanks, Ben BC Web --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] timeout test on Spam
That's a good question about the DNS server. When I run the response test from dnsstuff.com, my DNS servers get graded as A or A-, which would seem to be OK. Also, the timeouts only seem to occur on spam. Ben - Original Message - From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, March 01, 2005 2:36 PM Subject: Re: [Declude.JunkMail] timeout test on Spam That usually indicates your are having DNS issues. Are you sure your DNS server is healthy and responding to queries quickly? Darrell Imail Admin writes: Hi All, We get a fair amount of spam that slips through without triggering anything (including Sniffer). I notice in the headers for these messages a line like the following: X-Note: This E-mail was sent from (timeout) ([213.213.213.56]). Should I be using the timeout as a test for spam? If so, how? Thanks, Ben BC Web --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] timeout test on Spam
Thanks Scott. Question: I'm not familiar with the NOTIS command; is that from Version 2 of JM? Ben - Original Message - From: Scott Fisher [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, March 01, 2005 1:38 PM Subject: Re: [Declude.JunkMail] timeout test on Spam I use a variant of Matt's badcountrynorevdns test to punish timeout's from spam haven countries: BadCountryREVDNSTimeout.txt: REVDNS END NOTIS (Timeout) COUNTRY 50 IS CN COUNTRY 50 IS KR COUNTRY 40 IS RU - Original Message - From: Imail Admin [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, March 01, 2005 3:18 PM Subject: [Declude.JunkMail] timeout test on Spam Hi All, We get a fair amount of spam that slips through without triggering anything (including Sniffer). I notice in the headers for these messages a line like the following: X-Note: This E-mail was sent from (timeout) ([213.213.213.56]). Should I be using the timeout as a test for spam? If so, how? Thanks, Ben BC Web --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] timeout test on Spam
NOTIS was introduced in 179i16 - Original Message - From: Imail Admin [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, March 01, 2005 4:49 PM Subject: Re: [Declude.JunkMail] timeout test on Spam Thanks Scott. Question: I'm not familiar with the NOTIS command; is that from Version 2 of JM? Ben - Original Message - From: Scott Fisher [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, March 01, 2005 1:38 PM Subject: Re: [Declude.JunkMail] timeout test on Spam I use a variant of Matt's badcountrynorevdns test to punish timeout's from spam haven countries: BadCountryREVDNSTimeout.txt: REVDNS END NOTIS (Timeout) COUNTRY 50 IS CN COUNTRY 50 IS KR COUNTRY 40 IS RU - Original Message - From: Imail Admin [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, March 01, 2005 3:18 PM Subject: [Declude.JunkMail] timeout test on Spam Hi All, We get a fair amount of spam that slips through without triggering anything (including Sniffer). I notice in the headers for these messages a line like the following: X-Note: This E-mail was sent from (timeout) ([213.213.213.56]). Should I be using the timeout as a test for spam? If so, how? Thanks, Ben BC Web --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
