RE: [Declude.JunkMail] What is the Reveiw folder for?
Please review the posts I made on 3.0.5.3 earlier this week. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith Sent: Wednesday, September 28, 2005 5:07 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] What is the Reveiw folder for? There's a folder in the \proc folder called review I've got messages building up in it but not sure what they are.
RE: [Declude.JunkMail] HiJack Deccon in 3.0.5
My understanding is Deccon is no longer used. A new GUI is in the works. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Lyndon Eaton Sent: Tuesday, September 27, 2005 6:41 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] HiJack Deccon in 3.0.5 Hi, Just upgraded to Declude version 3.0.5 today (from 1.8!) and I'm a little unsure of how to monitor HiJack. Can't get the deccon.exe to open although I know declude now runs as a service. Had a look at the HiJack manual but can't find anything and done a quick search in the archives too. What am I missing? Could anyone point me in the right direction? Thanks. Lyndon Eaton. Email checked by UKsubnet anti-virus service To prevent email abuse block spam contact [EMAIL PROTECTED] Tel: +44(0)9063407727 (calls cost £1.50/minute) Fax: +44(0)8712360300 Web: www.uksubnet.net Powered by UKsubnet Internet Service Provider Business to Business Internet (ISP) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Beta 3.0.4.4 update 09/24/05A
Yup, looks the same. If you want me to test it, send me the q file as well, but it looks like the same formatting. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kim Premuda Sent: Sunday, September 25, 2005 12:41 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Beta 3.0.4.4 update 09/24/05A John, Attached is the d*.smd file that I reported to Declude last Thursday which causes both the 3.0.3 and 3.0.4.4 'decludeproc.exe' services to stop. The message content looks very similar to the 3 files you posted, and I thought you might want to take a look at it (out of curiosity). Kim -- Original Message -- From: John Tolmachoff \(Lists\) [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Sat, 24 Sep 2005 13:25:49 -0700 Through a time consuming process, I have apparently identified the trigger for the problem with the decludeproc stopping and messages backing up. Attached are text files which are D files for messages that caused this. The 2 times in the last 4 days that the decludeproc has stopped. Each time, one of these files was in the work folder. After disabling the decludeproc, moving the entire contents of the work folder to a temp folder, then feeding one pair of files to the proc folder at a time, I was able to isolate it to these. Each one of the 3 is identical in the included characters and body formatting. I would ask that any one else having this problem please check and see if you have any of these kind of files stuck in the work folder. If you need any help in figuring this out, please let me know. If we can all confirm this, Declude will be able to fix the problem that faster. John T eServices For You -- Kim W. Premuda FastWave Internet Services San Diego, CA -- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release?
In a few minutes, I am going to drop the known bad files into the proc folder and watch what happens. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Monday, September 26, 2005 11:47 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release? we're going to try it out later tomorrow nightfirst on IM8.15 then we'll move up to 8.21 Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net Richmond's Internet Source since 1996! WEB HOSTING including EMAIL beginning at $29/month! DSL Starting at $39.95/month! Non-Profits - receive a 25% discount on most services! Global Web Solutions is a registered trademark of Global Web Solutions, Inc., Glen Allen, VA From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Monday, September 26, 2005 2:29 PM To: Declude.JunkMail@declude.com; Declude.Virus@declude.com Subject: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release? I see 3.0.5 was released today. Anyone know if this fixes the reported performance and stability issues reported here with the 3.0.x betas? Darin.
RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release?
Current release is 3.0.5.3 Reactions/observations so far: 1. Dropping known bad d and q files, decludeproc moves them to a new folder \proc\review. The Decludeproc did crash and stop, but it was restarted. I am not sure if the files were moved upon restart or at the time of the crash. I am suspecting that what happens is when decludeproc is started, any files in the proc\work folder are moved to the proc\review folder. I can live with this unless of course the messages that are causing this become more prevalent. Declude is still searching for the cause and remedy for the crash, and I have just sent a bunch more information to them regarding this issue. Note that any files in the work folder are moved, so you should activily monitor that folder. I am doing so by copying and modifying the script Bill has for monitoring HOLD1 and HOLD2. If some one has a better idea, please let me know. 2. Hijack and Confirm appear to be working correctly now, waiting for a test. 3. During the install, the default location is not correct at all. You must change the install location to the Imail directory. I have responded to Declude about this recommending that the default location be taken from the Imail install registry key. 4. If you make a mistake during the install like I did, (accepting the default location,) and have to uninstall, you have to do a restart to clear the decludeproc from the services list to complete the service deletion. (This happened to me anyways, your mileage may vary.) John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Monday, September 26, 2005 11:29 AM To: Declude.JunkMail@declude.com; Declude.Virus@declude.com Subject: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release? I see 3.0.5 was released today. Anyone know if this fixes the reported performance and stability issues reported here with the 3.0.x betas? Darin.
RE: [Declude.JunkMail] upgrade to 3.0.5
Stop the Imail SMTP service Stop the Imail Queue Manager service. Perform the upgrade. Make sure the DecludeProc service is started. Restart the Imail SMTP and Queue Manager service. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bonno Bloksma Sent: Monday, September 26, 2005 12:33 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] upgrade to 3.0.5 Hi, Currently using Declude 2.0.6 Do I just stop the queue service and then performe the Upgrade or do I have to stop more? Groetjes, Bonno Bloksma
RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release?
Per Bill at Declude, number 3 is fixed and number 4 is being fixed. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Monday, September 26, 2005 12:44 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release? Current release is 3.0.5.3 Reactions/observations so far: 1. Dropping known bad d and q files, decludeproc moves them to a new folder \proc\review. The Decludeproc did crash and stop, but it was restarted. I am not sure if the files were moved upon restart or at the time of the crash. I am suspecting that what happens is when decludeproc is started, any files in the proc\work folder are moved to the proc\review folder. I can live with this unless of course the messages that are causing this become more prevalent. Declude is still searching for the cause and remedy for the crash, and I have just sent a bunch more information to them regarding this issue. Note that any files in the work folder are moved, so you should activily monitor that folder. I am doing so by copying and modifying the script Bill has for monitoring HOLD1 and HOLD2. If some one has a better idea, please let me know. 2. Hijack and Confirm appear to be working correctly now, waiting for a test. 3. During the install, the default location is not correct at all. You must change the install location to the Imail directory. I have responded to Declude about this recommending that the default location be taken from the Imail install registry key. 4. If you make a mistake during the install like I did, (accepting the default location,) and have to uninstall, you have to do a restart to clear the decludeproc from the services list to complete the service deletion. (This happened to me anyways, your mileage may vary.) John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Monday, September 26, 2005 11:29 AM To: Declude.JunkMail@declude.com; Declude.Virus@declude.com Subject: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release? I see 3.0.5 was released today. Anyone know if this fixes the reported performance and stability issues reported here with the 3.0.x betas? Darin.
RE: [Declude.JunkMail] 3.05 upgrade
Did you create the file declude.cfg in the imail\declude folder per instructions on the down load site? Look at the Windows Event log, any Decludeproc stops noted? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, September 26, 2005 2:24 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 3.05 upgrade I have followed the following steps: Stop the Imail SMTP service Stop the Imail Queue Manager service. rename declude.exe to declude.old Perform the upgrade. Make sure the DecludeProc service is started. (it was not) Restart the Imail SMTP and Queue Manager service. Decludeproc service was not running and the mail accumulated in the proc directory. Had to revert back to the 2.06.16 version. My Imail is 8.05 What is going wrong here. This seemed really simple. Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222
RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release?
Robert, may I make a suggestion? Put all the logs into debug mode. Allow it to run until you know this issue has occurred. Put the logs back the way you had them. Extract from the JM log all the lines for a message in question. Send those along with the d and q file to Declude support. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Grosshandler Sent: Monday, September 26, 2005 2:25 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release? I have one outstanding issue -- not stability related. We're seeing some messages that exceed our hold or delete weights get routed to our hold or delete folders without having their subjects altered (we prepend spam to the subject line). They route ok. It does look like maybe the headers are being munged a bit in this case. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Monday, September 26, 2005 1:29 PM To: Declude.JunkMail@declude.com; Declude.Virus@declude.com Subject: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release? I see 3.0.5 was released today. Anyone know if this fixes the reported performance and stability issues reported here with the 3.0.x betas? Darin.
RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release?
Matt, yes they are actively working on number 1. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Monday, September 26, 2005 4:47 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release? I would hope that #1 becomes a priority as well. Having a program that handles spam, and especially viruses crash on parsing an E-mail, malformed or not, is a security issue as well as a stability one, though it appears that they might have addressed the stability thing. There's nothing worse than having a customer call up and ask you why you are passing multiple spams or even viruses. I don't however know that this causes leakage, but it is a bug and bugs aren't always predictable. Matt John Tolmachoff (Lists) wrote: Per Bill at Declude, number 3 is fixed and number 4 is being fixed. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff (Lists) Sent: Monday, September 26, 2005 12:44 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release? Current release is 3.0.5.3 Reactions/observations so far: 1. Dropping known bad d and q files, decludeproc moves them to a new folder \proc\review. The Decludeproc did crash and stop, but it was restarted. I am not sure if the files were moved upon restart or at the time of the crash. I am suspecting that what happens is when decludeproc is started, any files in the proc\work folder are moved to the proc\review folder. I can live with this unless of course the messages that are causing this become more prevalent. Declude is still searching for the cause and remedy for the crash, and I have just sent a bunch more information to them regarding this issue. Note that any files in the work folder are moved, so you should activily monitor that folder. I am doing so by copying and modifying the script Bill has for monitoring HOLD1 and HOLD2. If some one has a better idea, please let me know. 2. Hijack and Confirm appear to be working correctly now, waiting for a test. 3. During the install, the default location is not correct at all. You must change the install location to the Imail directory. I have responded to Declude about this recommending that the default location be taken from the Imail install registry key. 4. If you make a mistake during the install like I did, (accepting the default location,) and have to uninstall, you have to do a restart to clear the decludeproc from the services list to complete the service deletion. (This happened to me anyways, your mileage may vary.) John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Darin Cox Sent: Monday, September 26, 2005 11:29 AM To: Declude.JunkMail@declude.com; Declude.Virus@declude.com Subject: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release? I see 3.0.5 was released today. Anyone know if this fixes the reported performance and stability issues reported here with the 3.0.x betas? Darin.
[Declude.JunkMail] Gmail
Does any one know what the SpamDomains entries should be for @gmail.com? John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Beta 3.0.4.4 update 09/24/05A
Through a time consuming process, I have apparently identified the trigger for the problem with the decludeproc stopping and messages backing up. Attached are text files which are D files for messages that caused this. The 2 times in the last 4 days that the decludeproc has stopped. Each time, one of these files was in the work folder. After disabling the decludeproc, moving the entire contents of the work folder to a temp folder, then feeding one pair of files to the proc folder at a time, I was able to isolate it to these. Each one of the 3 is identical in the included characters and body formatting. I would ask that any one else having this problem please check and see if you have any of these kind of files stuck in the work folder. If you need any help in figuring this out, please let me know. If we can all confirm this, Declude will be able to fix the problem that faster. John T eServices For You Received: from mail.bddtb.com [218.187.44.83] by mail.eservicesforyou.net (SMTPD-8.20) id A77A0614; Fri, 23 Sep 2005 15:53:46 -0700 Received: (qmail 31553 invoked by uid 540); 24 Sep 2005 00:55:52 +0900 Date: 24 Sep 2005 00:55:52 +0900 Message-ID: [EMAIL PROTECTED] From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: $B%-%d%s%Z!%sCGB37hDj(B! $B!z!z!z1|MM%i%s%A(B1$B1_%-%d%s%Z!%s!z!z!z(B $B$49%ID:$$$F$$$k1|MM%i%s%A%-%d%s%Z!%s(B $B;R6!C#$N2F5Y$_$b=*$o$j$h$j$$$C$=$3hF0E*$J?M:JC#!y(B $B$=$s$J?M:JC#$K(B100pt$B!\EEOCG'Z!a(B900pt$B!a(B1$B1_L5NA%]%$%s%H$r;[EMAIL PROTECTED](B http://www.blazeblow.net/?num=0303 $B2F$N4V;R6!C#$N2F5Y$_$N0Y+J,$N;~4V$,;W$$h$$Kh$l$J$+$C$?(B $B1|MMC#$,5^e:EPO?Cf(B!!! $BL5NA%]%$%s%H$rej$K;H$C$F$*9%$_$N1|MM$r$_$D$1$F(B! $B1|MM(B$B$=$l0J30(B($BL$:'(B)[EMAIL PROTECTED];~EPO?u$1IU$1Cf(B http://www.blazeblow.net/?num=0303 $BG[?.5qH]$O$3$A$i$N%%I%l%9$^$G$*4j$$$7$^$9!#(B $B!!(B $B(B $B!!([EMAIL PROTECTED] --- Please inform the following address if this mail is unnecessary. [EMAIL PROTECTED] Received: from mail.bvvnb.com [218.187.44.117] by mail.eservicesforyou.net (SMTPD-8.20) id AFDA0394; Fri, 23 Sep 2005 17:37:46 -0700 Received: (qmail 31945 invoked by uid 509); 24 Sep 2005 02:08:29 +0900 Date: 24 Sep 2005 02:08:29 +0900 Message-ID: [EMAIL PROTECTED] From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: $B%-%d%s%Z!%sCGB37hDj(B! $B!z!z!z1|MM%i%s%A(B1$B1_%-%d%s%Z!%s!z!z!z(B $B$49%ID:$$$F$$$k1|MM%i%s%A%-%d%s%Z!%s(B $B;R6!C#$N2F5Y$_$b=*$o$j$h$j$$$C$=$3hF0E*$J?M:JC#!y(B $B$=$s$J?M:JC#$K(B100pt$B!\EEOCG'Z!a(B900pt$B!a(B1$B1_L5NA%]%$%s%H$r;[EMAIL PROTECTED](B http://www.blazeblow.net/?num=0303 $B2F$N4V;R6!C#$N2F5Y$_$N0Y+J,$N;~4V$,;W$$h$$Kh$l$J$+$C$?(B $B1|MMC#$,5^e:EPO?Cf(B!!! $BL5NA%]%$%s%H$rej$K;H$C$F$*9%$_$N1|MM$r$_$D$1$F(B! $B1|MM(B$B$=$l0J30(B($BL$:'(B)[EMAIL PROTECTED];~EPO?u$1IU$1Cf(B http://www.blazeblow.net/?num=0303 $BG[?.5qH]$O$3$A$i$N%%I%l%9$^$G$*4j$$$7$^$9!#(B $B!!(B $B(B $B!!([EMAIL PROTECTED] --- Please inform the following address if this mail is unnecessary. [EMAIL PROTECTED] Received: from mail.ikura-chan.com [218.187.44.145] by mail.eservicesforyou.net (SMTPD-8.20) id A58C0294; Fri, 16 Sep 2005 16:30:20 -0700 Received: (qmail 27998 invoked by uid 509); 17 Sep 2005 00:07:47 +0900 Date: 17 Sep 2005 00:07:47 +0900 Message-ID: [EMAIL PROTECTED] From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: $B1|MM%i%s%A(B! $B!z!z!z(B10.000$B1_%-%c%s%Z!%sB;\Cf!z!z!z(B $B1|MM%i%s%A$G$OB~:#MD:J!A;O$^$jc:J![EMAIL PROTECTED]$X(B10.000$B1_J,L5NA%%]h$j(B($B?)$YJ|Bj(B) $B%-%c%s%Z!%sB;[EMAIL PROTECTED](B(^O^)$B!?(B $B!!(Bhttp://www.blazeblow.net/?num=0308 $B#O#P#E#N$7$F4V$b$J$$?7;2T$N%5%$%H$G$9$,O7J^%5%$%H$KDI$$$D$1DI$$1[$;$r%b%C%H![EMAIL PROTECTED];o$K9-9p5-:\(B($B8=7QB35-:\Cf(B) $B$N$*$+$2$G8=;[EMAIL PROTECTED]@-$N?t$,c43B?$$EPO?u67$G$9!#(B $B2F$N$3$N;~4|K;$7$=$$J1|MM(B!$B$G$b:G6a$O$G$O3F+$GM=Dj$rF~$l$k;~Be(B!$B1|MM$K$b2F!y$OFCJL$J5(@a(By(^$B!(B^)y$B3Z$7$_v$r5a$a$F1|MMJ}$,(B $BB3!9EPO?Cf(B! $B!!(Bhttp://www.blazeblow.net/?num=0308 10.000$B1_J,L5NA$rej$K;H$C$F1|MM(B($BEvA3L$:'[EMAIL PROTECTED](B)$B$H3Z$7$$vAGE($J=P2q$$$r$_$D$1$F2$5$$!#(B $BCm(B)$B=P2q$$$rA0Ds$K$7$?%5%$%H$N0Y(B10.000$B1_L5NA$O0-5:Ey$rKI$00Y(B $B$KHV9fG'Z$,I,MW$H$J$j$^$9!#(B $BG[?.5qH]$O$3$A$i$N%%I%l%9$^$G$*4j$$$7$^$9!#(B $B!!(B $B(B $B!!([EMAIL PROTECTED] --- Please inform the following address if this mail is unnecessary. [EMAIL PROTECTED]
RE: [Declude.JunkMail] declude - cnn.com email alerts
Looks like it might end with .turner.com. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Travis Sullivan Sent: Saturday, September 24, 2005 2:05 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] declude - cnn.com email alerts anyone know of the REVDNS server that send out CNN's email alerts? I wanted to score it -40 until I figure out why they are not getting through. thanks, Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Gmail
Thanks. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Dan Sent: Saturday, September 24, 2005 1:59 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Gmail John, The REVDNS entries I've seen all show [a letter]proxy.gmail.com, so a second entry shouldn't be needed but .google.com couldn't hurt. If you need to use @, make it @gmail.com.gmail.com Dan On Sep 24, 2005, at 12:16, John Tolmachoff ((Lists)) wrote: Does any one know what the SpamDomains entries should be for @gmail.com? John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Beta 3.0.4.4 update 09/24/05A
