RE: [Declude.JunkMail] Problems with AUTOWHITELIST
How about a per-domain config... You can turn off AUTOWHITELIST for that customer. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Sunday, November 09, 2008 11:31 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Problems with AUTOWHITELIST I am having an issue with AUTOWHITELIST. I have a customer who's users use the web mail client exclusively. Because of this, they put each other in their address books. As spammers will spoof email to one user with another user from the same domain's address, this becomes a problem. With AUTOWHITELIST ON, all of this type of spam gets whitelisted. I cannot turn the feature off because that is how I let my other customers manage their personal whitelist. I would request that Declude offer an alternative to AUTOWHITELIST. Give me a test whereby I can assign a weight to an email if the sender is in the address book. That way, I can assign an appropriate negative weight to allow some of the email to come through but still catch the real bad stuff. Once it's whitelisted, nothing else can be done. This also goes for WHITELIST AUTH. Give us a test whereby I can test for Authentication and do whatever I want based on that. Please help, Don --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Problems with AUTOWHITELIST
I am having an issue with AUTOWHITELIST. I have a customer who's users use the web mail client exclusively. Because of this, they put each other in their address books. As spammers will spoof email to one user with another user from the same domain's address, this becomes a problem. With AUTOWHITELIST ON, all of this type of spam gets whitelisted. I cannot turn the feature off because that is how I let my other customers manage their personal whitelist. I would request that Declude offer an alternative to AUTOWHITELIST. Give me a test whereby I can assign a weight to an email if the sender is in the address book. That way, I can assign an appropriate negative weight to allow some of the email to come through but still catch the real bad stuff. Once it's whitelisted, nothing else can be done. This also goes for WHITELIST AUTH. Give us a test whereby I can test for Authentication and do whatever I want based on that. Please help, Don --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Problems
Happy Sunday everyone. We've got some issues with Declude. Basically, nothing is getting filtered. I didn't check mail at all yesterday, and found over 1500 junk messages in my Inbox this morning. If I look at the headers, there is nothing about Declude in them. I rebooted the mail server and when I log in via RDP, I see an error that Decludeproc.exe had an error and needed to close. I hit ok, and it does that again about 5 times. Then it goes away. When I look at the services and see that decludeproc is running. I looked at the server logs this morning and they are completely littered with error messages from decludeproc, starting on Thursday afternoon when I started having a few issues. I have sent a few messages to Declude, realizing that I probably won't hear back until tomorrow. In the meantime, I'm getting some hate mail from our end users. Anyone have any suggestions? Reinstall? Todd --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problems
OK, please ignore. This strange message was the result of our issues that we had over the weekend. Thanks to Linda at Declude, we are pretty much back to normal (or as close as we can get)! Todd -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Richards Sent: Sunday, August 05, 2007 2:14 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Problems Happy Sunday everyone. We've got some issues with Declude. Basically, nothing is getting filtered. I didn't check mail at all yesterday, and found over 1500 junk messages in my Inbox this morning. If I look at the headers, there is nothing about Declude in them. I rebooted the mail server and when I log in via RDP, I see an error that Decludeproc.exe had an error and needed to close. I hit ok, and it does that again about 5 times. Then it goes away. When I look at the services and see that decludeproc is running. I looked at the server logs this morning and they are completely littered with error messages from decludeproc, starting on Thursday afternoon when I started having a few issues. I have sent a few messages to Declude, realizing that I probably won't hear back until tomorrow. In the meantime, I'm getting some hate mail from our end users. Anyone have any suggestions? Reinstall? Todd --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[2]: [Declude.JunkMail] Problems with SPAMC32 scoring??
OK, here are the ERRORLEVEL results: (I have turned on BAYES and PYZOR again) SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\Enjoy.eml 10.3/5.0 ERRORLEVEL: 1 SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\cbn.eml 31.2/5.0 ERRORLEVEL: 1 MY TEST: SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\test.eml 5.1/5.0 ERRORLEVEL: 1 SAMPLE-NONSPAM.TXT ERRORLEVEL: 0 SAMPLE-SPAM.TXT Scored 1001.1 ERRORLEVEL: 0 This looks good. Geoff __ Geoff Varney Network Support Specialist Educational Service District 112 Ridgefield School District 360-619-1405 [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Thursday, April 27, 2006 4:47 PM To: Geoff Varney Subject: Re[2]: [Declude.JunkMail] Problems with SPAMC32 scoring?? SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\Enjoy.eml 9.4/5.0 SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\cbn.eml 28.0/5.0 Let's look at the SPAMC32 side of these first. What's the ERRORLEVEL after SPAMC32 runs each of these? Next, we can look at whether/why SPAMD is acting erratically, but I want to get SPAMC32 out of the way. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release / Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/downloa d/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/re lease/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[4]: [Declude.JunkMail] Problems with SPAMC32 scoring??
This looks good. Well, sorta. But what I want to see is whether the errorlevel is raised to 10 when it should, and stays at 10 when it should. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[2]: [Declude.JunkMail] Problems with SPAMC32 scoring??
Geoff, I'd be interested in hearing back from you on whether Pyzor is working for you after you have a while to test. For the last year or so, I've figured it was a project for a few die-hards only. I've noted that the current SpamAssassin no longer has it enabled by default, and the Pyzor mailing list is full of people wailing about timeouts, low number of hits, and the paucity of servers. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Geoff Varney Sent: Friday, April 28, 2006 10:33 AM To: Declude.JunkMail@declude.com Subject: RE: Re[2]: [Declude.JunkMail] Problems with SPAMC32 scoring?? OK, here are the ERRORLEVEL results: (I have turned on BAYES and PYZOR again) SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\Enjoy.eml 10.3/5.0 ERRORLEVEL: 1 SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\cbn.eml 31.2/5.0 ERRORLEVEL: 1 MY TEST: SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\test.eml 5.1/5.0 ERRORLEVEL: 1 SAMPLE-NONSPAM.TXT ERRORLEVEL: 0 SAMPLE-SPAM.TXT Scored 1001.1 ERRORLEVEL: 0 This looks good. Geoff __ Geoff Varney Network Support Specialist Educational Service District 112 Ridgefield School District 360-619-1405 [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Thursday, April 27, 2006 4:47 PM To: Geoff Varney Subject: Re[2]: [Declude.JunkMail] Problems with SPAMC32 scoring?? SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\Enjoy.eml 9.4/5.0 SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\cbn.eml 28.0/5.0 Let's look at the SPAMC32 side of these first. What's the ERRORLEVEL after SPAMC32 runs each of these? Next, we can look at whether/why SPAMD is acting erratically, but I want to get SPAMC32 out of the way. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/do wnload/release / Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2a liases/downloa d/release/ http://www.imprimia.com/products/software/freeutils/ldap2alias es/download/re lease/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[4]: [Declude.JunkMail] Problems with SPAMC32 scoring??
