[Declude.JunkMail] country filter
Hi, Plese help with setting the country filtering. Is it just adding: COUNTRIES contains5 kr COUNTRIES contains5 br to GLOBAL.CFG - one line per country extension? Do I need to add COUNTRIES WARN to the $default$.junkmail file? What else? please advise Best regards Lachezar -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Grant Griffith Sent: Wednesday, February 05, 2003 6:18 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] whitelist todomain I have them entered differently and it works. WHITELIST TO @pyramidhealthcare.com Not sure if the other way works, but this does... Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jim Rooth Sent: Wednesday, February 05, 2003 11:05 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] whitelist todomain I have set this up as a way to prevent lost emails. I have a problem with three different companies saying they are losing their emails. Will this allow their emails to go through...regardless of what it is? WHITELIST TODOMAIN pyramidhealthcare.com WHITELIST TODOMAIN standardhardware.com Jim Rooth Klotron, Inc. 214.244.0979 [EMAIL PROTECTED] Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.449 / Virus Database: 251 - Release Date: 1/27/2003 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Error in Declude log file
This is what I m getting in my Declude log: 02/07/2003 02:00:05 Warning: misconfiguration in following line in global.cfg file (ip4r is not an ACTION) 02/07/2003 02:00:05 DSBLip4r list.dsbl.org * 6 0 The problem is that the Declude JunkMail file can have tests with any name, so when Declude JunkMail sees a line starting with a name it doesn't recognize, it assumes that you are defining the test (like the line shown above). However, when it sees the test name again, it recognizes it as a valid test name, and assumes you are defining the outgoing action. In this case, the problem is that you have the line in there twice, something like: DSBLip4r list.dsbl.org * 6 0 DSBLip4r list.dsbl.org * 6 0 DSBLWARN In this case, if you remove the duplicate entry, the warning will go away. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] country filter
Plese help with setting the country filtering. Is it just adding: COUNTRIES contains5 kr COUNTRIES contains5 br to GLOBAL.CFG - one line per country extension? COUNTRY and COUNTRIES in Declude JunkMail are used as filters, so you would need to set up your own filter before you could use them. You would then place the COUNTRIES contains... lines in the filter file. Do I need to add COUNTRIES WARN to the $default$.junkmail file? Assuming that you name your test COUNTRIES (which probably isn't a good idea, as it will likely cause some confusion), you would need such a line in the $default$.JunkMail file (assuming that you wanted to use the WARN action on E-mail from those countries). What else? please advise All of the IP-country features also require the all_list.dat file (from http://www.declude.com/release/165/all_list.dat ), which needs to be located in the \IMail\Declude directory. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] country filter
Hi; I think it was Tom who submitted a complete listing of all countries in a file. That can save you time by simply assigning weight to each country as you see fit. I just listed it here from his file- just in case you want to have them all. This is our weights but you should adjust it per your liking. Our HOLD weight is based on 20 so these weights are with respect to that scale. Regards, Kami = COUNTRIES 1 CONTAINSAD COUNTRIES 1 CONTAINSAE COUNTRIES 1 CONTAINSAF COUNTRIES 1 CONTAINSAG COUNTRIES 1 CONTAINSAI COUNTRIES 1 CONTAINSAL COUNTRIES 1 CONTAINSAM COUNTRIES 1 CONTAINSAN COUNTRIES 1 CONTAINSAO COUNTRIES 1 CONTAINSAQ COUNTRIES 1 CONTAINSAR COUNTRIES 1 CONTAINSAS COUNTRIES 1 CONTAINSAT COUNTRIES 1 CONTAINSAU COUNTRIES 1 CONTAINSAW COUNTRIES 1 CONTAINSAZ COUNTRIES 1 CONTAINSBA COUNTRIES 1 CONTAINSBB COUNTRIES 1 CONTAINSBD COUNTRIES 1 CONTAINSBE COUNTRIES 1 CONTAINSBF COUNTRIES 1 CONTAINSBG COUNTRIES 1 CONTAINSBH COUNTRIES 1 CONTAINSBI COUNTRIES 1 CONTAINSBJ COUNTRIES 1 CONTAINSBM COUNTRIES 1 CONTAINSBN COUNTRIES 1 CONTAINSBO COUNTRIES 1 CONTAINSBR COUNTRIES 1 CONTAINSBS COUNTRIES 1 CONTAINSBT COUNTRIES 1 CONTAINSBV COUNTRIES 1 CONTAINSBW COUNTRIES 1 CONTAINSBY COUNTRIES 1 CONTAINSBZ COUNTRIES 0 CONTAINSCA COUNTRIES 1 CONTAINSCC COUNTRIES 1 CONTAINSCF COUNTRIES 1 CONTAINSCG COUNTRIES 10 CONTAINSCH COUNTRIES 1 CONTAINSCI COUNTRIES 1 CONTAINSCK COUNTRIES 1 CONTAINSCL COUNTRIES 1 CONTAINSCM COUNTRIES 10 CONTAINSCN COUNTRIES 1 CONTAINSCO COUNTRIES 1 CONTAINSCR COUNTRIES 1 CONTAINSCS COUNTRIES 1 CONTAINSCU COUNTRIES 1 CONTAINSCV COUNTRIES 1 CONTAINSCX COUNTRIES 1 CONTAINSCY COUNTRIES 1 CONTAINSCZ COUNTRIES 1 CONTAINSDE COUNTRIES 1 CONTAINSDJ COUNTRIES 1 CONTAINSDK COUNTRIES 1 CONTAINSDM COUNTRIES 1 CONTAINSDO COUNTRIES 1 CONTAINSDZ COUNTRIES 1 CONTAINSEC COUNTRIES 1 CONTAINSEE