RE: [Declude.JunkMail] Not getting messages with attachments.

2004-06-22 Thread Joshua Hughes
This all began when I moved Declude from one server to another to perform
some needed repairs. The version of Declude on my primary says 1.78 however,
when I copied the delude.exe (1.78) to the secondary and looked at the
version number it now says (1.75). I looked in the manual and I see a
download for 1.75 and 1.79 beta. I have installed 1.79 beta and everything
appears to work fine in the logs. Thank you for your help. 

Thank you,
Joshua
Sunline Team
(941)206-7870
(888)512-6100

http://www.sunline.net/

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
(Lists)
Sent: Monday, June 21, 2004 5:10 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Not getting messages with attachments.

You need to run a newer version of Declude. The one you are using 1.75 does
not include the MAXWEIGHT feature. I believe that was introduced in 1.77x

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Joshua Hughes
 Sent: Monday, June 21, 2004 1:57 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Not getting messages with attachments.
 
 ATTACHED
 
 Thank you,
 Joshua
 Sunline Team
 (941)206-7870
 (888)512-6100
 
 http://www.sunline.net/
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
 (Lists)
 Sent: Monday, June 21, 2004 3:39 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Not getting messages with attachments.
 
 Are you using the newest GIBBERISH file?
 
 Try putting the log into Debug for a message, wait for a message to get
 caught, then turn back and review or send that log snippet.
 
 John Tolmachoff
 Engineer/Consultant/Owner
 eServices For You
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
  [EMAIL PROTECTED] On Behalf Of Joshua Hughes
  Sent: Monday, June 21, 2004 12:10 PM
  To: [EMAIL PROTECTED]
  Subject: RE: [Declude.JunkMail] Not getting messages with attachments.
 
  I'm sorry, I am referring to Declude Junkmail. We have narrowed it down
to
  the gibberish test.
 
  06/21/2004 14:41:40.187 Q2bdf0f647117 Test #79 [GIBBERISH
weight=330]
  triggered; action = 5 [Message failed GIBBERISH test (415)]
 
  The gibberish test is assigning the message a very large weight. However
 we
  have gibberish set as follows.
 
  SKIPIFWEIGHT35
  MAXWEIGHT   10
 
  After commenting out the gibberish test the mails are coming through.
It's
  almost as if the gibberish test is reading the attachments as plain
.txt.
 
  Any ideas?
 
  Thank you,
  Joshua
  Sunline Team
  (941)206-7870
  (888)512-6100
 
  http://www.sunline.net/
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
  Sent: Monday, June 21, 2004 2:58 PM
  To: [EMAIL PROTECTED]
  Subject: Re: [Declude.JunkMail] Not getting messages with attachments.
 
 
  Declude is blocking all messages that have attachments except .txt
  attachments.  We have turned off Declude and we can now send messages
 with
  attachments. Any idea why Declude would be blocking all messages with
  attachments?
 
  By Declude do you mean Declude JunkMail (the subject of this list,
and
  doesn't know about attachments), or Declude Virus (which knows about
  attachments, and treats .txt files differently since they are safe)?
 
  I'm guessing you are referring to Declude Virus -- and would suggest
  looking at the Declude Virus log file to see what it says.
 
  Note that if you are using McAfee, McAfee broke the other day -- the new
  virus definitions cause older versions to crash; McAfee requires that
you
  upgrade to the latest version (.exe) in this case.
 
  -Scott
  ---
  Declude JunkMail: The advanced anti-spam solution for IMail mailservers
  since 2000.
  Declude Virus: Ultra reliable virus detection and the leader in
mailserver
  vulnerability detection.
  Find out what you've been missing: Ask for a free 30-day evaluation.
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
  (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED

Re: [Declude.JunkMail] Not getting messages with attachments.

2004-06-21 Thread R. Scott Perry

Declude is blocking all messages that have attachments except .txt 
attachments.  We have turned off Declude and we can now send messages with 
attachments. Any idea why Declude would be blocking all messages with 
attachments?
By Declude do you mean Declude JunkMail (the subject of this list, and 
doesn't know about attachments), or Declude Virus (which knows about 
attachments, and treats .txt files differently since they are safe)?

I'm guessing you are referring to Declude Virus -- and would suggest 
looking at the Declude Virus log file to see what it says.