Matt, I have the Decludeproc set to restart in the services manager, so it does get restarted. However, everytime it would restart, it would try running the file again and crash and so on. In the mean time, all the other messages stacked up. I have no problem having the OS restart the service each time. I do like the idea the files are moved out of the spool so that Imail can not touch them. What I do like is your idea of renaming, and that could be done in the work folder. Once decludeproc starts to process a message in the work folder, it appends the extension to say .proc and then when finished renames it back. Then program decludeproc to not start processing a message that ends in .proc. That way, if decludeproc does crash and restart, it will not try to process the messages that end in .proc. You could then write a script that looks for .proc files in the work folder older than say 30 minutes and send a notice, or move them and then send a notice. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Saturday, September 24, 2005 2:32 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Beta 3.0.4.4 update 09/24/05A John, Good find on this one. Curiously, I searched my Hold folder for examples of this and could find none. I would expect to have seen some of these unless possibly the patterns are well tagged and scored too high. We have pretty high volume over here. I'm speculating here, but this might suggest something that could cause Declude to crash. In the old days where these files were mostly stored in the spool, Declude could crash gracefully. Now with Declude moving everything out of the spool, if it crashes, it will then start up and crash again. I believe that this is probably not a good way to construct the product if at all possible. In the older Decludes the crash recovery was automatic unless a message landed in overflow that could cause it to crash. I would recommend that Declude keep files in the spool if at all possible. This means instead of moving Q files to a proc folder, they just be locked and left in the spool folder. That way the chances of a crash taking down the system will be much less. I consider this to be very, very important if Declude is going to start running as a service. You can't create the possibility of a crash that can repeatedly take down the service if it is avoidable. If this crash was caused by Declude not being able to properly parse a malformed message, there are likely many other ways to also crash it even if this one issue is resolved. This might also be the reason why I am not seeing these in my Hold file...Declude 2.0.6.16 might be crashing when trying them, but it isn't a service so it chugs on. There are other possible solutions besides keeping things in the spool. One might also be changing the name of the Q file as a first step, and not bothering to reprocess files that don't appear with their original name. Naturally I'm not totally sure about how everything works, so I'm sure that there could be even other much better ways to resolve this. Declude as a service also could use a mechanism for restarting itself when called by IMail so that crashes are self-recoverable. I would imagine that if decludeproc.exe is called and it isn't running as a service, it should be able to start itself. Matt John Tolmachoff (Lists) wrote: Through a time consuming process, I have apparently identified the triggerfor the problem with the decludeproc stopping and messages backing up.Attached are text files which are D files for messages that caused this. The2 times in the last 4 days that the decludeproc has stopped. Each time, oneof these files was in the work folder. After disabling the decludeproc,moving the entire contents of the work folder to a temp folder, then feedingone pair of files to the proc folder at a time, I was able to isolate it tothese. Each one of the 3 is identical in the included characters and bodyformatting.I would ask that any one else having this problem please check and see ifyou have any of these kind of files stuck in the work folder.If you need any help in figuring this out, please let me know.If we can all confirm this, Declude will be able to fix the problem thatfaster.John TeServices For You Received: from mail.bddtb.com [218.187.44.83] by mail.eservicesforyou.net (SMTPD-8.20) id A77A0614; Fri, 23 Sep 2005 15:53:46 -0700Received: (qmail 31553 invoked by uid 540); 24 Sep 2005 00:55:52 +0900Date: 24 Sep 2005 00:55:52 +0900Message-ID: [EMAIL PROTECTED]From: [EMAIL PROTECTED]To: [EMAIL PROTECTED]Subject: $B%-%d%s%Z!%sCGB37hDj(B!$B!z!z!z1|MM%i%s%A(B1$B1_%-%d%s%Z!%s!z!z!z(B$B$49%ID:$$$F$$$k1|MM%i%s%A%-%d%s%Z!%s(B$B;R6!C#$N2F5Y$_$b=*$o$j$h$j$$$C$=$3hF0E*$J?M:JC#!y(B$B$=$s$J?M:JC#$K(B100pt$B!\EEOCG'Z!a(B900pt$B!a(B1$B1_L5NA%]%$%s%H$r;[EMAIL PROTECTED](Bhttp://www.blazeblow.net/?num=0303$B2F$N4V;R6!C
RE: [Declude.JunkMail] Beta 3.0.4.4 update 09/24/05A
Declude renamed the files in the spool from smd to ~md, not Imail. When Imail was receiving, the Q was T until the entire D file was received and created. The problem also came when the Queue Manger did a normal timed run every 30 minutes or so depending on configuration. Yes, the file was as is and the only thing changed was the local domain. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Saturday, September 24, 2005 3:40 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Beta 3.0.4.4 update 09/24/05A John, The idea regarding the restart is for decludeproc to handle the process itself. Windows isn't always successful at restarting something, and sometimes things enter a bad state and you need something to actively monitor the process to make sure that it functions. The old Declude doesn't have any regular operational issues with IMail stealing files (only happens when you restart the queue manager out of order with IMail SMTP). If you look in the spool on IMail, you will see files named something like _D0A58F27011E822C.~MD. I think that this is IMail that is locking the files while the D* file is being received. If I am correct, old Declude places a lock on the Q* file (or maybe it's the D* file), and this is what keeps the IMail Queue Manager from stealing them. The trick here is that if Declude crashes, the file should be released eventually, and Declude won't reprocess it unless Declude crashed when the file was in overflow. When Declude takes either the D* or Q* file out of the spool, it has to take responsibility for handling the E-mail gracefully, and that includes recovery from errors. It might have something in there already that handles this, but there is also the new issue of a crash in Declude stopping delivery until it is restarted, so decludeproc needs to be able to monitor and start the service. Sniffer does something similar, but instead of restarting the service, it just continues to operate as a command line application. I did test one of the E-mails that you provided and it was successfully processed by Declude 2.0.6.16, so the error appears to be new to the 3.0 versions as long as I can trust that the formating of these files was maintained accurately as it was passed to the list and received by me. On a related note, it would be really, really helpful if we knew what types of things in Declude were modified when things go into a full release. Knowing what areas might have been modified, such as maybe the message parsing routines, can help a great deal with troubleshooting. I think that after more than a year under the new system we know well enough to expect that despite the best intentions, there are often issues, and I expect fully for this to continue. E-mail is unbelievably important to many companies, even more so important than the telephone due to it's ability to transmit data. If you interrupt that process it can cost people business, their jobs and it can even result in a lawsuit. This isn't need-to-know information, it is absolutely necessary information that administrators have to know. The community is fairly good as a whole at sharing this information, but we definitely don't detect every issue, or share every known issue. I personally have a list that I am not bothering to share with Declude because they are busy dealing with much greater issues at the moment (supporting IMail 8.2+ users). Matt John Tolmachoff (Lists) wrote: Matt, I have the Decludeproc set to restart in the services manager, so it does get restarted. However, everytime it would restart, it would try running the file again and crash and so on. In the mean time, all the other messages stacked up. I have no problem having the OS restart the service each time. I do like the idea the files are moved out of the spool so that Imail can not touch them. What I do like is your idea of renaming, and that could be done in the work folder. Once decludeproc starts to process a message in the work folder, it appends the extension to say .proc and then when finished renames it back. Then program decludeproc to not start processing a message that ends in .proc. That way, if decludeproc does crash and restart, it will not try to process the messages that end in .proc. You could then write a script that looks for .proc files in the work folder older than say 30 minutes and send a notice, or move them and then send a notice. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Saturday, September 24, 2005 2:32 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Beta 3.0.4.4 update 09/24/05A John, Good find on this one. Curiously, I searched my Hold folder for examples of this and could find none. I would expect to have seen some of these unless possibly the patterns are well
RE: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted
David, too clarify, is that THREAD or THREADS? Originally it was THREAD. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, September 22, 2005 9:00 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted WAITFORTHREADS 1500 WAITBETWEENTHREADS 1 Are the suggested defaults David B www.declude.com PS. Darrell, I will answer your question shortly, just waiting on some feedback from developers. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Grosshandler Sent: Thursday, September 22, 2005 11:59 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted Are these the suggested defaults? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, September 22, 2005 10:41 AM To: Declude.JunkMail@declude.com; Declude.Virus@declude.com Subject: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted 2 new Directives WAITFORTHREADS 1500 Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5 seconds this can be changed so that when the maximum threads are in use this time specifics the wait before checking to launch more threads. WAITBETWEENTHREADS 1 Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1 millisecond The time to wait between spawning one thread and starting to process another thread. David B www.declude.com --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Beta 3.0.4.4 Problem
I would ask that you go back to 3.0.4.4 and keep running. If you have this problem again, please do the same think and isolate the files, then send them to Declude along with the log files. This was seen before and was hopefully fixed, but if you are seeing it please continue to run 3.0.4.4 and if possible put the Declude JM log into debug. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kim Premuda Sent: Thursday, September 22, 2005 4:43 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Beta 3.0.4.4 Problem IMail 8.05 HF3 Downloaded and installed 3.0.4.4. Message file pairs were appearing in the 'proc' folder, subsequently moved to 'work' folder, then dispositioned as needed. Observed this for 10-15 minutes, then went about business. Checking back, I found that the 'decludedproc.exe' service was stopped, and that approximately 400 messasges were sitting in the 'proc' folder. Restarted the service only to have it immediately stop. Tried serveral more times and got the same results. My 'declude.cfg' file contained the following: THREADS 5 WAITFORMAIL 1 WAITFORTHREADS 1500 WAITBETWEENTHREADS 1 Since this was a similar situation as before, I stopped the 'decludeproc.exe' and IMail services, then copied those 400 messages to a temporary folder. Uninstalled 3.0.4.4 and re-installed 3.0.3, and started everything up. Grabbed the first 5 message file pairs in the temporary folder and put them in the 'proc' folder. I watched them get transferred to the 'work' folder. Within 30 seconds, the 'decludeproc.exe' version 3.0.3 stopped. I attempted to restart the service serveral times, but it would immediately stop. Copied the 5 message pairs back to the temporary folder. I made certain 'decludeproc.exe' version 3.0.3 had started. Then, starting with the LAST set of 5 message file pairs in the temporary folder, copied them to the 'proc' folder and watched them get processed. After 5 sets (and slowly working my way back to the top were the original 5 message file pairs are), thought I better post this to warn others. When (and if) I determine which file is causing both versions 3.0.3 and 3.0.4.4 to stop, I will send it and the log files to Declude for analysis. -- Kim W. Premuda FastWave Internet Services San Diego, CA -- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problem with a per domain filter file
Responding to 3 responses: Thanks, I had a feeling it was the ALLRECIPS, but it appears there is no other variable to use for the recipient. I guess I could use NOTCONTAINS instead of NOTENDSWITH. I was hoping for an exact match as possible. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] UPGRADE REPEAT
FYI, it appears the Beta may be wrapping up soon. So if you can, maybe wait a week or two for version 3.x. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Wednesday, September 21, 2005 6:20 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] UPGRADE REPEAT Kevin, The version that is compatible with 8.2x is going to be Declude version 3.0 which is still in beta testing. Although others have ran the 2.0.6 train with no issues under 8.2x - however others have not been so fortunate. Upgrading to the 2.0.6 install is fairly easy. Just run a manual install and copy over the new declude.exe to the imail directory. You might also want to go through the global.cfg for 2.0.6 and add any of the tests to your global.cfg that are missing. The installation for 3.0 is a little more involved. If you wanted to go that route you would need to sign up for the beta program. However, from reading your post it sounds like you might not be interested in the beta program. Let us know if you need anymore help, Darrell - DLAnalyzer - Comprehensive reporting for Declude Junkmail and Virus. http://www.invariantsystems.com Kevin Shimwell writes: Declude Teammates Well after several month of not wanting to upgrade. Here goes. Current Imail version 8.21. running 1 month inluding beta. Colaberation Suite IM running also. ( only the IM service portion) Currrent declude version Declude 1.79 (C) Copyright 2000-2004 Computerized Horizons. I also have Processor issues but have been manageable. I have a current service agreement with declude and want to upgrade to the most current declude.exe version. What should my procedure be? and what to look out for. Any helpful links or documentation including wise declude professional opinions welcome. I'm running window 2000 server latest patches and I wan to upgrade my declude. I'm running version: E:\IMaildeclude -diag Declude 1.79 (C) Copyright 2000-2004 Computerized Horizons. Diagnostics ON (Declude v1.79). Declude JunkMail: Config file found (E:\IMail\Declude\global.CFG). Declude Virus: Config file found (E:\IMail\Declude\Virus.CFG). Declude Hijack:Not installed (no E:\IMail\Declude\Hijack.CFG file). Declude Confirm: Not installed (no E:\IMail\Declude\Confirm.CFG file). 50 spam tests defined: AHBL BLITZEDALL CBL DSBL ORDB SBL SORBS-HTTP SORBS-SOCKS SORBS-MISC SORBS-SMTP SORBS-SPAM SORBS-WEB SORBS-BLOCK SORBS- ZOMBIE SORBS-DUHL S PAMCOP DSN NOABUSE NOPOSTMASTER BONDEDSENDER BADHEADERS BASE64 CMDSPACE COMMENTS HELOBOGUS IPNOTINMX MAILFROM NOLEGITCONTENT PERCENT REVDNS ROUTING SPAMHEADERS IPLINKED IPLINKED2 MYFILTER KILLFROM SUBJECTFILTER BODYFILTER GIBBERISH ANTI-GIB BERISH SNIFFER WEIGHT10 WEIGHT20 WEIGHT1-10 WEIGHT11-20 WEIGHT21-34 WEIGHT35-45 WEIGHT46-200 CATCHALLMAILS WHITLIST IMail reports Official Host Name as: scooby.linkbrokers.com. IMail's SendName registry seems OK: E:\IMail\declude.exe. DNS Server: 66.153.205.8 Declude JunkMail Status: PRO version registered. Declude Virus Status:Pro Version Registered. Declude Hijack Status: NOT REGISTERED: No activation code. Kevin Shimwell Link Brokers Group, LLC ( Support ) 1600 Hwy 17 South North Myrtle Beach, SC 29582 Phone: 843-663-1004 Fax: 843-663-1007 Email: [EMAIL PROTECTED] 24/7 Help : http://www.linkbrokers.com/help_ticket.cfm http://www.linkbrokers.com/help_ticket.cfm Support Forum: http://www.linkbrokers.com/chatboard/index.cfm?CFB=1 Support M-F 1-888-546-5631 This message is intended only for the use of the individual or entity towhich it is addressed and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by telephone and/or e-mail. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to
RE: [Declude.JunkMail] Way OT: Server Room Cooling
Sunpentown units are very good, and are supposed to be efficient on water collection, meaning there is not supposed to be as much drainage. They do have a tank and a drain. www.spt-usa.com You can usually get them at a discounted price on eBay from a reseller, but they are all shipped directly from the manufacturers warehouse here in City of Industry, CA. Also, if you are in Southern California, you can then will call them. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Cris Porter Sent: Wednesday, September 21, 2005 7:00 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Way OT: Server Room Cooling Can anyone recommend a portable air conditioner to cool a 8'x10' server closet ? I'll have to vent it up thru a drop ceiling and I'm trying to find something that doesn't require frequent draining. Thanks, Cris Porter JVC America --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Beta Experience update
Hate to be the bearer of bad news, but participating in a Beta requires active participation, meaning if you notice a problem, you need to take steps to gather information surrounding that problem. Did you read my posts about the beta, and did you take any steps that I did? The point of a public beta is for wide spread use to find bugs. Well, how can you participate in a beta if you are not going to take steps to gather information and logs about the issue and submit them to Declude so it can help them find the problems, which is exactly what a beta is for. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Tuesday, September 20, 2005 7:09 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Declude Beta Experience update After previous failed attempts to install the new beta, we waited awhile this time after the last release of the decludeproc; we tried to re-install this morning and as soon as we did, the decludeproc service jumped to 90%+ consistantly; I tried adjusting the THREADS value in the declude.cfg file, but this did not help Mail processing was very slow; only a few messages went out; most were kept in the proc directory After 15 minutes, we had accumulated over 500 messages so we reverted back to the previous version of declude we were using (2.0.x) and moved all .smd files back to the spool directory and service is back to normal again Sincerely, Support Department Global Web SolutionsR, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net Global Web Solutions is a registered trademark of Global Web Solutions, Inc., Glen Allen, VA --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Beta 3.0.4
Stopped Imail SMTP and QueueManger services. Removed all files in the proc folder to a temp folder. Restarted the DecludeProc service Moved 1 set of files in at a time and watched what happened. All good ones were processed. The problem ones just sat there. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kim Premuda Sent: Saturday, September 17, 2005 3:05 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Beta 3.0.4 Hi, John. Just curious... What method did you use to determine that those 4 messages were causing the 'decludeproc.exe' service to unexpectedly stop? I would like to be able to send Declude the messages in our 'proc' folder that are causing the same problem here. Regards, Kim -- Original Message -- From: John Tolmachoff \(Lists\) [EMAIL PROTECTED] The problem appears to be caused/centered/triggered/co-incidental to 4 spam messages. Also, a large Dr Watson log file and dmp were created when this happened. After isolating these messages, stopping the Imail SMTP, QueueManager services, disabling and stopping the decludeproc service, clearing both the proc and proc\work directories of everything, then reenabling the decludeproc service and restarting the SMTP and QueueManger services, the server is running as expected. -- Kim W. Premuda FastWave Internet Services San Diego, CA -- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Beta 3.0.4 not Processing Files in 'proc' Folder
I am sure you did, but let's check.