COUNTRIES 1 CONTAINSEG COUNTRIES 1 CONTAINSEH COUNTRIES 1 CONTAINSER COUNTRIES 1 CONTAINSES COUNTRIES 1 CONTAINSET COUNTRIES 1 CONTAINSFI COUNTRIES 1 CONTAINSFJ COUNTRIES 1 CONTAINSFK COUNTRIES 1 CONTAINSFM COUNTRIES 1 CONTAINSFO COUNTRIES 1 CONTAINSFR COUNTRIES 1 CONTAINSFX COUNTRIES 1 CONTAINSGA COUNTRIES 1 CONTAINSGB COUNTRIES 1 CONTAINSGD COUNTRIES 1 CONTAINSGE COUNTRIES 1 CONTAINSGF COUNTRIES 1 CONTAINSGH COUNTRIES 1 CONTAINSGI COUNTRIES 1 CONTAINSGL COUNTRIES 1 CONTAINSGM COUNTRIES 1 CONTAINSGN COUNTRIES 1 CONTAINSGP COUNTRIES 1 CONTAINSGQ COUNTRIES 1 CONTAINSGR COUNTRIES 1 CONTAINSGS COUNTRIES 1 CONTAINSGT COUNTRIES 1 CONTAINSGU COUNTRIES 1 CONTAINSGW COUNTRIES 1 CONTAINSGY COUNTRIES 1 CONTAINSHK COUNTRIES 1 CONTAINSHM COUNTRIES 1 CONTAINSHN COUNTRIES 1 CONTAINSHR COUNTRIES 1 CONTAINSHT COUNTRIES 1 CONTAINSHU COUNTRIES 1 CONTAINSID COUNTRIES 1 CONTAINSIE COUNTRIES 1 CONTAINSIL COUNTRIES 1 CONTAINSIN COUNTRIES 1 CONTAINSIO COUNTRIES 1 CONTAINSIQ COUNTRIES 1 CONTAINSIR COUNTRIES 1 CONTAINSIS COUNTRIES 1 CONTAINS
[Declude.JunkMail] Declude - Imail Logging
Scott or anyone, Looking to see if someone will confirm my thinking. In trying to compare the IMail log files to the junkmail log files for some stats. Is it Correct that in an IMail - Declude JM combination 1) The IMail log files would show 5 SMTMD lines for each email (connect, ehlo or helo, Mail From, Rcpt To and \imail\spool\D...) Curiosity question as it doesn't really matter for my main question At this point does IMail creates the Q file also but only logs the D file creation. 2) In the case of an email being intercepted by Declude JM and Deleted the IMail log file will only have the above mentioned SMTPD lines. In short IMail receives the e-mail, records the SMTPD info and hands off to Declude. If Declude deletes the E-mail (removes the D and/or the Q files) IMail never records anything else for this e-mail. If Declude passes the e-mail IMail would then record a SMTP process for the corresponding Q file. Thanks Stu - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude - Imail Logging
Is it Correct that in an IMail - Declude JM combination 1) The IMail log files would show 5 SMTMD lines for each email (connect, ehlo or helo, Mail From, Rcpt To and \imail\spool\D...) There could be more (if there are multiple recipients, for example, there would be multiple RCPT TO: lines). Also, I think that IMail doesn't require the EHLO/HELO line, so there could be less as well. There could be other errors or unusual entries that I can't think of, too. Curiosity question as it doesn't really matter for my main question At this point does IMail creates the Q file also but only logs the D file creation. I believe that IMail will create a T*.SMD file (which is the same as the Q*.SMD file, but named differently while the TCP/IP connection is still open) immediately upon connection, which it updates as new information is received from the remote mailserver. Then, as soon as the DATA statement is sent from the remote mailserver (before the \imail\spool\D... line), IMail will create the D*.SMD file. Once the E-mail is finished being received, IMail then adds the \imail\spool\D... line to the log. I *could* be wrong about this, but I believe this is how it works. 2) In the case of an email being intercepted by Declude JM and Deleted the IMail log file will only have the above mentioned SMTPD lines. Correct. In short IMail receives the e-mail, records the SMTPD info and hands off to Declude. If Declude deletes the E-mail (removes the D and/or the Q files) IMail never records anything else for this e-mail. Correct. If Declude passes the e-mail IMail would then record a SMTP process for the corresponding Q file. Correct. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] newbie progress
Steve, From your previous message you stated you were using the ROUTETO parameter to a mailbox called [EMAIL PROTECTED] So I am running the weight10 test, and doing a ROUTETO to a mailbox called [EMAIL PROTECTED] What we do is have the customer (admin for that host.com) login to Imail's Web Messaging every so often for that user (your case user called weight10) and look for legitimate email, if found, then they forward over (using Web Messaging) to the appropriate person for that domain (your case mymailhost.com) Also, to aid them, we use the immsgexp to remove email from this spam account every number of X days to aid them size limitations on that account. I hope this is a little clearer. Keith -Original Message- From: Steve Jensen [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 11:00 PM To: Declude (E-mail) Subject: [Declude.JunkMail] newbie progress the HOLD command did the trick. Keith, I didn't understand your suggestion. If i run declude, and it does a HOLD on a particular msg that turns out to be legit, it still requires my intervention. I go in the spam dir, look at the msg, see it's legit and dragndrop to the spool dir. Is there a way to do it other than this? Steve --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] external tests
