[Declude.JunkMail] Per User config redirecting
I'm asking for your experience, and any gotcha's I may be missing. Our main domain accounts for 95% + of our email clients. On this domain, I have been using Per-User configuration files for clients who need something different from the $default$.config. I set up domain folders, and have a config file for each special needs user inside the domain folder. Almost all of these fall into one of three settings groups that are identical. Today, I have been looking into the Redirect command. It would let me set up three config files (say nofilter.config, permissive.config, and aggressive.config), and then have a redirect command in my default.config for each special needs user pointing to the appropriate config file. This way, when I need to make a change, say add a new test, I only need to change three or four config files instead of dozens. This would add substantially to the size of my default config. Any performance hits or other worries I need to know about? Bill Green dfn Systems 505-622-7853 [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] AOL Block Trouble
Looks like AOL has blocked us. We're getting aduse reports from AOL SCOMP, but the attached email example has no information in it. This is all it contains. =20 =3D=20 = Headers are evidently blank. no info at all. Can I set up a filter that would catch all mail to aol so I can COPYTO an account I can monitor? Bill Green dfn Systems 505-622-7853 [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Adding weight by country
Thanks Guys, I've got it working. I used Scott's txt to start with, but I will probably use some of Matt's stuff as an example to customize it further. Now I just need to figure out why my google searches yesterday didn't turn up these links. (Probably end of day brain-fog on my part) One item I want to make sure I'm clear on. Swapping Countries for Country would only be done in the txt file, right? Bill G - Original Message - From: Gary Steiner [EMAIL PROTECTED] You can find it in the knowledgebase at http://support.declude.com/Customer/KBArticle.aspx?articleid=6KBSearchID=8956 To get a perspective on how it is being used by different folks represented on the mailing list, go to http://www.mail-archive.com/declude.junkmail@declude.com/ and do a search on the word COUNTRIES. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Adding weight by country
I've noticed that most of the spam getting through my declude/sniffer/invuribl setup is coming from certain countries. I would like to add weight to mail from those countries. I've seen discussion on how to do this on the list, but now that I look for it, the only entries I can find are too obscure. I believe it is a custom filter with the word country or countries in the text file? Am I way off base? I can't find it in the manual at all. Can someone pitch me a link, or some other bone? Declude 4.x (latest build) Bill Green dfn systems --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] SmarterMail Experiences
Thanks Herb and Kevin! I had missed 2 different ways of doing it. I guess I need to RTMA (Read the Manual Again) Herb Wrote: That is not correct. Here is the info from the help in version 3.x. Smartermail will do what you want, require those from non known ip addresses or ranges to have to authenticate and other not to have to. Kevin Wrote: Not true you can allow IP addresses to send unauthenticated. We do it. Security - SMPT Authentication Bypass --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SmarterMail Experiences
Well now that we have moved from IMail 8.15 to 8.22, we are now experiencing the problem where Declude needs to be restarted regularly to correct an apparent memory leak. I remember following threads about this problem and how the upgrade to IMail 2006.1 generally solved the problem. Since we are going to have to change to the new IMail platform anyway and our support agreement is up for renewal, I have been reviewing SmarterMail. The apparent benefits I've seen so far are lower cost, lower resource utilization (especially WebMail), and support beyond IMail's 8X5 hours. The only downsides I see so far are user re-education, and that it seems to lack SMTP Relay for specified IPs. So, Would any SmarterMail Admins like to share from actual experience to date? Bill Green dfn Systems --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] SmarterMail Experiences
Can you elaborate on lack SMTP Relay for specified IPs.? I thought you could whitelist IP addresses in SmarterMail. Or is this totally different? Mike, Let me state it another way. IMail will allow users to send without authentication, but only for a certain IP range. SmarterMail seems to only have 2 options. Authentication required, or totally Open Relay. Bill Green dfn Systems --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Way to delete spam over a certain weight?
