[Declude.JunkMail] OT: iMail 6.06 vulnerabilities
Does anyone know of any vulnerabilities in iMail 6.06? Within a minute after turning on iMail's SMTP service my server becomes completely unresponsive and eventually goes down. I've also installed all of the 6.06 related patches from Ipswitch's site. Jose --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.721 / Virus Database: 477 - Release Date: 7/16/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities
FWIW - After turning off the IMail Sys Logger Service the server is much more stable. Time to find if there's an exploit for this service... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Maze Sent: Friday, July 16, 2004 12:44 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities We're running 6.06 and haven't had that problem yet (knocks on wood). But I do know there are certain MS patches that will mess up the display of the admin page (2000 SP4 for example). Is it possible you just ran an MS update and one of those messed the system up? iMail is an old version and these updates might mess something up. I hate trying to run a system on outdate hardware and software. If only the bosses would listen. hahaha -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jose Gosende Sent: Friday, July 16, 2004 9:57 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities Does anyone know of any vulnerabilities in iMail 6.06? Within a minute after turning on iMail's SMTP service my server becomes completely unresponsive and eventually goes down. I've also installed all of the 6.06 related patches from Ipswitch's site. Jose --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.721 / Virus Database: 477 - Release Date: 7/16/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.721 / Virus Database: 477 - Release Date: 7/16/2004 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.721 / Virus Database: 477 - Release Date: 7/16/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities
Thank God I'm not, and like I said, after turning off syslog things are back to normal. Jose -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of marc catuogno Sent: Friday, July 16, 2004 3:26 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities If you are using LDAP that is completely and horribly hackable and I don't think there is a patch below 7. Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jose Gosende Sent: Friday, July 16, 2004 9:57 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities Does anyone know of any vulnerabilities in iMail 6.06? Within a minute after turning on iMail's SMTP service my server becomes completely unresponsive and eventually goes down. I've also installed all of the 6.06 related patches from Ipswitch's site. Jose --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.721 / Virus Database: 477 - Release Date: 7/16/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.721 / Virus Database: 477 - Release Date: 7/16/2004 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.721 / Virus Database: 477 - Release Date: 7/16/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT - Managed firewall
Anyone out there know of a good managed firewall solution? Please contact me directly. Many thanks in advance, Jose Gosende --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.718 / Virus Database: 474 - Release Date: 7/9/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT: ORBD Question
Title: Message ORDB has listed one of my mail servers as being an open relay. However, I have it set to "Relay for local users only" (running iMail 6.06) so I'm not sure why it'sclaiming to be an open relay. Can someone shed some light? TIA, Jose
RE: [Declude.JunkMail] OT: ORBD Question
Thanks to all. The answer is in the URL below, in case anyone has this problem in the future. http://support.ipswitch.com/kb/IM-20021108-DM01.htm Jose -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Tuesday, June 29, 2004 9:50 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] OT: ORBD Question ORDB has listed one of my mail servers as being an open relay. However, I have it set to Relay for local users only (running iMail 6.06) so I'm not sure why it's claiming to be an open relay. Can someone shed some light? That's because spammers will often pretend to be a local user. You need to use No mail relay or Relay for addresses in order to not be an open relay. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.712 / Virus Database: 468 - Release Date: 6/27/2004 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.712 / Virus Database: 468 - Release Date: 6/27/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] REVDNS Failure question
