Can anyone tell me what is happening with the following headers? It
indicates that tests failed yet at the end it says that test failed is NOINE
thanks
Received: from SMTP32-FWD by intown.net
(SMTP32) id A062012F3; Fri, 30 May 2003 03:12:59 -0400
Received: from mail.escapees.com
Can anyone tell me what is happening with the following headers? It
indicates that tests failed yet at the end it says that test failed is NOINE
Received: from mail.escapees.com [207.70.132.66] by intown.net with ESMTP
(SMTPD32-8.00) id A46EE000D0; Fri, 30 May 2003 03:12:46 -0400
Received:
I want to whitelist from a file in both the config.cfg and
$default$.junkmail
I know this is the command for $default$.junkmail
WHITELISTFILE C:\IMail\Declude\WhiteList.txt
What is the command for the config.cfg.
---
[This E-mail was scanned for viruses by Declude Virus
That makes sense
thanks
Harry Vanderzand
inTown Internet Computer Services
11 Belmont Ave. W.
Kitchener, ON
N2M 1L2
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R.
Scott Perry
Sent: Friday, May 30, 2003 9:10 AM
To: [EMAIL PROTECTED]
This is waht Spamcop have to say about how their system works:
http://mailsc.spamcop.net/fom-serve/cache/297.html
look at number 7 especially:
7. If a host has only 1 SUBE report against it, it will not be listed.
(SUBE is Supposed Unsolicited Bulk Mail)
We are quite aggressive in blocking
Scott,
Emails with a message body that just contains blank lines and that contains an
attachment, are still failing the BASE64 test.
Attached is a sample.
Bill
base64fail.zip
Description: Zip archive
I want to whitelist from a file in both the config.cfg and
$default$.junkmail
I know this is the command for $default$.junkmail
WHITELISTFILE C:\IMail\Declude\WhiteList.txt
What is the command for the config.cfg.
The WHITELISTFILE command does not work in the global.cfg file. It only
applies
Jools,
Friday, May 30, 2003 you wrote:
JC This is waht Spamcop have to say about how their system works:
JC http://mailsc.spamcop.net/fom-serve/cache/297.html
JC look at number 7 especially:
JC 7. If a host has only 1 SUBE report against it, it will not be listed.
JC (SUBE is Supposed Unsolicited
Now in their defense I will say they are pretty good about
responding to my messages and they have always done the right
thing. But it is still time consuming and disruptive to have to
investigate each incident. Their system is much too easily used
for malicious purposes.
What
Emails with a message body that just contains blank lines and that
contains an attachment, are still failing the BASE64 test.
This is something that we are working on.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail
What command can I use to White list from a file in the config.cfg
Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, May 30, 2003 10:18 AM
Subject: Re: [Declude.JunkMail] Whitelist
I want to whitelist from a file in both the config.cfg
Are there any issues with Junkmail/Virus and iMail version 8.0?
We're planning on the upgrade next week and didn't want to break
anything. :)
Thanks!
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.
Reply to: Bill B.
Re: [Declude.JunkMail] spamdomains list on Friday 9:20:04 AM
Wait a second? When I requested this, was this format put in Declude?
earthlink.com earthlink.net
earthlink.net earthlink.com
email.itwebmessenger.it
excite.com excitenetwork.com
If so, I did
Hi,
Would be nice if Declude could be told not insert a header if one already
exists, e.g.:
XUNIQUEINHEADER Return-Path: %MAILFROM%
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934-3414 x20 (Business)
It's a wonder that more people don't submit mail maliciously if the
system works as it appears.
Some do.
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This
email provided by netscape.net is at least partly based from AOL instant
messenger accounts, which partly correspond to some peoples' real aol.com
email addresses. when you do a full install of Netscape 6 and above, it
links w/ your AIM account for messaging, and provides you a *free*,
Wait a second? When I requested this, was this format put in Declude?
earthlink.com earthlink.net
earthlink.net earthlink.com
email.itwebmessenger.it
excite.com excitenetwork.com
If so, I did not see this indicated in any messages I have read.
This was added to v1.70 -- you can
One comment. Instead of having:
yahoo.com
yahoo.ca yahoo.com
yahoo.de yahoo.com
yahoo.dk yahoo.com
yahoo.es yahoo.com
yahoo.fr yahoo.com
yahoo.it yahoo.com
yahoo.no yahoo.com
yahoo.se yahoo.com
yahoo.co.jp yahoo.com
yahoo.co.uk yahoo.com
yahoo.com.ar yahoo.com
yahoo.com.au yahoo.com
yahoo.com.br
Scott,
Would it be possible to have a variable like the %weight% variable say
%weight*% that would convert the weight into a series of stars based on a
set division number with the division number possibly held in the global.cfg
file.
