RE: [Declude.JunkMail] Minimum weight of a filter

2004-04-23 Thread Markus Gufler
No -- that determines a weight at which filter processing will stop. But it sounds like you want the filter to only return a weight if multiple lines match. Great idea! In my opinion it should return only a non-zero result if a certain NUMBER of lines match. (not a certain weight is

RE: [Declude.JunkMail] Hijack Logs

2004-04-23 Thread R. Scott Perry
Thanks for the response. I was able to take a quick look at the Imail logs today and I have an R for the message received but that is where it stops, I never receive the D for delivery. I do not have hold1 or hold2 Directories, I am assuming these are auto created and deleted, if not then it is

Re: [Declude.JunkMail] bug with subject filter

2004-04-23 Thread R. Scott Perry
Regarding the bug with subject filter that Matt reported Thursday with his gibberishsub filter. I too have noticed some oddities with the Gibberishsub filter results. Matt said it was happening at the end of the subject. I believe it may also be happening at the beginning of the subject. Also

RE: [Declude.JunkMail] Nameserver issues and Spam fighting

2004-04-23 Thread R. Scott Perry
Since we are running IMail (ie Windows) what is the performance of the Windows DNS service? I know that it works but how good/fast is it? If you are going to run a Windows DNS server would you recommend running it on the IMail box or on another one? The performance isn't as important as the

RE: [Declude.JunkMail] Nameserver issues and Spam fighting

2004-04-23 Thread Goran Jovanovic
Scott, The performance isn't as important as the reliability, which isn't that high. I would recommend using BIND instead (we actually run BIND on our IMail server, and it works flawlessly). I thought that BIND was the DNS that runs on *NIX. I guess they have ported it. Is BIND free?

RE: [Declude.JunkMail] Nameserver issues and Spam fighting

2004-04-23 Thread R. Scott Perry
I thought that BIND was the DNS that runs on *NIX. I guess they have ported it. It's been available on Windows for quite some time -- it just isn't as popular on Windows. I don't know why, though. Is BIND free? If so where do you download it from? Is it a purchased product? It is free, from

Re: [Declude.JunkMail] bug with subject filter

2004-04-23 Thread Scott Fisher
A new interim release today... That's excellent, I was going through interim release withdrawl. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 04/23/04 06:08AM Regarding the bug with subject filter that Matt reported Thursday with his gibberishsub filter. I too have

CBL:RE: [Declude.JunkMail] Nameserver issues and Spam fighting

2004-04-23 Thread jcochran
The easy answer to this is to use your own DNS servers -- if you do (and they are decent DNS servers; BIND is preferred), you won't be subject to the restrictions of ATT, Sprint, and others that block spam database lookups. Since we are running IMail (ie Windows) what is the

Re: [Declude.JunkMail] Nameserver issues and Spam fighting

2004-04-23 Thread Darin Cox
We've run Windows DNS (on our mail server as well) for several years with no problems. I haven't ever seen a performance comparison of Windows DNS vs. BIND, though. Scott, what's your rationale behind recommending BIND instead? Darin. - Original Message - From: R. Scott Perry [EMAIL

RE: [Declude.JunkMail] Minimum weight of a filter

2004-04-23 Thread Scott Fisher
I use Matt's modified copy of Kami's Nigerian Scam list as a test. I then use a combo test with Nigerian Scam and Sniffer-Scams (return code 53) or Nigerian-Scam Sniffer-Experimental (return code 62) to assign an additional punishment of 10 points. Matt's Nigeria-scam list can be found at:

RE: [Declude.JunkMail] Minimum weight of a filter - Nigerian Scams

2004-04-23 Thread Scott Fisher
It sounds like a feature request! The only way I though I can get around my original problem, was possibly this: Run my Nigerian-scams filter first. Add a Weight1, weight2, and Weight 3. test Run a tests filter, If weight 1, drop one point. If weight 2 drop 2 points. If weight 3 drop 3 points.