How does Declude handle an external test that hangs? Does Declude just keep waiting on a response from the external test?...or does it eventually timeout and continue on? Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Error in Declude log file
Thanks Scott, In my zeal to get my global file updated I copied that line from the latest global file. It appears that further down the file the same test was defined. I missed it because it was grouped with most of the tests that are commented out with a #. Thanks again - Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Friday, February 07, 2003 8:07 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Error in Declude log file This is what I m getting in my Declude log: 02/07/2003 02:00:05 Warning: misconfiguration in following line in global.cfg file (ip4r is not an ACTION) 02/07/2003 02:00:05 DSBLip4r list.dsbl.org * 6 0 The problem is that the Declude JunkMail file can have tests with any name, so when Declude JunkMail sees a line starting with a name it doesn't recognize, it assumes that you are defining the test (like the line shown above). However, when it sees the test name again, it recognizes it as a valid test name, and assumes you are defining the outgoing action. In this case, the problem is that you have the line in there twice, something like: DSBLip4r list.dsbl.org * 6 0 DSBLip4r list.dsbl.org * 6 0 DSBLWARN In this case, if you remove the duplicate entry, the warning will go away. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] external tests
How does Declude handle an external test that hangs? Does Declude just keep waiting on a response from the external test?...or does it eventually timeout and continue on? It will time out after an hour. If it happens rarely, this wouldn't be a problem. If there was a problem where the external test was never ending, for all E-mail that was scanned, then it could cause some mail delivery problems. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Action for Multiple Tests
Actually, it just clicked. Each test has an assigned weight (which is alterable) and the amount of tests a email fails determines the weight. I filter based on a combined weight and it will take care of emails that fail several tests. Thanks for all your help! Philip Butler Internal Systems Engineer Region VI ESC phone 936.435.2503 fax 936.295.1447 [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Thursday, February 06, 2003 4:02 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Action for Multiple Tests That makes sense. So if I just want to HOLD or DELETE it, is there a good reference document that I can look at which will demonstrate how to use the weighted system to respond to messages which fail multiple tests? What are you looking to do? The weighting system works by assigning a spam weight to each E-mail, based on the tests that it fails. For example, if it fails the BADHEADERS test (which has a weight of 8 by default) and the DSBL test (which has a weight of 6 by default), the total spam weight for the E-mail would be 14 (8 plus 6). If you wanted to hold all incoming E-mail with a weight of 20 or higher, you would then add the following line to your \IMail\Declude\$default$.JunkMail file: WEIGHT10HOLD -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] external tests
Okay. I only had it occur twice over the past day with a new external test we built. We are gonna fix it, but I was curious how that was handled. Thanks, Bill -Original Message- From: R. Scott Perry Sent: Fri, 07 Feb 2003 10:25:14 -0500 Subject: Re: [Declude.JunkMail] external tests How does Declude handle an external test that hangs? Does Declude just keep waiting on a response from the external test?...or does it eventually timeout and continue on? It will time out after an hour. If it happens rarely, this wouldn't be a problem. If there was a problem where the external test was never ending, for all E-mail that was scanned, then it could cause some mail delivery problems. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Spews is incompetent (well, overzealous at least)