Note that if you are using McAfee, McAfee broke the other day -- the new 
virus definitions cause older versions to crash; McAfee requires that you 
upgrade to the latest version (.exe) in this case.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Not getting messages with attachments.

2004-06-21 Thread Joshua Hughes
I'm sorry, I am referring to Declude Junkmail. We have narrowed it down to
the gibberish test. 

06/21/2004 14:41:40.187 Q2bdf0f647117 Test #79 [GIBBERISH weight=330]
triggered; action = 5 [Message failed GIBBERISH test (415)]

The gibberish test is assigning the message a very large weight. However we
have gibberish set as follows.

SKIPIFWEIGHT35
MAXWEIGHT   10

After commenting out the gibberish test the mails are coming through. It's
almost as if the gibberish test is reading the attachments as plain .txt.

Any ideas?

Thank you,
Joshua
Sunline Team
(941)206-7870
(888)512-6100

http://www.sunline.net/

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Monday, June 21, 2004 2:58 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Not getting messages with attachments.


Declude is blocking all messages that have attachments except .txt 
attachments.  We have turned off Declude and we can now send messages with 
attachments. Any idea why Declude would be blocking all messages with 
attachments?

By Declude do you mean Declude JunkMail (the subject of this list, and 
doesn't know about attachments), or Declude Virus (which knows about 
attachments, and treats .txt files differently since they are safe)?

I'm guessing you are referring to Declude Virus -- and would suggest 
looking at the Declude Virus log file to see what it says.

Note that if you are using McAfee, McAfee broke the other day -- the new 
virus definitions cause older versions to crash; McAfee requires that you 
upgrade to the latest version (.exe) in this case.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Not getting messages with attachments.

2004-06-21 Thread John Tolmachoff \(Lists\)
Are you using the newest GIBBERISH file?

Try putting the log into Debug for a message, wait for a message to get
caught, then turn back and review or send that log snippet.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Joshua Hughes
 Sent: Monday, June 21, 2004 12:10 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Not getting messages with attachments.
 
 I'm sorry, I am referring to Declude Junkmail. We have narrowed it down to
 the gibberish test.
 
 06/21/2004 14:41:40.187 Q2bdf0f647117 Test #79 [GIBBERISH weight=330]
 triggered; action = 5 [Message failed GIBBERISH test (415)]
 
 The gibberish test is assigning the message a very large weight. However
we
 have gibberish set as follows.
 
 SKIPIFWEIGHT  35
 MAXWEIGHT 10
 
 After commenting out the gibberish test the mails are coming through. It's
 almost as if the gibberish test is reading the attachments as plain .txt.
 
 Any ideas?
 
 Thank you,
 Joshua
 Sunline Team
 (941)206-7870
 (888)512-6100
 
 http://www.sunline.net/
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
 Sent: Monday, June 21, 2004 2:58 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.JunkMail] Not getting messages with attachments.
 
 
 Declude is blocking all messages that have attachments except .txt
 attachments.  We have turned off Declude and we can now send messages
with
 attachments. Any idea why Declude would be blocking all messages with
 attachments?
 
 By Declude do you mean Declude JunkMail (the subject of this list, and
 doesn't know about attachments), or Declude Virus (which knows about
 attachments, and treats .txt files differently since they are safe)?
 
 I'm guessing you are referring to Declude Virus -- and would suggest
 looking at the Declude Virus log file to see what it says.
 
 Note that if you are using McAfee, McAfee broke the other day -- the new
 virus definitions cause older versions to crash; McAfee requires that you
 upgrade to the latest version (.exe) in this case.
 
 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers
 since 2000.
 Declude Virus: Ultra reliable virus detection and the leader in mailserver
 vulnerability detection.
 Find out what you've been missing: Ask for a free 30-day evaluation.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Not getting messages with attachments.

2004-06-21 Thread Joshua Hughes
I am using the version of Gibberish below.

Version:   2.1.0
#
# Last Modified: 12/30/2003   

Attached is the log entry for one of the blocked emails.
I'm noticing a lot of entries with:

06/21/2004 14:41:25 Q2bd100b901ba374e WARNING: Unknown filter type
SKIPIFWEIGHT.
06/21/2004 14:41:25 Q2bd100b901ba374e WARNING: Unknown filter type
MAXWEIGHT.
Unknown 

Could these entries be the problem?