This way only one x-header can be used rather than a series
The difference with us is that we are mainly handling our own companys
mail with a few small clients, our traffic is quite low so we can
afford to look at our routeto mailbox fairly often.
False positives (if there are any) are forwarded to the original
recipient, otherwise they are binned.
We
Darrell / Scott:
We do not whitelist the postmaster account, instead you setup a filter
test that contains an allrecips for the postmasters email address and
assign this test a really high negative value to prevent the message from
being bounced. Then you set the action up for the test as a
We do not whitelist the postmaster account, instead you setup a filter
test that contains an allrecips for the postmasters email address and
assign this test a really high negative value to prevent the message from
being bounced. Then you set the action up for the test as a routeto back
to the
I use weightrange to define 6 distinct levels of spam (the last one
actually is just weight so anything over is caught). Then all I do is
add a header X-SPAM-Level: TESTNAME. End result is what you are asking
for, just use stars instead of TESTNAME.
Global.cfg
SPAM-NONE weightrange
OK I am having trouble with the spam domains test. I just can not get my
brain to wrap it. Could someone try to give a concise detailed
explanation???
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Bill B.
Sent: Friday, May 30, 2003 7:20
At 01:36 PM 5/30/2003, John Tolmachoff \(Lists\) wrote:
If someone has a comprehensive spamdomains listing they are happy
with,could they post it for others to analyze/use?
Uh, see the orginal post that started this thread.
I would, except the list archives are still down.
John,
In your list you your have: microsoft.com msn.com
Urgh, I can't win. It is not my list. Please people, read the entire post.
(Yes, I myself am guilty at times, so first admonishment is to me.)
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com
---
Sorry John.
I am questioning the validity of the test more then I am questioning you.
Fred
- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, May 30, 2003 4:16 PM
Subject: RE: [Declude.JunkMail] spamdomains list
John,
In your
Bill,
MX records only tell you where email is SENT to. It doesn't tell you
anything about OUTBOUND mail.
I have in fact received emails where signed @excite.com but where sent
through the excitenetwork's server.
The only way how you can determine, which other RDNS are used, is by
checking your
This works and we have set this up now however, this setup adds a
number of extra x-headers...
Further to Chuck's comment on this, can you post the WEIGHTRANGE lines
from your .CFG? By definition, you can't fail mutually exclusive
WEIGHTRANGE tests.
-Sandy
Here is my updated list that we're using based on todays's discussions and further
review of our log data. Let me know if anybody sees any errors or omissions.
Would anybody like to expand on the Lycos domains? I know they offer free email
accounts at several of their international domain
Hi Bill,
I think for GMX-mails (german freemailer) we can use the same solution
as you have proposed for yahoo
@gmx. .gmx.
I've seen that there are a lot of country specific domains (gmx.it, .at,
.de ...) resolving to the PTR-Records:
213.165.64.100 PTR record: mx0.gmx.net. [TTL
What if you had two lines:
msn.com hotmail.com
msn.com microsoft.com
It would NOT fail if it reversed to either hotmail or ms, correct?
Actually, it would fail in this case, since each line is processed
separately from the rest.
What about the following?
Bigfoot.com
Geocities.com
Rocketmail.com
Wanadoo.fr
Another question:
Normaly if one of our new customers has a old ISP-specific email-Adress
(for example [EMAIL PROTECTED]) we try to let configure an
email-forwarding to the clients mailbox on our server.
For this
Rocketmail.com resolves to yahoo.com
So:
Rocketmail.com yahoo.com
Would be a valid entry
What about the following?
Bigfoot.com
Geocities.com
Rocketmail.com
Markus
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the
Hi Scott:
Granted, based on
http://www.dnsreport.com/tools/dnsreport.ch?domain=skanskausa.com this
domain is a mess - but, it DOES have a MX record and the lowest priority MX
record (5) has an A record and IS even answered. Most of the cc:'s in this
email when to @skanskausa.com and WERE indeed
Scott, I have PREWHITELIST ON and WHITELIST IP 10.0.0.0/8 in my Global.cfg,
but I am still seeing:
==
05/30/2003 21:27:10 Q2f1b167300aa673e nNOLEGITCONTENT:-5 BODY-FILTER:20
SPAMCHECK:2 . Total weight = 17
05/30/2003 21:27:10 Q2f1b167300aa673e E-mail whitelisted - automatically
passing
36 matches
Mail list logo