Chris, I have found that anything more than double my hold / spam mailbox weight is safe to delete. Your results may vary, so you might start at 3 or 4 times hold weight at first, then over a period of days or weeks, use weightrange to move the top few points before delete to a review acct for a while. If it seems all spam, then lower your Delete score, and review the next few points. When you start seeing legit mail in your review range, double check the next one up. Bill Green dfn Systems - Original Message - From: Chris Patterson To: declude.junkmail@declude.com Sent: Friday, December 01, 2006 10:03 AM Subject: [Declude.JunkMail] Way to delete spam over a certain weight? I am running Smartermail2.6 with Declude 3.11. We are slaying some serious spam, (Total: 4129440 [Spam: 4029758 Virus: 626]), so much we can no longer complete searches for customers who want their spam zipped and sent to them each evening in less than 4 hours. I don't want to delete for individual tests but would rather delete spam with an absurd weight on it. Any ideas for this? Thanks, Chris Patterson, CCNA Network Engineer/Support Manager Rapid Systems --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] IPBYPASS with multiple domains
I have a customer whose email domain we are hosting who recently began using Postini. This is the first time I've had to deal with a gateway. The documentation is pretty clear, but I do have one question. Since the gateway is only for one domain, will IPBYPASS work without interfering with the other domains? Or will I have to use HOPHIGH to catch them all? Bill Green dfn Systems [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude not modifying subject line
Andy Schmidt wrote: I get the feeling this issue of end-of-line detection is being made overly complicated. Declude is not a message-fixer-upper. I have enough problems with people using CISCO SMTP FIXUP that breaks everything. Declude's job is to correctly determine the header vs. content and then subject the header and content to appropriate analysis. If a message is found to be malformed, then Declude can make it fail a Test so that the mail admin can decide to accept or reject those messages - but it's not Declude's job to artificially make an incompatible message compatible with email clients. Well said Andy. I completely agree. Bill Green dfn Systems --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] picture spam
Of course those of us who are small ISPs don't even have the option. Bill dfn Systems - Original Message - From: chris To: declude.junkmail@declude.com Sent: Thursday, October 12, 2006 7:15 AM Subject: RE: [Declude.JunkMail] picture spam Guys, Commtouch hasnt missed any, stop making things hard on yourselves .. Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott FisherSent: Wednesday, October 11, 2006 5:17 PMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] picture spam Sorbs-DUL and NJABL Dynablock look to be the best. Although they miss lots. 5-10's has been discontinued. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 3:53 PM Subject: RE: [Declude.JunkMail] picture spam Thanks all for the various suggestions. Agreed- combo is the way to use that test, for sure. A bit OT, but what is the popular and accurate DUL database these days? How accurate is fiveten at DUL lookups? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott FisherSent: Wednesday, October 11, 2006 12:49 PMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] picture spam I combo thegraphics hit (jpg, gif or png) with: 1. bad DNS - None or timeout 2. bad language (eastern European iso-8859-2) or Cyrillic (koi8-r or iso-8859-5), etc 3. cmdspace 4. good DUL IP lists/tests 5. having forged your local domain. I still get 5-10 a day. It is a pain. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 12:08 PM Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
Re: [Declude.JunkMail] AutoWhitelist feature with Imail 2006
