Re: [Declude.JunkMail] Why are these being whitelisted?
Messageexcept around review time... - Original Message - From: Chris Asaro To: declude.junkmail@declude.com Sent: Thursday, December 14, 2006 12:48 PM Subject: RE: [Declude.JunkMail] Why are these being whitelisted? Question Authority.. Chris -- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharyn Schmidt Sent: Thursday, December 14, 2006 1:44 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Why are these being whitelisted? shrug IF it is a mistake, then my boss is the one that is making it I just do what I'm told! :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, December 14, 2006 1:31 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Why are these being whitelisted? That has to be a mistake. For example, if a company were to use an external filtering service, they would have no means of archiving spam that had been filtered out. Also, with spam currently at 90% of all incoming email, it's ludicrous to have to archive 10x the actual legitimate email volume in order to be compliant. Darin. - Original Message - From: Sharyn Schmidt To: declude.junkmail@declude.com Sent: Thursday, December 14, 2006 12:47 PM Subject: RE: [Declude.JunkMail] Why are these being whitelisted? We are required to archive ALL incoming mail. The Sarbanes-Oxley Act does not differentiate between legitimate mail and spam :) I did remove the whitelist to. I went back to using the masterbkup.junkmail file and just setting all actions to ignore. I just wanted to know what had caused this, so in the future it doesn't happen again. Thanks! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, December 14, 2006 12:20 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Why are these being whitelisted? You're required to archive spam? I can't imagine that. I would remove the WHITELIST TO. Note that if any of the recipients are whitelisted, then all will effectively be whitelisted for that message. Darin. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Why are these being whitelisted?
Why are these being whitelisted?Did you turn on the Auto Whitelist feature? That whitelists sender addresses that appear in the recipient's webmail address book. It doesn't appear to be so in this case, but we've seen problems with users having their own address in their webmail address book, resulting in whitelisting forging spam. If none of this applies here, I would recheck your whitelist statements. Darin. - Original Message - From: Sharyn Schmidt To: declude.junkmail@declude.com Sent: Thursday, December 14, 2006 9:20 AM Subject: [Declude.JunkMail] Why are these being whitelisted? Just upgraded to 4.3.23. I'm getting a ton of stuff now that is being whitelisted. I have several users whitelisted TO but not the entire domain. This is not one of the users that is whitelisted TO. Suggestions? Here is the header info: Received: from SpeedTouch.lan [83.8.172.182] by cruzaninc.com with ESMTP (SMTPD-9.10) id ABE602AC; Thu, 14 Dec 2006 09:12:54 -0500 Return-Path: [EMAIL PROTECTED] Received: from 69.66.1.12 (HELO ca.iowatelecom.net) by todhunter.com with esmtp (*VX))0(RG1 :?1V/X) id AHNCX*-FQHG4D-/M for [EMAIL PROTECTED]; Thu, 14 Dec 2006 14:11:11 -0060 Date: Thu, 14 Dec 2006 14:11:11 -0060 From: Troy Goddard [EMAIL PROTECTED] X-Mailer: The Bat! (v2.12.00) Personal X-Priority: 3 (Normal) Message-ID: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Take it easy MIME-Version: 1.0 Content-Type: multipart/mixed; boundary=--19C38D386E05E0CA X-Spam: Not detected X-Declude-Sender: [EMAIL PROTECTED] [83.8.172.182] X-Declude-Spoolname: D5be202f77bd0.smd X-Declude-RefID: X-Declude-Note: Scanned by Declude 4.3.23 for spam. http://www.declude.com/x-note.htm; X-Declude-Scan: Incoming Score [0] at 09:13:20 on 14 Dec 2006 X-Declude-Fail: Whitelisted X-Country-Chain: UNITED STATES-POLAND-destination Precedence: bulk Sender: [EMAIL PROTECTED] X-RCPT-TO: [EMAIL PROTECTED] Status: X-UIDL: 465362209 X-IMail-ThreadID: 5c010844d46a --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Why are these being whitelisted?
Did you turn on the Auto Whitelist feature? That whitelists sender addresses that appear in the recipient's webmail address book. It doesn't appear to be so in this case, but we've seen problems with users having their own address in their webmail address book, resulting in whitelisting forging spam. If none of this applies here, I would recheck your whitelist statements. Darin. I didnt touch the autowhite list feature. I wonder if it's on by default? This is a brand new global.cfg file. All I did was copy my custom stuff over from my old one but I didn't mess with any of the defaults. Thanks, I'll check that right now. Yep, autowhitelist was ON. I did turn that off, but this didnt start happening until I put in some WHITELIST TO user statements. Like I said, I didn't whitelist my entire domain, just several users. Once I removed the whitelist TO statements, things went back to normal. It was prob. my error, I've never used that feature before. I had just been configuring user.junkmail files with the ignore action for everything. Guess I need to RTFM before I start playing with things that I don't know anything about. Thanks, Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Why are these being whitelisted?