Re: [Declude.JunkMail] Nameserver issues and Spam fighting

2004-04-23 Thread R. Scott Perry
We've run Windows DNS (on our mail server as well) for several years with no problems. I haven't ever seen a performance comparison of Windows DNS vs. BIND, though. Scott, what's your rationale behind recommending BIND instead? Because I have heard many, many reports of problems with Windows

Re: [Declude.JunkMail] OT: BIND vs Windows DNS capabilities

2004-04-23 Thread Darin Cox
Good to know. Hadn't heard of problems with Windows DNS, but had heard of security issues with BIND. The one thing I don't like about Windows DNS is the inability to enumerate subdomains without manually parsing the zone files. Not sure what BIND has now in terms of programmatically

RE: [Declude.JunkMail] Nameserver issues and Spam fighting

2004-04-23 Thread Chuck Schick
Scott: Is there any advantage performance wise to run the DNS on the same machine as Imail?? I am putting up a new mail server and we are looking at implemented a DNS server with a sole function of supporting mail. Chuck Schick Warp 8, Inc. 303-421-5140 www.warp8.com -Original

RE: [Declude.JunkMail] OT: BIND vs Windows DNS capabilities

2004-04-23 Thread Chuck Schick
Darin: Is your DNS system home grown or did you purchase it? Sounds like it is part of a hosting control panel. Chuck Schick Warp 8, Inc. 303-421-5140 www.warp8.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Darin Cox Sent: Friday, April 23,

RE: [Declude.JunkMail] Nameserver issues and Spam fighting

2004-04-23 Thread R. Scott Perry
Is there any advantage performance wise to run the DNS on the same machine as Imail?? I am putting up a new mail server and we are looking at implemented a DNS server with a sole function of supporting mail. With DNS running on the IMail server, there would be a slight performance hit, but it

Re: [Declude.JunkMail] OT: BIND vs Windows DNS capabilities

2004-04-23 Thread Darin Cox
Hi Chuck, Yes, it's part of a larger .NET-based control panel we built to manage accounts. It's primary purpose is to facilitate account setup, suspension, and deletion, but also exposes some DNS and mail functions to resellers, collocated customers, and advanced customers. We've been intending

[Declude.JunkMail] OT: MS Security Bulletin MS04-011: IIS/SSL Exploit Code on the Loose

2004-04-23 Thread Dan Geiser
Hello, All, I know this is completely off-topic but I highly value the help the readers of the list often to give to me. Sometimes I feel like the equation is a little overbalanced, i.e. I take more than I give, so I thought I'd send this your way, to save the readers of this list some

[Declude.JunkMail] Big Evil SURBL batch file

2004-04-23 Thread Scott Fisher
I have taken Roger Eriksson's SURBL batch file and using the magic of copy and paste have altered it to use the Big Evil SURBL. This list is much larger than the Spamcop SURBL so your performance may suffer. Attached renamed exclusion file and the cmd file. You'll need to rename the

[Declude.JunkMail] Spam Assassin SURBL batch file

2004-04-23 Thread Scott Fisher
I have taken Roger Eriksson's SURBL batch file and using the magic of copy and paste have altered it to use the Spam Assassin SURBL. This list is much larger than the Spamcop SURBL so your performance may suffer. Attached renamed exclusion file and the cmd file. You'll need to rename the

RE: [Declude.JunkMail] Spam Assassin SURBL batch file

2004-04-23 Thread Markus Gufler
Good work, but far too large even if processing only 1 message/day. CPU (P4 2,8 GHz) usage goes up to 100% after enabling this tests on our server. After running this test for some minutes I can see that the small SURBL filter seems to be more effective then the large filter files. SURBL

RE: [Declude.JunkMail] Spam Assassin SURBL batch file

2004-04-23 Thread Scott Fisher
I was afraid of those size when I ran them. It's too bad there isn't a SKIPIFWEIGHTLESSTHAN command for the filters. Used with a SKIFIFWEIGHT command, it could only be called on those pesky e-mails that fall into that grey area. Scott Fisher Director of IT Farm Progress Companies [EMAIL

RE: [Declude.JunkMail] Spam Assassin SURBL batch file

2004-04-23 Thread John Tolmachoff \(Lists\)
It's too bad there isn't a SKIPIFWEIGHTLESSTHAN command for the filters. Used with a SKIFIFWEIGHT command, it could only be called on those pesky e-mails that fall into that grey area. So, if a spam message has only 5 points, you do not want that test to run which may then cause it to have a

[Declude.JunkMail] Change to other server and declude not working anymore

2004-04-23 Thread Tommi Penttinen
Hello, I has update my imailserver to 8.10 and windows 2003 server. Now when i try to start the imalserver i get this message in the decludelog: 04/23/2004 21:53:58 Installing Declude for the first time, 04/23/2004 21:53:58 Installation Complete! 04/23/2004 21:54:01 Installing Declude for