Ah, I get it. Maybe I didn't do this right. I ran spamc32 from command line and then echoed %ERRORLEVEL%. But this doesn't involve Declude at all. Maybe I needed a switch that I use in Declude, -e. Trying that now! SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\Enjoy.eml 10.3/5.0 ERRORLEVEL: 10 SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\cbn.eml 32.8/5.0 ERRORLEVEL: 33 MY TEST: SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\test.eml 5.2/5.0 ERRORLEVEL: 5 SAMPLE-NONSPAM.TXT ERRORLEVEL: 1 SAMPLE-SPAM.TXT Scored 1001.1 ERRORLEVEL: 255 Now *that* looks better. Adding -et 10 gives ERRORLEVEL 10 on the one scoring 33... Geoff __ Geoff Varney Network Support Specialist Educational Service District 112 Ridgefield School District 360-619-1405 [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Friday, April 28, 2006 10:47 AM To: Geoff Varney Subject: Re[4]: [Declude.JunkMail] Problems with SPAMC32 scoring?? This looks good. Well, sorta. But what I want to see is whether the errorlevel is raised to 10 when it should, and stays at 10 when it should. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release / Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/downloa d/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/re lease/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[4]: [Declude.JunkMail] Problems with SPAMC32 scoring??
For the last year or so, I've figured it was a project for a few die-hards only. I've noted that the current SpamAssassin no longer has it enabled by default, and the Pyzor mailing list is full of people wailing about timeouts, low number of hits, and the paucity of servers. I agree and have heard the same. The main reason it exists, IIRC, is that some people were up-in-arms about Razor being closed-source *and* the commercial licensing being fuzzy. Now that Razor has been defined as definitely free for commercial use, half of that justification is gone, and with out-of-date signatures and unavailable servers, who needs Pyzor? --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[2]: [Declude.JunkMail] Problems with SPAMC32 scoring??
Actually, not sure! I sort of set it and forget it to tell you the truth. What with Sandy's comments, maybe I'll turn it off! Geoff -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Friday, April 28, 2006 11:00 AM To: Declude.JunkMail@declude.com Subject: RE: Re[2]: [Declude.JunkMail] Problems with SPAMC32 scoring?? Geoff, I'd be interested in hearing back from you on whether Pyzor is working for you after you have a while to test. For the last year or so, I've figured it was a project for a few die-hards only. I've noted that the current SpamAssassin no longer has it enabled by default, and the Pyzor mailing list is full of people wailing about timeouts, low number of hits, and the paucity of servers. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Geoff Varney Sent: Friday, April 28, 2006 10:33 AM To: Declude.JunkMail@declude.com Subject: RE: Re[2]: [Declude.JunkMail] Problems with SPAMC32 scoring?? OK, here are the ERRORLEVEL results: (I have turned on BAYES and PYZOR again) SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\Enjoy.eml 10.3/5.0 ERRORLEVEL: 1 SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\cbn.eml 31.2/5.0 ERRORLEVEL: 1 MY TEST: SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\test.eml 5.1/5.0 ERRORLEVEL: 1 SAMPLE-NONSPAM.TXT ERRORLEVEL: 0 SAMPLE-SPAM.TXT Scored 1001.1 ERRORLEVEL: 0 This looks good. Geoff __ Geoff Varney Network Support Specialist Educational Service District 112 Ridgefield School District 360-619-1405 [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Thursday, April 27, 2006 4:47 PM To: Geoff Varney Subject: Re[2]: [Declude.JunkMail] Problems with SPAMC32 scoring?? SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\Enjoy.eml 9.4/5.0 SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\cbn.eml 28.0/5.0 Let's look at the SPAMC32 side of these first. What's the ERRORLEVEL after SPAMC32 runs each of these? Next, we can look at whether/why SPAMD is acting erratically, but I want to get SPAMC32 out of the way. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/do wnload/release / Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2a liases/downloa d/release/ http://www.imprimia.com/products/software/freeutils/ldap2alias es/download/re lease/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[6]: [Declude.JunkMail] Problems with SPAMC32 scoring??
Nope, I think I'll have to get on the SA list and see what I can find out. To be honest I am not sure what it was doing before my JM changes, but I know I was seeing a LOT more 10 scores. Thanks for your help. Geoff __ Geoff Varney Network Support Specialist Educational Service District 112 Ridgefield School District 360-619-1405 [EMAIL PROTECTED] -Original Message- From: Sanford Whiteman [mailto:[EMAIL PROTECTED] Sent: Friday, April 28, 2006 11:21 AM To: Geoff Varney Subject: Re[6]: [Declude.JunkMail] Problems with SPAMC32 scoring?? Now *that* looks better. Adding -et 10 gives ERRORLEVEL 10 on the one scoring 33... Perfect! That's exactly what it should do. So SPAMC32 does not look to be involved with any issues you're having. Have you made any more sense of the strange scores? --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Problems with SPAMC32 scoring??
Hello, Several months ago I got SPAMC32 working with my spamd server and reporting scores to Declude properly (as far as I know). With Sandy's help I set it up to use the following method: SA1 external 1 c:\imail\declude\filters\spamc32\spamc32.exe -d spamd IP -u spamd -p 783 -cw %WEIGHT% -sw 10 -y -e -et 10 -f 20 0 SA2 external 2 c:\imail\declude\filters\spamc32\spamc32.exe -d spamd IP -u spamd -p 783 -cw %WEIGHT% -sw 10 -y -e -et 10 -f 30 0 ... SA10external 10 c:\imail\declude\filters\spamc32\spamc32.exe -d spamd IP -u spamd -p 783 -cw %WEIGHT% -sw 10 -y -e -et 10 -f 170 0 While I can't *guarantee* that it was working right with higher than 10 returns from spamd, here is what I see now. Last week I made a change in order to allow more granular fine-tuning of Declude scores: I increased every score by a factor of 10. After some miscues with not changing some combo filter values, etc. and adding several combos some stuff is getting through that definitely should not. What I think is happening is that (at the very least) spamd scores higher than 10 are not being scored. In looking at my dec logs and spamd maillog it *appears* that stuff that rounds to 10 (is this 9.51 to 10.50??) may be matching the test and adding 170 to the score, but stuff that scores higher than that is not scoring at all in Declude. I don't believe that my change to scoring would impact the above SPAMC32 lines, would it? My understanding is that SA10 is looking at rounded scores from spamd and if it sees a score of over 10 (I see a lot in maillog in the 20s, 30s, etc.) it should score 170. However I don't see nearly that many failing the SA10 test as I'd expect. Consequently users are receiving many more emails than they should, that would score enough with SA's help to get held. Maybe I'm just too tired today and am missing something. I also recently updated to declude 3.05 (was at 1.81!) I can provide more config details if needed. Thanks, Geoff --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Problems with SPAMC32 scoring??
While I can't *guarantee* that it was working right with higher than 10 returns from spamd, here is what I see now. '-et 10' means 'return an exit code of 10 if the SPAMD total weight was greater than 10.' I like to look at it in terms of what SPAMC32 returns, not anything it can't control, so I won't refer to the weight you assigned to the test in the Declude test definition. What happens if you run SPAMC32 from the command line against a message known to get a SPAMD weight 10 and check the exit code with 'echo %ERRORLEVEL%'? Can you add a regression test in SPAMD that specifically adds a weight of 11 and post the results? And I would eliminate the '-y' from the test def, or at least for this round of testing, because this is in there for backward compatibility with the *nix SpamC and, I would say, is not guaranteed to work in expected ways when paired with the newer-fangled '-e' switch. The '-y' is good switch to use for interactive debugging, but it will only create more overhead (more data sent back across the wire) when used under Declude, AFAICS. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problems with SPAMC32 scoring??