MessageWe leave the Auto Whitelist feature on (our users use it), but just caution them against having their own address in the address book. Darin. - Original Message - From: Sharyn Schmidt To: declude.junkmail@declude.com Sent: Thursday, December 14, 2006 10:03 AM Subject: RE: [Declude.JunkMail] Why are these being whitelisted? Did you turn on the Auto Whitelist feature? That whitelists sender addresses that appear in the recipient's webmail address book. It doesn't appear to be so in this case, but we've seen problems with users having their own address in their webmail address book, resulting in whitelisting forging spam. If none of this applies here, I would recheck your whitelist statements. Darin. I didnt touch the autowhite list feature. I wonder if it's on by default? This is a brand new global.cfg file. All I did was copy my custom stuff over from my old one but I didn't mess with any of the defaults. Thanks, I'll check that right now. Yep, autowhitelist was ON. I did turn that off, but this didnt start happening until I put in some WHITELIST TO user statements. Like I said, I didn't whitelist my entire domain, just several users. Once I removed the whitelist TO statements, things went back to normal. It was prob. my error, I've never used that feature before. I had just been configuring user.junkmail files with the ignore action for everything. Guess I need to RTFM before I start playing with things that I don't know anything about. Thanks, Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Why are these being whitelisted?
Why are these being whitelisted?If you change your log level to high it will log the exact reason the message was whitelisted. Also, remember if one user on the email (even if they were BCC'ed) is whitelisted the whole message will be whitelisted. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Sharyn Schmidt To: declude.junkmail@declude.com Sent: Thursday, December 14, 2006 9:20 AM Subject: [Declude.JunkMail] Why are these being whitelisted? Just upgraded to 4.3.23. I'm getting a ton of stuff now that is being whitelisted. I have several users whitelisted TO but not the entire domain. This is not one of the users that is whitelisted TO. Suggestions? Here is the header info: Received: from SpeedTouch.lan [83.8.172.182] by cruzaninc.com with ESMTP (SMTPD-9.10) id ABE602AC; Thu, 14 Dec 2006 09:12:54 -0500 Return-Path: [EMAIL PROTECTED] Received: from 69.66.1.12 (HELO ca.iowatelecom.net) by todhunter.com with esmtp (*VX))0(RG1 :?1V/X) id AHNCX*-FQHG4D-/M for [EMAIL PROTECTED]; Thu, 14 Dec 2006 14:11:11 -0060 Date: Thu, 14 Dec 2006 14:11:11 -0060 From: Troy Goddard [EMAIL PROTECTED] X-Mailer: The Bat! (v2.12.00) Personal X-Priority: 3 (Normal) Message-ID: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Take it easy MIME-Version: 1.0 Content-Type: multipart/mixed; boundary=--19C38D386E05E0CA X-Spam: Not detected X-Declude-Sender: [EMAIL PROTECTED] [83.8.172.182] X-Declude-Spoolname: D5be202f77bd0.smd X-Declude-RefID: X-Declude-Note: Scanned by Declude 4.3.23 for spam. http://www.declude.com/x-note.htm; X-Declude-Scan: Incoming Score [0] at 09:13:20 on 14 Dec 2006 X-Declude-Fail: Whitelisted X-Country-Chain: UNITED STATES-POLAND-destination Precedence: bulk Sender: [EMAIL PROTECTED] X-RCPT-TO: [EMAIL PROTECTED] Status: X-UIDL: 465362209 X-IMail-ThreadID: 5c010844d46a --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Why are these being whitelisted?
If you change your log level to high it will log the exact reason the message was whitelisted. Also, remember if one user on the email (even if they were BCC'ed) is whitelisted the whole message will be whitelisted. What if all email is sent to a copyall account and I had the settings to WHITELIST TO that account? Would that cause all email to be whitelisted? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Why are these being whitelisted?