Re: [Declude.JunkMail] Change to other server and declude not working anymore

2004-04-23 Thread R. Scott Perry
I has update my imailserver to 8.10 and windows 2003 server. Now when i try to start the imalserver i get this message in the decludelog: 04/23/2004 21:53:58 Installing Declude for the first time, 04/23/2004 21:53:58 Installation Complete! 04/23/2004 21:54:01 Installing Declude for the first

[Declude.JunkMail] WHITELISTFILE for per-domain

2004-04-23 Thread Jeff Maze - Hostmaster
Hello, Just a quick question about this option. In the domain that has a separate configuration file, I would edit the $default$.junkmail file and add the following line, correct? WHITELISTFILE c:\imail\declude\domain.com\whitelist.txt And then put in the e-mail addresses or

RE: [Declude.JunkMail] Spam Assassin SURBL batch file

2004-04-23 Thread Scott Fisher
If I have a hold weight of 20, and the Spam Assassin SURBL test would create at most 10 points, an e-mail that went in with 5 points would end up with at most 15, which is still below my minimum action weight. It certainly only applies to the last filters to be run. Which would be in my case

Re: [Declude.JunkMail] WHITELISTFILE for per-domain

2004-04-23 Thread R. Scott Perry
Just a quick question about this option. In the domain that has a separate configuration file, I would edit the $default$.junkmail file and add the following line, correct? WHITELISTFILE c:\imail\declude\domain.com\whitelist.txt And then put in the e-mail addresses or domains

RE: [Declude.JunkMail] WHITELISTFILE for per-domain

2004-04-23 Thread Jeff Maze - Hostmaster
Thanks.. That works.. One quick question.. If that entry is in for the per-domain $default$.junkmail file, I assume it will not use the main $default$.junkmail file within the main declude sub-folder for whitelists, correct? Or do they work in tandum. -Original Message- From: [EMAIL

RE: [Declude.JunkMail] WHITELISTFILE for per-domain

2004-04-23 Thread R. Scott Perry
One quick question.. If that entry is in for the per-domain $default$.junkmail file, I assume it will not use the main $default$.junkmail file within the main declude sub-folder for whitelists, correct? Correct. -Scott --- Declude JunkMail: The

[Declude.JunkMail] WHITELISTFILE Question

2004-04-23 Thread Chuck Shaffer
if you have an entry in myWhiteList.txt .domain.com shouldn't it cover? @domain.com currently you need 2 entry's to cover (domain.com) .domain.com @domain.com I think that just 1 should do it. .domain.com Thanks Chuck - Original Message - From: R. Scott Perry [EMAIL PROTECTED]

Re: [Declude.JunkMail] WHITELISTFILE Question

2004-04-23 Thread R. Scott Perry
if you have an entry in myWhiteList.txt .domain.com shouldn't it cover? @domain.com No. [EMAIL PROTECTED] doesn't contain .example.com. currently you need 2 entry's to cover (domain.com) .domain.com @domain.com I think that just 1 should do it. .domain.com But what about the people that

Re: [Declude.JunkMail] WHITELISTFILE Question

2004-04-23 Thread Chuck Shaffer
Scott I'm not tring to whitelist [EMAIL PROTECTED] only all mail from example.com including subdomains. would somthing like (below)work for all of the example.com? @*.example.com or @*example.com Chuck - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL

RE: [Declude.JunkMail] CMDSPACE Test

2004-04-23 Thread John Tolmachoff \(Lists\)
According to a note I found in the archives, CMDSPACE needs Imail v8, with SMTP-Authentication, and AUTOWHITELIST ON in global.cfg to work correctly. Otherwise, you get false positives from Outlook clients. Not quite correct. AUTOWHITELIST is not needed in conjunction with CMDSPACE. However,

Re: [Declude.JunkMail] WHITELISTFILE Question

2004-04-23 Thread R. Scott Perry
I'm not tring to whitelist [EMAIL PROTECTED] only all mail from example.com including subdomains. I do realize that -- but the only way to do that with one phrase would be example.com, which would also whitelist [EMAIL PROTECTED]. So you need both @example.com and .example.com in this case.

Re: [Declude.JunkMail] WHITELISTFILE Question

2004-04-23 Thread Chuck Shaffer
Scott I do realize that -- but the only way to do that with one phrase would be example.com, which would also whitelist [EMAIL PROTECTED]. Does example.com work? I tried it with no luck, I'll try again. Also what effect would this have? #example.com would it just get passed by as a