Right, the only way to talk to them is through the abuse newsgroup. The problem is that you have to deal with the comments from the millions of other As* Hol** on that group. I love the comments like Well just move to another ISP. Yeah right and have to re-configure hundreds of IP addresses in DNS records, ASP, PHP, routing, etc.. :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Phillip B. Holmes Sent: Thursday, February 06, 2003 7:27 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Spews is incompetent (well, overzealous at least) Mark, I may be off base here, but I am almost positive that spews.org offers no way of communicating with people. There is no way to contact them. Regards, Phillip B. Holmes Media Resolutions Inc. Macromedia Alliance Partner http://www.mediares.com [EMAIL PROTECTED] 1-888-395-4678 972-889-0201 /* Please send support requests to [EMAIL PROTECTED] */ Failure is not falling down but refusing to get up.--- Chinese Proverb -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Mark Smith Sent: Thursday, February 06, 2003 8:38 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Spews is incompetent (well, overzealous at least) Here Here! I'm not defending them at all but they really should use something other then that kiddy farm newsgroup to communicate with. I really think that's half of their perception problem. Of course their guerilla tactics don't help! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Phillip B. Holmes Sent: Wednesday, February 05, 2003 8:03 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Spews is incompetent (well, overzealous at least) Well, Nah, they're incompetent, overzealous and irresponsible. Did I say that out loud? I feel like I did my part. Today we helped convinced another mid-sized provider (http://www.OLM.com) to stop using spews completely. They implemented spews on 02/03/03 and by 02/05/03 it was gone. However, I can't take all the credit. There were PLENTY of ticked off users and admins reading them the riot act. Regards, Phillip B. Holmes Media Resolutions Inc. Macromedia Alliance Partner http://www.mediares.com [EMAIL PROTECTED] 1-888-395-4678 972-889-0201 /* Please send support requests to [EMAIL PROTECTED] */ Failure is not falling down but refusing to get up.--- Chinese Proverb -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Colbeck, Andrew Sent: Wednesday, February 05, 2003 6:02 PM To: '[EMAIL PROTECTED]' Subject: [Declude.JunkMail] Spews is incompetent (well, overzealous at least) Check out this article if you haven't already. http://www.theregister.co.uk/content/6/29159.html The link to the Newsgroup message thread for pro vs. con is worth a read, and includes some gems. The short of it is that spews.org often lists a much bigger netblock than they need to, on the philosophy that users of their system prefer to not deal at all with an ISP that is receiving income by hosting a spammer. For similar reasons, even though it's a pretty darn big ISP through acquisitions, my ISP is listed in XBL and BLARS for a very small number of spammer infractions. I use OSSRC but give it a relatively low weight due to the likelihood of throwing the baby out with the bathwater. Andrew. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by F-Proto Virus Scanner] --- [This E-mail scanned for viruses by F-Proto Virus Scanner] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by F-Proto Virus Scanner] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
[Declude.JunkMail] Store and Forward Imail Setup
Title: Store and Forward Imail Setup Scott, Does JunkMail work well with Imail setup in a store and forward setup. We have a tremendous amount of Exchange Clients who are wanting to get their email filtered for spam and viruses with us, however, due to issues with BCC and X-RCPT-TO not being handled correctly through POP3, we need to offer them a different setup. We are (probably) going to buy another copy of Imail and your products to support these type users. I wanted to ensure that their email would get scanned under this type of setup. Thanks for the help. ___ Keith Johnson, MCP Network Engineer Network Advocates, Inc. Tel: 502.412.1050 Fax: 502.412.1058 Email: [EMAIL PROTECTED] Good pings come in small packets
RE: [Declude.JunkMail] Store and Forward Imail Setup
Title: Store and Forward Imail Setup Yes, all Declude products work in this way, as I am doing that here. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Keith Johnson Sent: Friday, February 07, 2003 9:29 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Store and Forward Imail Setup Scott, Does JunkMail work well with Imail setup in a store and forward setup. We have a tremendous amount of Exchange Clients who are wanting to get their email filtered for spam and viruses with us, however, due to issues with BCC and X-RCPT-TO not being handled correctly through POP3, we need to offer them a different setup. We are (probably) going to buy another copy of Imail and your products to support these type users. I wanted to ensure that their email would get scanned under this type of setup. Thanks for the help. ___ Keith Johnson, MCP Network Engineer Network Advocates, Inc. Tel: 502.412.1050 Fax: 502.412.1058 Email: [EMAIL PROTECTED] Good pings come in small packets
Re: [Declude.JunkMail] declude jm not sometimes not logging INFECTED