MessageOn that one I am not sure - I would bump your logs to HIGH and than we will be able to tell for sure. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Sharyn Schmidt To: declude.junkmail@declude.com Sent: Thursday, December 14, 2006 10:48 AM Subject: RE: [Declude.JunkMail] Why are these being whitelisted? If you change your log level to high it will log the exact reason the message was whitelisted. Also, remember if one user on the email (even if they were BCC'ed) is whitelisted the whole message will be whitelisted. What if all email is sent to a copyall account and I had the settings to WHITELIST TO that account? Would that cause all email to be whitelisted? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Why are these being whitelisted?
Here is the log for the message that really ticked me off. Sorry it's so long but this message was sent to a ton of ppl, and it was whitelisted for all of them. The ONLY account that has any reference to whitelist is the masterbkup account which is our copy all account in which we archive all emails we received for SEC purposes. Ive bolded some of the whitelist lines. None of those address should've had this whitelisted, with the exception, like I said above, of the masterbkup account, yet, every one of these addresses shows this message being whitelisted. 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (63.246.13.90). nm= 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.100.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.110.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.120.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.130.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.140.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.150.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (10.10.100.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (24.73.160.164). nm= 12/14/2006 09:13:19.765 q5be202f77bd0.smd Filter URLfilter: Skipping E-mail with a current weight of 49 (=30) 12/14/2006 09:13:19.765 q5be202f77bd0.smd Filter InBodyFilter: Skipping E-mail with a current weight of 49 (=30) 12/14/2006 09:13:19.765 q5be202f77bd0.smd Filter InHeadersFilter: Skipping E-mail with a current weight of 49 (=30) 12/14/2006 09:13:19.765 q5be202f77bd0.smd Triggered BODY CONTAINS filter Giffilter on Content-Type: image/gif; [weight-0]. 12/14/2006 09:13:19.765 q5be202f77bd0.smd Triggered BODY CONTAINS filter Giffilter on image/gif; [weight-0]. 12/14/2006 09:13:19.765 q5be202f77bd0.smd CBL:6 FIVETEN-SRC:4 MXRATE-BLOCK:7 SORBS-DUHL:4 UCEPROTECT-1:8 UCEPROTECT-2:7 UCEPROTECT-3:2 BCC:4 HELOBOGUS:5 ROUTING:2 Giffilter:5 . Total weight = 54. 12/14/2006 09:13:19.765 q5be202f77bd0.smd E-mail whitelisted - automatically passing all spam tests [EMAIL PROTECTED] 12/14/2006 09:13:19.765 q5be202f77bd0.smd Tests failed [weight=0]: CATCHALLMAILS=IGNORE[0] 12/14/2006 09:13:19.765 q5be202f77bd0.smd R1 Message OK 12/14/2006 09:13:19.765 q5be202f77bd0.smd Subject: Take it easy 12/14/2006 09:13:19.765 q5be202f77bd0.smd From: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] To: IP: 83.8.172.182 ID: AHNCX*-FQHG4D-/M 12/14/2006 09:13:19.765 q5be202f77bd0.smd Action(s) taken for [copyall_account] = WHITELISTED [LAST ACTION=WHITELISTED] 12/14/2006 09:13:19.843 q5be202f77bd0.smd Using [incoming] CFG file D:\IMAIL\Declude\$default$.junkmail. 12/14/2006 09:13:19.843 q5be202f77bd0.smd Tests failed [weight=0]: CATCHALLMAILS=IGNORE[0] 12/14/2006 09:13:19.843 q5be202f77bd0.smd L2 Message OK 12/14/2006 09:13:19.843 q5be202f77bd0.smd Subject: Take it easy 12/14/2006 09:13:19.843 q5be202f77bd0.smd From: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] To: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] IP: 83.8.172.182 ID: AHNCX*-FQHG4D-/M 12/14/2006 09:13:19.843 q5be202f77bd0.smd Action(s) taken for [EMAIL PROTECTED] = WHITELISTED [LAST ACTION=WHITELISTED] 12/14/2006 09:13:19.921 q5be202f77bd0.smd Using [incoming] CFG file D:\IMAIL\Declude\$default$.junkmail. 12/14/2006 09:13:19.921 q5be202f77bd0.smd Tests failed [weight=0]: CATCHALLMAILS=IGNORE[0] 12/14/2006 09:13:19.921 q5be202f77bd0.smd L3 Message OK 12/14/2006 09:13:19.921 q5be202f77bd0.smd Subject: Take it easy 12/14/2006 09:13:19.921 q5be202f77bd0.smd From: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] To: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] IP: 83.8.172.182 ID: AHNCX*-FQHG4D-/M 12/14/2006 09:13:19.921 q5be202f77bd0.smd Action(s) taken for [EMAIL PROTECTED] = WHITELISTED [LAST ACTION=WHITELISTED] 12/14/2006 09:13:20.000 q5be202f77bd0.smd Using [incoming] CFG file D:\IMAIL\Declude\$default$.junkmail. 12/14/2006 09:13:20.000 q5be202f77bd0.smd Tests failed [weight=0]: CATCHALLMAILS=IGNORE[0] 12/14/2006 09:13:20.000 q5be202f77bd0.smd L4 Message OK 12/14/2006 09:13:20.000 q5be202f77bd0.smd Subject: Take it easy 12/14/2006 09:13:20.000 q5be202f77bd0.smd From: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] To: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] IP: 83.8.172.182 ID: AHNCX*-FQHG4D-/M 12/14/2006 09:13:20.000 q5be202f77bd0.smd Action(s) taken for [EMAIL PROTECTED] = WHITELISTED [LAST
Re: [Declude.JunkMail] Why are these being whitelisted?