True, my choice of words was not fair to Declude. Thanks for the correction. Bill Green dfn Systems - Original Message - From: John T (Lists) [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Friday, August 18, 2006 5:03 PM Subject: RE: [Declude.JunkMail] AutoWhitelist feature with Imail 2006 The Declude feature is not broken, Ipswitch changed the way contacts are in Imail 2006 in that they are now in a central access DB instead of in individual files. I believe Declude is looking into how they can adapt the feature to the new Imail format. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Green dfn Systems Sent: Friday, August 18, 2006 3:50 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] AutoWhitelist feature with Imail 2006 I'm currently running Imail 8.21 and declude 3.0.5.20. I've been watching for a certain set of features to be available in IMail 2006 with Declude before I upgrade. Specifically, AutoWhitelist and the Mailbox Action. My customers are used to checking their Spam folder online and adding any false positives to their Contacts list for whitelisting. I remember reading on one of my email lists that the Declude Autowhitelist feature is broken when used with Imail 2006. Was this really the case? Has it been fixed in current release? Is anyone using it successfully? Bill Green dfn Systems --- [This E-mail scanned for viruses by Declude EVA] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail scanned for viruses by Declude EVA] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] AutoWhitelist feature with Imail 2006
I'm currently running Imail 8.21 and declude 3.0.5.20. I've been watching for a certain set of features to be available in IMail 2006 with Declude before I upgrade. Specifically, AutoWhitelist and the Mailbox Action. My customers are used to checking their Spam folder online and adding any false positives to their Contacts list for whitelisting. I remember reading on one of my email lists that the Declude Autowhitelist feature is broken when used with Imail 2006. Was this really the case? Has it been fixed in current release? Is anyone using it successfully? Bill Green dfn Systems --- [This E-mail scanned for viruses by Declude EVA] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Testing the Boards
PONG - Original Message - From: David Barker [EMAIL PROTECTED] To: Declude.Virus@declude.com; Declude.JunkMail@declude.com Sent: Thursday, April 27, 2006 7:21 AM Subject: [Declude.JunkMail] Testing the Boards PING --- [This E-mail scanned for viruses by Declude EVA] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Left over D*.SM$ files in proc\work
Goran, I was having the same issue. I seem to have resolved it accidently while working on an ?unrelated? connectivity issue. Since I was not focusing on the orphaned proc/work files as I made changes, I do not know which change resolved this issue. These are the changes I made: In Queue Manager: Disabled DNS Cache Disabled Failed Domain Skipping In SMTP Security Tab: Disabled "Check Valid Sender" Disabled "Auto-deny possible Hack Attempts" Bill Green dfn Systems - Original Message - From: Goran Jovanovic Hi, I have noticed that I am getting left over D*.SM$ files in the proc\work directory. I am getting 2 to 4 of these per day on a volume of 15-20K messages a day. ~~~ Anyone have any ideas about this? Thanks Goran Jovanovic Omega Network Solutions
Re: [Declude.JunkMail] SmarterMail 3.0 and Declude
Great! :-) Only one feature to go! I'm hoping the new SMTP Plus and POP Plus will enable Declude's Mailbox Action to work. Bill Green dfn Systems - Original Message - Automatic Whitelisting per user from the recipient's Web Messaging Address Book - As far as I know, this has been supported for quite sometime by Deculde / SmarterMail. --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Ping 2-3-06
I haven't received anything from the Declude or Imail lists since early this morning. I'm getting nervous. Is it just quiet? Bill Greem dfn Systems --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Mailbox Action on email not working in IMail