Thanks for the suggestion, Sanford. OK, I removed the -y for all the POSTIVE SA tests (SA1-SA10) and then created the following rule in local.cf: body MY_SPAMASSASSIN_RULE/this is a test of spamassassin/ describe MY_SPAMASSASSIN_RULETest of my spamassassin rule score MY_SPAMASSASSIN_RULE 11 Sending a message with this is a test of spamassassin in the body ends up with this in maillog: spamd: clean message (4.6/5.0) and spamd: result: . 4 - AWL,BAYES_00,HTML_90_100,HTML_MESSAGE,MY_SPAMASSASSIN_RULE scantime=6.3 I wrote the rule differently, adding is to the end, and a score of 11, I'm getting a failure on SA5 now. This is weird. The maillog for that one shows: spamd: clean message (4.9/5.0) for spamd:101 in 7.2 seconds, 2872 bytes. And spamd: result: . 4 - AWL,BAYES_00,HTML_90_100,HTML_MESSAGE,MY_SPAMASSASSIN_RULE scantime=7.2,size=2872 Is my custom rule being overridden somehow?? It shows up in the spamd logging, but doesn't apply the score?? I'm using SA 3.1.0. Next I turned of Bayes and Pyzor. Maillog: spamd: identified spam (6.2/5.0) for spamd:101 in 1.8 seconds, 2872 bytes and spamd: result: Y 6 - AWL,HTML_MESSAGE,MY_SPAMASSASSIN_RULE scantime=1.8,size=2872 Now it scores higher?? Tested from command line on SPAM that was not held: SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\Enjoy.eml 9.4/5.0 AWL,DCC_CHECK,HTML_FONT_BIG,HTML_IMAGE_RATIO_02,HTML_MESSAGE,INVALID_DATE,J_ CHICKENPOX_93,RCVD_IN_BL_SPAMCOP_NET,SUBJ_YOUR_DEBT,URIBL_OB_SURBL (bayes, etc. still OFF) Test on high scorer that didn't fail SA before: SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\cbn.eml 28.0/5.0 ADDR_NUMS_AT_BIGSITE,ADVANCE_FEE_1,ADVANCE_FEE_2,ADVANCE_FEE_3,ADVANCE_FEE_4 ,AWL,FAKE_HELO_MAIL_COM,FORGED_MUA_OUTLOOK,FORGED_YAHOO_RCVD,FROM_HAS_ULINE_ NUMS,INVALID_DATE,J_CHICKENPOX_48,J_CHICKENPOX_74,MILLION_USD,MISSING_HEADER S,MSGID_FROM_MTA_HEADER,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SBL,RCVD_IN_SORBS_WEB ,RCVD_NUMERIC_HELO,TO_CC_NONE Tested my rule test mail from command line: 6.3/5.0 AWL,HTML_MESSAGE,MY_SPAMASSASSIN_RULE Hmm... It appears this is at least partially on the SA side. Any ideas?? Thanks, Geoff -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Thursday, April 27, 2006 10:31 AM To: Geoff Varney Subject: Re: [Declude.JunkMail] Problems with SPAMC32 scoring?? While I can't *guarantee* that it was working right with higher than 10 returns from spamd, here is what I see now. '-et 10' means 'return an exit code of 10 if the SPAMD total weight was greater than 10.' I like to look at it in terms of what SPAMC32 returns, not anything it can't control, so I won't refer to the weight you assigned to the test in the Declude test definition. What happens if you run SPAMC32 from the command line against a message known to get a SPAMD weight 10 and check the exit code with 'echo %ERRORLEVEL%'? Can you add a regression test in SPAMD that specifically adds a weight of 11 and post the results? And I would eliminate the '-y' from the test def, or at least for this round of testing, because this is in there for backward compatibility with the *nix SpamC and, I would say, is not guaranteed to work in expected ways when paired with the newer-fangled '-e' switch. The '-y' is good switch to use for interactive debugging, but it will only create more overhead (more data sent back across the wire) when used under Declude, AFAICS. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release / Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/downloa d/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/re lease/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] Problems with SPAMC32 scoring??
SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\Enjoy.eml 9.4/5.0 SPAMC32: Loading C:\imail\Declude\filters\SPAMC32\cbn.eml 28.0/5.0 Let's look at the SPAMC32 side of these first. What's the ERRORLEVEL after SPAMC32 runs each of these? Next, we can look at whether/why SPAMD is acting erratically, but I want to get SPAMC32 out of the way. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Problems with Comcast and the CBL
Note: posted to IMail and Declude lists---Hi, all-For those who have been following the Comcast threads, I had Comcast blocking me also. I met up with a couple of very helpful and courteous people there. The tech support person who called me back was willing to learn about the problem, and when I explained about IMail's - what do you call it? - domain spoofing? - and that it was normal behavior, the fellow whitelisted me permanently without further effort on my part.This is the same problem that eventually lists most, if not all, all IMail servers on the CBL - IMail says it's mail.whatever_domain_is_trying_to_send.com, and they object to lots of FQDNs from the same IP.Because they treated me fair and square, and handled the problem expeditiously, I am providing the contact method only to those who experience the problem. I don't want to swamp a good contact with calls and have him become unavailable.I am thinking about is compiling a list of IMail IPs to send him. If there is any interest in this, I'd be happy to be the conduit. Don't post your IP's here, folks, bugt do let me know if you're interested. If there's enough interest, I will contact him directly and see whether Comcast is willing to get a large whitelist from me. If so, I will create a web page where you can submit your IPs, and I will set up a verification mechanism to assure that we don't allow spammers to post their IPs on that page also.Unfortunately, even if we do this for Comcast, the CBL folks are categorically not interested in whitelisting IMail servers preemptively. Therefore, you WILL lose traffic to those guys, as I did.-Dave DohertySkywaves, Inc.
RE: [Declude.JunkMail] Problems with Comcast and the CBL
This sounds like an awesome idea. If there is anything that I can do or if you need any programming done to support it, please dont hesitate to contact me. Thanks, Evans Martin EVANS MARTIN [EMAIL PROTECTED] HOSTING: http://www.martek.net PROGRAMMING: http://www.martekware.com iPlus Info Browser IPBs IMail Migration Tool, password browser, reporting suite make IPlus Info Browser something no IMail administrator should be without. http://www.martek.net/Default.aspx?tabid=96 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Friday, January 27, 2006 6:29 PM To: Undisclosed-Recipient:; Subject: [Declude.JunkMail] Problems with Comcast and the CBL Note: posted to IMail and Declude lists --- Hi, all- For those who have been following the Comcast threads, I had Comcast blocking me also. I met up with a couple of very helpful and courteous people there. The tech support person who called me back was willing to learn about the problem, and when I explained about IMail's - what do you call it? - domain spoofing? - and that it was normal behavior, the fellow whitelisted me permanently without further effort on my part. This is the same problem that eventually lists most, if not all, all IMail servers on the CBL - IMail says it's mail.whatever_domain_is_trying_to_send.com, and they object to lots of FQDNs from the same IP. Because they treated me fair and square, and handled the problem expeditiously, I am providing the contact method only to those who experience the problem. I don't want to swamp a good contact with calls and have him become unavailable. I am thinking about is compiling a list of IMail IPs to send him. If there is any interest in this, I'd be happy to be the conduit. Don't post your IP's here, folks, bugt do let me know if you're interested. If there's enough interest, I will contact him directly and see whether Comcast is willing to get a large whitelist from me. If so, I will create a web page where you can submit your IPs, and I will set up a verification mechanism to assure that we don't allow spammers to post their IPs on that page also. Unfortunately, even if we do this for Comcast, the CBL folks are categorically not interested in whitelisting IMail servers preemptively. Therefore, you WILL lose traffic to those guys, as I did. -Dave Doherty Skywaves, Inc.