Did you stop the Imail SMTP service, stop the Imail Queue Manager service,
wait for both the proc and work folders to be empty, stop the DecludeProc
service, copy in the new decludeproc.exe file, start the DecludeProc
service, start the Imail Queue Manager service, start the Imail SMTP server,
put the Declude JM log into Debug mode for say 15 mintues and then review
the log to see what happened?
John T
eServices For You
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Kim Premuda
Sent: Thursday, September 15, 2005 5:27 PM
To: Declude JunkMail Forum
Subject: [Declude.JunkMail] Beta 3.0.4 not Processing Files in 'proc'
Folder
IMail 8.05 HF3
I installed the JunkMail beta 3.0.4, and had the same results as with
3.0.3.8. That is,
the 'decludeproc.exe' service was running (as indicated by Task Manager),
however,
nothing was being processed ('decludeproc.exe' was near the bottom of the
Task
Manager list when sorted by CPU time, and no external files like Sniffer
running). Files
were being added to the 'proc' directory, but the 'proc\work' directory
remained
empty. Let things run this way for approximately 15 minutes, then reverted
back to
version 3.0.3. Once 3.0.3 was up and running, the files in the 'proc'
directory were
immediately processed ('decludeproc.exe' at or near the top 5 entries in
Task
Manager, Sniffer executables now showing in Task Manager, backlog of files
in 'proc'
folder are gone).
Kim W. Premuda
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
RE: [Declude.JunkMail] Beta 3.0.4 not Processing Files in 'proc' Folder
And yes, as of midnight my time, I am running 3.0.4 and it is working as
expected so far.
John T
eServices For You
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)
Sent: Thursday, September 15, 2005 11:56 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Beta 3.0.4 not Processing Files in 'proc'
Folder
I am sure you did, but let's check.
Did you stop the Imail SMTP service, stop the Imail Queue Manager service,
wait for both the proc and work folders to be empty, stop the DecludeProc
service, copy in the new decludeproc.exe file, start the DecludeProc
service, start the Imail Queue Manager service, start the Imail SMTP
server,
put the Declude JM log into Debug mode for say 15 mintues and then review
the log to see what happened?
John T
eServices For You
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Kim Premuda
Sent: Thursday, September 15, 2005 5:27 PM
To: Declude JunkMail Forum
Subject: [Declude.JunkMail] Beta 3.0.4 not Processing Files in 'proc'
Folder
IMail 8.05 HF3
I installed the JunkMail beta 3.0.4, and had the same results as with
3.0.3.8. That is,
the 'decludeproc.exe' service was running (as indicated by Task
Manager),
however,
nothing was being processed ('decludeproc.exe' was near the bottom of
the
Task
Manager list when sorted by CPU time, and no external files like Sniffer
running). Files
were being added to the 'proc' directory, but the 'proc\work' directory
remained
empty. Let things run this way for approximately 15 minutes, then
reverted
back to
version 3.0.3. Once 3.0.3 was up and running, the files in the 'proc'
directory were
immediately processed ('decludeproc.exe' at or near the top 5 entries in
Task
Manager, Sniffer executables now showing in Task Manager, backlog of
files
in 'proc'
folder are gone).
Kim W. Premuda
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
RE: [Declude.JunkMail] Beta 3.0.4 not Processing Files in 'proc' Folder
Download the DecludeProc.exe again from the site. Maybe something went wrong there. The version of Imail should make no difference in the processing as it is definitely being handed to declude.exe. Do you have a Declude.cfg file in the Imail\Declude folder? Try putting WAITFORMAIL1 in there. Again, try putting the log into DEBUG mode during the test. Maybe the server needs a kick? ;) John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kim Premuda Sent: Friday, September 16, 2005 8:30 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Beta 3.0.4 not Processing Files in 'proc' Folder Hi, John. Yeah...did all that, except running the JunkMail log in 'HIGH' mode. So, I re-ran the test this morning with the log mode set to 'HIGH'. I ran the test between 7:10A and 7:20A. At the start of the test, both the 'proc' and the 'proc\work' folders were empty. As the test progressed, the 'proc' folder began to fill with 'd*.smd' and 'q*.smd' files. The 'proc\work' folder remained empty during the entire 10 minute test. I could also see the 'decludeproc.exe' service running in Task Manager, but it was running with a minimum of CPU usage. At the end of the test, reverted back to 3.0.3, and all the backlog in the 'proc' folder was immediately processed. That is, I could see the files in the 'proc' folder being moved to the 'proc\work' folder, whereupon they would subsequently disappear (presumably deleted, held, or moved to the 'spool' folder). Upon examining the JunkMail log file, note that there is a gap of information during the test time period: 09/16/2005 07:07:20.515 qd16d0f3f0048a1ec From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 72.26.215.59 ID: 09/16/2005 07:07:20.515 qd16d0f3f0048a1ec Action(s) taken for [EMAIL PROTECTED] = WHITELISTED [LAST ACTION=WHITELISTED] 09/16/2005 07:07:20.515 qd16d0f3f0048a1ec Cumulative action(s) taken on this email = IGNORE [LAST ACTION=IGNORE] 09/16/2005 07:22:55.015 qd31201ec029c0f5f Tests failed [weight=39]: NOPOSTMASTER=WARN[1] SNIFFER=WARN[20] CMDSPACE=WARN[8] IPNOTINMX=IGNORE[0] NOLEGITCONTENT=IGNORE[0] ROUTING=WARN[2] WEIGHT10=HOLD[10] WEIGHT17=DELETE[17] WEIGHT20=DELETE[20] CATCHALLMAILS=IGNORE[0] TLD-TRUSTED-MAILFROM=WARN[0] DRUGS- MEDICATIONS=WARN[8] 09/16/2005 07:22:55.500 qd31201ec029c0f5f Action(s) taken for [EMAIL PROTECTED] = IGNORE WARN HOLD DELETE [LAST ACTION=DELETE] 09/16/2005 07:22:56.078 qd31201ec029c0f5f Cumulative action(s) taken on this email = IGNORE WARN HOLD DELETE [LAST ACTION=DELETE] 09/16/2005 07:22:53.218 qd2de00f6024c43a2 Tests failed [weight=24]: SNIFFER=WARN[20] IPNOTINMX=IGNORE[0] NOLEGITCONTENT=IGNORE[0] REVDNS=WARN[4] WEIGHT10=HOLD[10] WEIGHT17=DELETE[17] WEIGHT20=DELETE[20] CATCHALLMAILS=IGNORE[0] TLD-TRUSTED-HELO=WARN[0] TLD-TRUSTED-MAILFROM=WARN[0] TLD-TRUSTED-REVDNS=WARN[0] Is this another sign that the 'decludeproc.exe' was not doing anything? Also, please remember, we are using the older IMail 8.05 HF3, and that our results can definitely be different from yours. With regards, Kim -- Original Message -- From: John Tolmachoff \(Lists\) [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Thu, 15 Sep 2005 23:56:18 -0700 I am sure you did, but let's check. Did you stop the Imail SMTP service, stop the Imail Queue Manager service, wait for both the proc and work folders to be empty, stop the DecludeProc service, copy in the new decludeproc.exe file, start the DecludeProc service, start the Imail Queue Manager service, start the Imail SMTP server, put the Declude JM log into Debug mode for say 15 mintues and then review the log to see what happened? John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 3.0.4
Ya know, I thought about asking about that, but said nah, no one could do some thing dumb like I did. ;) John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kim Premuda Sent: Friday, September 16, 2005 11:36 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] 3.0.4 Gawck! At first, I thought No way did I do that!, but I hadn't closed the browser session to the Declude beta site. Upon checking, I was astounded to find that I did, indeed, download the SmarterMail version of 'decludeproc.exe' (it was still highlighted)...3 TIMES OVER THE PAST TWO DAYS and didn't even notice! After downloading and installing the IMail version of 'decludeproc.exe' version 3.0.4, things look to be running normally. My apologies to the list (and Declude) for the 'false' reports, and thanks to the Ncl admin for pointing this out. Kim -- Original Message -- From: Ncl Admin [EMAIL PROTECTED] If files are not moving from proc to work make sure you downloaded the right version, I grabbed smartermail version this AM and it does exactly nada under Imail. Duh. Got the Imail version and of course its running now. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Beta 3.0.3.8 update
I have been running the latest beta for about 9 hours now. The previously reported problem by me with false triggers on External tests appears to be resolved. Currently, Hijack is not working reporting can not find Declude Console. Declude is aware of this and working on it. Windows Server 2000 Imail 8.20 hf2 F-Prot AVG BitDefender 1 1Ghz CPU 1 G memory John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Major problem with External tests and Beta 3.0.3.4
1. The only Beta that should currently be running is 3.0.3.7 you should not be reverting to a previous version of the Beta at this point. I said to a pre 3.x version which is what that means. Pre means before. 4. Your concern of the external tests working incorrectly is currently being looked at and should have a response hopefully today. Not a concern, a fact. When in debug mode Declude logs that the exit code of the external application was 0 but yet records that exit code of 0 as a trigger is a factual problem. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Major problem with External tests and Beta 3.0.3.4
FYI to all running the Beta, I have reviewed and verified a problem brought to my attention by Kami. It appears that some times, even though the external test is reporting an exit code of 0, DecludeJM is treating it as a fail and adding the configured weight. This goes for both positive weights like Sniffer and invURIBL and negative weights like AutoWhite for Declude. Declude support and beta have been notified. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Major problem with External tests and Beta 3.0.3.4
All tests finished within seconds. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, September 12, 2005 9:06 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Major problem with External tests and Beta 3.0.3.4 John, One of the other bugs I have seen is if a process takes more than 5 minutes to complete and is configured as a weight test and Declude terminates it they use the OS result code of 259 as the returned weight instead of defaulting to zero. Darrell John Tolmachoff (Lists) writes: FYI to all running the Beta, I have reviewed and verified a problem brought to my attention by Kami. It appears that some times, even though the external test is reporting an exit code of 0, DecludeJM is treating it as a fail and adding the configured weight. This goes for both positive weights like Sniffer and invURIBL and negative weights like AutoWhite for Declude. Declude support and beta have been notified. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Major problem with External tests and Beta 3.0.3.4
An update: There is a known problem with external tests and Declude 3.0.3.x. They are aware of it and are working on it. It is recommended if you are using an external program, you should revert to a pre 3.x version for now. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Monday, September 12, 2005 10:19 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Major problem with External tests and Beta 3.0.3.4 All tests finished within seconds. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, September 12, 2005 9:06 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Major problem with External tests and Beta 3.0.3.4 John, One of the other bugs I have seen is if a process takes more than 5 minutes to complete and is configured as a weight test and Declude terminates it they use the OS result code of 259 as the returned weight instead of defaulting to zero. Darrell John Tolmachoff (Lists) writes: FYI to all running the Beta, I have reviewed and verified a problem brought to my attention by Kami. It appears that some times, even though the external test is reporting an exit code of 0, DecludeJM is treating it as a fail and adding the configured weight. This goes for both positive weights like Sniffer and invURIBL and negative weights like AutoWhite for Declude. Declude support and beta have been notified. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Is there any hope running Declude with IMail 8.21???
I am running Declude 2.0.14 consistently on my Imail 8.21 server with no problems that would allow viruses and spam to get through. Granted, my server only has a volume of about 5K per day. I am going to being running the betas as soon as I can get to that. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Timothy Bohen Sent: Wednesday, September 07, 2005 11:36 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Is there any hope running Declude with imail 8.21??? I really don't want to downgrade imail, but spam and viruses are getting through. Any hope for having declude working with imail 8.21 any time soon? Thanks __ __ __ __ Sent via the CMS Internet Webmail system at mail1.cmsinter.net --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - iMail 7.x and Windows 2003
We have been running iMail 7.07 under windows 2000. We had some input that there may be some problems in this environment. We are not keen on upgrading to 8.x since IPSwitch is walking away from iMail the product. Ipswitch is not walking away from Imail. It is still alive and well, and in fact continues to be improved and upgraded. The next version is in active beta as we speak. The only thing that has happened is Ipswitch no longer sells Imail as a stand alone product. SA are still available for it. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Paradise.net.nz
Any comments about this ISP? It was in my bad mail file and I can not find why it was put in there. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Sniffer Question
Best thing is to ask on the Sniffer List. I actually have 17 Sniffer tests based upon exit code, with weights ranging from 15 to 35. I hold at 25 and delete at 35. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kevin Rogers Sent: Friday, September 02, 2005 4:37 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Sniffer Question I just setup Sniffer for the first time and I'm wondering what people have their external test weight set to. My global.cfg came with a sniffer test already configured (though it was commented out) to have a weight of 7, which actually gives it a weight of 8 for some reason I couldn't figure out. If you haven't made up your own weighting system (some people have their weights go up to 300 or more), what's a good weight for a failed sniffer test? At 10, I put messages into a bulk folder, at 17 I hold them. Thanks --- [This E-mail was scanned for viruses.] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] EServices AutoWhite?