I thought I'd add the software info: IMail 8.12 Declude 3.0.5.20 My Mailbox action has quit working in IMail. The Declude Log shows Last Action=Mailbox, but IMail delivers to the Main folder. Declude Log 01/19/2006 00:01:59.109 q3960069c00fe2cd1.smd Tests failed [weight=16]: CATCHALLMAILS=IGNORE[0] NOLEGITCONTENT=IGNORE[0] IPNOTINMX=IGNORE[0] SPAMBAG=WARN[2] SPFUNKNOWN=WARN[0] SUBSPACE-12=WARN[1] SUBCHARS-50=WARN[1] SUBCHARS-55=WARN[1] SUBCHARS-60=WARN[1] SNIFFER=MAILBOX[10] WEIGHT10=MAILBOX[10] WEIGHT14=IGNORE[14] 01/19/2006 00:01:59.125 q3960069c00fe2cd1.smd L1 Message OK 01/19/2006 00:01:59.125 q3960069c00fe2cd1.smd Action(s) taken for [EMAIL PROTECTED] = IGNORE WARN MAILBOX [LAST ACTION=MAILBOX] 01/19/2006 00:01:59.125 q3960069c00fe2cd1.smd Cumulative action(s) taken on this email = IGNORE WARN MAILBOX [LAST ACTION=MAILBOX] IMail Log 2006-01-19 00:01:52 Local7.Debug 127.0.0.1 SMTPD (3960069c00fe2cd1) [65.223.9.133] MAIL FROM:[EMAIL PROTECTED] 2006-01-19 00:01:52 Local7.Debug 127.0.0.1 SMTPD (3960069c00fe2cd1) [65.223.9.133] RCPT TO:[EMAIL PROTECTED] I'm not sure what to do at this point. Does anyone have any suggestions? Bill Green dfn Systems --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude v3 CPU usage and processing speed
Marcus, Are you running DNS on the Mail Server, or does it point to another machine? If running locally, you might want to try pointing DNSOVERRIDE to a different dns server. Bill Green dfn Systems - Original Message - From: Markus Gufler [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, January 13, 2006 8:55 AM Subject: RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed I would try the DNSOVERRIDE x.x.x.x switch in your declude.cfg file. There is a post in the archive from Declude - Bill I beleive that explains more. Can't find any message from Bill Added DNSOVERRIDE without any result Markus --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] proc directory orphans
John, As I got a chance to look more thoroughly, I found that I misspoke. The files in question are in the Work directory inside the Proc Directory. On 12-28-05 you wrote: Are there any related D files left over? Could these be confirmation list messages that has to do with the Declude Confirm problem? I couldn't find any matching files in the spool directory or even in the logs. :-\ I don't have Declude Confirm. I'm running IMail 8.12 / Declude 3.0.5.20 Junk and AV Pro. I upgraded from Declude 1.82 to 3.0, bypassing 2.x entirely so the /proc/work directories are relatively new to my installation. Bill Green dfn Systems --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] proc directory orphans
Since the list seems quiet today, It seems a good chance for a less than critical question. My proc directory has about 5 - 15 q*.smd files a day that never process. They have been building up since I Upgraded to 3.0 and the proc directory was created. There are about 600 of them now. Are these just orphans to be deleted after 24-36 hrs. or is something I need to look into? I didn't think one of the file pair should be left here? Bill Bill Green dfn Systems --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Not supporting null originator Problem
Hi Chris, Refusing null senders actually breaks your email server according to thr RFCs. I know it's nice to be able to block all the false returns caused by forging viruses, but doing so in this manner also blocks legitimate server responces. rfc-ignorant.org is actually a good source of education.information on this and other email standards. Bill - Original Message - From: Chris Anton To: Declude.JunkMail@declude.com Sent: Monday, December 19, 2005 7:55 AM Subject: [Declude.JunkMail] Not supporting null originator Problem Hi all... having a problem with a user sending to albertus.edu. Getting following error from their server:Unknown user: [EMAIL PROTECTED] RCPT TO generated following response:554 Service unavailable; Sender address [EMAIL PROTECTED] blockedusing dsn.rfc-ignorant.org; Not supporting null originator (DSN) 1) Is this a result of my "0 Null sender maximum tries"? Should I set this too 1 or too much spam threat? 2) Does this make me RFC Ignorant :-) 3) Should they really be blocking this email on such a flimsy test? Thanks for your thoughts. -Chris Anton--- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude EVA]
Re: [Declude.JunkMail] Checking country so many times...