[Declude.JunkMail] Problems with Network Solutions DNS Servers
Hi all, I have been having problems with Network Solutions DNS server all day. Specifically ns7 and ns8.worldnic.com. When you ask for an SOA record they come back with gonetworks.net Server: ns7.worldnic.com Address: 216.168.228.6 (root) nameserver = G.ROOT-SERVERS.NET (root) nameserver = H.ROOT-SERVERS.NET (root) nameserver = I.ROOT-SERVERS.NET (root) nameserver = J.ROOT-SERVERS.NET (root) nameserver = K.ROOT-SERVERS.NET (root) nameserver = L.ROOT-SERVERS.NET (root) nameserver = M.ROOT-SERVERS.NET (root) nameserver = A.ROOT-SERVERS.NET (root) nameserver = B.ROOT-SERVERS.NET (root) nameserver = C.ROOT-SERVERS.NET (root) nameserver = D.ROOT-SERVERS.NET (root) nameserver = E.ROOT-SERVERS.NET (root) nameserver = F.ROOT-SERVERS.NET They will sometimes answer an A record request for cmail1.gonetworks.net with the correct IP address and other times they will not. Has anyone else been experiencing these problems today? The story I get from first level phone support is that their servers are down for maintenance (all day???) and that engineering will get back to me in 1 to 3 days. Has anyone else been experiencing these problems today? Goran Jovanovic The LAN Shoppe --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers
Known problem as posted on the Imail list. I actually sent out a broadcast earlier informing them of possible problems. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, July 08, 2005 2:27 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Problems with Network Solutions DNS Servers Hi all, I have been having problems with Network Solutions DNS server all day. Specifically ns7 and ns8.worldnic.com. When you ask for an SOA record they come back with gonetworks.net Server: ns7.worldnic.com Address: 216.168.228.6 (root) nameserver = G.ROOT-SERVERS.NET (root) nameserver = H.ROOT-SERVERS.NET (root) nameserver = I.ROOT-SERVERS.NET (root) nameserver = J.ROOT-SERVERS.NET (root) nameserver = K.ROOT-SERVERS.NET (root) nameserver = L.ROOT-SERVERS.NET (root) nameserver = M.ROOT-SERVERS.NET (root) nameserver = A.ROOT-SERVERS.NET (root) nameserver = B.ROOT-SERVERS.NET (root) nameserver = C.ROOT-SERVERS.NET (root) nameserver = D.ROOT-SERVERS.NET (root) nameserver = E.ROOT-SERVERS.NET (root) nameserver = F.ROOT-SERVERS.NET They will sometimes answer an A record request for cmail1.gonetworks.net with the correct IP address and other times they will not. Has anyone else been experiencing these problems today? The story I get from first level phone support is that their servers are down for maintenance (all day???) and that engineering will get back to me in 1 to 3 days. Has anyone else been experiencing these problems today? Goran Jovanovic The LAN Shoppe --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Problems with Network Solutions DNS Servers
And me not monitoring the imail list. What were the problems (in summary)? -Original Message- From: John Tolmachoff \(Lists\) [EMAIL PROTECTED] Date: Fri, 8 Jul 2005 14:49:52 To:Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers Known problem as posted on the Imail list. I actually sent out a broadcast earlier informing them of possible problems. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, July 08, 2005 2:27 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Problems with Network Solutions DNS Servers Hi all, I have been having problems with Network Solutions DNS server all day. Specifically ns7 and ns8.worldnic.com. When you ask for an SOA record they come back with gonetworks.net Server: ns7.worldnic.com Address: 216.168.228.6 (root) nameserver = G.ROOT-SERVERS.NET (root) nameserver = H.ROOT-SERVERS.NET (root) nameserver = I.ROOT-SERVERS.NET (root) nameserver = J.ROOT-SERVERS.NET (root) nameserver = K.ROOT-SERVERS.NET (root) nameserver = L.ROOT-SERVERS.NET (root) nameserver = M.ROOT-SERVERS.NET (root) nameserver = A.ROOT-SERVERS.NET (root) nameserver = B.ROOT-SERVERS.NET (root) nameserver = C.ROOT-SERVERS.NET (root) nameserver = D.ROOT-SERVERS.NET (root) nameserver = E.ROOT-SERVERS.NET (root) nameserver = F.ROOT-SERVERS.NET They will sometimes answer an A record request for cmail1.gonetworks.net with the correct IP address and other times they will not. Has anyone else been experiencing these problems today? The story I get from first level phone support is that their servers are down for maintenance (all day???) and that engineering will get back to me in 1 to 3 days. Has anyone else been experiencing these problems today? Goran Jovanovic The LAN Shoppe --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Goran Jovanovic The LAN Shoppe O: (416) 440-1167 x-2113 C: (416) 931-0688 E: [EMAIL PROTECTED] Sent from my Wireless Blackberry --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers
Correction: I actually sent out a broadcast to my clients earlier... John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, July 08, 2005 2:50 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers Known problem as posted on the Imail list. I actually sent out a broadcast earlier informing them of possible problems. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, July 08, 2005 2:27 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Problems with Network Solutions DNS Servers Hi all, I have been having problems with Network Solutions DNS server all day. Specifically ns7 and ns8.worldnic.com. When you ask for an SOA record they come back with gonetworks.net Server: ns7.worldnic.com Address: 216.168.228.6 (root) nameserver = G.ROOT-SERVERS.NET (root) nameserver = H.ROOT-SERVERS.NET (root) nameserver = I.ROOT-SERVERS.NET (root) nameserver = J.ROOT-SERVERS.NET (root) nameserver = K.ROOT-SERVERS.NET (root) nameserver = L.ROOT-SERVERS.NET (root) nameserver = M.ROOT-SERVERS.NET (root) nameserver = A.ROOT-SERVERS.NET (root) nameserver = B.ROOT-SERVERS.NET (root) nameserver = C.ROOT-SERVERS.NET (root) nameserver = D.ROOT-SERVERS.NET (root) nameserver = E.ROOT-SERVERS.NET (root) nameserver = F.ROOT-SERVERS.NET They will sometimes answer an A record request for cmail1.gonetworks.net with the correct IP address and other times they will not. Has anyone else been experiencing these problems today? The story I get from first level phone support is that their servers are down for maintenance (all day???) and that engineering will get back to me in 1 to 3 days. Has anyone else been experiencing these problems today? Goran Jovanovic The LAN Shoppe --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers
Don't know and have not heard that it is resolved. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, July 08, 2005 3:12 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Problems with Network Solutions DNS Servers And me not monitoring the imail list. What were the problems (in summary)? -Original Message- From: John Tolmachoff \(Lists\) [EMAIL PROTECTED] Date: Fri, 8 Jul 2005 14:49:52 To:Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers Known problem as posted on the Imail list. I actually sent out a broadcast earlier informing them of possible problems. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, July 08, 2005 2:27 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Problems with Network Solutions DNS Servers Hi all, I have been having problems with Network Solutions DNS server all day. Specifically ns7 and ns8.worldnic.com. When you ask for an SOA record they come back with gonetworks.net Server: ns7.worldnic.com Address: 216.168.228.6 (root) nameserver = G.ROOT-SERVERS.NET (root) nameserver = H.ROOT-SERVERS.NET (root) nameserver = I.ROOT-SERVERS.NET (root) nameserver = J.ROOT-SERVERS.NET (root) nameserver = K.ROOT-SERVERS.NET (root) nameserver = L.ROOT-SERVERS.NET (root) nameserver = M.ROOT-SERVERS.NET (root) nameserver = A.ROOT-SERVERS.NET (root) nameserver = B.ROOT-SERVERS.NET (root) nameserver = C.ROOT-SERVERS.NET (root) nameserver = D.ROOT-SERVERS.NET (root) nameserver = E.ROOT-SERVERS.NET (root) nameserver = F.ROOT-SERVERS.NET They will sometimes answer an A record request for cmail1.gonetworks.net with the correct IP address and other times they will not. Has anyone else been experiencing these problems today? The story I get from first level phone support is that their servers are down for maintenance (all day???) and that engineering will get back to me in 1 to 3 days. Has anyone else been experiencing these problems today? Goran Jovanovic The LAN Shoppe --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Goran Jovanovic The LAN Shoppe O: (416) 440-1167 x-2113 C: (416) 931-0688 E: [EMAIL PROTECTED] Sent from my Wireless Blackberry --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers
Wow, Scott has something new to share: http://forums.dnsstuff.com/tool/post/dnsstuff/vpost?id=522969 John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, July 08, 2005 3:12 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Problems with Network Solutions DNS Servers And me not monitoring the imail list. What were the problems (in summary)? -Original Message- From: John Tolmachoff \(Lists\) [EMAIL PROTECTED] Date: Fri, 8 Jul 2005 14:49:52 To:Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers Known problem as posted on the Imail list. I actually sent out a broadcast earlier informing them of possible problems. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, July 08, 2005 2:27 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Problems with Network Solutions DNS Servers Hi all, I have been having problems with Network Solutions DNS server all day. Specifically ns7 and ns8.worldnic.com. When you ask for an SOA record they come back with gonetworks.net Server: ns7.worldnic.com Address: 216.168.228.6 (root) nameserver = G.ROOT-SERVERS.NET (root) nameserver = H.ROOT-SERVERS.NET (root) nameserver = I.ROOT-SERVERS.NET (root) nameserver = J.ROOT-SERVERS.NET (root) nameserver = K.ROOT-SERVERS.NET (root) nameserver = L.ROOT-SERVERS.NET (root) nameserver = M.ROOT-SERVERS.NET (root) nameserver = A.ROOT-SERVERS.NET (root) nameserver = B.ROOT-SERVERS.NET (root) nameserver = C.ROOT-SERVERS.NET (root) nameserver = D.ROOT-SERVERS.NET (root) nameserver = E.ROOT-SERVERS.NET (root) nameserver = F.ROOT-SERVERS.NET They will sometimes answer an A record request for cmail1.gonetworks.net with the correct IP address and other times they will not. Has anyone else been experiencing these problems today? The story I get from first level phone support is that their servers are down for maintenance (all day???) and that engineering will get back to me in 1 to 3 days. Has anyone else been experiencing these problems today? Goran Jovanovic The LAN Shoppe --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Goran Jovanovic The LAN Shoppe O: (416) 440-1167 x-2113 C: (416) 931-0688 E: [EMAIL PROTECTED] Sent from my Wireless Blackberry --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Problems with versions 2.0.6.16
1. Declude EVA (already posted to the Virus List): I have updated Declude to version 2.0.6.16 yesterday. Since installing the update i got no more notification mails to my postmaster account when an Outlook vulnerability was detected. I can see the detected mail in my hold folder, but no mail to postmaster is sent. I still get notifications for detected viruses. I only have an postmaster.eml in my declude directory and i have the pro version licensed. In version 2.0.6.10 the notifications for vulnerabilities have worked. 2. Declude JunkMail: Mail sent to an alias triggers a test called JUNK-RDNS (Action=ROUTETO)and one of our WEIGHT tests (Action=COPYTO). Since installing 2.0.6.16 both actions are applied to the mail. IMAIL log: SMTPD (c01801240c33) [61.218.17.34] HELO queenpuo.com.tw SMTPD (c01801240c33) [61.218.17.34] MAIL FROM:[EMAIL PROTECTED] SMTPD (c01801240c33) [61.218.17.34] RCPT TO:[EMAIL PROTECTED] SMTPD (c01801240c33) [61.218.17.34] f:\SPOOL\Dc01801240c33.SMD 31238 SMTPD (c01801240c33) performing antispam checks SMTP (c01801240c33) processing f:\SPOOL\Qc01801240c33.SMD SMTP (c01801240c33) ldeliver cadfem.org spamtest-rdns (1) [EMAIL PROTECTED] 31686 SMTP (c01801240c33) ldeliver cadfem.org spamtest-weight10 (1) [EMAIL PROTECTED] 31686 SMTP (c01801240c33) finished f:\SPOOL\Qc01801240c33.SMD status=1 Heinrich --- This E-mail was scanned for viruses by CAD-FEM GmbH * Join the FEM Parliament! 23. CADFEM Users´ Meeting International Congress on FEM Technology with ANSYS CFX ICEM CFD Conference November 9 - 11, 2005 Bundeshaus Bonn, Germany www.usersmeeting.com * * This message and any attachment are confidential. If you are not the intended recipient, please telephone or email the sender and delete this message and any attachment from your system. If you are not the intended recipient you must not copy this message or attachment or disclose the contents to any other person. For further information about CADFEM please see our website: http://www.cadfem.de. * --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Problems with msn and hotmail
Anyone seeing odd problems with hotmail and msn.com accounts being rejected. I have a number of valid email's that are being rejected. 1:24 13:00 SMTPD(61d200c101cc4412) [66.162.138.13] connect 65.54.168.114 port 60403 01:24 13:00 SMTPD(61d200c101cc4412) [65.54.168.114] EHLO hotmail.com 01:24 13:00 SMTPD(61d200c101cc4412) [65.54.168.114] unacceptable mail address in MAIL FROM:[EMAIL PROTECTED] I am seeing fairly large amounts of these sometimes they mention something about RFC's. Sometimes not. Almost looks like they are in the kill.lst but they aren't. Ideas? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Problems with msn and hotmail
This appears to be an issue with your IMail settings. It is unsafe to use Mail From rejection for domains that fail a lookup unless you expect everyone else's DNS to be operational and accessible 100% of the time and perfectly configured. My suggestion would be to turn this off in the IMail anti-spam settings. If you are using Declude (appears that way), generally it seems like a good idea to turn off all of IMail's anti-spam because it has been the source of multiple resource and stability issues, and can cause unpredictable behavior. I would also suggest turning off the DNS caching and failed domain skipping found under the Queue Manager settings. This stuff tends to exacerbate transient problems. Matt Ncl Admin wrote: Anyone seeing odd problems with hotmail and msn.com accounts being rejected. I have a number of valid email's that are being rejected. 1:24 13:00 SMTPD(61d200c101cc4412) [66.162.138.13] connect 65.54.168.114 port 60403 01:24 13:00 SMTPD(61d200c101cc4412) [65.54.168.114] EHLO hotmail.com 01:24 13:00 SMTPD(61d200c101cc4412) [65.54.168.114] unacceptable mail address in MAIL FROM:[EMAIL PROTECTED] I am seeing fairly large amounts of these sometimes they mention something about RFC's. Sometimes not. Almost looks like they are in the kill.lst but they aren't. Ideas? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] problems with TESTSFAILED END NOTCONTAINS