Thank you,
Joshua
Sunline Team
(941)206-7870
(888)512-6100

http://www.sunline.net/


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
(Lists)
Sent: Monday, June 21, 2004 3:39 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Not getting messages with attachments.

Are you using the newest GIBBERISH file?

Try putting the log into Debug for a message, wait for a message to get
caught, then turn back and review or send that log snippet.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Joshua Hughes
 Sent: Monday, June 21, 2004 12:10 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Not getting messages with attachments.
 
 I'm sorry, I am referring to Declude Junkmail. We have narrowed it down to
 the gibberish test.
 
 06/21/2004 14:41:40.187 Q2bdf0f647117 Test #79 [GIBBERISH weight=330]
 triggered; action = 5 [Message failed GIBBERISH test (415)]
 
 The gibberish test is assigning the message a very large weight. However
we
 have gibberish set as follows.
 
 SKIPIFWEIGHT  35
 MAXWEIGHT 10
 
 After commenting out the gibberish test the mails are coming through. It's
 almost as if the gibberish test is reading the attachments as plain .txt.
 
 Any ideas?
 
 Thank you,
 Joshua
 Sunline Team
 (941)206-7870
 (888)512-6100
 
 http://www.sunline.net/
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
 Sent: Monday, June 21, 2004 2:58 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.JunkMail] Not getting messages with attachments.
 
 
 Declude is blocking all messages that have attachments except .txt
 attachments.  We have turned off Declude and we can now send messages
with
 attachments. Any idea why Declude would be blocking all messages with
 attachments?
 
 By Declude do you mean Declude JunkMail (the subject of this list, and
 doesn't know about attachments), or Declude Virus (which knows about
 attachments, and treats .txt files differently since they are safe)?
 
 I'm guessing you are referring to Declude Virus -- and would suggest
 looking at the Declude Virus log file to see what it says.
 
 Note that if you are using McAfee, McAfee broke the other day -- the new
 virus definitions cause older versions to crash; McAfee requires that you
 upgrade to the latest version (.exe) in this case.
 
 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers
 since 2000.
 Declude Virus: Ultra reliable virus detection and the leader in mailserver
 vulnerability detection.
 Find out what you've been missing: Ask for a free 30-day evaluation.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Not getting messages with attachments.

2004-06-21 Thread Joshua Hughes
ATTACHED

Thank you,
Joshua
Sunline Team
(941)206-7870
(888)512-6100

http://www.sunline.net/


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
(Lists)
Sent: Monday, June 21, 2004 3:39 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Not getting messages with attachments.

Are you using the newest GIBBERISH file?

Try putting the log into Debug for a message, wait for a message to get
caught, then turn back and review or send that log snippet.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Joshua Hughes
 Sent: Monday, June 21, 2004 12:10 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Not getting messages with attachments.
 
 I'm sorry, I am referring to Declude Junkmail. We have narrowed it down to
 the gibberish test.
 
 06/21/2004 14:41:40.187 Q2bdf0f647117 Test #79 [GIBBERISH weight=330]
 triggered; action = 5 [Message failed GIBBERISH test (415)]
 
 The gibberish test is assigning the message a very large weight. However
we
 have gibberish set as follows.
 
 SKIPIFWEIGHT  35
 MAXWEIGHT 10
 
 After commenting out the gibberish test the mails are coming through. It's
 almost as if the gibberish test is reading the attachments as plain .txt.
 
 Any ideas?
 
 Thank you,
 Joshua
 Sunline Team
 (941)206-7870
 (888)512-6100
 
 http://www.sunline.net/
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
 Sent: Monday, June 21, 2004 2:58 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.JunkMail] Not getting messages with attachments.
 
 
 Declude is blocking all messages that have attachments except .txt
 attachments.  We have turned off Declude and we can now send messages
with
 attachments. Any idea why Declude would be blocking all messages with
 attachments?
 
 By Declude do you mean Declude JunkMail (the subject of this list, and
 doesn't know about attachments), or Declude Virus (which knows about
 attachments, and treats .txt files differently since they are safe)?
 
 I'm guessing you are referring to Declude Virus -- and would suggest
 looking at the Declude Virus log file to see what it says.
 