But in neither of those instances did it detect a virus only a vulnerability... Duane - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, February 07, 2003 12:02 PM Subject: Re: [Declude.JunkMail] declude jm not sometimes not logging INFECTED During the development of my log analyzer, I noticed the following with declude For the same type of vulnerability, sometimes it reports INFECTED sometimes it doesn't: Why is that? It is actually Declude Virus that checks for vulnerabilities. :) The File(s) are INFECTED line occurs if the virus scanner detects a virus, whereas it will not occur if the virus scanner does not detect a virus. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude jm not sometimes not loggingINFECTED
But in neither of those instances did it detect a virus only a vulnerability... When a vulnerability is detected, it is treated the same as if a virus were detected, so references in the logs to virus can mean an E-mail that either has a virus or a vulnerability. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude jm not sometimes not logging INFECTED
- Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, February 07, 2003 12:25 PM Subject: Re: [Declude.JunkMail] declude jm not sometimes not logging INFECTED But in neither of those instances did it detect a virus only a vulnerability... When a vulnerability is detected, it is treated the same as if a virus were detected, so references in the logs to virus can mean an E-mail that either has a virus or a vulnerability. -Scott Right, I see that, but I still don't see why declude did not report INFECTED My full log for this specific spoolid is below... The same vulnerability, is detected as CONTAINS A VIRUS but only one contains INFECTED... 01/23/2003 04:41:31 Qc6d60322006e9eb4 Outlook 'CR' vulnerability [Received: ] in line 3 01/23/2003 04:41:31 Qc6d60322006e9eb4 Deleting file with virus 01/23/2003 04:41:31 Qc6d60322006e9eb4 Deleting E-mail with virus! 01/23/2003 04:41:31 Qc6d60322006e9eb4 Scanned: CONTAINS A VIRUS [MIME: 0 0] 01/23/2003 04:41:31 Qc6d60322006e9eb4 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 01/23/2003 04:41:31 Qc6d60322006e9eb4 Subject: I took some pictures...ohljkdqqCloolfrp1qhw 01/23/2003 05:19:44 Qcfc70372007a8cb8 Outlook 'CR' vulnerability [Return-Pat] in line 53 01/23/2003 05:19:44 Qcfc70372007a8cb8 File(s) are INFECTED [0] 01/23/2003 05:19:44 Qcfc70372007a8cb8 Deleting file with virus 01/23/2003 05:19:44 Qcfc70372007a8cb8 Deleting E-mail with virus! 01/23/2003 05:19:44 Qcfc70372007a8cb8 Scanned: CONTAINS A VIRUS [MIME: 2778] 01/23/2003 05:19:44 Qcfc70372007a8cb8 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 01/23/2003 05:19:44 Qcfc70372007a8cb8 Subject: FW: Smile --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude jm not sometimes not loggingINFECTED
Right, I see that, but I still don't see why declude did not report INFECTED My full log for this specific spoolid is below... The same vulnerability, is detected as CONTAINS A VIRUS but only one contains INFECTED... Because the INFECTED line indicates that the virus scanner detected a virus. In the first case, it did not detect a virus. In the second case it did. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] New Util
I have made available a new util for all to use. It produces MRTG like graphs of failed Junkmail tests as well as the message count. I have also created a web page for all of my utils to be downloaded. http://spamreview.argolink.net/software/. If you want to see the graphs it can make go to http://mail.argolink.net:2180/spamstats. I also updated an old util to clean out excessive bounce messages, it has been rewritten in Perl and had some functionality added. Comments and suggestions are always welcome. Thanks, Chuck Frolick ArgoNet, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] New Util
Charles, Friday, February 7, 2003 you wrote: CF Comments and suggestions are always welcome. Nice job Charles. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude jm not sometimes not logging INFECTED
Hmm, why then did I not get a line that said Virus= ? Duane - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, February 07, 2003 1:00 PM Subject: Re: [Declude.JunkMail] declude jm not sometimes not logging INFECTED Right, I see that, but I still don't see why declude did not report INFECTED My full log for this specific spoolid is below... The same vulnerability, is detected as CONTAINS A VIRUS but only one contains INFECTED... Because the INFECTED line indicates that the virus scanner detected a virus. In the first case, it did not detect a virus. In the second case it did. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude jm not sometimes not loggingINFECTED
Hmm, why then did I not get a line that said Virus= ? That will appear at LOGLEVEL MID and higher. Note that that line will not appear if the virus name does not appear in the report.txt file. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] New Util