Hi, i use a combo-filter DOMAINFAELSCHER, there are only 3 lines in this filter: TESTSFAILED END CONTAINS SERVEROK TESTSFAILED END NOTCONTAINS DIREKTANUNS TESTSFAILED 5 CONTAINS SPAMDOMAINS (the tests SERVEROK, DIREKTANUNS and SPAMDOMAINS are called in this order in the global.cfg) my intention is, that DOMAINFAELSCHER should only add a weight when there is no hit in SERVEROK and at least one hit in DIREKTANUNS and the mail failed SPAMDOMAINS all this 4 tests are set to warn the problem is, that sometimes i get loglines like: Qb06600e100164a8a Tests failed [weight=-13]: NOABUSE=WARN NOPOSTMASTER=WARN IPNOTINMX=IGNORE NOLEGITCONTENT=IGNORE ROUTING=WARN LAENDERPRUEFUNG=WARN SPAMDOMAINS=WARN DOMAINFAELSCHER=WARN KEINSPAMHART=WARN Why is there a DOMAINFAELSCHER=WARN without a DIREKTANUNS=WARN ? I thought TESTSFAILED END NOTCONTAINS DIREKTANUNS would stop the filter, when DIREKTANUNS is not hit? gruesse markus guhl *** lds nrw dez. 235 tel.: 0211 9449 2578 fax.: 0211 9449 8344 mailto:[EMAIL PROTECTED] *** --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] problems with TESTSFAILED END NOTCONTAINS
i use a combo-filter DOMAINFAELSCHER, there are only 3 lines in this filter: TESTSFAILED END CONTAINS SERVEROK TESTSFAILED END NOTCONTAINS DIREKTANUNS TESTSFAILED 5 CONTAINS SPAMDOMAINS Are you running the latest interim release (which is required for NOTCONTAINS to work)? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
AW: [Declude.JunkMail] problems with TESTSFAILED END NOTCONTAINS
hi scott, i downloaded the interim version this morning. but i will go to the server and check the version. mfg i.a. gez. markus guhl *** lds nrw dez. 235 tel.: 0211 9449 2578 fax.: 0211 9449 8344 mailto:[EMAIL PROTECTED] *** -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Auftrag von R. Scott Perry Gesendet am: Montag, 21. Juni 2004 16:06 An: [EMAIL PROTECTED] Betreff: Re: [Declude.JunkMail] problems with TESTSFAILED END NOTCONTAINS i use a combo-filter DOMAINFAELSCHER, there are only 3 lines in this filter: TESTSFAILED END CONTAINS SERVEROK TESTSFAILED END NOTCONTAINS DIREKTANUNS TESTSFAILED 5 CONTAINS SPAMDOMAINS Are you running the latest interim release (which is required for NOTCONTAINS to work)? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
AW: [Declude.JunkMail] problems with TESTSFAILED END NOTCONTAINS
hi scott, looks like there was a misunderstanding with my systemadmin. he puts the declude.exe of the interimversion (1.79i8) to the wrong directory (..\imail\declude). i moved it to ..\imail i will write again if the problem shows up again. mfg i.a. gez. markus guhl *** lds nrw dez. 235 tel.: 0211 9449 2578 fax.: 0211 9449 8344 mailto:[EMAIL PROTECTED] *** -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Auftrag von Guhl, Markus (LDS) Gesendet am: Montag, 21. Juni 2004 16:19 An: [EMAIL PROTECTED] Betreff: AW: [Declude.JunkMail] problems with TESTSFAILED END NOTCONTAINS hi scott, i downloaded the interim version this morning. but i will go to the server and check the version. mfg i.a. gez. markus guhl *** lds nrw dez. 235 tel.: 0211 9449 2578 fax.: 0211 9449 8344 mailto:[EMAIL PROTECTED] *** -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Auftrag von R. Scott Perry Gesendet am: Montag, 21. Juni 2004 16:06 An: [EMAIL PROTECTED] Betreff: Re: [Declude.JunkMail] problems with TESTSFAILED END NOTCONTAINS i use a combo-filter DOMAINFAELSCHER, there are only 3 lines in this filter: TESTSFAILED END CONTAINS SERVEROK TESTSFAILED END NOTCONTAINS DIREKTANUNS TESTSFAILED 5 CONTAINS SPAMDOMAINS Are you running the latest interim release (which is required for NOTCONTAINS to work)? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problems with Errors in Logs
It appears that you may have forgotten to mention the TEXT of the error message that appears in the logs. Knowing what error is reported may be the key in pin-pointing the cause. Best Regards Andy --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problems with Errors in Logs
The messages are as follows: Error; failure opening (message ID) in the declude junkmail file Error opening mime file (message ID) in the declude antivirus file Sorry for the generic message, but the log files are gone. === Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax: 434 - 572 - 1981 [EMAIL PROTECTED] -Original Message- From: Andy Schmidt [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 02, 2003 12:13 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Problems with Errors in Logs It appears that you may have forgotten to mention the TEXT of the error message that appears in the logs. Knowing what error is reported may be the key in pin-pointing the cause. Best Regards Andy --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problems with Errors in Logs
The messages are as follows: Error; failure opening (message ID) in the declude junkmail file Error opening mime file (message ID) in the declude antivirus file Sorry for the generic message, but the log files are gone. The best way to determine what is happening here is to use the debug mode. To use the debug mode, you can change the LOGLEVEL LOW line in \IMail\Declude\global.cfg to LOGLEVEL DEBUG. Then, after about a minute, you can then switch back to LOGLEVEL LOW (the debug mode adds huge amounts of information to the log file). You can then send me the \IMail\spool\dec.log file (as an attachment, NOT sent from web messaging), and I can take a look at it to see what is happening. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problems with Errors in Logs
Scott, The problem seems to have corrected itself. However if the problem occurs again, this will be the first thing that I do and I will email them to you. Thanks for the help Scott. Daniel === Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax: 434 - 572 - 1981 [EMAIL PROTECTED] -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 02, 2003 12:56 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Problems with Errors in Logs The messages are as follows: Error; failure opening (message ID) in the declude junkmail file Error opening mime file (message ID) in the declude antivirus file Sorry for the generic message, but the log files are gone. The best way to determine what is happening here is to use the debug mode. To use the debug mode, you can change the LOGLEVEL LOW line in \IMail\Declude\global.cfg to LOGLEVEL DEBUG. Then, after about a minute, you can then switch back to LOGLEVEL LOW (the debug mode adds huge amounts of information to the log file). You can then send me the \IMail\spool\dec.log file (as an attachment, NOT sent from web messaging), and I can take a look at it to see what is happening. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Problems with Errors in Logs
Greetings, I have been having a little problem since about 2:00 pm yesterday afternoon. I noticed that the spool directory was a little large. I then cleaned out the spool. However it started building back up immediately and I noticed that now, I am constantly getting errors in both my declude junkmail and declude antivirus logs. As soon as I delete the logs, they appear again with more errors. Has anyone had this problem before of have some advice as to what the problem may be? I have changed my declude junkmail files to match the default on the website and still no luck. Need some help ASAP! Thanks, Daniel === Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax: 434 - 572 - 1981 [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Problems using REDIRECT in $default$.JunkMail