Why did this fail the REVDNS test? If I do a reverse DNS lookup for precisionx.net I get a valid PTR record back. TIA Received: from precisionx.net [216.119.112.51] by fpmamail.com with ESMTP (SMTPD32-6.06) id A02C4790076; Fri, 04 Jun 2004 11:07:24 -0400 Received: from DedA50 [216.119.112.51] by POSTTestConsole.com (inFusion email Server) with ESMTP id iMS-TestConsole for [EMAIL PROTECTED]; Fri, 4 Jun 2004 08:28:10 -0700 to: [EMAIL PROTECTED] from: [EMAIL PROTECTED] subject: message 1 Message-ID: iMS-TestConsole Date: Fri, 4 Jun 2004 08:28:10 -0700 X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client [8001000e]. X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 216.119.112.51 with no reverse DNS entry. X-Declude-Sender: [EMAIL PROTECTED] [216.119.112.51] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: BADHEADERS, IPNOTINMX, REVDNS [12] X-RCPT-TO: [EMAIL PROTECTED] X-UIDL: 111 Status: U --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.698 / Virus Database: 455 - Release Date: 6/2/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] REVDNS Failure question
OK, thanks. Jose -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Friday, June 04, 2004 11:42 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] REVDNS Failure question I guess I'm confused as to why it's coming from this IP 216.119.112.51 when I've specified the MX record for precisionx.net to point to 65.110.77.72 That I can't explain -- you would need to check with the documents for the inFusion email Server that sent the mail to see how to get it to use a different IP. The mailserver normally won't know the IP address that appears in its MX record, it works with the IP address(es) that the server is set up to handle. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.698 / Virus Database: 455 - Release Date: 6/2/2004 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.698 / Virus Database: 455 - Release Date: 6/2/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] REVDNS Failure question
I guess I'm confused as to why it's coming from this IP 216.119.112.51 when I've specified the MX record for precisionx.net to point to 65.110.77.72 Thanks, Jose -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Friday, June 04, 2004 11:32 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] REVDNS Failure question Why did this fail the REVDNS test? If I do a reverse DNS lookup for precisionx.net I get a valid PTR record back. Reverse DNS is different than forward DNS. Reverse DNS takes an IP and returns the host name (using a PTR record); forward DNS usually takes a host name and returns an IP (using an A record). Received: from precisionx.net [216.119.112.51] by fpmamail.com with ESMTP (SMTPD32-6.06) id A02C4790076; Fri, 04 Jun 2004 11:07:24 -0400 In this case, the E-mail came from the IP 216.119.112.51. That IP does not have a reverse DNS entry (see http://www.dnsstuff.com/tools/ptr.ch?ip=216.119.112.51 ). Since it does not have a reverse DNS entry, it fails the REVDNS test. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.698 / Virus Database: 455 - Release Date: 6/2/2004 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.698 / Virus Database: 455 - Release Date: 6/2/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] REVDNS Failure question
I've solved this problem, thanks; it was related to a mail server config problem. Now, the IPNOTINMX test is failing for precisionx.net and I'm not sure why since the MX record is pointing to 65.110.77.72 (http://dnsstuff.com/tools/lookup.ch?name=precisionx.nettype=MX) Received: from precisionx.net [65.110.77.72] by fpmamail.com with ESMTP (SMTPD32-6.06) id A9088BE0088; Fri, 04 Jun 2004 16:18:16 -0400 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: test Date: Fri, 4 Jun 2004 13:39:04 -0700 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=_NextPart_000_1086356344_CFX_iMSMail_4099010171 Content-Transfer-Encoding: 7bit Message-Id: [EMAIL PROTECTED] X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [420e]. X-Declude-Sender: [EMAIL PROTECTED] [65.110.77.72] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: IPNOTINMX, SPAMHEADERS [3] X-RCPT-TO: [EMAIL PROTECTED] X-UIDL: 120 Status: U Thanks once again. Jose -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jose Gosende Sent: Friday, June 04, 2004 11:47 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] REVDNS Failure question OK, thanks. Jose -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Friday, June 04, 2004 11:42 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] REVDNS Failure question I guess I'm confused as to why it's coming from this IP 216.119.112.51 when I've specified the MX record for precisionx.net to point to 65.110.77.72 That I can't explain -- you would need to check with the documents for the inFusion email Server that sent the mail to see how to get it to use a different IP. The mailserver normally won't know the IP address that appears in its MX record, it works with the IP address(es) that the server is set up to handle. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.698 / Virus Database: 455 - Release Date: 6/2/2004 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.698 / Virus Database: 455 - Release Date: 6/2/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.698 / Virus Database: 455 - Release Date: 6/2/2004 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.698 / Virus Database: 455 - Release Date: 6/2/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT: SmarterMail any good?
