RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-03 Thread R. Scott Perry

Since we house mulitple domains (using spam filtering) and this 
filter test is used in the Global file it seems it would fail every other 
domain email (i.e. 1000 weight) that we house on the same box?!  Is there 
a way to only define it for use in the default config file for that 
domain (we have the pro version), thus not be used for other 
domains?  Thanks again for the aid.
Unfortunately, there isn't any way to have different weights applied to 
different domains.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-03 Thread George Kulman
Scott,

Could this be done with some form of DNS based test where the test result(s)
are only used in the $default$.junkmail for the specific domain?

George

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of R. 
 Scott Perry
 Sent: Wednesday, September 03, 2003 7:55 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Need aid on Declude Header rule
 
 
 
  Since we house mulitple domains (using spam 
 filtering) and this 
  filter test is used in the Global file it seems it would 
 fail every other 
  domain email (i.e. 1000 weight) that we house on the same 
 box?!  Is there 
  a way to only define it for use in the default config file for that 
  domain (we have the pro version), thus not be used for other 
  domains?  Thanks again for the aid.
 
 Unfortunately, there isn't any way to have different weights 
 applied to 
 different domains.
 
 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail 
 mailservers.
 Declude Virus: Catches known viruses and is the leader in mailserver 
 vulnerability detection.
 Find out what you have been missing: Ask for a free 30-day evaluation.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread R. Scott Perry

I have a customer who only wants to get email to a list of valid
employees, no one else (i.e. ex-employees).  However, the list of
ex-employees is too long for him to come up with, thus he gave me the
list of valids.  I looked, but I don't think Declude has a HEADER tag
called DOESNOT CONTAIN, does anyone have any suggestions.
Even that wouldn't work.  For example, if you had a DOESNOTCONTAIN option 
available to you, then an E-mail would have to be sent to *all* the valid 
employees in order not to fail the test (for example, if you have 
DOESNOTCONTAIN user1 and DOESNOTCONTAIN user2, it would be triggered if 
an E-mail was sent to user1 (since the E-mail does not contain user2).

What you could try is a filter using CONTAINS, and then give the test a 
negative weight (perhaps a weight of -1000).

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Keith Johnson
Scott,
The problem with using the CONTAINS is that I would have to have
a list of the ex-employees and the only list he can put together is the
good employees.  Thus if I used the CONTAINS I would be hitting good
employee email.  Any other suggestions, thanks for your time.

Keith


What you could try is a filter using CONTAINS, and then give the test
a 
negative weight (perhaps a weight of -1000).
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Keith Johnson
Karen,
My bad, I failed to mention this is a Store and Forward
domain...

Keith

-Original Message-
From: Karen D. Oland [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 02, 2003 12:07 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Need aid on Declude Header rule


Delete the nobody alias.  Then, only valid email in his domain will be
accepted.  Delete all old employees not on the list of valid names you
just received from the domain.

 -Original Message-
 From: Keith Johnson
   The problem with using the CONTAINS is that I would have to have
a 
 list of the ex-employees and the only list he can put together is the 
 good employees.  Thus if I used the CONTAINS I would be hitting good 
 employee email.  Any other suggestions, thanks for your time.

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Karen D. Oland
Delete the nobody alias.  Then, only valid email in his domain will be
accepted.  Delete all old employees not on the list of valid names you just
received from the domain.

 -Original Message-
 From: Keith Johnson
   The problem with using the CONTAINS is that I would have to have
 a list of the ex-employees and the only list he can put together is the
 good employees.  Thus if I used the CONTAINS I would be hitting good
 employee email.  Any other suggestions, thanks for your time.

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Karen D. Oland
Keith,

What about at the client end? Could he not filter at his mail server to
refuse mail for non-local users?

It sounds like you need a to version of MAILFROM -- then you could delete
all those that failed the test.  Perhaps a domain rule that tests for each
of his vlalid user names and adds 100 pts if it fails?

Karen

 -Original Message-
 From: Keith Johnson

 Karen,
   My bad, I failed to mention this is a Store and Forward
 domain...

 Keith

 -Original Message-
 From: Karen D. Oland

 Delete the nobody alias.  Then, only valid email in his domain will be
 accepted.