 Note that if you are using McAfee, McAfee broke the other day -- the new
 virus definitions cause older versions to crash; McAfee requires that you
 upgrade to the latest version (.exe) in this case.
 
 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers
 since 2000.
 Declude Virus: Ultra reliable virus detection and the leader in mailserver
 vulnerability detection.
 Find out what you've been missing: Ask for a free 30-day evaluation.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
06/21/2004 14:41:23.546  CFG: Set hop to 0.
06/21/2004 14:41:23.546  CFG: Set hophigh to 0
06/21/2004 14:41:23.546  Console turned OFF
06/21/2004 14:41:23.546  CFG: Setting XSENDER to ON
06/21/2004 14:41:23.546  CFG: Setting XSPOOLNAME to ON
06/21/2004 14:41:23.546  CFG: Whitelisting TO [EMAIL PROTECTED]
06/21/2004 14:41:23.546  CFG: Whitelisting TO [EMAIL PROTECTED]
06/21/2004 14:41:23  Invalid WHITELIST type: AUTH
06/21/2004 14:41:23.546  CFG: Whitelisting TO laserimagingsystems.com.
06/21/2004 14:41:23.546  CFG: Whitelisting TO [EMAIL PROTECTED]
06/21/2004 14:41:23.546  CFG: Whitelisting TO wesellpg.com.
06/21/2004 14:41:23.546  CFG: Whitelisting TO [EMAIL PROTECTED]
06/21/2004 14:41:23.562  Declude v1.75
06/21/2004 14:41:23.562  Setting HOLD directory to: C:\newSys\c\spool\spam.
06/21/2004 14:41:23.562 Q2bd100b901ba374e Setting DNS server to IMail's 127.0.0.1.
06/21/2004 14:41:23.562 Q2bd100b901ba374e Declude JunkMail DEMO Registered
06/21/2004 14:41:23.562 Q2bd100b901ba374e Start
06/21/2004 14:41:23.562 Q2bd100b901ba374e Locked 
C:\newSys\c\spool\Q2bd100b901ba374e.SMD.
06/21/2004 14:41:23.562 Q2bd100b901ba374e Getting message envelope
06/21/2004 14:41:23.562 Q2bd100b901ba374e Copyall=no_copyall_account.
06/21/2004

RE: [Declude.JunkMail] Not getting messages with attachments.

2004-06-21 Thread John Tolmachoff \(Lists\)
You need to run a newer version of Declude. The one you are using 1.75 does
not include the MAXWEIGHT feature. I believe that was introduced in 1.77x

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Joshua Hughes
 Sent: Monday, June 21, 2004 1:57 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Not getting messages with attachments.
 
 ATTACHED
 
 Thank you,
 Joshua
 Sunline Team
 (941)206-7870
 (888)512-6100
 
 http://www.sunline.net/
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
 (Lists)
 Sent: Monday, June 21, 2004 3:39 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Not getting messages with attachments.
 
 Are you using the newest GIBBERISH file?
 
 Try putting the log into Debug for a message, wait for a message to get
 caught, then turn back and review or send that log snippet.
 
 John Tolmachoff
 Engineer/Consultant/Owner
 eServices For You
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
  [EMAIL PROTECTED] On Behalf Of Joshua Hughes
  Sent: Monday, June 21, 2004 12:10 PM
  To: [EMAIL PROTECTED]
  Subject: RE: [Declude.JunkMail] Not getting messages with attachments.
 
  I'm sorry, I am referring to Declude Junkmail. We have narrowed it down
to
  the gibberish test.
 
  06/21/2004 14:41:40.187 Q2bdf0f647117 Test #79 [GIBBERISH
weight=330]
  triggered; action = 5 [Message failed GIBBERISH test (415)]
 
  The gibberish test is assigning the message a very large weight. However
 we
  have gibberish set as follows.
 
  SKIPIFWEIGHT35
  MAXWEIGHT   10
 
  After commenting out the gibberish test the mails are coming through.
It's
  almost as if the gibberish test is reading the attachments as plain
.txt.
 
  Any ideas?
 
  Thank you,
  Joshua
  Sunline Team
  (941)206-7870
  (888)512-6100
 
  http://www.sunline.net/
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
  Sent: Monday, June 21, 2004 2:58 PM
  To: [EMAIL PROTECTED]
  Subject: Re: [Declude.JunkMail] Not getting messages with attachments.
 