Mark, I don't know what your processor capability is, but with dual 1.5s my optimum setting is threads=65. You may try bumping yours up to at least 35-40 and see what it does to your proc utilization. you'll need to restart decludeproc service after the change for it to take effect. Keep in mind that if you have a backlog, your processor may max until it clears out. If it is still maxing after your que is cleared, adjust the threads back down some. Bill - Original Message - From: Mark Smith [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, December 12, 2005 10:28 AM Subject: [Declude.JunkMail] Checking country so many times... Just moved to 3.05.22 and my server's can't keep up with the queue (but they can with 2.06). Threads=20 CPU's fine. Anyway, I set Declude logs to debug and I'm seeing this for every message. Anyone know why Declude would check the country so many times? 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.837 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.852 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.852 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.852 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.852 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.852 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.852 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.852 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.852 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.852 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.852 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.852 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.852 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.852 qaf8501fe351b.smd Checking countries: US . 12/12/2005 12:14:26.852
Re: [Declude.JunkMail] declude.cfg threads procedure
Thank You John and Bill :-), During my adjustments, I was able to try it both ways. On my first adjustment I stopped and restarted decludeproc, smtp, and Que Manager. I immediately saw the change in proccessor utilization. For the second adjustment, I only restarted the decludeproc service. This change also worked well with no apparent troubles as far as I could tell from logs, and directory checks. My threads are now set at 65. This setting change allowed my server to clear up a backlog of 9000 in the proc directory in minutes during the heaviest time of day. Big difference! Bill G - Original Message - From: Bill Landry [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, November 30, 2005 3:46 PM Subject: Re: [Declude.JunkMail] declude.cfg threads procedure It's not necessary to stop/start any IMail services, since IMail calls declude.exe (not decludeproc.exe), and all declude.exe does is move the queue files from the spool directory to the proc directory. Decludeproc checks the proc directory at whatever time interval you have set in you declude.cfg and processes whatever it finds there. Bill - Original Message - From: John T (Lists) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, November 30, 2005 2:09 PM Subject: RE: [Declude.JunkMail] declude.cfg threads procedure Changes to the Declude.cfg file require a restart of the Decludeproc.exe service. Of course, I highly recommend first stopping the Imail SMTP and Queue Manager services before restarting the Decludeproc service but some one has posted that is not needed. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Bill Green dfn Systems Sent: Wednesday, November 30, 2005 1:40 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] declude.cfg threads procedure Hi, I recently upgraded to Declude 3.0.5.20. Everything is running well except for a backlog in the proc directory in the heavy part of the day. I began adjusting threads in declude.cfg. The original setting was 5. With my Dual 1.5 Ghz machine, I figured 75 was closer to the mark. Do I need to stop/start any services to make the change effective, or just change the number in declude.cfg? Bill --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Autowhitelist not working
My Autowhitelist appears to have stopped working. Customers email has started to go to the spam folder even though the sending email address is in their WebMail Contacts List. I don't know at this point exactly when this problem began, but it is recent. I upgraded from 1.82 to 3.0 about 2 weeks ago, but I don't know if it's related. Looking at the logs, it appears the email is being treated as if autowtitelist isn't on. I've double checked my global config to ensure it is. Has anyone encountered this before? Bill G --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Autowhitelist not working
I'm running on IMail 8.12 I've considered SmarterMail but the lack of a mailbox feature to route spam to individual mailboxes was a dealbreaker. We have too many customers who depend on it. Bill - Original Message - From: Evans Martin [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, December 01, 2005 1:38 PM Subject: RE: [Declude.JunkMail] Autowhitelist not working What exact version are you running? SmarterMail or IMail? We run SmarterMail now and worked with David on a fix for the AutoWhitelist problem. I think it made it into production in 3.0.5.18. Evans Martin http://www.martek.net iPlus Info Browser - IPB's IMail Migration Tool, password browser, reporting suite make IPlus Info Browser something no IMail administrator should be without. http://www.martek.net/Default.aspx?tabid=96 -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Bill Green dfn Systems Sent: Thursday, December 01, 2005 12:34 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Autowhitelist not working My Autowhitelist appears to have stopped working. Customers email has started to go to the spam folder even though the sending email address is in their WebMail Contacts List. I don't know at this point exactly when this problem began, but it is recent. I upgraded from 1.82 to 3.0 about 2 weeks ago, but I don't know if it's related. Looking at the logs, it appears the email is being treated as if autowtitelist isn't on. I've double checked my global config to ensure it is. Has anyone encountered this before? Bill G --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] declude.cfg threads procedure
Hi, I recently upgraded to Declude 3.0.5.20. Everything is running well except for a backlog in the proc directory in the heavy part of the day. I began adjusting threads in declude.cfg. The original setting was 5. With my Dual 1.5 Ghz machine, I figured 75 was closer to the mark. Do I need to stop/start any services to make the change effective, or just change the number in declude.cfg? Bill --- [This E-mail scanned for viruses by Declude EVA] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] SmarterMail Mailbox Action Equivalent?