I have responded to each e-mail, including the one you sent 15 minutes ago. On the phone on Wednesday, I did explain that AutoWhite is not tested in a SmarterMail configuration. AutoWhite for Declude does indeed look at the Imail registry for the OHN. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Thursday, September 01, 2005 10:32 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] EServices Autowhite? Does anyone happen to know how Eservice's autothite program validates its license key against the official host name? Does it compare to an IMAIL registry key or does it look somewhere else? I run smartermail and I'm wondering if I add the IMAIL registery keys that contain the OHN if it wouldn't fake out Autowhite and allow it to work with smartermail? I emailed John a few times but I've not heard back from him and I'd kind of like to get this going. Thanks, Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Sniffer Question
In the Global.cfg, as long as the Sniffer call line is the same except for the return code area, Declude will only call Sniffer once and compare the exit code to those configured. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Friday, September 02, 2005 5:19 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Sniffer Question John, does that mean sniffer runs 17 times on each mesage, or does it return multiple codes? - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, September 02, 2005 8:02 PM Subject: RE: [Declude.JunkMail] Sniffer Question Best thing is to ask on the Sniffer List. I actually have 17 Sniffer tests based upon exit code, with weights ranging from 15 to 35. I hold at 25 and delete at 35. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kevin Rogers Sent: Friday, September 02, 2005 4:37 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Sniffer Question I just setup Sniffer for the first time and I'm wondering what people have their external test weight set to. My global.cfg came with a sniffer test already configured (though it was commented out) to have a weight of 7, which actually gives it a weight of 8 for some reason I couldn't figure out. If you haven't made up your own weighting system (some people have their weights go up to 300 or more), what's a good weight for a failed sniffer test? At 10, I put messages into a bulk folder, at 17 I hold them. Thanks --- [This E-mail was scanned for viruses.] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problem with Declude 3
Check the Hijack logs to see if the message might have been held. When messages are held by HOLD1 of Hijack and then released, they are directly placed back into the spool and handed to Imail. As such, no further processing is done by Declude, including no Declude headers. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Wednesday, August 31, 2005 5:41 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Problem with Declude 3 Yes I am running Hijack. In response to Matt's post, the services were not restarted anywhere near the time that the messages came through. It came in, according to the headers I posted in the OP, at 2:14 AM. The Decludeproc service shut down on its own around 3:45 AM. The server didn't reboot, and the Imail services didn't restart for any reason until I rebooted it to swap out the decludeproc.exe later in the day. Looking in my inbox this morning, the problem doesn't seem to have reoccurred since yesterday afternoon. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, August 30, 2005 6:57 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Problem with Declude 3 Also, Dan, are you running Hijack? John T eServices For You
RE: [Declude.JunkMail] General Filter
BODY filters are generally the LAST test you want to rely on for several reasons, including problems with encoding (such as you are witnessing) and resources used. However, what concerns me is why are any actions being taken on messages sent from one person in a domain to another person in the same domain. Aren't they authenticating to Imail, and aren't you white listing authenticated senders? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Orin Wells Sent: Wednesday, August 31, 2005 12:11 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] General Filter I am having a problem with a client whose email to other members of her domain is getting trapped by the GeneralFilter (words or phrases we have added because they seem to mostly appear in spam). In this particular case the triggering word seems to be P*O*R*N* without the stars. I suspect what is happening is that the encoded attached word document just happens to have this set of letters in sequence in the encrypted data that is attached to the email file in imail. It does not appear in the word document itself. But when I look at the raw file on the server I can see this. I take it from this that Declude when it scans the body of the message also scans any attachment that is sitting there in the encrypted mode. If so is there a way around this? Can I tell it not to scan the encrypted attachments or to expand them first? If this sort of thing is in the latest Declude Junkmail manual, someone just tell me to read TFM. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Linked in
Any one have opinions good/bad on www.linkedin.com? John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Let the scams begin (hoping not)
Found in 3 held messages: (Spaces inserted in the e-mail address) Donate a $1 now or $1,000 - Send donation to donate @ katrinahelpfund . com on paypal/strong/fontfont size=-2 face=Verdana, Arial, Helvetica, sans-serifbr br every little bit helpsbr br Just a paypal account up right now, but it is all i can do with internet up and down.br br all funds collected will be going to a New Orleans charity.br In the next week I'll get some optinos and put them up so people can vote on them.br John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Linked in
Sorry, but can't resist... Any one have opinions good/bad on www.linkedin.com? Has a lot of members I know Barry Is that good or bad? ;-) John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] D3: Service stopped on its own, files backed up
It has now been an hour and the decludeproc service has only processed around 1000 objects, which I believe corresponds to 500 messages. I created the declude.cfg and put in THREADS 25. I also dl'ed the newer decludeproc.exe, but when I went to stop the service so I could replace it, the service would not stop. I had to set it to manual startup and reboot the server (@#$#%* Windows). We'll see if this improves the speed any. I would recommend (which is the way it has always been recommended) to first stop the Imail SMTP service, then stop the Imail QueueManager service, allow all Declude processing to stop, then stop the Declude process. As long as the Imail SMTP service it running, it will keep handing messages to Declude, therefore Declude may not stop. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problem with Declude 3
Dan, I am at a client right now so I do not have the time to review all, but could it be an old Imail issue where since the Declude process was having an issue, the QueueManager did a batch run and grabbed the message before Declude finished it? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Tuesday, August 30, 2005 10:30 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Problem with Declude 3 Dan Horne wrote on Tuesday, August 30, 2005 8:57 AM: I received ... Just wanted to let everyone know that this problem occurred and this message was sent before I found out about the service stopping (discussed in another thread). However, that doesn't seem to be related to this message, which arrived and was scanned before the service stopped this morning. So this is still an open issue. Dan Horne --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problem with Declude 3
Also, Dan, are you running Hijack? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Tuesday, August 30, 2005 3:00 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Problem with Declude 3 Dan, Restarting IMail's Queue Manager service, or rebooting an IMail server without stopping the SMTP service can cause spam to be grabbed and delivered by the Queue Manager without being processed by Declude. You might want to check for that. Matt Dan Horne wrote: John Tolmachoff (Lists) wrote on Tuesday, August 30, 2005 2:11 PM: Dan, I am at a client right now so I do not have the time to reviewall, but could it be an old Imail issue where since the Decludeprocess was having an issue, the QueueManager did a batch run andgrabbed the message before Declude finished it? John TeServices For You -Original Message-From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-[EMAIL PROTECTED]] On Behalf Of Dan HorneSent: Tuesday, August 30, 2005 10:30 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] Problem with Declude 3Dan Horne wrote on Tuesday, August 30, 2005 8:57 AM: I received ... Just wanted to let everyone know that this problem occurred and thismessage was sent before I found out about the service stopping(discussed in another thread). However, that doesn't seem to berelated to this message, which arrived and was scanned before theservice stopped this morning. So this is still an open issue.Dan Horne---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], and typeunsubscribe Declude.JunkMail. The archives can be found athttp://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], and typeunsubscribe Declude.JunkMail. The archives can be found athttp://www.mail-archive.com. Could be, but the strange thing is that it happened again thisafternoon. I got a batch of about 3 messages that didn't have anyDeclude headers. I am only assuming the same thing happened, since I amup to my neck in SCSI device problems right now and haven't had time tolook at the logs for those messages. Anyway what is strange about it isthat I am now running Declude 1.82, not 3.I still don't understand though how the message was delivered withoutany Declude headers, but Declude had run on the message, flagged it asspam and delivered (supposedly, I haven't actually checked) it to theroot-weight80 mailbox, which stores spam between weight 80 and 90.Thanks,Dan Horne---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude and SmarterMail?
Uh, it is not a Declude issue but rather SmarterMail does not support it. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Wednesday, August 24, 2005 4:18 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude and Smartermail? That is a big gaping hole in my opinion. Guess I'll look for another solution as I don't think I can wait for declude to get around to fixing this oversight. Thanks for your feedback. -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Wednesday, August 24, 2005 3:13 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude and Smartermail? Biggest issues is the lack of WHITELIST AUTH. I confirmed last week with SMarterMail that that functionality will be available in the 3.0 version du out later this year. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dave Beckstrom Sent: Wednesday, August 24, 2005 1:00 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Declude and Smartermail? I'm looking for some feedback on using declude with smartermail. Is anybody running that combination? How is it working and how is the performance? Have you encountered any problems or shortcomings? Would you recommend Declude to smartermail administrators? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude and Smartermail?
This is not a Declude issue, but a SmarterMail issue. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Wednesday, August 24, 2005 4:18 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude and Smartermail? That is a big gaping hole in my opinion. Guess I'll look for another solution as I don't think I can wait for declude to get around to fixing this oversight. Thanks for your feedback. -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Wednesday, August 24, 2005 3:13 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude and Smartermail? Biggest issues is the lack of WHITELIST AUTH. I confirmed last week with SMarterMail that that functionality will be available in the 3.0 version du out later this year. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dave Beckstrom Sent: Wednesday, August 24, 2005 1:00 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Declude and Smartermail? I'm looking for some feedback on using declude with smartermail. Is anybody running that combination? How is it working and how is the performance? Have you encountered any problems or shortcomings? Would you recommend Declude to smartermail administrators? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT- APC software JAVA certificate timeout
No wonder I like using PowerChute Plus 5.2.1 so much. Plain simple and easily configurable via the ini file. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Dave Marchette Sent: Friday, August 05, 2005 11:16 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] OT- APC software JAVA certificate timeout This is OT(sorry!) but if any of you are running APC PowerChute on your servers to enable graceful shutdown on power fail, there is an issue with a certificate expiring last week. This can cause odd RDC\TS\APC\generally bizarre and potentially debilitating network issues. More info here: http://msmvps.com/bradley/archive/2005/07/28/59861.aspx Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] PIDDEBUG
Also, John - DEBUG mode now lists PID's. While that is true (and something I know about) leaving the log in DEBUG mode for several days waiting for it to occur again is not acceptable. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] PIDDEBUG
And back to my original question. Is PIDDEBUG still available to use in 2.0.6.x? Yes, it appears to be still available. However, I have noticed something interesting. When a postmaster message is created or processed, including forwards done by Imail, the PID file does not get deleted when finished processing. In fact, the PID file is not complete, in that it does not have a line for everything scene in the JunkMail log on High. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Woes
Title: Message If you are seeing 100,000 messages without Declude JunkMail and 200,000 messages with Declude JunkMail, that is a red flag that something is probably wrong in the Declude JunkMail configuration. How are you getting the figure 100,000 and 200,000? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Will Sent: Tuesday, August 02, 2005 11:31 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude Woes Final Update: My mail server is running perfectly smooth processing mail as soon as it arrives while running Declude Antivirus and three DNS blacklists using Imails built-in antispam. I have tried to re-enabled Declude junkmail, but it immediately starts to backlog the spool directory again and mail processing is slow. Perhaps someone can see something that I do not in this log file This is a sample connection with debug logging on. I have a service contract with Declude and Imail for what thats worth, but Im not going to get anywhere with that unless I can help point them in the right direction so they deem me worthy to forward my issue onto someone with experience. Im currently processing what appears to be 100,000 messages per day with 3000 accounts (90% of that incoming mail). My previous counts of 200,000 only appear when declude junkmail is running, so they are not accurate. Will -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Will Sent: Monday, August 01, 2005 9:05 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude Woes Just an update Last week I had disabled Declude and cleaned out my spool directory. For the next day I had not experienced any issues. My spooled messages are staying well under 500 and mail is flowing exactly how I want it to (without Declude). Now, we can get away with not having Declude Junkmail for a bit, but I really needed virus scanning, so I re-enabled Declude Antivirus. After I verified everything was running smoothly I downloaded F-prot and removed Mcafee before the weekend and things have also been running very smooth. Just a note, I had run Declude Antivirus for years without any issues and I only seem to run into these overflow problems when I introduce Declude Junkmail. Since the major issues I had last week I have made three changes I have modified the queue manager to process 100 messages at a time. I have disabled Declude Junkmail. I have now moved from Mcafee to F-Prot. The only one of these changes that has ensured that mail does not go into overflow and backup is the disabling of Declude Junkmail. Im not so sure its a DNS issue because the Imail spam filters run perfectly fine, which I am now using in place of Declude. They do not do as good a job identifying spam, but they are better than nothing. Things to think about: I was interested in the statement that the mail server can be setup to not bounce messages if they are detected as SPAM. This still confuses me, because the BOUNCEONLYIFYOUMUST statement in the $default$.junkmail file appears to actually bounce the messages. As it is, all my filters are set to WARN and I dont understand why changing them to BOUNCEONLYIFYOUMUST will help. I do not believe I have bulk mailers on my system, but I will not discount it. Does anyone have a good suggestion for determining this? After looking through my logs and running Imail log analyzer none of my own IPs stand out for message counts and the invalid user entries I find are from outside sources outside of my network. These connections are always denied and mail does not get processed onto our server. I will think about Declude HiJack. I still want to use Declude Junkmail, so I will test some of the suggestions put into place such as whitelisting my IP range and disabling outbout virus scanning, but other than these two suggestions, I dont see any major changes here that will affect me. Will Friday: SpamContent 13400 SpamPhrase 19107 SpamFeatures 1283 SpamUrlDomain 35018 LocalDeliver 92331 RemoteDeliver 10526 Saturday: SpamContent 10089 SpamPhrase 20739 SpamFeatures 1090 SpamUrlDomain 27194 LocalDeliver 83297 RemoteDeliver 9008 Sunday: SpamContent 10425 SpamPhrase 18741 SpamFeatures 793 SpamUrlDomain 25756 LocalDeliver 81033 RemoteDeliver 10142 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Friday, July 29, 2005 2:03 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Declude Woes Will, What you probably have are users bulk-mailing through your server (evidenced by the GSE files), issues with running both IMail Antispam and Declude, and choosing a much slower than optimal virus scanner as your one an only engine in a CPU-challenged environment. There could well be issues with fragmentation and not enough disks as well. The
RE: [Declude.JunkMail] Declude Woes
What is your daily total volume? What server are you using for DNS? What version of Imail? What have you tried to tweak? (First thing that comes to my mind is AFTERJM in the Virus.cfg file.) Are you using the Default JunkMail configuration, or have you made changes? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Will Sent: Thursday, July 28, 2005 6:36 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Declude Woes A number of years ago I purchased Declude and ultimately abandoned it due to the crippling problem that would leave our spool directory overfilled with mail and a mail server that was delivering mail late. Sometimes up to 24 to 48 hours late in the worst cases. Last year I decided to give Declude a chance again and repurchased the software upgrade. It's been over a year now and I still have the same problem. It's killing me. Declude will create an overflow directory and mail will just pile up, customers will get angry, and we look the fool. I have spoken with Declude support about this and they had me change a value in my virus.cfg to MAXATONCE 1. I still see a number of declude.exe processes when the overflow directory comes into use and the overflow directory is never used when I disable Declude. Right now, my mail server is a couple hours behind with over a hundred thousand messages in cue. I have disabled Declude so the server can catch up, but I still want antivirus and spam protection. I am all out of ideas and resources. I had thought the antivirus was taking too long to process at one point and my last concern was that DNS resolution was not fast enough for the SPAM tests, however, when enabled, the Imail integrated black lists resolve fast enough that I do not see this problem. Does anyone have any suggestions? Or better yet experience with this issue and know of a cause or resolution. I've grown to fear the overflow directory and I would have thrown out Declude already if not for the lack of chatter about this issue on the list. Will --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Woes