I forgot to mention that the stats grapher works from log level LOW on up, although I did not test DEBUG, I do not forsee an issue. Thanks, Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Charles Frolick Sent: Friday, February 07, 2003 1:42 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] New Util I have made available a new util for all to use. It produces MRTG like graphs of failed Junkmail tests as well as the message count. I have also created a web page for all of my utils to be downloaded. http://spamreview.argolink.net/software/. If you want to see the graphs it can make go to http://mail.argolink.net:2180/spamstats. I also updated an old util to clean out excessive bounce messages, it has been rewritten in Perl and had some functionality added. Comments and suggestions are always welcome. Thanks, Chuck Frolick ArgoNet, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude jm not sometimes not logging INFECTED
My loglevel is set to MID, has always been, this log file was all from the same day. Well maybe for somereason F-Prot didn't return the name in the report.txt Duane - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, February 07, 2003 2:04 PM Subject: Re: [Declude.JunkMail] declude jm not sometimes not logging INFECTED Hmm, why then did I not get a line that said Virus= ? That will appear at LOGLEVEL MID and higher. Note that that line will not appear if the virus name does not appear in the report.txt file. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Log Question
Has anyone else noticed bad log lines in the JM log? I will get a short spurt of partial log entries, usually without a newline to separate them, occasionally just the end of an entry on a line by itself. Never seems to last more than a minute. It can really mess with log analysis. Thanks, Chuck Frolick ArgoNet, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Store and Forward Imail Setup
John, Does Declude realize it is a store and forward scenario, thus it processes the mail and then places it back in the spool directory for delievery? -Original Message- From: John Tolmachoff [mailto:[EMAIL PROTECTED]] Sent: Fri 2/7/2003 12:42 PM To: [EMAIL PROTECTED] Cc: Subject: RE: [Declude.JunkMail] Store and Forward Imail Setup Yes, all Declude products work in this way, as I am doing that here. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Keith Johnson Sent: Friday, February 07, 2003 9:29 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Store and Forward Imail Setup Scott, Does JunkMail work well with Imail setup in a store and forward setup. We have a tremendous amount of Exchange Clients who are wanting to get their email filtered for spam and viruses with us, however, due to issues with BCC and X-RCPT-TO not being handled correctly through POP3, we need to offer them a different setup. We are (probably) going to buy another copy of Imail and your products to support these type users. I wanted to ensure that their email would get scanned under this type of setup. Thanks for the help. ___ Keith Johnson, MCP Network Engineer Network Advocates, Inc. Tel: 502.412.1050 Fax: 502.412.1058 Email: [EMAIL PROTECTED] Good pings come in small packets winmail.dat
RE: [Declude.JunkMail] Store and Forward Imail Setup
Does Declude realize it is a store and forward scenario, thus it processes the mail and then places it back in the spool directory for delievery? Yes, it does. We have quite a few customers who are set up like this. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] copy all inbound/outbound mail
I know this has been discussed somewhere, either here or in the imail list, but I can't seem to find it. How can I copy all inbound and outbound email for a specific user or users and then possibly for a complete domain? For incoming mail, I know to use the ., in the forward field in imail user admin, but not sure how to accomplish it for outgoing. And not sure how to do it for an entire domain. Our need is to monitor a couple of specific imail users, and secondly we are considering archiving all email for a domain. Is there anything in declude to help me with this? Thanks Dan Spangenberg --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Log Question
Has anyone else noticed bad log lines in the JM log? I will get a short spurt of partial log entries, usually without a newline to separate them, occasionally just the end of an entry on a line by itself. Never seems to last more than a minute. It can really mess with log analysis. Yes, I have seen this before and I made sure that Delog was able to handle it. Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] copy all inbound/outbound mail