R. Scott Perry wrote: Again, REDIRECT works fine in username.JunkMail files, but not in $default$.JunkMail. Might it be a bug in 1.70 beta? It looks like you are correct that there is a bug in the 1.70 beta. There is an interim release 1.70i20 at http://www.declude.com/release/170i/declude.exe that should take care of this problem. Please let me know how it goes. Thanks. I now use REDIRECT in \Declude\$default$.JunkMail with 1.70i20: Qb09402d002a87312 Using [incoming] CFG file D:\IMail\Declude\$default$.junkmail. Qb09402d002a87312 Redirecting [EMAIL PROTECTED] to file D:\IMail\Declude\standard_spamfilter.JunkMail. Yes, that did the trick :-) Thanks! Andreas (Happy Declude user) -- A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting. Q: What is the most annoying thing on usenet and in e-mail? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Problems using REDIRECT in $default$.JunkMail
Hello! I use JunkMail Pro 1.70 beta on several domains, with one directory for each spam filtered domain under \IMail\Declude\: oslonett.no nutripharma.com cartoon-links.com etc. These directories have a $default$.JunkMail file, with the first line saying REDIRECT @domain.tld D:\IMail\Declude\standard_spamfilter.JunkMail so that I can centralize all configuration in one file. Everything else in the $default$.JunkMail files are only comments. The problem is: REDIRECT doesn't seem to work in the $default$.JunkMail files. However, it works fine in username.domain.tld.JunkMail files. I use LOGLEVEL HIGH in Global.cfg right now to see what actually happens: This snippet from spam0714.log is for a user which has a username.domain.tld.JunkMail file with REDIRECT [EMAIL PROTECTED] D:\IMail\Declude\standard_spamfilter.JunkMail as the first line. I've deleted date and time stamps. Q95c1488a0148a740 Using [incoming] CFG file D:\IMail\Declude\oslonett.no\morten.junkmail. Q95c1488a0148a740 Redirecting [EMAIL PROTECTED] to file D:\IMail\Declude\standard_spamfilter.JunkMail. Msg failed IPNOTINMX (). Action=WARN. Q95c1488a0148a740 L1 Message OK Q95c1488a0148a740 Last action = IGNORE. Here's a snippet from the spam log for a domain with only a $default$.JunkMail file, with the first line saying REDIRECT @nutripharma.com D:\IMail\Declude\standard_spamfilter.JunkMail Q971701fd02a8dfbd REVDNS:4 . Total weight = 4 Q971701fd02a8dfbd Using [incoming] CFG file D:\IMail\Declude\nutripharma.com\$default$.junkmail. Q971701fd02a8dfbd Msg failed REVDNS (This E-mail was sent from a MUA/MTA 193.216.23.92 with no reverse DNS entry.). Action=IGNORE. Q971701fd02a8dfbd L1 Message OK Q971701fd02a8dfbd Last action = IGNORE. Apparently, JM doesn't read the REDIRECT command from a $default$ file, and no actions are taken :-( Does anyone have a solution? Thanks! Andreas -- A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting. Q: What is the most annoying thing on usenet and in e-mail? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Problems using REDIRECT in$default$.JunkMail
The problem is: REDIRECT doesn't seem to work in the $default$.JunkMail files. However, it works fine in username.domain.tld.JunkMail files. You may already know this, but just in case: The REDIRECT command will only work in the configuration file that Declude JunkMail uses for a recipient. So if there are both per-user and per-domain settings for a user (in which case Declude JunkMail uses the per-user settings), the per-user file is the one that Declude JunkMail will use the REDIRECT command from. Here's a snippet from the spam log for a domain with only a $default$.JunkMail file, with the first line saying REDIRECT @nutripharma.com D:\IMail\Declude\standard_spamfilter.JunkMail Q971701fd02a8dfbd REVDNS:4 . Total weight = 4 Q971701fd02a8dfbd Using [incoming] CFG file D:\IMail\Declude\nutripharma.com\$default$.junkmail. Q971701fd02a8dfbd Msg failed REVDNS (This E-mail was sent from a MUA/MTA 193.216.23.92 with no reverse DNS entry.). Action=IGNORE. Q971701fd02a8dfbd L1 Message OK Q971701fd02a8dfbd Last action = IGNORE. Apparently, JM doesn't read the REDIRECT command from a $default$ file, and no actions are taken :-( Are you sure that the REDIRECT @nutripharma.com D:\IMail\Declude\standard_spamfilter.JunkMail line appears in the D:\IMail\Declude\nutripharma.com\$default$.junkmail file? Are you sure that you are running v1.70 (you can type \IMail\Declude -diag from a command prompt to display the version)? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Problems using REDIRECT in $default$.JunkMail
R. Scott Perry wrote: The problem is: REDIRECT doesn't seem to work in the $default$.JunkMail files. However, it works fine in username.domain.tld.JunkMail files. You may already know this, but just in case: The REDIRECT command will only work in the configuration file that Declude JunkMail uses for a recipient. So if there are both per-user and per-domain settings for a user (in which case Declude JunkMail uses the per-user settings), the per-user file is the one that Declude JunkMail will use the REDIRECT command from. I know, and with the example for nutripharma.com, there's only the $default$.JunkMail file, no per-user files. We have a \IMail\Declude\$default$.JunkMail file that basically ignores all spam tests. Then, for customers who want spam filtering, we have IMail\Declude\domain1.tld, \IMail\Declude\domain2.tld etc. Are you sure that the REDIRECT @nutripharma.com D:\IMail\Declude\standard_spamfilter.JunkMail line appears in the D:\IMail\Declude\nutripharma.com\$default$.junkmail file? Are you sure that you are running v1.70 (you can type \IMail\Declude -diag from a command prompt to display the version)? Yes: C:\more d:\imail\declude\nutripharma.com\$default$.JunkMail REDIRECT @nutripharma.com D:\IMail\Declude\standard_spamfilter.JunkMail # This file determines the action to take when an incoming E-mail fail # ... comments ... C:\d:\imail\Declude.exe -diag Declude (C) Copyright 2000-2003 Computerized Horizons. All Rights Reserved. Diagnostics ON (Declude v1.70). Declude JunkMail: Config file found (d:\imail\Declude\global.CFG). Declude Virus: Config file found (d:\imail\Declude\Virus.CFG). Declude Hijack:Not installed (no d:\imail\Declude\Hijack.CFG file). Declude Confirm: Not installed (no d:\imail\Declude\Confirm.CFG file). 37 spam tests defined: FILTER_HEADER FILTER_BODY DSBL MONKEYFORMMAIL MONKEYPROXIES ORDB OSDIPS OSFORM OSLIST OSPROXY OSRELAY OSSMART OSSOFT SPAMCOP WIREHUB-DNSBL EASYNET-DNSBL EASYNET-PROXIES BLITZEDALL SBL DSN NOABUSE NOPOSTMASTER BONDEDSENDER BADHEADERS BASE64 HELOBOGUS MAILFROM IPNOTINMX PERCENT REVDNS ROUTING SPAMHEADERS WEIGHT10 WEIGHT20 WEIGHT30 WEIGHT2030 CATCHALLMAILS IMail reports Official Host Name as: imail.oslonett.no. IMail's SendName registry seems OK: D:\IMail\Declude.exe. Declude JunkMail Status: PRO version registered. Declude Virus Status:Pro Version Registered. Declude Hijack Status: NOT REGISTERED: No activation code. End of diagnostics. Andreas -- A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting. Q: What is the most annoying thing on usenet and in e-mail? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Problems using REDIRECT in$default$.JunkMail
We have a \IMail\Declude\$default$.JunkMail file that basically ignores all spam tests. Then, for customers who want spam filtering, we have IMail\Declude\domain1.tld, \IMail\Declude\domain2.tld etc. What I would recommend that you try in this case is to have the REDIRECT lines in the \IMail\Declude\$default$.JunkMail file -- they should work fine in there, too. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Problems using REDIRECT in$default$.JunkMail