Matt beat me to it. I hope you are not using a nobody alias anywhere. The large amount of GSE files are indicative of a misconfiguration or improper configuration within Imail. Also as Matt said, some people are becoming too quick to point a finger at Declude. I posted some questions for you to answer and you have not yet done so. You mentioned you have tried different DNS servers. DNS servers is one of the things I have asked about. Many of use have found that by configuring the Imail server as a CACHE only DNS server, not using forwarders but relying on root hints, and configuring Imail and Declude to use the local DNS server have sped things up. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Thursday, July 28, 2005 9:24 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Declude Woes The only issue known to this list regarding Declude that can affect Declude users in this way would be an incompatibility with IMail 8.20. IMail 8.20 introduces a rewrite of the SMTP service which was a major change, and sure enough this created issues for some users when they ran up against it (seem to mostly/only affect high volume installations and they are soon going to release a patch). Besides this bug, there are many of us that can run into issues based on just the sheer volume of E-mail. One person pointed out that they had someone bulk-mailing through their hosted mail server that was bogging everything down. I have seen tons of other things related to just simply sheer volume that cause such issues, among them would be having nobody aliases for domains that are being dictionary attacked, getting bounce messages from another server that result from a massive mailing, all sorts of loops created by auto-responders and forwarding loops, gatewaying E-mail for other domains without a way to do address verification on incoming messages, being an open relay, and the list goes on. I think that before one assumes that it is Declude's fault, you should look at the environment and figure out if the traffic is normal, or abnormal. You can generally just compare the size of the Declude and IMail logs over time in order to figure out if there is some sort of a spike. If you find abnormal traffic, then chances are that one of the things that I pointed out is the issue and that needs to be resolved. In Robert's issue below, the fact that you are cleaning up GSE files points to a non-Declude issue. GSE files are generated for bounces, and it suggests that you are accepting E-mail for addresses that don't exist. If there is a huge volume of these, there is a definite issue with the environment, and it wouldn't be uncommon for Declude to get backed up. Matt Robert wrote: Hello,This has been an ongoing issue for us also,I have a minimum of test running.If I really try to run any indepth test it just falls way behind.I have a 3 ghz serverImail 7.15 Declude 1.77i31 Windows2000Even now I still get hit. It just can't keep up.I have tried 4 different DNS servers, It made no diff. This is my 3rd Mailserver within the last year. Not much help.My filter files are small. The largest has 400 lines in it. But I can't useit because it slows down thing to much.So what did I do to help?I have resorted to running a bat file to delete the .gse files. Every threehours during the day, Every hour during the nite when the spammer are atwork.This helps to keep the spool directory from over loading to the point itcan't even be veiwed with a windows explorer. No one complained, My logic was (and I am sure has hole in it) If my servercant send a bounced massage after a couple of tries ,I won't get sent atall.Run very small filter files if any at all.Run a different IP address on the firewall for the outside MX. Customers usea different IP address (dns name)Because only mail servers are supose to use the outside IP address that canhit very high on CMD Space test.I also have a test to subtract points for CMD Space test from our IP space.This seem to catch a lot of spam with out bogging down the server.Plus I can kill port 25 on the Outside MX IP address giving our server timeto catchup. This lets our users still send but incoming mail will be resentto us later.Thats about the best I can offer..I have been looking for something better for some time now.That one reason why I haven't upgraded.Robert WhitakerThe Modem Pool517-789-56891-888-377-5689Be sure to try the New Web Express Internet Accelerator from The Modem Poolhttp://web-express.modempool.com- Original Message -From: Nick Hayer [EMAIL PROTECTED]To: Declude.JunkMail@declude.comSent: Thursday, July 28, 2005 10:59 AMSubject: Re: [Declude.JunkMail] Declude Woes Hi Will,Sorry you are having problems - Declude is a good product - it may besomething simple here. I would say the most common thing is a dns issue- stuff stacks up waiting for dns responses. Check
RE: [Declude.JunkMail] SPAMDOMAIN and IPBYPASS
Anybody? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Monday, July 11, 2005 7:44 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] SPAMDOMAIN and IPBYPASS Does SPAMDOMAIN check the PTR of the previous IP if the servers your Imail server receives from are all configured as IPBYPASS, meaning you have front end servers doing the receiving for the Imail server? John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SPAMDOMAIN and IPBYPASS
Does SPAMDOMAIN check the PTR of the previous IP if the servers your Imail server receives from are all configured as IPBYPASS, meaning you have front end servers doing the receiving for the Imail server? John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers
Known problem as posted on the Imail list. I actually sent out a broadcast earlier informing them of possible problems. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, July 08, 2005 2:27 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Problems with Network Solutions DNS Servers Hi all, I have been having problems with Network Solutions DNS server all day. Specifically ns7 and ns8.worldnic.com. When you ask for an SOA record they come back with gonetworks.net Server: ns7.worldnic.com Address: 216.168.228.6 (root) nameserver = G.ROOT-SERVERS.NET (root) nameserver = H.ROOT-SERVERS.NET (root) nameserver = I.ROOT-SERVERS.NET (root) nameserver = J.ROOT-SERVERS.NET (root) nameserver = K.ROOT-SERVERS.NET (root) nameserver = L.ROOT-SERVERS.NET (root) nameserver = M.ROOT-SERVERS.NET (root) nameserver = A.ROOT-SERVERS.NET (root) nameserver = B.ROOT-SERVERS.NET (root) nameserver = C.ROOT-SERVERS.NET (root) nameserver = D.ROOT-SERVERS.NET (root) nameserver = E.ROOT-SERVERS.NET (root) nameserver = F.ROOT-SERVERS.NET They will sometimes answer an A record request for cmail1.gonetworks.net with the correct IP address and other times they will not. Has anyone else been experiencing these problems today? The story I get from first level phone support is that their servers are down for maintenance (all day???) and that engineering will get back to me in 1 to 3 days. Has anyone else been experiencing these problems today? Goran Jovanovic The LAN Shoppe --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers
Correction: I actually sent out a broadcast to my clients earlier... John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, July 08, 2005 2:50 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers Known problem as posted on the Imail list. I actually sent out a broadcast earlier informing them of possible problems. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, July 08, 2005 2:27 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Problems with Network Solutions DNS Servers Hi all, I have been having problems with Network Solutions DNS server all day. Specifically ns7 and ns8.worldnic.com. When you ask for an SOA record they come back with gonetworks.net Server: ns7.worldnic.com Address: 216.168.228.6 (root) nameserver = G.ROOT-SERVERS.NET (root) nameserver = H.ROOT-SERVERS.NET (root) nameserver = I.ROOT-SERVERS.NET (root) nameserver = J.ROOT-SERVERS.NET (root) nameserver = K.ROOT-SERVERS.NET (root) nameserver = L.ROOT-SERVERS.NET (root) nameserver = M.ROOT-SERVERS.NET (root) nameserver = A.ROOT-SERVERS.NET (root) nameserver = B.ROOT-SERVERS.NET (root) nameserver = C.ROOT-SERVERS.NET (root) nameserver = D.ROOT-SERVERS.NET (root) nameserver = E.ROOT-SERVERS.NET (root) nameserver = F.ROOT-SERVERS.NET They will sometimes answer an A record request for cmail1.gonetworks.net with the correct IP address and other times they will not. Has anyone else been experiencing these problems today? The story I get from first level phone support is that their servers are down for maintenance (all day???) and that engineering will get back to me in 1 to 3 days. Has anyone else been experiencing these problems today? Goran Jovanovic The LAN Shoppe --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers
Don't know and have not heard that it is resolved. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, July 08, 2005 3:12 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Problems with Network Solutions DNS Servers And me not monitoring the imail list. What were the problems (in summary)? -Original Message- From: John Tolmachoff \(Lists\) [EMAIL PROTECTED] Date: Fri, 8 Jul 2005 14:49:52 To:Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers Known problem as posted on the Imail list. I actually sent out a broadcast earlier informing them of possible problems. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, July 08, 2005 2:27 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Problems with Network Solutions DNS Servers Hi all, I have been having problems with Network Solutions DNS server all day. Specifically ns7 and ns8.worldnic.com. When you ask for an SOA record they come back with gonetworks.net Server: ns7.worldnic.com Address: 216.168.228.6 (root) nameserver = G.ROOT-SERVERS.NET (root) nameserver = H.ROOT-SERVERS.NET (root) nameserver = I.ROOT-SERVERS.NET (root) nameserver = J.ROOT-SERVERS.NET (root) nameserver = K.ROOT-SERVERS.NET (root) nameserver = L.ROOT-SERVERS.NET (root) nameserver = M.ROOT-SERVERS.NET (root) nameserver = A.ROOT-SERVERS.NET (root) nameserver = B.ROOT-SERVERS.NET (root) nameserver = C.ROOT-SERVERS.NET (root) nameserver = D.ROOT-SERVERS.NET (root) nameserver = E.ROOT-SERVERS.NET (root) nameserver = F.ROOT-SERVERS.NET They will sometimes answer an A record request for cmail1.gonetworks.net with the correct IP address and other times they will not. Has anyone else been experiencing these problems today? The story I get from first level phone support is that their servers are down for maintenance (all day???) and that engineering will get back to me in 1 to 3 days. Has anyone else been experiencing these problems today? Goran Jovanovic The LAN Shoppe --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Goran Jovanovic The LAN Shoppe O: (416) 440-1167 x-2113 C: (416) 931-0688 E: [EMAIL PROTECTED] Sent from my Wireless Blackberry --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers
Wow, Scott has something new to share: http://forums.dnsstuff.com/tool/post/dnsstuff/vpost?id=522969 John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, July 08, 2005 3:12 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Problems with Network Solutions DNS Servers And me not monitoring the imail list. What were the problems (in summary)? -Original Message- From: John Tolmachoff \(Lists\) [EMAIL PROTECTED] Date: Fri, 8 Jul 2005 14:49:52 To:Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers Known problem as posted on the Imail list. I actually sent out a broadcast earlier informing them of possible problems. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, July 08, 2005 2:27 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Problems with Network Solutions DNS Servers Hi all, I have been having problems with Network Solutions DNS server all day. Specifically ns7 and ns8.worldnic.com. When you ask for an SOA record they come back with gonetworks.net Server: ns7.worldnic.com Address: 216.168.228.6 (root) nameserver = G.ROOT-SERVERS.NET (root) nameserver = H.ROOT-SERVERS.NET (root) nameserver = I.ROOT-SERVERS.NET (root) nameserver = J.ROOT-SERVERS.NET (root) nameserver = K.ROOT-SERVERS.NET (root) nameserver = L.ROOT-SERVERS.NET (root) nameserver = M.ROOT-SERVERS.NET (root) nameserver = A.ROOT-SERVERS.NET (root) nameserver = B.ROOT-SERVERS.NET (root) nameserver = C.ROOT-SERVERS.NET (root) nameserver = D.ROOT-SERVERS.NET (root) nameserver = E.ROOT-SERVERS.NET (root) nameserver = F.ROOT-SERVERS.NET They will sometimes answer an A record request for cmail1.gonetworks.net with the correct IP address and other times they will not. Has anyone else been experiencing these problems today? The story I get from first level phone support is that their servers are down for maintenance (all day???) and that engineering will get back to me in 1 to 3 days. Has anyone else been experiencing these problems today? Goran Jovanovic The LAN Shoppe --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Goran Jovanovic The LAN Shoppe O: (416) 440-1167 x-2113 C: (416) 931-0688 E: [EMAIL PROTECTED] Sent from my Wireless Blackberry --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] WAY OT: Anti- Identity theft advice
Here is a personal experience that proves the bit about initials on checks is wrong: Doing my monthly personal bills, I inadvertently sent my water payment check to the mortgage company. Guess what, they processed it and applied it to our account. So, if a bank does not even check to see who the check is written to, why would you expect them to check who the check is from? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Thursday, July 07, 2005 2:21 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] WAY OT: Anti- Identity theft advice And here's the obligatory page from Snopes, http://www.snopes.com/inboxer/scams/credit.htm. - Original Message - From: Marc Catuogno [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, July 07, 2005 10:25 AM Subject: [Declude.JunkMail] WAY OT: Anti- Identity theft advice I have a great deal of respect for the people on this list and I hope you don't feel this is a waste of time. I got this e-mail from one of my agents and I am going to share it with the entire company - I thought maybe some of you would care to do the same. I searched Hoasbusters.org first and called the numbers and they are legit. ATTORNEY'S ADVICE -- NO CHARGE Read this and make a copy for your files in case you need to refer to it someday. Maybe we should all take some of his advice! A corporate attorney sent the following out to the employees in his company 1. The next time you order checks have only your initials (instead of first name) and last name put on them. If someone takes your checkbook, they will not know if you sign your checks with just your initials or your first name, but your bank will know how you sign your checks. 2. Do not sign the back of your credit cards. Instead, put PHOTO ID REQUIRED. 3. When you are writing checks to pay on your credit card accounts, DO NOT put the complete account number on the For line Instead, just put the last four numbers. The credit card company knows the rest of the number, and anyone who might be handling your check as it passes through all the check processing channels won't have access to it 4. Put your work phone # on your checks instead of your home phone. If you have a PO Box use that instead of your home address. If you do not have a PO Box, use your work address. Never have your SS# printed on your checks. (DUH!) You can add it if it is necessary. But if you have it printed, anyone can get it. 5. Place the contents of your wallet on a photocopy machine. Do both sides of each license, credit card, etc. You will know what you had in your wallet and all of the account numbers and phone numbers to call and cancel. Keep the photocopy in a safe place. I also carry a photocopy of my passport when I travel either here or abroad. We've all heard horror stories about fraud that's committed on us in stealing a name, address, Social Security number, credit cards. Unfortunately, I, an attorney, have firsthand knowledge because my wallet was stolen last month. Within a week, the thieve(s) ordered an expensive monthly cell phone package, applied for a VISA credit card, had a credit line approved to buy a Gateway computer, received a PIN number from DMV to change my driving record information online, and more. But here's some critical information to limit the damage in case this happens to you or someone you know: 1. We have been told we should cancel our credit cards immediately. But the key is having the toll free numbers and your card numbers handy so you know whom to call. Keep those where you can find them. 2. File a police report immediately in the jurisdiction where your credit cards, etc., were stolen. This proves to credit providers you were diligent, and this is a first step toward an investigation (if there ever is one.) But here's what is perhaps most important of all : (I never even thought to do this.) 3. Call the 3 national credit reporting organizations immediately to place a fraud alert on your name and Social Security number. I had never heard of doing that until advised by a bank that called to tell me an application for credit was made over the Internet in my name. The alert means any company that checks your credit knows your information was stolen, and they have to contact you by phone to authorize new credit. By the time I was advised to do this, almost two weeks after the theft, all the damage had been done There are records of all the credit checks initiated by the thieves' purchases, none of which I knew about before placing the alert. Since then, no additional damage has been done, and the thieves threw my wallet away This weekend (someone turned it in). It seems to have stopped them dead in their tracks. Now, here are the numbers you always need to contact about your wallet, etc,
RE: [Declude.JunkMail] .txt files
I am really busy right now, but just a quick thought, restart the Imail server. Are the text attachments going to all users or just a couple? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Richard Farris Sent: Thursday, July 07, 2005 5:06 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] .txt files I am getting a lot of spam with .txt files attached...anyone else seeing this and how do we stop it..? Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] .txt files
Well, I saw not attachment with that message. The header of it shows that it only failed one test and had a weight of 8. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Farris Sent: Thursday, July 07, 2005 6:44 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] .txt files Here is an example of spam I am getting lately...it is going to everyone I presume.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet
[Declude.JunkMail] WAY OT: Looking for Web Designer/Programmer
I am looking for a Web Designer/Programmer to do work for me on a project basis. I currently have 2 projects pending with a possible third. The projects I have pending are fairly small. Both are updating existing sites, the third one would be a new webmail site. None are e-commerce or have DB involved. I also have a client that is looking for a Web Designer/Programmer for a project. This would be for reworking or recreating an existing site which does have a section with a SQL back end and a news section. This project would be in ASP and .NET. All projects are to be run on IIS, either 5 or 6. I am looking for dependability, reliability and honesty. If you are interested or know some one who is, please contact me off list. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] test