 
  Declude is blocking all messages that have attachments except .txt
  attachments.  We have turned off Declude and we can now send messages
 with
  attachments. Any idea why Declude would be blocking all messages with
  attachments?
 
  By Declude do you mean Declude JunkMail (the subject of this list,
and
  doesn't know about attachments), or Declude Virus (which knows about
  attachments, and treats .txt files differently since they are safe)?
 
  I'm guessing you are referring to Declude Virus -- and would suggest
  looking at the Declude Virus log file to see what it says.
 
  Note that if you are using McAfee, McAfee broke the other day -- the new
  virus definitions cause older versions to crash; McAfee requires that
you
  upgrade to the latest version (.exe) in this case.
 
  -Scott
  ---
  Declude JunkMail: The advanced anti-spam solution for IMail mailservers
  since 2000.
  Declude Virus: Ultra reliable virus detection and the leader in
mailserver
  vulnerability detection.
  Find out what you've been missing: Ask for a free 30-day evaluation.
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
  (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Not getting messages with attachments.

2004-06-21 Thread Matt




John is correct here. Please take care to read the comments at the top
of each of the custom filters that are shared on both the main site and
the beta filters directory. If you make a mistake as simple as using
the wrong version of Declude, they can create a ton of false positives
and this can be very, very bad. I recommend only adding one filter at
a time and first trying to understand exactly how the filters work
before using them, and maybe even not scoring the new filters when
added. GIBBERISH for instance will have a good number of false
positives, especially on advertising and some newsletter content due to
tracking links (which can be counterbalanced), and because of this the
filter is best scored low.

Matt



John Tolmachoff (Lists) wrote:

  You need to run a newer version of Declude. The one you are using 1.75 does
not include the MAXWEIGHT feature. I believe that was introduced in 1.77x

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


  
  
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED]] On Behalf Of Joshua Hughes
Sent: Monday, June 21, 2004 1:57 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Not getting messages with attachments.

ATTACHED

Thank you,
Joshua
Sunline Team
(941)206-7870
(888)512-6100

http://www.sunline.net/


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff
(Lists)
Sent: Monday, June 21, 2004 3:39 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Not getting messages with attachments.

Are you using the newest GIBBERISH file?

Try putting the log into Debug for a message, wait for a message to get
caught, then turn back and review or send that log snippet.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You



  -Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED]] On Behalf Of Joshua Hughes
Sent: Monday, June 21, 2004 12:10 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Not getting messages with attachments.

I'm sorry, I am referring to Declude Junkmail. We have narrowed it down
  

  
  to
  
  

  the gibberish test.

06/21/2004 14:41:40.187 Q2bdf0f647117 Test #79 [GIBBERISH
  

  
  weight=330]
  
  

  triggered; action = 5 [Message failed GIBBERISH test (415)]

The gibberish test is assigning the message a very large weight. However
  

we


  have gibberish set as follows.

SKIPIFWEIGHT	35
MAXWEIGHT 	10

After commenting out the gibberish test the mails are coming through.
  

  
  It's
  
  

  almost as if the gibberish test is reading the attachments as plain
  

  
  .txt.
  
  

  Any ideas?

Thank you,
Joshua
Sunline Team
(941)206-7870
(888)512-6100

http://www.sunline.net/

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: Monday, June 21, 2004 2:58 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Not getting messages with attachments.


  
  
Declude is blocking all messages that have attachments except .txt
attachments.  We have turned off Declude and we can now send messages

  

with


  
attachments. Any idea why Declude would be blocking all messages with
attachments?

  
  By "Declude" do you mean "Declude JunkMail" (the subject of this list,
  

  
  and
  
  

  doesn't know about attachments), or "Declude Virus" (which knows about
attachments, and treats .txt files differently since they are safe)?

I'm guessing you are referring to Declude Virus -- and would suggest
looking at the Declude Virus log file to see what it says.

Note that if you are using McAfee, McAfee broke the other day -- the new
virus definitions cause older versions to crash; McAfee requires that
  

  
  you
  
  

  upgrade to the latest version (.exe) in this case.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in
  

  
  mailserver
  
  

  vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
  

(http://www.declude.com)]


  ---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "uns