MessageYou're required to archive spam? I can't imagine that. I would remove the WHITELIST TO. Note that if any of the recipients are whitelisted, then all will effectively be whitelisted for that message. Darin. - Original Message - From: Sharyn Schmidt To: declude.junkmail@declude.com Sent: Thursday, December 14, 2006 11:41 AM Subject: RE: [Declude.JunkMail] Why are these being whitelisted? Here is the log for the message that really ticked me off. Sorry it's so long but this message was sent to a ton of ppl, and it was whitelisted for all of them. The ONLY account that has any reference to whitelist is the masterbkup account which is our copy all account in which we archive all emails we received for SEC purposes. Ive bolded some of the whitelist lines. None of those address should've had this whitelisted, with the exception, like I said above, of the masterbkup account, yet, every one of these addresses shows this message being whitelisted. 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (63.246.13.90). nm= 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.100.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.110.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.120.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.130.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.140.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.150.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (10.10.100.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (24.73.160.164). nm= 12/14/2006 09:13:19.765 q5be202f77bd0.smd Filter URLfilter: Skipping E-mail with a current weight of 49 (=30) 12/14/2006 09:13:19.765 q5be202f77bd0.smd Filter InBodyFilter: Skipping E-mail with a current weight of 49 (=30) 12/14/2006 09:13:19.765 q5be202f77bd0.smd Filter InHeadersFilter: Skipping E-mail with a current weight of 49 (=30) 12/14/2006 09:13:19.765 q5be202f77bd0.smd Triggered BODY CONTAINS filter Giffilter on Content-Type: image/gif; [weight-0]. 12/14/2006 09:13:19.765 q5be202f77bd0.smd Triggered BODY CONTAINS filter Giffilter on image/gif; [weight-0]. 12/14/2006 09:13:19.765 q5be202f77bd0.smd CBL:6 FIVETEN-SRC:4 MXRATE-BLOCK:7 SORBS-DUHL:4 UCEPROTECT-1:8 UCEPROTECT-2:7 UCEPROTECT-3:2 BCC:4 HELOBOGUS:5 ROUTING:2 Giffilter:5 . Total weight = 54. 12/14/2006 09:13:19.765 q5be202f77bd0.smd E-mail whitelisted - automatically passing all spam tests [EMAIL PROTECTED] 12/14/2006 09:13:19.765 q5be202f77bd0.smd Tests failed [weight=0]: CATCHALLMAILS=IGNORE[0] 12/14/2006 09:13:19.765 q5be202f77bd0.smd R1 Message OK 12/14/2006 09:13:19.765 q5be202f77bd0.smd Subject: Take it easy 12/14/2006 09:13:19.765 q5be202f77bd0.smd From: [EMAIL PROTECTED] To: IP: 83.8.172.182 ID: AHNCX*-FQHG4D-/M 12/14/2006 09:13:19.765 q5be202f77bd0.smd Action(s) taken for [copyall_account] = WHITELISTED [LAST ACTION=WHITELISTED] 12/14/2006 09:13:19.843 q5be202f77bd0.smd Using [incoming] CFG file D:\IMAIL\Declude\$default$.junkmail. 12/14/2006 09:13:19.843 q5be202f77bd0.smd Tests failed [weight=0]: CATCHALLMAILS=IGNORE[0] 12/14/2006 09:13:19.843 q5be202f77bd0.smd L2 Message OK 12/14/2006 09:13:19.843 q5be202f77bd0.smd Subject: Take it easy 12/14/2006 09:13:19.843 q5be202f77bd0.smd From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 83.8.172.182 ID: AHNCX*-FQHG4D-/M 12/14/2006 09:13:19.843 q5be202f77bd0.smd Action(s) taken for [EMAIL PROTECTED] = WHITELISTED [LAST ACTION=WHITELISTED] 12/14/2006 09:13:19.921 q5be202f77bd0.smd Using [incoming] CFG file D:\IMAIL\Declude\$default$.junkmail. 12/14/2006 09:13:19.921 q5be202f77bd0.smd Tests failed [weight=0]: CATCHALLMAILS=IGNORE[0] 12/14/2006 09:13:19.921 q5be202f77bd0.smd L3 Message OK 12/14/2006 09:13:19.921 q5be202f77bd0.smd Subject: Take it easy 12/14/2006 09:13:19.921 q5be202f77bd0.smd From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [EMAIL PROTECTED] IP: 83.8.172.182 ID: AHNCX*-FQHG4D-/M 12/14/2006 09:13:19.921 q5be202f77bd0.smd Action(s) taken for [EMAIL PROTECTED] = WHITELISTED [LAST ACTION=WHITELISTED] 12/14/2006 09:13:20.000 q5be202f77bd0.smd Using [incoming] CFG file D:\IMAIL\Declude\$default$.junkmail. 12/14/2006 09:13:20.000 q5be202f77bd0.smd Tests failed [weight=0]: CATCHALLMAILS=IGNORE[0] 12/14/2006 09:13:20.000 q5be202f77bd0.smd L4 Message OK 12/14/2006 09:13:20.000 q5be202f77bd0.smd Subject: Take it easy 12/14/2006 09:13:20.000 q5be202f77bd0.smd From: [EMAIL PROTECTED] To: [EMAIL