Do any of you run SmarterMail? What are your opinions? As part of a hosting package SmarterMail is being given to us for free and I'd like to know what other people's experiences have been with it before we use it in a production environment. Thanks, Jose --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.656 / Virus Database: 421 - Release Date: 4/9/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] HOLD on domain
Is it possible to hold mail, with the lite version, based on the domain of the sender? TIA --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.610 / Virus Database: 390 - Release Date: 3/3/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HOLD on domain
The cost to upgrade is the difference in $$ between versions, right? ie: $246 to go from lite to std Thanks, Jose -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Wednesday, March 03, 2004 4:59 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] HOLD on domain Is it possible to hold mail, with the lite version, based on the domain of the sender? That would be a Sender Blacklist, which requires Declude JunkMail Standard or Pro. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.610 / Virus Database: 390 - Release Date: 3/3/2004 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.610 / Virus Database: 390 - Release Date: 3/3/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Removing characters- subject
Where can I find Junkmail's readme file? I need to block email with the usual bad words in the subject and body, but can't find documentation on how to do this. TIA -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Kami RazvanSent: Friday, November 07, 2003 11:24 AMTo: [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] Removing characters- subject ** the 2nd attempt.. the first one I sent earlier never got posted. --- I know exactly what you are talking about.. But.. this is not a solution for all .. all I am suggesting is instead of us adding all the characters .. this small fast test by Declude could solve that small portion of the bigger problem. At least we don't have to filter them now... our filter test has many variations of these with these characters in them. This is from our file at the moment: BODY 20 CONTAINS V | A G R ABODY 20 CONTAINS V i a g r aBODY 20 CONTAINS v iagraBODY 20 CONTAINS V*l*A*G*R*ABODY 20 CONTAINS V.IAGRABODY 20 CONTAINS viag-ra So simply the above test could run much faster than filter that we have. Regards, Kami==Bill Landry wrote: What about the use of replacement characters like V!@gr@, which I see a lot of? With your test, viagra becomes "Vgr". Bill
RE: [Declude.JunkMail] Removing characters- subject
Thanks. Are any of these links accessible through the site? I couldn't find them. Jose -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Friday, November 07, 2003 12:40 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Removing characters- subject Where can I find Junkmail's readme file? The release notes are at http://www.declude.com/relnotes.htm . The manual is at http://www.declude.com/junkmail/manual.htm . -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.536 / Virus Database: 331 - Release Date: 11/3/2003 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.536 / Virus Database: 331 - Release Date: 11/3/2003 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] BADHEADERS Question
Legitimate email is failing the BADHEADERS test. Do I need to modify something on my server so this test does not fail? Thanks --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] BADHEADERS Question
Interesting. Thanks for the info! Jose -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Monday, August 11, 2003 10:43 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] BADHEADERS Question Legitimate email is failing the BADHEADERS test. Do I need to modify something on my server so this test does not fail? You need to modify something on the mail client (the program sending the E-mail is broken). Most likely, upgrading the mail client will fix the problem. Why would I need to upgrade my mail client? Because most people don't like running broken software on their servers. Most likely, you're running a beta version of the software involved. It's a ColdFusion page that's sending the email, by the way. AH! That explains the problem. http://www.mail-archive.com/[EMAIL PROTECTED]/msg00661.html covers getting CF not to fail the SPAMHEADERS test. Most likely, another broken part of CF (a bogus HELO/EHLO) is causing IMail to add a broken header (since IMail generates the header on the assumption that the HELO/EHLO information is valid), causing it to fail the BADHEADERS test. But, that problem will actually go away with the information at the above URL (since CF will add the header that IMail was adding). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] BADHEADERS Question
Why would I need to upgrade my mail client? It's a ColdFusion page that's sending the email, by the way. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Monday, August 11, 2003 10:26 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] BADHEADERS Question Legitimate email is failing the BADHEADERS test. Do I need to modify something on my server so this test does not fail? You need to modify something on the mail client (the program sending the E-mail is broken). Most likely, upgrading the mail client will fix the problem. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] HOLD Question