FYI, I will be around off and on Saturday and Monday. Unless something major happens, it usually gets quite right before a holiday and through it. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Robert Sent: Saturday, July 02, 2005 10:23 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] test thanks for the reply. Robert - Original Message - From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, July 02, 2005 9:40 AM Subject: Re: [Declude.JunkMail] test No, its just been unusually quiet or we both have problems :) Darrell -- DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus. Try it today - http://www.invariantsystems.com Robert writes: This is the last message I received. Something going on? - Original Message - From: Matt [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, June 29, 2005 5:57 PM Subject: Re: [Declude.JunkMail] OT: Free Microsoft telephone support code It's been taken. Matt Matt wrote: I have a card that give me one free telephone support incident with Microsoft, but it expires tomorrow and I have no use for it currently (I should have posted this earlier). If anyone has use for this and could use it by 6 p.m. EST tomorrow, I can E-mail the code to you. This is free to anyone on a first come first serve basis. E-mail me off-list to request the code. When and if someone has claimed it I will post a follow up to this list. Matt -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Question about load balancers and source IP
Use SKIPIP John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Mark E. Smith Sent: Saturday, June 25, 2005 3:02 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Question about load balancers and source IP We have 3 declude gateway servers that sit in front of our Exchange system. We want to move the three round-robin DNS servers to a VIP on our Foundry Load Balancers. The load balancers can be setup in a source NAT configuration (which is easier) or DSR (Direct Server Return). In source NAT the VIP on the Foundy Load Balancer is the source address that Declude sees. In DSR the physical SMTP server is the source IP address. DSR is difficult to configure. So, here's my question. Does Declude/IMAIL care about the IP address that's making the connection? In other words, does it use that IP address for its tests? If so, will HOP=1 fix this? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Question about load balancers and source IP
OOPS! IPBYPASS John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Mark E. Smith Sent: Saturday, June 25, 2005 4:45 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Question about load balancers and source IP SKIPIP = new setting in Declude? Sorry... Been off the list for a while. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Saturday, June 25, 2005 6:52 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Question about load balancers and source IP Use SKIPIP John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Mark E. Smith Sent: Saturday, June 25, 2005 3:02 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Question about load balancers and source IP We have 3 declude gateway servers that sit in front of our Exchange system. We want to move the three round-robin DNS servers to a VIP on our Foundry Load Balancers. The load balancers can be setup in a source NAT configuration (which is easier) or DSR (Direct Server Return). In source NAT the VIP on the Foundy Load Balancer is the source address that Declude sees. In DSR the physical SMTP server is the source IP address. DSR is difficult to configure. So, here's my question. Does Declude/IMAIL care about the IP address that's making the connection? In other words, does it use that IP address for its tests? If so, will HOP=1 fix this? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Imail gateway setup not working
I think I can safely say that we have all been there done that. At least it is working now. Oh, no need to apologize. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Monday, June 20, 2005 9:38 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] OT: Imail gateway setup not working We found the issue; a mis-typed IP range in the relay file (one numeral off in 3rd octave). We must have looked at this 100 times over the weekend and didn't catch it. Thank you for all that responded to help - I am sorry to waste everyone's time Sincerely, Randy Armbrecht Support Department Global Web SolutionsR, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net Richmond's Internet Source since 1996! WEB HOSTING including EMAIL beginning at $29/month! DSL Starting at $39.95/month! Non-Profits - receive a 25% discount on most services! --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Imail gateway setup not working
I am successfully relaying for 2 Exchange servers with no problems running 8.20 HF2. Is there a carriage return after the domain name in the HOSTS file? Why aren't you using aliases instead of accepting all? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Webmaster - GlobalWeb.net Sent: Saturday, June 18, 2005 2:35 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] OT: Imail gateway setup not working I've posted this to the IMailo forum; no replies so far. So I wanted to shoot this out here. We just fired up a new server on Friday with Imail 8.20hf2, JM Pro, Declude Virus Std w/ FProt, Hijack and Sniffer. (old server was 8.15hf2 and starting thursday, the QueueMgr just quit working) We have a couple of customers we do gateway services for and the setup is not working . We have their IP/Domain listed in the host file and have thier IP in the relay addresses list. When anyone sends email in we see this in the logs... 06:18 17:31 SMTPD(92b506f87dcb) [208.253.112.161] RCPT To:[EMAIL PROTECTED] 06:18 17:31 SMTPD(92b506f87dcb) [x] looking up vacva.com in HOSTS 06:18 17:31 SMTPD(92b506f87dcb) [208.253.112.161] ERR imail.globalweb.net invalid user [EMAIL PROTECTED] Note: there is no closing on the invalid user line. Any one k now of any poroblems with this in 8.20? I really do not want to have to re- load a new setup of 8.15. Any ideas would be greatly appreciated! Thank you! Randy Armbrecht Global Web Solutions, Inc. 804-346-5509 -- Original Message -- From: Michael Thomas - Mathbox [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Sat, 18 Jun 2005 01:37:08 -0400 Hi, No, actually they monitor specific channels to determine if advertisements appeared on that channel and at what times. They also collect information on what shows were running when the advertisements appeared. Because much of cable advertising is geographically driven, they need access to cable TV in specific geographic areas. Mike - Original Message - From: William Stillwell [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, June 17, 2005 11:42 PM Subject: Re: [Declude.JunkMail] OT: Co-Location Space It sounds like there trying to start a service like WebVCR which was of course shutdown by the MPAA.. - Original Message - From: Michael Thomas - Mathbox [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, June 17, 2005 5:51 PM Subject: [Declude.JunkMail] OT: Co-Location Space Hi All, I have a customer that is looking for co-location space in 50+ locations all over the US. There main requirement is a local cable TV feed. They will pay to have their own drop installed from the street. Their equipment is 50% rack-mount and 50% tower. Cabinet, rack, or wire shelf will work. Their requirements are: 10U 128k 2 IP's 3-5 amps Cable TV feed If you are interested, please contact me off list at [EMAIL PROTECTED] Below is a list of locations. Thank You, Michael Thomas Mathbox Anchorage AK Fairbanks AK Juneau AK Dothan AL Jonesboro AR Palm Springs CA Yuma-El Centro CA Eureka CA Grand Junction-Montrose CO Panama City FL Gainesville FL Ottumwa-Kirksville IA Idaho Falls-Pocatello ID Twin Falls ID Lafayette IN Bowling Green KY Alexandra LA Lake Charles LA Bangor ME Presque Isle ME Marquette MI Alpena MI Mankato MN St Joseph MO Biloxi-Gulfport MS Hattiesburg-Laurel MS Greenwood-Greenville MS Meridian MS Missoula MT Billings MT Great Falls MT Butte-Boseman MT Helena MT Glendive MT Minot-Bismarck-Dickinson ND North Platte NE Binghamton NY Utica NY Watertown NY Wheeling-Steubenville OH Lima OH Zanesville OH Bend OR Rapod City SD Jackson TN Odessa-Midland TX Abilene-Sweetwater TX Laredo TX San Angelo TX Victoria TX Sherman-Ada TX/OK Harrisonburg VA Charlottesville VA Clarksburg-Weston WV Parkersburg WV Casper-Riverton WY Cheyenne-Scottsbluff WY/NE --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This email has been scanned for possible viruses by Declude Antivirus. For more information on Declude Antivirus, Visit www.declude.com --- This email has been scanned for possible viruses by Declude Antivirus. For more information on Declude Antivirus, Visit www.declude.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
RE: [Declude.JunkMail] Gatewayed Declude Server
Title: Message There are actually a good number of Imail/Declude installs that either are pure gateway only or do a significant amount of their load for gateway service. IMHO, for a gateway service, Imail/Declude is and will be a great combination into the foreseeable future. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Wednesday, June 08, 2005 8:20 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Gatewayed Declude Server HI all, I am in perhaps a different position from some/most of you in that I run Declude on a IMail server but it is just a gateway no mailboxes are on my server. So all I have running from the IMail services is SMTP and Queue Mgr. I have to say that I am reasonable happy with the way things are. Now I am looking to migrate my Declude/IMail to another box and am wondering if I should do the SmarterMail thing? I know that SmarterMail and Declude had a rocky start but that is mostly better now. I also know that there are a couple of tests that IMail can do that SmarterMail cannot. So will I get much/some/any performance gain by going to SmarterMail? Has anyone figured out how to requeue a held mail with a script that can be launched by the user with a link to the web server? I have a bunch of batch files that call IMAIL1.EXE to send the results to me. Is there a corresponding ability in SmarterMail? Any other Pros/Cons that people want to impart? Thanx Goran Jovanovic The LAN Shoppe
RE: [Declude.JunkMail] Insufficient system resources error
Update: Since installing Imail 8.20 HF2 last Saturday, the problem so far has not reoccurred. Any one else still having this problem? John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Insufficient system resources error
I opened a ticket with Ipswitch but they blamed it on Declude, as usual. I'll bet it was not Eric that said that. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Admin Web for Declude
In case Declude is not able to respond right now, the 2-3 projects that were either in development or ready to go to development in the last couple of years did not get very far AFAIK. At this time, Declude is not working on one AFAIK. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Jeff Kratka Sent: Friday, June 03, 2005 2:06 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Admin Web for Declude Hello, Quite some time ago, there was mention about an Admin Web for Declude, is this available or does anyone have something to share? Thank You. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Admin Web for Declude
AH, User configurable actions is different. I know at one time at least Sandy had either a Demo or production running for a client. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Jeff Kratka Sent: Friday, June 03, 2005 2:38 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Admin Web for Declude Mostly what I remember from some time ago was something to let the end user modify their settings. Sorry Admin Web was the incorrect wording. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Markus Gufler Sent: Friday, June 03, 2005 2:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Admin Web for Declude Quite some time ago, there was mention about an Admin Web for Declude, is this available or does anyone have something to share? Declude is so flexible and can do so much different things that it would be nearly impossible to write a clickplay-frontend. There was already a discussion. The question is: Do you want as much a possible functions to manage your email traffic with the drawback that you must know exactly what you need and what you're doing or do you want some less functions but this as easy as installing windows? Also what do you mean by admin web? Something that will write your configuration file and prevent wrong settings from your side (what's wrong?) or do you need something to let end-users choose different settings for their own mailbox? Markus --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Message not scanned
Check your server event log for Error messages Event ID 4 Source SRV. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Wednesday, June 01, 2005 5:58 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Message not scanned I have received a couple of messages in the last two days in my inbox that were NOT scanned by Declude. I thought the headers below were strange, since they seem to have MIME segments in them. However, another message in my inbox that was spam (below my hold weight) also has similar MIME segments, but was scanned by Declude, evidenced by the Declude headers. The Declude headers are not present (I add several headers with Declude) in the email below. The line X-Virus-Scanned: amavisd-new 2.3.0 (20050424) at taisweb.net was added by my gateway postfix box that scans messages with clamav. When searching the Declude logs, the queue number 9F3B01A60A71 does not appear. Neither does a07e06888a82, though I wouldn't expect it to as that is the forward message, which should appear after Declude scans. Version info: Imail v8.2 HF2, Declude Junkmail Pro/Virus Standard/Hijack v2.0.6.10. For reference, I have attached a file with the headers of the other spam message I mentioned, so you can see what kind of headers I add that are missing below. IMAIL LOG SMTPD (9f3b01a60a71) [172.20.5.2] connect 68.118.154.7 port 60324 SMTPD (9f3b01a60a71) [68.118.154.7] EHLO mx2.rmslink.net SMTPD (9f3b01a60a71) [68.118.154.7] MAIL FROM:[EMAIL PROTECTED] SMTPD (9f3b01a60a71) [68.118.154.7] RCPT TO:[EMAIL PROTECTED] SMTPD (9f3b01a60a71) [x] looking up taisweb.net in HOSTS SMTPD (9f3b01a60a71) [68.118.154.7] DATA SMTPD (9f3b01a60a71) [68.118.154.7] S:\imail\spool\D9f3b01a60a71.SMD 4808 SMTP () Info - Adding Queue file S:\imail\spool\Q9F3B01A60A71.SMD SMTP (9f3b01a60a71) processing S:\imail\spool\Q9F3B01A60A71.SMD SMTP (9f3b01a60a71) ldeliver mail.taisweb.net copyall-main (1) [EMAIL PROTECTED] 4808 SMTP (9f3b01a60a71) forwarded message to [EMAIL PROTECTED] using new file: a07e06888a82 SMTP (9f3b01a60a71) finished S:\imail\spool\Q9F3B01A60A71.SMD status=1 HEADERS-- Microsoft Mail Internet Headers Version 2.0 Received: from mail.taisweb.net ([68.118.153.2]) by ex1.wilcoxent.net with Microsoft SMTPSVC(6.0.3790.211); Wed, 1 Jun 2005 07:48:14 -0400 Received: from SMTP32-FWD by mail.taisweb.net (SMTP32) id A9F3B01A60A71; Wed, 1 Jun 2005 07:48:14 Received: from mx2.rmslink.net [68.118.154.7] by mail.taisweb.net with ESMTP (SMTPD-8.20) id AF3C0298; Wed, 01 Jun 2005 07:42:52 -0400 Received: from localhost (localhost [127.0.0.1]) by mx2.rmslink.net (Postfix) with ESMTP id 2F58139863 for [EMAIL PROTECTED]; Wed, 1 Jun 2005 07:20:47 -0400 (EDT) Received: from gatesalbert.com (81-202-101-107.user.ono.com [81.202.101.107]) by mx2.rmslink.net (Postfix) with SMTP id 46D5B39845 for [EMAIL PROTECTED]; Wed, 1 Jun 2005 07:20:40 -0400 (EDT) From: Feli Ridgeway [EMAIL PROTECTED] To: Napier Kincaid [EMAIL PROTECTED] Subject: Re: Really Works GGood Date: Wed, 1 Jun 2005 06:42:20 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary==_NextPart_000_0057_01C5669E.F7E87600 X-Priority: 3 X-MSMail-Priority: Normal X-Unsent: 1 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Message-Id: [EMAIL PROTECTED] X-Virus-Scanned: amavisd-new 2.3.0 (20050424) at taisweb.net Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 01 Jun 2005 11:48:14.0907 (UTC) FILETIME=[CB72F8B0:01C5669F] --=_NextPart_000_0057_01C5669E.F7E87600 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable --=_NextPart_000_0057_01C5669E.F7E87600 Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: quoted-printable --=_NextPart_000_0057_01C5669E.F7E87600-- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Message not scanned
Did you not see my response to your earlier post? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Wednesday, June 01, 2005 10:53 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Message not scanned I have received a couple of messages in the last two days in my inbox that were NOT scanned by Declude. I thought the headers below were strange, since they seem to have MIME segments in them. However, another message in my inbox that was spam (below my hold weight) also has similar MIME segments, but was scanned by Declude, evidenced by the Declude headers. The Declude headers are not present (I add several headers with Declude) in the email below. The line X-Virus-Scanned: amavisd-new 2.3.0 (20050424) at taisweb.net was added by my gateway postfix box that scans messages with clamav. When searching the Declude logs, the queue number 9F3B01A60A71 does not appear. Neither does a07e06888a82, though I wouldn't expect it to as that is the forward message, which should appear after Declude scans. Version info: Imail v8.2 HF2, Declude Junkmail Pro/Virus Standard/Hijack v2.0.6.10. For reference, I have attached a file with the headers of the other spam message I mentioned, so you can see what kind of headers I add that are missing below. IMAIL LOG SMTPD (9f3b01a60a71) [172.20.5.2] connect 68.118.154.7 port 60324 SMTPD (9f3b01a60a71) [68.118.154.7] EHLO mx2.rmslink.net SMTPD (9f3b01a60a71) [68.118.154.7] MAIL FROM:[EMAIL PROTECTED] SMTPD (9f3b01a60a71) [68.118.154.7] RCPT TO:[EMAIL PROTECTED] SMTPD (9f3b01a60a71) [x] looking up taisweb.net in HOSTS SMTPD (9f3b01a60a71) [68.118.154.7] DATA SMTPD (9f3b01a60a71) [68.118.154.7] S:\imail\spool\D9f3b01a60a71.SMD 4808 SMTP () Info - Adding Queue file S:\imail\spool\Q9F3B01A60A71.SMD SMTP (9f3b01a60a71) processing S:\imail\spool\Q9F3B01A60A71.SMD SMTP (9f3b01a60a71) ldeliver mail.taisweb.net copyall-main (1) [EMAIL PROTECTED] 4808 SMTP (9f3b01a60a71) forwarded message to [EMAIL PROTECTED] using new file: a07e06888a82 SMTP (9f3b01a60a71) finished S:\imail\spool\Q9F3B01A60A71.SMD status=1 HEADERS-- Microsoft Mail Internet Headers Version 2.0 Received: from mail.taisweb.net ([68.118.153.2]) by ex1.wilcoxent.net with Microsoft SMTPSVC(6.0.3790.211); Wed, 1 Jun 2005 07:48:14 -0400 Received: from SMTP32-FWD by mail.taisweb.net (SMTP32) id A9F3B01A60A71; Wed, 1 Jun 2005 07:48:14 Received: from mx2.rmslink.net [68.118.154.7] by mail.taisweb.net with ESMTP (SMTPD-8.20) id AF3C0298; Wed, 01 Jun 2005 07:42:52 -0400 Received: from localhost (localhost [127.0.0.1]) by mx2.rmslink.net (Postfix) with ESMTP id 2F58139863 for [EMAIL PROTECTED]; Wed, 1 Jun 2005 07:20:47 -0400 (EDT) Received: from gatesalbert.com (81-202-101-107.user.ono.com [81.202.101.107]) by mx2.rmslink.net (Postfix) with SMTP id 46D5B39845 for [EMAIL PROTECTED]; Wed, 1 Jun 2005 07:20:40 -0400 (EDT) From: Feli Ridgeway [EMAIL PROTECTED] To: Napier Kincaid [EMAIL PROTECTED] Subject: Re: Really Works GGood Date: Wed, 1 Jun 2005 06:42:20 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary==_NextPart_000_0057_01C5669E.F7E87600 X-Priority: 3 X-MSMail-Priority: Normal X-Unsent: 1 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Message-Id: [EMAIL PROTECTED] X-Virus-Scanned: amavisd-new 2.3.0 (20050424) at taisweb.net Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 01 Jun 2005 11:48:14.0907 (UTC) FILETIME=[CB72F8B0:01C5669F] --=_NextPart_000_0057_01C5669E.F7E87600 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable --=_NextPart_000_0057_01C5669E.F7E87600 Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: quoted-printable --=_NextPart_000_0057_01C5669E.F7E87600-- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Virus Getting Through AV and FProt