RE: [Declude.JunkMail] Why are these being whitelisted?
We are required to archive ALL incoming mail. The Sarbanes-Oxley Act does not differentiate between legitimate mail and spam :) I did remove the whitelist to. I went back to using the masterbkup.junkmail file and just setting all actions to ignore. I just wanted to know what had caused this, so in the future it doesn't happen again. Thanks! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, December 14, 2006 12:20 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Why are these being whitelisted? You're required to archive spam? I can't imagine that. I would remove the WHITELIST TO. Note that if any of the recipients are whitelisted, then all will effectively be whitelisted for that message. Darin. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Why are these being whitelisted?
I'm afraid that your reading of SOX compliance is not widely practiced. If you block an E-mail, and it is never received by a person covered by SOX, then there is no reason to archive it. SOX in fact essentially requires that spam and virus blocking services be utilized in order to help secure sensitive information by preventing such messages and their exploitable code and/or social engineering techniques from reaching end-users. If you think of this in the same light as paper documents (which also of course need to be kept on hand when governed by SOX and many other regulations), it would be absurd to keep copies of junk postal mail along with legitimate business communications. Unsolicited bulk commercial E-mail, viruses and scams that never reach an end-user are surely not the equivalent of an business communication under any regulation. Matt Sharyn Schmidt wrote: We are required to archive ALL incoming mail. The Sarbanes-Oxley Act does not differentiate between legitimate mail and spam :) I did remove the whitelist to. I went back to using the masterbkup.junkmail file and just setting all actions to ignore. I just wanted to know what had caused this, so in the future it doesn't happen again. Thanks! -Original Message- *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Darin Cox *Sent:* Thursday, December 14, 2006 12:20 PM *To:* declude.junkmail@declude.com *Subject:* Re: [Declude.JunkMail] Why are these being whitelisted? You're required to archive spam? I can't imagine that. I would remove the WHITELIST TO. Note that if any of the recipients are whitelisted, then all will effectively be whitelisted for that message. Darin. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Why are these being whitelisted?
MessageThat has to be a mistake. For example, if a company were to use an external filtering service, they would have no means of archiving spam that had been filtered out. Also, with spam currently at 90% of all incoming email, it's ludicrous to have to archive 10x the actual legitimate email volume in order to be compliant. Darin. - Original Message - From: Sharyn Schmidt To: declude.junkmail@declude.com Sent: Thursday, December 14, 2006 12:47 PM Subject: RE: [Declude.JunkMail] Why are these being whitelisted? We are required to archive ALL incoming mail. The Sarbanes-Oxley Act does not differentiate between legitimate mail and spam :) I did remove the whitelist to. I went back to using the masterbkup.junkmail file and just setting all actions to ignore. I just wanted to know what had caused this, so in the future it doesn't happen again. Thanks! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, December 14, 2006 12:20 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Why are these being whitelisted? You're required to archive spam? I can't imagine that. I would remove the WHITELIST TO. Note that if any of the recipients are whitelisted, then all will effectively be whitelisted for that message. Darin. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Why are these being whitelisted?