I've been using a very effective (and quite aggressive) WEIGHT value of 12 and holding mail where the SPAMHEADERS test failed until now. I recently found out that certain pieces of my website, where email is supposed to go out and notify me, is being held due to JunkMail and the rules I've setup. So...since I'm really happy with the conservative approach I've taken with spam but I cannot get email that I should (just the one coming from my dynamic site), I was wondering how you all dealt with this. I'm sure some of you have run into a similar scenario. Any insight is much appreciated. TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Best Practices question
I've seen that most of the spam emails, regardless of the weight, seem to fail the SPAMHEADERS, BADHEADERS, and IPNOTINMX tests. Question: do you guys HOLD email based on any of these three tests? If so, how is this done? Is this a smart approach? Thanks -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dan Geiser Sent: Thursday, July 17, 2003 12:02 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Best Practices question Hi, Jose, Being a 2 months-old user of JunkMail I'm trying to find out best practices for dealing with spam. Sorry in advanced if this topic has been to death, but I couldn't find any helpful threads on the archives. Anyhow, I'm using the following rules but a TON of spam still making it through: WEIGHT10 WARN WEIGHT15 HOLD WEIGHT20 HOLD First of all, I believe using... WEIGHT15HOLD WEIGHT20HOLD ...in your $default$.junkmail is redundant. Using... WEIGHT15HOLD ...alone encompasses what... WEIGHT20HOLD does as well. Of course, the spam comes through because it doesn't meet the HOLD criteria. For example, I have spam emails with a weight of 7, others with 11, etc. My question is, what WEIGHT do you guys use to HOLD email? My configuration is still sub optimal. Our primary domain, NEXUSTECHGROUP.COM, has a hold weight of 9. But we use per-domain settings so some of our domains also have a hold weight of 5, 7 and 10. The thing is, there is no one one right weight. It all depends on the type of traffic that your IMail server is seeing. To any new Declude JunkMail user, the first thing I would recommend doing is establishing the optimal hold weight for either the server, if you aren't using per-domain settings, of for the domain, if you are. Now different people will have different definitions of optimal. For me, the optimal hold weight is the weight at which most spam is caught and hardly any false positives are generated. Another person might want to set their hold weight so high that zero false positives are caught. And yet another might want to set the weight so low such that zero spam makes it through. I like to have a mixture of both. Once you have established a hold weight you can then take further steps to add points to the weight of any spams making it in under the hold weight, thereby causing that spam to get caught. And you can take steps to subtract points to the weight of any legit e-mails that are over the hold weight, thereby keeping those legit e-mails from being caught. I think a good start for anyone is to establish that hold weight and then have just the one active line... WEIGHTXX HOLD ...in your $default$.junkmail file, where XX is your hold weight and WEIGHTXX is defined in GLOBAL.CFG as... WEIGHTXX weight x x XX 0 That's how I would start if I knew then when I began what I know now. Others may differ with me. TIA, Jose Take Care, Dan This E-mail is scanned and free from viruses. www.nexustechgroup.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Best Practices question
Great, thanks for the detailed explanation. I would like to HOLD all mail that fails the BADHEADERS test, then. How do I go about doing this? Thanks again -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Monday, July 21, 2003 12:40 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Best Practices question I've seen that most of the spam emails, regardless of the weight, seem to fail the SPAMHEADERS, BADHEADERS, and IPNOTINMX tests. Question: do you guys HOLD email based on any of these three tests? If so, how is this done? Is this a smart approach? The SPAMHEADERS test will catch quite a bit of legitimate E-mail (mostly solicited E-mail, such as orders and bulk E-mail from companies you have done business with, as opposed to individual person-to-person E-mail), mostly because of all the web mailers that were written by web developers rather than purchased or written by web programmers. The IPNOTINMX test shouldn't be used to block E-mail, as it is one of the few tests that it is OK for a legitimate mailserver to fail. This is often the case with larger domains, where there are separate mailservers for incoming vs. outgoing E-mail. The BADHEADERS test, though, now catches about 50% of all spam, and will never catch any legitimate E-mail (unless it is sent from a broken mail client that needs to be fixed, and where you might not have received the E-mail anyways). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Best Practices question