Again, REDIRECT works fine in username.JunkMail files, but not in $default$.JunkMail. Might it be a bug in 1.70 beta? It looks like you are correct that there is a bug in the 1.70 beta. There is an interim release 1.70i20 at http://www.declude.com/release/170i/declude.exe that should take care of this problem. Please let me know how it goes. Thanks. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Problems with weightrange
OK, just checking to see if anyone else had this. My logs look like this. 07/10/2002 23:59:59 Q10cc20e 001137 OSRELAY:5 SPAMCOP:10 BADHEADERS:5 nWEIGHT5:9 nWEIGHT10:14 nWEIGHT15:19 nWEIGHT20:29 nTAG5:9 nTAG10:14 nTAG15:19 . Total weight = 133 07/10/2002 23:59:59 Q10cc20e 001137 Msg failed OSRELAY (This entry was last confirmed open on 7/10/2002). 07/10/2002 23:59:59 Q10cc20e 001137 Msg failed SPAMCOP (Blocked - see http://spamcop.net/bl.shtml?200.41.179.100). 07/10/2002 23:59:59 Q10cc20e 001137 Msg failed BADHEADERS (This E-mail was sent from a broken mail client [840b].). 07/10/2002 23:59:59 Q10cc20e 001137 Msg failed WEIGHT30 (Weight of 133 reaches or exceeds the limit of 30.). 07/10/2002 23:59:59 Q10cc20e 001137 Msg failed TAG20 (Weight of 133 reaches or exceeds the limit of 20.). 07/10/2002 23:59:59 Q10cc20e 001137 Subject: legal Services 7/10/2002 11:48:04 PM 07/10/2002 23:59:59 Q10cc20e 001137 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] My weights were set up like: WEIGHT20weightrange x x 20 29 And I was running 1.56, i reverted settings and version back to 1.55 this morning after several customers complained about not recieving any email from outside. It was adding a weight of 113 to all of my messages, and anyting over 30 was set to delete. I also have not recieved any posts to this list since yesterday afternoon when I made the changes, for obvious reasons. Chuck Frolick ArgoNet, Inc. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Problems with weightrange - CAUTION
Yes, I am only able to reply now. I spent all day to extract email addresses (from/to/subject) from the Declude.log and then write a mail-merge to send customized notifications to each sender and recipient - 5,800 in all. Once I turned on the WeightRange - it deleted 99% of the incoming messages - and I never noticed it for QUITE a while because a FEW made it through. 07/11/2002 00:02:05 Q03370ca200f0ae47 nWEIGHT10:19 nWEIGHT8:9 . Total weight = 28 07/11/2002 00:02:05 Q03370ca200f0ae47 Msg failed WEIGHTKILL (Weight of 28 reaches or exceeds the limit of 20.). 07/11/2002 00:02:05 Q03370ca200f0ae47 Msg failed WEIGHTREPORT (Weight of 28 reaches or exceeds the limit of 11.). 07/11/2002 00:02:05 Q03370ca200f0ae47 Subject: RE: Just checking 07/11/2002 00:02:05 Q03370ca200f0ae47 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Best Regards Andy --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Problems with weightrange - CAUTION
Once I turned on the WeightRange - it deleted 99% of the incoming messages - and I never noticed it for QUITE a while because a FEW made it through. 07/11/2002 00:02:05 Q03370ca200f0ae47 nWEIGHT10:19 nWEIGHT8:9 . Total weight = 28 07/11/2002 00:02:05 Q03370ca200f0ae47 Msg failed WEIGHTKILL (Weight of 28 reaches or exceeds the limit of 20.). 07/11/2002 00:02:05 Q03370ca200f0ae47 Msg failed WEIGHTREPORT (Weight of 28 reaches or exceeds the limit of 11.). 07/11/2002 00:02:05 Q03370ca200f0ae47 Subject: RE: Just checking 07/11/2002 00:02:05 Q03370ca200f0ae47 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] This issue has been corrected for 1.56i -- this can be downloaded from http://www.declude.com/release/156i/declude.exe . -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Problems with weightrange - CAUTION
Scott, FYI version 156i looks like it breaks the old Declude Console which I find handy to check and see what's happening in real time. Frederick P. Squib, Jr. Network Administrator Citizens Internet Services http://www.wpa.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Thursday, July 11, 2002 2:15 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Problems with weightrange - CAUTION Once I turned on the WeightRange - it deleted 99% of the incoming messages - and I never noticed it for QUITE a while because a FEW made it through. 07/11/2002 00:02:05 Q03370ca200f0ae47 nWEIGHT10:19 nWEIGHT8:9 . Total weight = 28 07/11/2002 00:02:05 Q03370ca200f0ae47 Msg failed WEIGHTKILL (Weight of 28 reaches or exceeds the limit of 20.). 07/11/2002 00:02:05 Q03370ca200f0ae47 Msg failed WEIGHTREPORT (Weight of 28 reaches or exceeds the limit of 11.). 07/11/2002 00:02:05 Q03370ca200f0ae47 Subject: RE: Just checking 07/11/2002 00:02:05 Q03370ca200f0ae47 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] This issue has been corrected for 1.56i -- this can be downloaded from http://www.declude.com/release/156i/declude.exe . -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Problems with SpamReview Software
I am not sure that is related to the issue I was having? Your issue might be as simple as setting the file size in the Settings to read first 5000 bytes when previewing. Otherwise very large e-mails take a while to process before displaying for preview. This is included in the latest release of SPAM review which can be downloaded from his site. I got my issue worked out that was related to a bug with the fromfile test in declude. Scott is already working on a fix. -Don -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Madscientist Sent: Friday, February 08, 2002 8:02 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Problems with SpamReview Software I've had some similar problems so I quit using it. The problem seems to be related to the amount of content in the folder. I have a lot of captured spam. _M | -Original Message- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]]On Behalf Of Don Schreiner | Sent: Thursday, February 07, 2002 8:51 PM | To: Declude List | Subject: [Declude.JunkMail] Problems with SpamReview Software | | | Is anyone having problems with Tom's newly released Spam Review | software? It was working fantastic until yesterday when it started to | hang up on launch and spikes the CPU 99%. I have to kill it with my Task | Manager. I have the latest version installed, checked all the settings, | only set to read 4000 bytes, and I even performed a re-install and | cannot get it to launch correctly when there are more than 3-4 e-mails | in the hold folder. | | If I clear my SPAM Hold folder it launches and works just fine, until it | starts filling up again. I have SPAm Review running on 2 separate | machines, 2 separate locations (all Win2k Dells w/ all the bells and | whistles), and then today suddenly on our other e-mail server, the same | thing is happening there now. Totally puzzled? Tom said he was going | to be out of town for a few days and not sure if he is back. Anyone have | a clue what could be causing it to hang like this? | | -Don | | --- | [This E-mail was scanned for viruses by Declude Virus | (http://www.declude.com)] | | --- | | This E-mail came from the Declude.JunkMail mailing list. To | unsubscribe, just send an E-mail to [EMAIL PROTECTED], and | type unsubscribe Declude.JunkMail. You can E-mail | [EMAIL PROTECTED] for assistance. You can visit our web | site at http://www.declude.com . | | --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . -- [This e-mail scanned by CompBiz for Viruses. http://www.CompBiz.Net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