This has been covered for a couple of hours now on the Declude Virus list. You need to update your F-Prot configuration to include the virus code 8 as a match. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of A. Clausen Sent: Tuesday, May 31, 2005 1:29 PM To: Declude JunkMail Subject: [Declude.JunkMail] Virus Getting Through AV and FProt We're getting a virus coming through and its causing some strange results in Declude AV. The file itself is a zip file called 2.zip which contains the file 02_05_2005.exe. In the Declude AV log we're seeing lines like this: 05/31/2005 09:07:28 Q8bbf2a5f00800b96 MIME file: 8.zip [base64; Length=18205 Checksum=2348990] 05/31/2005 09:07:38 Q8bbf2a5f00800b96 Could not find parse string Infection in report.txt 05/31/2005 09:07:38 Q8bbf2a5f00800b96 Error 8 in virus scanner 1. 05/31/2005 09:07:38 Q8bbf2a5f00800b96 Scanned: Error in virus scanner. [MIME: 2 18323] Is FProt just behind in updating its definitions or is there something nasty happening? -- Aaron Clausen --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Insufficient system resources error
A recap: 5 people including me have reported having this problem in the last week or so. One of those does not use AVG. Alex has reported to me that since disabling AVG he has not seen the problem reoccur in 1 1/2 days. I have not disabled AVG as I do not think it is the culprit. My server has been running since Sunday night. Now, Sunday night I did make a registry change that has to do with kernel page usage. I do not remember what it was right now but I can find it easily. I am running performance monitor on my server to see if it catches anything when this happens again, if it happens again. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Insufficient system resources error
Right idea Ralph. We need to all work together to find this, as it happened again this morning. What version of Windows are you using? Windows 2000 server standard What SP's are installed? SP4 What version of Declude are you using? 2.0.6 NOTE: I also tried 2.0.6.14 and it occurred as well. What version of IMail are you using? 8.20 What hot fixes have you applied to IMail? None yet. How long before you see this resource problem? Aprox 2 days after last restart, usually between 5:30AM and 7:30 AM Does your scanner software automatically update itself (not definitions but the software itself) AVG and F-Prot, Yes When did this start happening? Last Friday, 05/20 was first occurrence. Did ANY kind upgrade happen? Win, Declude, IMail, Scanner? No, not that I am aware of. Your name and phone number On file. Any else you suspect or find odd. Nothing yet. FYI, I did try the first registry entry found in http://support.microsoft.com/default.aspx?scid=kb;en-us;Q312362 but that has not helped as it reoccurred. I am now trying the second entry. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Insufficient system resources error
Major problem on my server on 05/22/05 starting at 06:30 AM. I do not think this is caused by Imail or Declude as nothing has changed in the 3 weeks. It appears at 6:30 AM I started getting the 2020 event error on the server and repeating every couple of minutes. Imail services kept working but Declude was not always working. 1 out of 10 messages would be scanned with no error by Declude Virus but the Junkmail log stopped at that time. However, both the Sniffer and SpamCheck logs show that they were scanning messages as called by Declude. Searching eventid.net finds a bunch of stuff. It appears to be leaning towards adding a registry setting to decrease the default amount of paged kernel memory in use, but that is not a real solution. I was able to log onto the console, but not able to open anything so not sure what was going on at the time. Any one have any ideas? - 05/22/2005 06:30:07 Q895E0253D72E Error 1450 creating temp directory F:\SPOOL\D895E0253D72E.vir\. [Insufficient system resources exist to complete the requested service.] 05/22/2005 06:30:07 Q895E0253D72E Scanned: Error starting scanner 05/22/2005 06:33:14 Q8A16024DD77A Vulnerability flags = 0 05/22/2005 06:33:14 Q8A16024DD77A MIME file: [text/html][8bit; Length=2634 Checksum=216613] 05/22/2005 06:33:15 Q8A16024DD77A Virus scanner 1 reports exit code of 0 05/22/2005 06:33:15 Q8A16024DD77A Virus scanner 2 reports exit code of 0 05/22/2005 06:33:15 Q8A16024DD77A 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the \IMail directory or sub-directories. 05/22/2005 06:33:15 Q8A16024DD77A Scanned: Virus Free [MIME: 2 2740] --- Event Type: Error Event Source: Srv Event Category: None Event ID: 2020 Date: 5/22/2005 Time: 10:42:24 PM User: N/A Computer: MAIL Description: The server was unable to allocate from the system paged pool because the pool was empty. Data: : 00 00 04 00 01 00 54 00 ..T. 0008: 00 00 00 00 e4 07 00 c0 ä..À 0010: 00 00 00 00 9a 00 00 c0 ..À 0018: 00 00 00 00 00 00 00 00 0020: 00 00 00 00 00 00 00 00 0028: 02 00 00 00 John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Insufficient system resources error
Running Imail 8.20, Declude 2.0.6 (occurred with 2.0.6.14 as well), F-Prot, AVG, Sniffer, SpamCheck, Kiwi Syslog all on Windows 2000 Server standard. Nothing has changed on server in the last 3 weeks. Chkdsk found errors on 2 of 8 partitions, system and spool. Both are mirrored on separate drives but have other partitions on those drives. I will try running chkdsk /f Monday night. I have 2 page files on 2 separate partitions on 2 separate drives. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Hirthe, Alexander Sent: Monday, May 23, 2005 2:20 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Insufficient system resources error Hello John, I still have the Problem, the server locked up the time I sended the first mail. Do you run F-Prot/Clam/AVG? Maybe it's one of them? I didn't change anything on the system. (ok, some new domains, some new accounts, but the system was up since february). Alex -Original Message- From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] Sent: Monday, May 23, 2005 9:42 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Insufficient system resources error Major problem on my server on 05/22/05 starting at 06:30 AM. I do not think this is caused by Imail or Declude as nothing has changed in the 3 weeks. It appears at 6:30 AM I started getting the 2020 event error on the server and repeating every couple of minutes. Imail services kept working but Declude was not always working. 1 out of 10 messages would be scanned with no error by Declude Virus but the Junkmail log stopped at that time. However, both the Sniffer and SpamCheck logs show that they were scanning messages as called by Declude. Searching eventid.net finds a bunch of stuff. It appears to be leaning towards adding a registry setting to decrease the default amount of paged kernel memory in use, but that is not a real solution. I was able to log onto the console, but not able to open anything so not sure what was going on at the time. Any one have any ideas? -- -- - 05/22/2005 06:30:07 Q895E0253D72E Error 1450 creating temp directory F:\SPOOL\D895E0253D72E.vir\. [Insufficient system resources exist to complete the requested service.] 05/22/2005 06:30:07 Q895E0253D72E Scanned: Error starting scanner 05/22/2005 06:33:14 Q8A16024DD77A Vulnerability flags = 0 05/22/2005 06:33:14 Q8A16024DD77A MIME file: [text/html][8bit; Length=2634 Checksum=216613] 05/22/2005 06:33:15 Q8A16024DD77A Virus scanner 1 reports exit code of 0 05/22/2005 06:33:15 Q8A16024DD77A Virus scanner 2 reports exit code of 0 05/22/2005 06:33:15 Q8A16024DD77A 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the \IMail directory or sub-directories. 05/22/2005 06:33:15 Q8A16024DD77A Scanned: Virus Free [MIME: 2 2740] -- -- --- Event Type: Error Event Source: Srv Event Category: None Event ID: 2020 Date: 5/22/2005 Time: 10:42:24 PM User: N/A Computer: MAIL Description: The server was unable to allocate from the system paged pool because the pool was empty. Data: : 00 00 04 00 01 00 54 00 ..T. 0008: 00 00 00 00 e4 07 00 c0 .. 0010: 00 00 00 00 9a 00 00 c0 .. 0018: 00 00 00 00 00 00 00 00 0020: 00 00 00 00 00 00 00 00 0028: 02 00 00 00 -- -- John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Insufficient system resources error
Alex, are you using AVG? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Hirthe, Alexander Sent: Monday, May 23, 2005 2:06 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Insufficient system resources error Hello John, I had a Problem on Thursday/Friday/Saturday, the Server finally locked up with not enough memory. I had a bad block on my spool drive (checkdisk said orphaned file) try a chkdsk D: (or whatever it may be :) it will just check and will keep Imail running. If it will find errors you should run it with /f to fix the errors. I think Imail and/or Declude could have caused the problem if there are too many parallel connections. (I THINK, I'm really not sure :) We where hardly hit from the german Spam (we filtered it, but the mails came in). We run Imail on a Dual Xeon (Intel SR7520JR2 Board), 2 GB RAM, 3*Raid-1 (System/Spool/Mail), 2003 SP1 (since Saturday), Imail 8.15 HF1 (since Saturday, before 8.14), Declude 1.8 Alex -Original Message- From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] Sent: Monday, May 23, 2005 9:42 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Insufficient system resources error Major problem on my server on 05/22/05 starting at 06:30 AM. I do not think this is caused by Imail or Declude as nothing has changed in the 3 weeks. It appears at 6:30 AM I started getting the 2020 event error on the server and repeating every couple of minutes. Imail services kept working but Declude was not always working. 1 out of 10 messages would be scanned with no error by Declude Virus but the Junkmail log stopped at that time. However, both the Sniffer and SpamCheck logs show that they were scanning messages as called by Declude. Searching eventid.net finds a bunch of stuff. It appears to be leaning towards adding a registry setting to decrease the default amount of paged kernel memory in use, but that is not a real solution. I was able to log onto the console, but not able to open anything so not sure what was going on at the time. Any one have any ideas? -- -- - 05/22/2005 06:30:07 Q895E0253D72E Error 1450 creating temp directory F:\SPOOL\D895E0253D72E.vir\. [Insufficient system resources exist to complete the requested service.] 05/22/2005 06:30:07 Q895E0253D72E Scanned: Error starting scanner 05/22/2005 06:33:14 Q8A16024DD77A Vulnerability flags = 0 05/22/2005 06:33:14 Q8A16024DD77A MIME file: [text/html][8bit; Length=2634 Checksum=216613] 05/22/2005 06:33:15 Q8A16024DD77A Virus scanner 1 reports exit code of 0 05/22/2005 06:33:15 Q8A16024DD77A Virus scanner 2 reports exit code of 0 05/22/2005 06:33:15 Q8A16024DD77A 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the \IMail directory or sub-directories. 05/22/2005 06:33:15 Q8A16024DD77A Scanned: Virus Free [MIME: 2 2740] -- -- --- Event Type: Error Event Source: Srv Event Category: None Event ID: 2020 Date: 5/22/2005 Time: 10:42:24 PM User: N/A Computer: MAIL Description: The server was unable to allocate from the system paged pool because the pool was empty. Data: : 00 00 04 00 01 00 54 00 ..T. 0008: 00 00 00 00 e4 07 00 c0 .. 0010: 00 00 00 00 9a 00 00 c0 .. 0018: 00 00 00 00 00 00 00 00 0020: 00 00 00 00 00 00 00 00 0028: 02 00 00 00 -- -- John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Insufficient system resources error
Robert, are you using AVG? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Robert Sent: Monday, May 23, 2005 5:34 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Insufficient system resources error Also, I am running 7.15 and declude 1.77131. I haven't changed anything in my settings for at least a month. Win 2K. I stopped all outside mail from the system for 2 hours and still couldn't ragain control. CPU was at 10 to 15% memory was at about the same. Not busy, Just Insufficient system resources . Robert Whitaker The Modem Pool 517-789-5689 1-888-377-5689 Be sure to try the New Web Express Internet Accelerator from The Modem Pool http://web-express.modempool.com - Original Message - From: Robert [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, May 23, 2005 8:24 AM Subject: Re: [Declude.JunkMail] Insufficient system resources error I had the same problem all weekend. It gone now. I couldn't even rename the log file, Insufficient system resources error, even from another computer thru the network. Robert Whitaker The Modem Pool 517-789-5689 1-888-377-5689 Be sure to try the New Web Express Internet Accelerator from The Modem Pool http://web-express.modempool.com - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, May 23, 2005 5:35 AM Subject: RE: [Declude.JunkMail] Insufficient system resources error Running Imail 8.20, Declude 2.0.6 (occurred with 2.0.6.14 as well), F-Prot, AVG, Sniffer, SpamCheck, Kiwi Syslog all on Windows 2000 Server standard. Nothing has changed on server in the last 3 weeks. Chkdsk found errors on 2 of 8 partitions, system and spool. Both are mirrored on separate drives but have other partitions on those drives. I will try running chkdsk /f Monday night. I have 2 page files on 2 separate partitions on 2 separate drives. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Hirthe, Alexander Sent: Monday, May 23, 2005 2:20 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Insufficient system resources error Hello John, I still have the Problem, the server locked up the time I sended the first mail. Do you run F-Prot/Clam/AVG? Maybe it's one of them? I didn't change anything on the system. (ok, some new domains, some new accounts, but the system was up since february). Alex -Original Message- From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] Sent: Monday, May 23, 2005 9:42 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Insufficient system resources error Major problem on my server on 05/22/05 starting at 06:30 AM. I do not think this is caused by Imail or Declude as nothing has changed in the 3 weeks. It appears at 6:30 AM I started getting the 2020 event error on the server and repeating every couple of minutes. Imail services kept working but Declude was not always working. 1 out of 10 messages would be scanned with no error by Declude Virus but the Junkmail log stopped at that time. However, both the Sniffer and SpamCheck logs show that they were scanning messages as called by Declude. Searching eventid.net finds a bunch of stuff. It appears to be leaning towards adding a registry setting to decrease the default amount of paged kernel memory in use, but that is not a real solution. I was able to log onto the console, but not able to open anything so not sure what was going on at the time. Any one have any ideas? -- -- - 05/22/2005 06:30:07 Q895E0253D72E Error 1450 creating temp directory F:\SPOOL\D895E0253D72E.vir\. [Insufficient system resources exist to complete the requested service.] 05/22/2005 06:30:07 Q895E0253D72E Scanned: Error starting scanner 05/22/2005 06:33:14 Q8A16024DD77A Vulnerability flags = 0 05/22/2005 06:33:14 Q8A16024DD77A MIME file: [text/html][8bit; Length=2634 Checksum=216613] 05/22/2005 06:33:15 Q8A16024DD77A Virus scanner 1 reports exit code of 0 05/22/2005 06:33:15 Q8A16024DD77A Virus scanner 2 reports exit code of 0 05/22/2005 06:33:15 Q8A16024DD77A 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the \IMail directory or sub-directories. 05/22/2005 06:33:15 Q8A16024DD77A Scanned: Virus Free [MIME: 2 2740
RE: [Declude.JunkMail] Verizon Faced With Lawsuits Over Blocking eMail From Foreign IP Addresses
Lets sign him up for a lot of spam from Korea, Japan, etc and see how he feels about blocking foreign IPs then... Sorry to go off on a rant here The point is a company such as Verizon providing service to a wide and far reaching ranged of customers can not arbitrarily make such a decision for all of its customers. Example, I have a client that deals in electronics. Gee, where do a lot of electronics get made and come from, the Orient. Therefore, I can not arbitrarily block IPs from the Orient as I would then be blocking my client's legitimate e-mails. However, a public school system in Texas would probably have very little use for e-mail communication with the Orient and therefore they could safely block those IP ranges. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude memory issues
Well, since Declude.exe is called from Imail SMPTD.exe and Declude.exe closes as soon as it is done processing it would be nearly impossible to say that Declude.exe had a memory leak and was holding memory unless the process never ended in which case messages processed by Declude.exe never got delivered. Memory leaks are caused by programs that remain running. Once a program closes it releases all its resources. By closing, I mean it no longer is listed in Task Manager. If you run Task Manager you can select columns and look and sort by Memory Use and see what is hogging the memory. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Will Sent: Tuesday, May 17, 2005 6:40 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Declude memory issues I had noticed this with an older version and now that I am a Declude user again, I see we still have an issue. There appears to be a memory leak when running Declude on our Imail server, which is not there when I remove Delcude. My server will run for about two weeks before my memory gets to the point that it can no longer support the running processes and mail begins to get backlogged severely. Does anyone else run into this issue or find they need to instate automated reboots? I really do not want to do this. Will --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Possible imail\declude issue
Incorrect. The missing line of the SMTPD log is a missing line, meaning either something interrupted the session or the lines are missing. Declude knows nothing of the message until after Imail SMTP service has received it in its entirety. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Monday, May 16, 2005 1:17 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Possible imail\declude issue Harry, That's what happens when Declude blocks an E-mail with an action like HOLD or DELETE, or it gets blocked or deleted in Declude Virus. You need to check your JunkMail and Virus logs to determine what happened. Matt Harry Vanderzand wrote: I have a complaint from a clinet of missing e-mails that have a record inhis database but the e-mail was never received.Upon checking the logs I find entries as follows:05:16 15:52 SMTPD(018600DC) [216.16.233.16] MAIL FROM: [EMAIL PROTECTED]05:16 15:52 SMTPD(018600DC) [216.16.233.16] RCPT TO: [EMAIL PROTECTED]05:16 15:52 SMTPD(018600DC) [216.16.233.16] RCPT TO: [EMAIL PROTECTED]When they should look like:05:16 15:52 SMTPD(018600DC) [216.16.233.16] MAIL FROM: [EMAIL PROTECTED]05:16 15:52 SMTPD(018600DC) [216.16.233.16] RCPT TO: [EMAIL PROTECTED]05:16 15:52 SMTPD(018600DC) [216.16.233.16] RCPT TO: [EMAIL PROTECTED]05:16 15:52 SMTPD(018600DC) [216.16.233.16]D:\IMail\spool\Df9e2018600dcce43.SMD 1604The spool line is missingI cannot find any other clues as too what is happening here.Anybody have any ideas?We run i-mail 8.05, imail v1.82 and snifferHarry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222 -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott FisherSent: Sunday, May 15, 2005 11:30 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] German political spamI cloned the subject lines and added them in this format to help combat thebounces:BODY 150 CONTAINS SUBJECT: (marcus's subjects)- Original Message -From: Markus Gufler [EMAIL PROTECTED]To: Declude.JunkMail@declude.comSent: Sunday, May 15, 2005 11:41 AMSubject: RE: [Declude.JunkMail] German political spam Ok, I've added all subject line patterns (my, Marc's Nicks and bothSpamassassin cf-files) to one declude filter file.Please note that I've commented out h eise.de and s piegel.de body filter files and also that I usa a weight of 200.Markus ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be foundat http://www.mail-archive.com. -- =MailPure custom filters for Declude JunkMail Pro.http://www.mailpure.com/software/=
RE: [Declude.JunkMail] Thoughts on why this did not make it