Thanks. One last question, since certain email addresses are more likely to receive more spam than others, is it possible to apply different tests/actions based on the TO address? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Monday, July 21, 2003 1:41 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Best Practices question I would like to HOLD all mail that fails the BADHEADERS test, then. How do I go about doing this? To do that, you can change the BADHEADERS WARN line in your \Imail\Declude\$default$.JunkMail file can to BADHEADERS HOLD. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Config Question
I have this in my default file: WEIGHT10HOLD WEIGHT10A ROUTETO [EMAIL PROTECTED] WEIGHT20HOLD And this in my GLOBAL file: WEIGHT10weight x x 10 0 WEIGHT10A weightx x 100 WEIGHT20weight x x 20 0 Howcome I don't get an email for the WEIGHT10A test? Am I missing something? TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Config Question
OK. So, what's the proper syntax to HOLD and ROUTE the email to me? ie: is this valid? WEIGHT10HOLD,ROUTETO [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Friday, July 18, 2003 2:07 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Config Question I have this in my default file: WEIGHT10HOLD WEIGHT10A ROUTETO [EMAIL PROTECTED] WEIGHT20HOLD And this in my GLOBAL file: WEIGHT10weight x x 10 0 WEIGHT10A weightx x 100 WEIGHT20weight x x 20 0 Howcome I don't get an email for the WEIGHT10A test? Am I missing something? The catch here is that you have told Declude JunkMail that if an E-mail fails the WEIGHT10 test, it should re-route the E-mail to [EMAIL PROTECTED], and the use the HOLD action. The HOLD action prevents the E-mail from being delivered. So while it changed the recipient to [EMAIL PROTECTED], the E-mail is being held. There isn't an action that copies the Q*.SMD and D*.SMD files to a specific directory, although we are considering adding such an action. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Config Question
Do you have any suggestions for me to accomplish this? I'm sure other users have done something similar before. Thanks again, Jose -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Friday, July 18, 2003 2:19 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Config Question OK. So, what's the proper syntax to HOLD and ROUTE the email to me? ie: is this valid? WEIGHT10HOLD,ROUTETO [EMAIL PROTECTED] You have everything set up properly. The problem is: The catch here is that you have told Declude JunkMail that if an E-mail fails the WEIGHT10 test, it should re-route the E-mail to [EMAIL PROTECTED], and the use the HOLD action. The HOLD action prevents the E-mail from being delivered. So while it changed the recipient to [EMAIL PROTECTED], the E-mail is being held. Declude JunkMail will combine actions where they can logically be combined (such as WARN and ROUTETO). But certain actions can't be combined. The HOLD action will (by design) prevent the E-mail from being delivered. But you want it delivered. That can't be done -- that's like telling Declude that you want to delete the E-mail and deliver it. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Config Question
Got it, thanks for your input. I guess I will use ROUTETO for a few days and switch back to HOLD at some point. Jose -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dan Geiser Sent: Friday, July 18, 2003 2:26 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Config Question Hi, Jose, OK. So, what's the proper syntax to HOLD and ROUTE the email to me? ie: is this valid? WEIGHT10HOLD,ROUTETO [EMAIL PROTECTED] If you just use the ROUTETO action the message will be sent to you. In addition it will not be delivered to the recipient which is the equivalent of HOLDing. Are you wanting to send the message to yourself and have a copy left in the HOLD directory or are you OK with just having the message sent to yourself? If the latter then ROUTEO will work. If the former then I don't know if it's doable. Dan This E-mail is scanned and free from viruses. www.nexustechgroup.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Best Practices question
All, Being a 2 months-old user of JunkMail I'm trying to find out best practices for dealing with spam. Sorry in advanced if this topic has been to death, but I couldn't find any helpful threads on the archives. Anyhow, I'm using the following rules but a TON of spam still making it through: WEIGHT10WARN WEIGHT15HOLD WEIGHT20HOLD Of course, the spam comes through because it doesn't meet the HOLD criteria. For example, I have spam emails with a weight of 7, others with 11, etc. My question is, what WEIGHT do you guys use to HOLD email? My configuration is still sub optimal. TIA, Jose --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Best Practices question