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread R. Scott Perry
CONTAINS *would* work in this way.  For example:

HEADERS  -1000  CONTAINS  [EMAIL PROTECTED]
HEADERS  -1000  CONTAINS  [EMAIL PROTECTED]
...
In this case, an E-mail with [EMAIL PROTECTED] in the headers 
would always receive a weight less than 0.  You can then create a WEIGHT0 
test that would delete all E-mail with a weight of 0 or higher.
   -Scott

At 11:45 AM 9/2/2003, Keith Johnson wrote:
Scott,
The problem with using the CONTAINS is that I would have to have
a list of the ex-employees and the only list he can put together is the
good employees.  Thus if I used the CONTAINS I would be hitting good
employee email.  Any other suggestions, thanks for your time.
Keith

What you could try is a filter using CONTAINS, and then give the test
a
negative weight (perhaps a weight of -1000).
---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Keith Johnson
Scott,
SWEET, that is a great idea, I'll give it a go, you are the man.

Keith Johnson


CONTAINS *would* work in this way.  For example:

 HEADERS  -1000  CONTAINS  [EMAIL PROTECTED]
 HEADERS  -1000  CONTAINS  [EMAIL PROTECTED]
 ...


In this case, an E-mail with [EMAIL PROTECTED] in the headers

would always receive a weight less than 0.  You can then create a
WEIGHT0 
test that would delete all E-mail with a weight of 0 or higher.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Keith Johnson
Scott,
 I spoke to soon.  If I use the weighting method, it hurts my ability to use 
the Weight system to guard them against Spam.  Your thoughts...
 
Keith

-Original Message- 
From: Keith Johnson 
Sent: Tue 9/2/2003 1:27 PM 
To: [EMAIL PROTECTED] 
Cc: 
Subject: RE: [Declude.JunkMail] Need aid on Declude Header rule



Scott,
SWEET, that is a great idea, I'll give it a go, you are the man.

Keith Johnson


CONTAINS *would* work in this way.  For example:

 HEADERS  -1000  CONTAINS  [EMAIL PROTECTED]
 HEADERS  -1000  CONTAINS  [EMAIL PROTECTED]
 ...


In this case, an E-mail with [EMAIL PROTECTED] in the headers

would always receive a weight less than 0.  You can then create a
WEIGHT0
test that would delete all E-mail with a weight of 0 or higher.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


winmail.dat

RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread R. Scott Perry

 I spoke to soon.  If I use the weighting method, it hurts my 
ability to use the Weight system to guard them against Spam.  Your thoughts...
Ah, I see.

In that case, you can have the same filter, but instead of having it 
defined as MYFILTER filter C:\IMail\Declude\myfilter.txt x -1000 0, you 
could define it as MYFILTER filter C:\IMail\Declude\myfilter.txt x 0 
1000.  That way, any E-mail that triggers the filter will have the regular 
spam control enabled, but any E-mail that does *not* trigger the filter 
(E-mail not to current employees) will have a weight of at least 1000.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Keith Johnson
Scott,
Since we house mulitple domains (using spam filtering) and this filter test is 
used in the Global file it seems it would fail every other domain email (i.e. 1000 
weight) that we house on the same box?!  Is there a way to only define it for use in 
the default config file for that domain (we have the pro version), thus not be used 
for other domains?  Thanks again for the aid.
 
Keith

-Original Message- 
From: R. Scott Perry [mailto:[EMAIL PROTECTED] 
Sent: Tue 9/2/2003 6:41 PM 
To: [EMAIL PROTECTED] 
Cc: 
Subject: RE: [Declude.JunkMail] Need aid on Declude Header rule




  I spoke to soon.  If I use the weighting method, it hurts my
 ability to use the Weight system to guard them against Spam.  Your 
thoughts...

Ah, I see.

In that case, you can have the same filter, but instead of having it
defined as MYFILTER filter C:\IMail\Declude\myfilter.txt x -1000 0, you
could define it as MYFILTER filter C:\IMail\Declude\myfilter.txt x 0
1000.  That way, any E-mail that triggers the filter will have the regular
spam control enabled, but any E-mail that does *not* trigger the filter
(E-mail not to current employees) will have a weight of at least 1000.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


winmail.dat