You could write a psuedotest for Declude which would handle archiving all messages fitting a particular profile - or all of them. The utility would see everything and would be integrated just like any other external test. We've experimented with a few knowledge base training systems like this using Message Sniffer to categorize the content with a special rule base. For you purposes I'll bet something simpler could work great - perhaps even a simple script. Just a thought, _M | -Original Message- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]] On Behalf Of Dan | Spangenberg | Sent: Friday, February 07, 2003 5:26 PM | To: [EMAIL PROTECTED] | Subject: [Declude.JunkMail] copy all inbound/outbound mail | | | I know this has been discussed somewhere, either here or in | the imail list, | but I can't seem to find it. | How can I copy all inbound and outbound email for a specific | user or users | and then possibly for a complete domain? For incoming mail, | I know to use | the ., in the forward field in imail user admin, but not sure how to | accomplish it for outgoing. And not sure how to do it for an | entire domain. | | Our need is to monitor a couple of specific imail users, and | secondly we are | considering archiving all email for a domain. | | Is there anything in declude to help me with this? | | Thanks | Dan Spangenberg | | --- | [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] displaying modified headers in bounce msg
I have several XINHEADER/XOUTHEADER lines in my GLOBAL.CFG file to provide some useful information. And I have a couple of tests that uses the BOUNCE action, which instert the headers and/or full message into the bounced email using the declude variables %HEADERS% and %FULLMSG%. However, these variables insert the original unmodified headers. My question is, is there any way to instert the modified headers into the bounce email's message body so that the X- headers that declude adds are displayed? Thanks, Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] displaying modified headers in bouncemsg
My question is, is there any way to instert the modified headers into the bounce email's message body so that the X- headers that declude adds are displayed? No, there isn't. It's been added to the suggestion database, but it may require having the proper order in the global.cfg file (to make sure that all warning headers get added before the BOUNCE action is processed). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] displaying modified headers in bounce msg
ok, thanks. It would be nice, but its definitely not a priority. Bill -Original Message- From: R. Scott Perry Sent: Fri, 07 Feb 2003 18:35:09 -0500 Subject: Re: [Declude.JunkMail] displaying modified headers in bounce msg My question is, is there any way to instert the modified headers into the bounce email's message body so that the X- headers that declude adds are displayed? No, there isn't. It's been added to the suggestion database, but it may require having the proper order in the global.cfg file (to make sure that all warning headers get added before the BOUNCE action is processed). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] A Couple of Declude Questions
I have inherited an server running IMail 6.06. I have been told that the server is running Declude Virus and I can find traces of Declude around the server but I'm having a hard time figuring out how Declude interfaces with IMail. Underneath my IMail directory there is a directory called Declude which contains the files: Dan, welcome to the club. About the best thing I can recommend is to spend some time reading through archives, the documents that Scott is sending you, and the Imail KB. One thing I would suggest is to go to a command prompt, change to the Imail directory and type in this: declude -diag c:\declude.txt and then send that file to Scott so he can review that it is all correct. Declude Junkmail may be little confusing at first, (test definitions and actions) but just remember to take small steps and you will move right along. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] New Util
I have a question, how do you get perl to rescan the same log it scanned 5 minutes before, and pick up where it left off? Duane - Original Message - From: Charles Frolick [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, February 07, 2003 2:27 PM Subject: RE: [Declude.JunkMail] New Util I forgot to mention that the stats grapher works from log level LOW on up, although I did not test DEBUG, I do not forsee an issue. Thanks, Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Charles Frolick Sent: Friday, February 07, 2003 1:42 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] New Util I have made available a new util for all to use. It produces MRTG like graphs of failed Junkmail tests as well as the message count. I have also created a web page for all of my utils to be downloaded. http://spamreview.argolink.net/software/. If you want to see the graphs it can make go to http://mail.argolink.net:2180/spamstats. I also updated an old util to clean out excessive bounce messages, it has been rewritten in Perl and had some functionality added. Comments and suggestions are always welcome. Thanks, Chuck Frolick ArgoNet, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] New Util
Duane,
Friday, February 7, 2003 you wrote:
DC I have a question, how do you get perl to rescan the same log it scanned 5
DC minutes before, and pick up where it left off?