Yes, I would say the next step is to review the Message Tracking logs on their Exchange server. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Monday, May 16, 2005 9:26 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Thoughts on why this did not make it Hi, This is the IMail log for a specific message that was sent through me to my client. The SendingDomain.com is actually whitelisted in their per domain whitelist file. On May 10 there were 3 messages from sender to receiver and 2 of them did not make it but one did. This is one of the did not make it ones. All three of them were addressed to the same three people. As far as I can tell we got it OK, processed it (whitelisted) and then handed it off to the client. We got a 250 OK at the end of the data, got 250 OKs from the RCPT TO. So if we gave it to the client (and it looks like we did unless I am missing something) I guess the next step is for the client to review their Exchange logs. Any other thoughts? Thanx 05:10 10:00 SMTPD(be761384002c6f12) [10.0.0.8] connect 160.109.101.40 port 49675 05:10 10:00 SMTPD(be761384002c6f12) [160.109.101.40] EHLO smtp.SendingDomain.com 05:10 10:00 SMTPD(be761384002c6f12) [160.109.101.40] MAIL From:[EMAIL PROTECTED] 05:10 10:00 SMTPD(be761384002c6f12) [160.109.101.40] RCPT To:[EMAIL PROTECTED] NOTIFY=FAILURE,DELAY 05:10 10:00 SMTPD(be761384002c6f12) [160.109.101.40] RCPT To:[EMAIL PROTECTED] NOTIFY=FAILURE,DELAY 05:10 10:00 SMTPD(be761384002c6f12) [160.109.101.40] RCPT To:[EMAIL PROTECTED] NOTIFY=FAILURE,DELAY 05:10 10:00 SMTPD(be761384002c6f12) [160.109.101.40] C:\IMail\spool\Dbe761384002c6f12.SMD 14046 05:10 10:00 SMTP-() Info - Adding Queue file C:\IMail\spool\Qbe761384002c6f12.SMD 05:10 10:00 SMTP-(be761384002c6f12) processing C:\IMail\spool\Qbe761384002c6f12.SMD 05:10 10:00 SMTP-(be761384002c6f12) [x] looking up ReceivingDomain.com in HOSTS and MX 05:10 10:00 SMTP-(be761384002c6f12) [x] looking up ReceivingDomain.com in HOSTS and MX 05:10 10:00 SMTP-(be761384002c6f12) [x] looking up ReceivingDomain.com in HOSTS and MX 05:10 10:00 SMTP-(be761384002c6f12) Trying ReceivingDomain.com (0) 05:10 10:00 SMTP-(be761384002c6f12) [x] Connecting socket to service SMTP on host ReceivingDomain.com using protocol tcp 05:10 10:00 SMTP-(be761384002c6f12) [x] using source IP for mail1.gonetworks.net [10.0.0.8] 05:10 10:00 SMTP-(be761384002c6f12) Connect ReceivingDomain.com [xxx.xxx.xxx.xxx:25] (1) 05:10 10:00 SMTP-(be761384002c6f12) 220 server.ReceivingDomain.com ESMTP Server (Microsoft Exchange Internet Mail Service 5.5.2650.10) ready 05:10 10:00 SMTP-(be761384002c6f12) EHLO mail1.gonetworks.net 05:10 10:00 SMTP-(be761384002c6f12) 250-server.ReceivingDomain.com Hello [cmail1.gonetworks.net] 05:10 10:00 SMTP-(be761384002c6f12) 250-XEXCH50 05:10 10:00 SMTP-(be761384002c6f12) 250-HELP 05:10 10:00 SMTP-(be761384002c6f12) 250-ETRN 05:10 10:00 SMTP-(be761384002c6f12) 250-DSN 05:10 10:00 SMTP-(be761384002c6f12) 250-SIZE 5120 05:10 10:00 SMTP-(be761384002c6f12) 250-AUTH LOGIN 05:10 10:00 SMTP-(be761384002c6f12) 250 AUTH=LOGIN 05:10 10:00 SMTP-(be761384002c6f12) MAIL FROM:[EMAIL PROTECTED] 05:10 10:00 SMTP-(be761384002c6f12) 250 OK - mail from [EMAIL PROTECTED] 05:10 10:00 SMTP-(be761384002c6f12) RCPT To:[EMAIL PROTECTED] NOTIFY=FAILURE,DELAY 05:10 10:00 SMTP-(be761384002c6f12) 250 OK - Recipient [EMAIL PROTECTED] 05:10 10:00 SMTP-(be761384002c6f12) RCPT To:[EMAIL PROTECTED] NOTIFY=FAILURE,DELAY 05:10 10:00 SMTP-(be761384002c6f12) 250 OK - Recipient [EMAIL PROTECTED] 05:10 10:00 SMTP-(be761384002c6f12) RCPT To:[EMAIL PROTECTED] NOTIFY=FAILURE,DELAY 05:10 10:00 SMTP-(be761384002c6f12) 250 OK - Recipient [EMAIL PROTECTED] 05:10 10:00 SMTP-(be761384002c6f12) DATA 05:10 10:00 SMTP-(be761384002c6f12) 354 Send data. End with CRLF.CRLF 05:10 10:00 SMTP-(be761384002c6f12) . 05:10 10:00 SMTP-(be761384002c6f12) 250 OK 05:10 10:00 SMTP-(be761384002c6f12) rdeliver ReceivingDomain.com multiple (3) [EMAIL PROTECTED] 14887 05:10 10:00 SMTP-(be761384002c6f12) QUIT 05:10 10:00 SMTP-(be761384002c6f12) 221 closing connection 05:10 10:00 SMTP-(be761384002c6f12) [u] closing socket (u) 05:10 10:00 SMTP-(be761384002c6f12) finished C:\IMail\spool\Qbe761384002c6f12.SMD status=1 Goran Jovanovic The LAN Shoppe
RE: [Declude.JunkMail] Graceful way to stop services
Title: Message The incomplete T and associated D files are a result of stopping the Imail SMTP service. FYI, any such files will be retried by the sending client or server as the session was incomplete. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, May 13, 2005 1:42 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Graceful way to stop services Hi, What is the most graceful way to stop mail processing on an IMail/Declude process? At present when I have to stop the services I stop the SMTP service then the Queue Manager Service, watch task manager for all the Declude processes to stop. Will this method leave T*.SMD files or incomplete D*.SMD files? I think it does. Goran Jovanovic The LAN Shoppe
RE: [Declude.JunkMail] Graceful way to stop services
Title: Message True, there is no way to stop new connections yet allow existing connections to complete. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, May 13, 2005 2:36 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Graceful way to stop services But stopping the SMTP service creates the incomplete T and D files right? So there is no way to tell IMail to do not accept any more connections and finish what you are doing so that I can stop the process without getting the incomplete files? I know that the sending server will retry the mail again so I am not really worried about losing mail I was just trying to prevent clutter in the spool directory. In any case I have a cleanup routing that deletes old T, D and Q files. Goran Jovanovic The LAN Shoppe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Friday, May 13, 2005 5:09 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Graceful way to stop services You should only need to stop the SMTP service and then wait about 10 seconds. Matt Goran Jovanovic wrote: Hi, What is the most graceful way to stop mail processing on an IMail/Declude process? At present when I have to stop the services I stop the SMTP service then the Queue Manager Service, watch task manager for all the Declude processes to stop. Will this method leave T*.SMD files or incomplete D*.SMD files? I think it does. Goran Jovanovic The LAN Shoppe -- =MailPure custom filters for Declude JunkMail Pro.http://www.mailpure.com/software/=
RE: [Declude.JunkMail] Graceful way to stop services
Title: Message Andrew, great idea. Never thought of disabling inbound connections on the firewall. That would indeed allow existing to continue but prevent any new. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Friday, May 13, 2005 2:59 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Graceful way to stop services ... which is why I tell my stateful firewall instead. Essentially, I disable the inbound SMTP rule, and the stateful inspection does not interfere with the current transactions, just blocks new connections. Then I can do whatevermaintenance was required, including graceful shutdowns. New connections are blocked, and the sending server retries. Typically, spammers don't, so there is no tidal wave of backlogged spam that comes in with the ham once the firewall allows inbound SMTP again.
RE: [Declude.JunkMail] COPYALL setup
That is because COPYALL is an Imail configuration, not a Declude configuration. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Wednesday, May 11, 2005 7:06 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] COPYALL setup I cannot find an example for the global.cfg for a copyall setup. I need to copy all incoming and outgoing e-mail for an account. Thanks, Chris Patterson, CCNA Network Engineer/Support Manager --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] How to stop second virus scan when first captures the virus.
Add my name to the list of users asking for this. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Thursday, May 05, 2005 5:38 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] How to stop second virus scan when first captures the virus. David, Unfortuantly, this is not a feature. It is one that we have been asking for as well. If we ever get this feature I know for one thing I am going to move F-Prot to my first scanner and enable this. Mcafee while a great scanner it is very CPU intensive. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. David writes: Hey all, Any help on this would be greatly appreciated. WE are currently running 2 antivirus filters and with the huge surge of viruses the last couple days its come to my attention that I could spare a significant amount of CPU if I could prevent my second antivirus from running if my first AV catches the email. We are using f-prot and mcafee. Thanks again -David --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Outbound Scanning
Outbound scanning is controlled by Global.cfg. So you would need to set actions there. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Evans Martin Sent: Wednesday, May 04, 2005 3:41 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Outbound Scanning So there is no way to turn off outbound scanning? -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Wednesday, May 04, 2005 4:41 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Outbound Scanning Then they need to auth to the server. You need 8.x to be able to have declude know if the user has authed just set WHITELIST AUTH in yor global.cfg Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Evans Martin Sent: Wednesday, May 04, 2005 2:24 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Outbound Scanning I am trying to disable outbound scanning of my domains. I commented everything out in the slightly modified from default global.cfg that came after the outbound section using a # but it still seems to be scanning outbound. I am using per domain configs but I don't see where Declude is being instructed to scan outbound. Many of my users are complaining because their mail goes out tagged as spam. Help! Thanks, Evans Martin --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Outbound Scanning
Example? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Evans Martin Sent: Wednesday, May 04, 2005 4:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Outbound Scanning I turned them all off. Is there a directive that I am missing? -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Wednesday, May 04, 2005 6:11 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Outbound Scanning Outbound scanning is controlled by Global.cfg. So you would need to set actions there. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Evans Martin Sent: Wednesday, May 04, 2005 3:41 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Outbound Scanning So there is no way to turn off outbound scanning? -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Wednesday, May 04, 2005 4:41 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Outbound Scanning Then they need to auth to the server. You need 8.x to be able to have declude know if the user has authed just set WHITELIST AUTH in yor global.cfg Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Evans Martin Sent: Wednesday, May 04, 2005 2:24 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Outbound Scanning I am trying to disable outbound scanning of my domains. I commented everything out in the slightly modified from default global.cfg that came after the outbound section using a # but it still seems to be scanning outbound. I am using per domain configs but I don't see where Declude is being instructed to scan outbound. Many of my users are complaining because their mail goes out tagged as spam. Help! Thanks, Evans Martin --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Imail 8.20
Sorry, was out on Thursday. Declude 2.0.6 has been working just fine on Imail 8.20 RC02 for about 2 weeks with no problems. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Thursday, April 28, 2005 4:52 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Imail 8.20 A question for Declude... Has Declude been tested with Imail 8.20?
[Declude.JunkMail] Suggestions Requests
1. On the new process counter program, eliminate the popup information window on start. I have created a short cut to it in the startup folder and every time I log on I have to click OK. 2. %LOCALFROM% would be similar to %LOCALRECIP% in that in notifications I could use TO: %LOCALFROM%,%LOCALRECIP% so that the message gets sent to the local user only whether the local user sent the message or is the recipient. My intended use is in the BANNotify.eml as there is only one file available for banned notification and I only want it to go to the local user regardless of whether that user sent it or is receiving it. 3. AutoNotice when -diagsend is used. If the server named in the file is on file with Declude and has an e-mail address attributed to it, a autonotice would be sent to that e-mail address indicating that some one caused the diag to be sent to Declude. While not for my benefit, but this would be good for others when there may be multiple people working on the server. 4. ATTACHACTIONWITHHEADERS so that when the ATTACH action is used the Declude headers are written to the attached message. Declude has acknowledged this is pending and I am listing it so that hopefully it will make it into 2.0.7. 5. PREWHITELISTWITHEXTERNAL so that those that want to use PREWHITELIST can do so but still allow external programs such as AutoWhite for Declude to run. Some programs such as AutoWhite for Declude need to run on both outgoing as well as incoming. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SMD Files
Having the clients check for new mail every 10 minutes is better than 5 minutes. Sounds like you need to start analyzing the logs for a sudden jump in the amount of outgoing messages. You should also analyze the logs for error messages. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 11:41 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SMD Files Ok thanks John. Why do you think this just started happening the past 3 days I went from about 200 spool files to 1000 during the day and then 2 days later there are all of those left over files. Do you mean the SMTP session from the client. I have had some complaints (for about two weeks) from clients (connected by T1) saying they are getting SMTP errors occasionally. They have there client set to check mail every 5 minutes and throughout the day they get SMTP connection errors. I mean I really dont know I am just searching at this point, but thanks for the info Kyle From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Saturday, April 23, 2005 12:28 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SMD Files T files are incomplete Q files, where by some how the SMTP session was not completed. They along with the associated D file can be deleted. The reason it looks like they have already been sent is that the sending server/user upon disconnection of the SMTP session the resent the message in full. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 2:49 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SMD Files Looking at some of these it looks like they have already been sent and it is trying to resend them again. Also in some of these it is going to [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 3:50 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] SMD Files I am trying to find the article that explains the build up of Txx.smd and Dxx.smd files in the spool directory. The past few days I have quite a few of these hanging around in the spool directory. Here is a sample of whats in the files. Some are from my local clients and some or from other mail servers. Kyle Imail 8.15 2.0.6 Junkmail and Antivirus 3.16b F-Prot Message Sniffer 2.3 D03bc03690136cf5a.SMD Received: from gwmsrm42 [172.16.52.2] by esc5.net with ESMTP (SMTPD32-8.15) id A3BC3690136; Thu, 21 Apr 2005 14:49:16 -0500 T03bc03690136cf5a.SMD QD:\IMail\spool\D03bc03690136cf5a.SMD Hesc5.net I03bc03690136cf5a X1 WE:\IMail E0, R[EMAIL PROTECTED] S[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED]
RE: [Declude.JunkMail] Off Topic - Content Filter Suggestions
The Content Filter service available from Sonicwall is good. I know there are a lot of libraries and schools using this. I have a client that uses Burstek for ISA server and it does a good job. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Bill Green dfn Systems Sent: Friday, April 22, 2005 10:20 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Off Topic - Content Filter Suggestions We may be taking on a large account which requires content filtering for students. I'm looking for a content filter system that would provide hands off updating similar to Pete's awesome Sniffer Product. I thought this would be a good place to ask for suggestions though it's not email related. Thanks, Bill Green dfn Systems --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SMD Files
T files are incomplete Q files, where by some how the SMTP session was not completed. They along with the associated D file can be deleted. The reason it looks like they have already been sent is that the sending server/user upon disconnection of the SMTP session the resent the message in full. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 2:49 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SMD Files Looking at some of these it looks like they have already been sent and it is trying to resend them again. Also in some of these it is going to [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 3:50 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] SMD Files I am trying to find the article that explains the build up of Txx.smd and Dxx.smd files in the spool directory. The past few days I have quite a few of these hanging around in the spool directory. Here is a sample of whats in the files. Some are from my local clients and some or from other mail servers. Kyle Imail 8.15 2.0.6 Junkmail and Antivirus 3.16b F-Prot Message Sniffer 2.3 D03bc03690136cf5a.SMD Received: from gwmsrm42 [172.16.52.2] by esc5.net with ESMTP (SMTPD32-8.15) id A3BC3690136; Thu, 21 Apr 2005 14:49:16 -0500 T03bc03690136cf5a.SMD QD:\IMail\spool\D03bc03690136cf5a.SMD Hesc5.net I03bc03690136cf5a X1 WE:\IMail E0, R[EMAIL PROTECTED] S[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED]
RE: [Declude.JunkMail] Odd result on copyfile action.
Title: Message Yes, the correct file is being used. When I do the manual install, I then rename the Declude for Imail.exe to Declude.exe and copy that file. The way I verify this is by running declude diag from the command prompt in the Imail directory, and verifying that there is still a file called Declude for SmarterMail.exe in the manual install file directory I chose. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Monday, April 18, 2005 9:02 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Odd result on copyfile action. I useCOPFYILE for tens of thousands of messages every day, and I am not seeing this. I tested by checking for *.hdr files and for q*.smd files that were too large. No indications that this is happening on my system. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Monday, April 18, 2005 8:06 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Odd result on copyfile action. Can anyone confirm this is also happening or not happening on their 2.0.6 installation? COPYFILE is critical to my install and it would be helpful to know if this is happening elsewhere or not. Thanks, Matt Kevin Bilbee wrote: This looks like a possible mixup with SmarterMail code?? SmarterMail usesesHDR file and EML files instead of Q and D files.Kevin -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff (Lists)Sent: Sunday, April 17, 2005 10:53 PMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] Odd result on copyfile action.I am seeing something odd/different on using the copyfile action.Most, but not all, of the files are changing the first letter and the extension.Most of the Q files are becoming D files and the associated D file is becoming Q file with an extenstion of HDR instead of SMD.However, about 1 in 5 sets of files retains their proper D and Q letters and extensions.Is this be design? If so, I can understand the reason, but why aren't all of them then being renamed?John TeServices For You---This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be foundat http://www.mail-archive.com. -- =MailPure custom filters for Declude JunkMail Pro.http://www.mailpure.com/software/=