- Original Message - From: Panda Consulting S.A. Luis Alberto Arango [EMAIL PROTECTED] Sent: Friday, November 04, 2005 5:27 PM As far as I know there is no support for Mailbox Action. The equivalent is Routeto for Smartermail, but still far from the nice functionality of the Mailbox action. I hope some day we have Mailbox action available for smartermail as well. Is an action I miss a lot. Is Routeto for SmarterMail equivalent in that you can route a given user's spam to a subfolder in their individual mailbox, or does it only route to an email address like RouteTo for IMail? Bill Green --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SmarterMail Mailbox Action Equivalent?
I've been following SmarterMail's growth with interest on this mailing list since IMail's price debacle last year (or was it 2 yrs ago?). The dealbreaker for us then was the lack of an equivalent to the IMail/Declude Mailbox Action where I could route mail of a certain weight range to a user's subfolder accessable by the user via WebMail. This has been extremely popular with our customers and was actually the feature which drew us to Declude in the first place. Now, from what I'm seeing on the IMail list, it looks as if IpSwitch is again engaging in Sticker Shock on the IMail Annual Maintenance. I'm looking at SmarterMail with renewed interest as, I'm sure, are others. Have I missed news of a SmarterMail equivalent to the Mailbox Action, or is one coming soon? Bill --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] custom test setup for invURIBL
We are using IMail 8.12 / Declude 1.8 / Sniffer invURIBL. This combination has virtually eliminated Spam with very little False Positives. I am searching for ways to reduce the Processor penalty for invURIBL. Many of the latest updates have helped a little, but I have an idea that, if possible, will drastically reduce my cpu utilization. Any mail that fails Sniffer (which is most of our Spam) is penalized enough that I don't need invURIBL to run. According to my understanding, using custom tests I can set a test to apply invURIBL only if the email passes sniffer, but invURIBL is still actually run against every email since it is in global.cfg, so there is no reduction in Processor utilization. (Actually, an increase due to the custom test). Do I understand this correctly? Is there a way to only run the invuribl.exe if a message has passed Sniffer? Bill Green dfn Systems 505-622-7853 [EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] German political spam
Markus Wrote: If someone is interested in, I've updated my sober-q filter files. I'm interested! Thanks Markus! Bill Green dfn Systems --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Off Topic - Content Filter Suggestions
We may be taking on a large account which requires content filtering for students. I'm looking for a content filter system that would provide hands off updating similar to Pete's awesome Sniffer Product. I thought this would be a good place to ask for suggestions though it's not email related. Thanks, Bill Green dfn Systems --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Failing my own MAILFROM test
On 3-3-05, Andy Wrote Query THOSE DNS servers to see if they have MX/A records. Sometimes people have an internal DNS server for the AD domain that doesn't have the public records. That was it. Thanks Andy! --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Failing my own MAILFROM test
I seem to remember something about this in the archives, but haven't been able to track it down. When I use the outgoing tests, legitimate mail from my own server gets blocked largely because they fail MAILFROM. X-RBL-Warning: MAILFROM: Domain dfn.com has no MX or A records [0001]. DNSreport shows my MX and A records are correct. Bill Green dfn Systems --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