Always more than one way - but here is one possibility:
sub tail_log {
my $iteration = 0;
for (;;) {
while (LOGFILE) {
next unless length;
# do some stuff
sleep $nap;
# dont' forget to check the date to see if we have gone to next day
# and if so you have to close and then open new log at end and
# so on
seek(LOGFILE, 0, 1);
}
}
}
hth
Terry Fritts
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
[Declude.JunkMail] A Couple of Declude Questions
Hello, All, I have a couple of questions about Declude; one regarding their Virus product and another regarding their Spam product. #1) Regarding Declude Virus I have inherited an server running IMail 6.06. I have been told that the server is running Declude Virus and I can find traces of Declude around the server but I'm having a hard time figuring out how Declude interfaces with IMail. Underneath my IMail directory there is a directory called Declude which contains the files: installed.bin postmaster.eml otherpostmaster.eml recip.eml sender.eml virus.cfg virus_domains.txt In the IMail folder itself is a file called Declude.exe. I am trying to figure out how IMail calls Declude to help it scan for viruses. Is this some sort of setting in IMail? Where is it located in the IMail administration screens? Is there any documentation which comes with Declude Virus? I am trying to understand how Declude Virus works because we are also thinking about adding Declude Spam into the mix. Which brings me to my next set of questions? #2) Regarding Declude Spam How do I get a trial copy of Declude Spam to try out? Is it's installation affected by having Declude Virus already on the server? All comments are appreciated. Thanks In Advance, Dan Geiser [EMAIL PROTECTED] This E-mail is scanned and free from viruses. www.nexustechgroup.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] A Couple of Declude Questions
I am trying to figure out how IMail calls Declude to help it scan for viruses. Is this some sort of setting in IMail? Where is it located in the IMail administration screens? It is either handled by a registry entry, or on the Advanced tab of the SMTP settings (if you are running IMail v7.10 or later). Declude takes care of the installation automatically, however. Is there any documentation which comes with Declude Virus? Yes -- I'll send that information to you off the list. How do I get a trial copy of Declude Spam to try out? I'll take care of that off the list, too. Is it's installation affected by having Declude Virus already on the server? No, the installation of Declude JunkMail will not be affected by having Declude Virus running (you can run all the Declude programs on the same server without any problems). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches both viruses and vulnerabilities in E-mail, with no annual licensing fees. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Blacklists
Scott and all, We have the ability to develop a whitelist by domain now, how about the ability to create a individual blacklist, say something like this in each junkmail file... WHITELISTFILE C:\maillists\cswanson\whitelist.txt BLACKLISTFILE C:\maillists\cswanson\blacklist.txt What prompted this was a customer who is using the Web Email address book whitelist, and wants to shut down all Hotmail accounts trying to send him mail other then the ones he has in his address book. So if I understand the .JunkMail processing, it's done after the address book is checked. So he'd receive his whitelisted hotmail accounts, and anything else from a hotmail address would be dumped. Kendra Customer Support http://www.kendra.com/support [EMAIL PROTECTED] 425-397-7911 This Email was scanned for viruses Junk Email filtered ISP --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