Question Authority.. Chris _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharyn Schmidt Sent: Thursday, December 14, 2006 1:44 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Why are these being whitelisted? shrug IF it is a mistake, then my boss is the one that is making it I just do what I'm told! :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, December 14, 2006 1:31 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Why are these being whitelisted? That has to be a mistake. For example, if a company were to use an external filtering service, they would have no means of archiving spam that had been filtered out. Also, with spam currently at 90% of all incoming email, it's ludicrous to have to archive 10x the actual legitimate email volume in order to be compliant. Darin. - Original Message - From: Sharyn mailto:[EMAIL PROTECTED] Schmidt To: declude.junkmail@declude.com Sent: Thursday, December 14, 2006 12:47 PM Subject: RE: [Declude.JunkMail] Why are these being whitelisted? We are required to archive ALL incoming mail. The Sarbanes-Oxley Act does not differentiate between legitimate mail and spam :) I did remove the whitelist to. I went back to using the masterbkup.junkmail file and just setting all actions to ignore. I just wanted to know what had caused this, so in the future it doesn't happen again. Thanks! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, December 14, 2006 12:20 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Why are these being whitelisted? You're required to archive spam? I can't imagine that. I would remove the WHITELIST TO. Note that if any of the recipients are whitelisted, then all will effectively be whitelisted for that message. Darin. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Why are these being whitelisted?
Sharyn, You might want to walk into his office, pick a discarded piece of junk postal mail out of his garbage and ask him why he doesn't have to keep his junk and you do :) Of course that might get you fired, but maybe there's some middle ground with an alternative approach that would allow you to better explain it. Printing off a stack of hundreds of junk messages and showing him that the legitimate ones are less than 10% of that stack might be rather compelling. Matt Sharyn Schmidt wrote: shrug IF it is a mistake, then my boss is the one that is making it I just do what I'm told! :) -Original Message- *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Darin Cox *Sent:* Thursday, December 14, 2006 1:31 PM *To:* declude.junkmail@declude.com *Subject:* Re: [Declude.JunkMail] Why are these being whitelisted? That has to be a mistake. For example, if a company were to use an external filtering service, they would have no means of archiving spam that had been filtered out. Also, with spam currently at 90% of all incoming email, it's ludicrous to have to archive 10x the actual legitimate email volume in order to be compliant. Darin. - Original Message - *From:* Sharyn Schmidt mailto:[EMAIL PROTECTED] *To:* declude.junkmail@declude.com mailto:declude.junkmail@declude.com *Sent:* Thursday, December 14, 2006 12:47 PM *Subject:* RE: [Declude.JunkMail] Why are these being whitelisted? We are required to archive ALL incoming mail. The Sarbanes-Oxley Act does not differentiate between legitimate mail and spam :) I did remove the whitelist to. I went back to using the masterbkup.junkmail file and just setting all actions to ignore. I just wanted to know what had caused this, so in the future it doesn't happen again. Thanks! -Original Message- *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Darin Cox *Sent:* Thursday, December 14, 2006 12:20 PM *To:* declude.junkmail@declude.com *Subject:* Re: [Declude.JunkMail] Why are these being whitelisted? You're required to archive spam? I can't imagine that. I would remove the WHITELIST TO. Note that if any of the recipients are whitelisted, then all will effectively be whitelisted for that message. Darin. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Why are these being whitelisted?
LOL thanks Matt This is surprising to me because he is normally right about everything. (and he doesnt even gloat about it) Guess I've gotten so complacent, I don't even bother to question what he says, unless it's something I know for sure that is wrong. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Thursday, December 14, 2006 3:36 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Why are these being whitelisted? Sharyn, You might want to walk into his office, pick a discarded piece of junk postal mail out of his garbage and ask him why he doesn't have to keep his junk and you do :) Of course that might get you fired, but maybe there's some middle ground with an alternative approach that would allow you to better explain it. Printing off a stack of hundreds of junk messages and showing him that the legitimate ones are less than 10% of that stack might be rather compelling. Matt --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