How can I determine the amount of caught/received emails with JunkMail? It would take me an eternity to go through each log file. Thanks -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Thursday, July 17, 2003 10:01 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Best Practices question Being a 2 months-old user of JunkMail I'm trying to find out best practices for dealing with spam. Sorry in advanced if this topic has been to death, but I couldn't find any helpful threads on the archives. Anyhow, I'm using the following rules but a TON of spam still making it through: WEIGHT10WARN WEIGHT15HOLD WEIGHT20HOLD Of course, the spam comes through because it doesn't meet the HOLD criteria. My first question would be Is there a ton of spam being caught? If you're blocking 1,000 spams to your personal account a day and 50 spams get through, that's not too bad. If you're only blocking 100 spams and 50 get through, that's a problem. If it's the later -- where a large percentage of spam is getting through -- there is probably a problem with some of the tests. Does the log file report a lot of warnings or errors? Does the first DNS server listed in the IMail SMTP settings work properly? Do you have a gateway or backup mailservers that run in front of the IMail server? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Imail v6 and Windows Update
Yea, and expose my server's security to fix some GUI issue? Sounds like Ipswitch should provide a maintenance release for v6.0 users to eradicate this problem. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Denny Jodeit Sent: Thursday, July 17, 2003 10:27 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] OT: Imail v6 and Windows Update If you remove Critical Update # Q328310, the problem goes away. This does work, I have experienced it. Ipswitch issued a patch for this problem for versions 7.x and above, but stated they will never issue one for Ver. 6. This is per Ipswitch KB article IM-20021218-DM01 HTH, Denny - Original Message - From: Jose Gosende [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, July 17, 2003 10:12 AM Subject: RE: [Declude.JunkMail] OT: Imail v6 and Windows Update wow, and I thought it was a terminal services issue. I've had this problem for quite some time and would love to hear a workaround. BTW, how do you know a Windows update caused this problem? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Maze - Hostmaster Sent: Thursday, July 17, 2003 10:05 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OT: Imail v6 and Windows Update Hello, Was wondering if anyone knew what the Microsoft update it was that caused the display of the IMail manager to be shifted and un-readable. Dang new people installed it and now I can't edit any of the entries, etc. Thanks.. Jeff --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Best Practices question
Karl -- I would be very interested in using your PERL script. Can you send it to me? Thanks, Jose -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of IS - Systems Eng. (Karl Drugge) Sent: Thursday, July 17, 2003 10:55 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Best Practices question Not to bash Scott, who is the freaking GOD of SMTP traffic.. but EEWWW.. yuck. FIND will work, but I'd have to wash my hands afterwards. My computer is supposed to do my work FOR me, on a daily basis, and mail me my checks at home ! ( I wish ! )... Just write up a quick PERL/WSH/Shell script to parse the info, then schedule it with AT to run whenever you want. I wrote mine up a few weeks ago. If people want I'll post it. It's in PERL, so you'll need active PERL installed, and you might need to tweak it for your local settings. It's not as clean as Scott or another professional programmer might make it, but it's quick, dirty, and gets the job done. Here's a sample of what mine does ( on a pretty slow day for SPAM ): Total number of messages 665 Total Passed, including whitelisted, 523,percentage : 78.6 Total HELD 21, percentage : 3.2 Total BOUNCED 121,percentage : 18.2 Total of Whitelisted 218 Total of SPAMCOP 25 Total of NOABUSE 66 Total of NOPOSTMASTER58 Total of BADHEADERS 38 Total of BASE64 1 Total of HELOBOGUS 99 Total of MAILFROM1 Total of PERCENT 0 Total of REVDNS2 34 Total of ROUTING 13 Total of SPAMHEADERS 40 Total of FILTERWORDS 248 Total of BLACKLIST 34 Total of REVDNSPROBLEM 77 Total of IPBlacklist 31 Karl Drugge, Systems Network Engineer -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2003 10:21 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Best Practices question How can I determine the amount of caught/received emails with JunkMail? It would take me an eternity to go through each log file. There are several ways that you can do this. For example, you can do a directory of the \IMail\spool\spam directory, where the held E-mails are. To find out how many are to you, you can use find with the /C switch. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] language limitation?
I'm not exactly sure how the JunkMail engine works, so I apologize in advance if this is a rookie question. Although JunkMail does a great job of catching English-based junk emails I still get very basic Spanish and Korean (I think) spam emails. So, does JunkMail catch non-English junk mail? Any other info would also be helpful. Jose --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
