[MBF]AW: high cpu usage

Keep in mind that on virtualized environments not only load can vary, but also the (virtual) CPU capacity. So other VMs on the same host, having a huge load could cause high CPU loads on your AntiSpam-VM. Not because your apps create it but because 100% is relative (lower) then it was before.

[MBF]AW: Declude reporting

I can confirm that the newer versions of Declude has brought some changes in the Log-Levels. They does contain heavily more information on the MID level, bumping up logfiles without containing necessary data for MDLP reporting. On LOW level the Subject and MFrom-lines are missing. David

[MBF]AW: Declude reporting

-Original Message- From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of Markus Gufler | Limitis Sent: Thursday, October 24, 2013 2:46 AM To: community@mailsbestfriend.com Subject: [MBF]AW: Declude reporting I can confirm that the newer versions of Declude

[MBF]messages slipping through without being processed...

Hi Around two months ago we installed a new server operating system and the latest Declude release having the old log levels (we use them for diagnostics and user based quarantine reports and management) Declude 4.6.35 Diagnostics Compilation Platform: IMail JunkMail

[MBF] AW: hijacked accounts

Same thing observed here. I've set up a geolocation database and have created some scripts parsing the smtp logs for authenticated as lines. More than x connections from different foreign countries are blocked automatically. Up to now the script changes the password with the drawback that

[MBF] AW: Dumb Question

A little googling turned out this http://blogs.boomerang.com/blog/2010/01/20/ms-outlook-words-to-avoid/ -Original Message- From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of Michael Cummins Sent: Tuesday, September 23, 2014 12:41 PM To:

[MBF] AW: FYI - Smartermail CSS issue with latest Chrome version

Hi Thank you for this information. How does it look like? ... because I can't see any problems here... Markus Von: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] Im Auftrag von Linda Pagillo Gesendet: Freitag, 24. Oktober 2014 18:55 An: community@mailsbestfriend.com

[MBF] AW: BARRACUDA

This graph covers 4 weeks from 2014-10-15 up to now. The y-values are hourly processed messages. Green is a correct BRBL-result compared to the final weight. Red is a different one than the final weight. Grey is no opinion from BRBL [cid:image001.png@01CFFEA9.E85DC020] Von:

[MBF] AW: BARRACUDA

@mailsbestfriend.commailto:community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of Markus Gufler | Limitis Sent: Wednesday, November 12, 2014 12:53 PM To: community@mailsbestfriend.commailto:community@mailsbestfriend.com Subject: [MBF] AW: BARRACUDA This graph covers 4 weeks from 2014-10-15 up

[MBF] AW: SPF Records

IMHO Mailinglists should (and do) always use their own mailfrom domain at the SMTP envelope level and absolutely not that one from the list member (for example this message should come from MBFs server with MAILFROM mailbestfriend.com and not limitis.com). Only the header fields can be the

[MBF] AW: .review

Just add a line MAILFROM ENDSWITH .review to one of your existing filter files to push him far above your hold weight... if you really want to block so rough. In the past 7 days I can see exactly 3 messages (out of 336000) coming from .review All of them are clear

[MBF] AW: Countries/Country

Countries are the countries of the entire delivery chain. For example RU > US > DE Country is the originating one Gruesse aus Suedtirol Markus Von: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] Im Auftrag von Martin Schaible Gesendet: Donnerstag, 17. Dezember 2015

[MBF] AW: Test for short small HTML body with a URL in it

I would recommend using it only in combination with at least one other indicator. A lot of people sends simple links without any greetings, explanations or other blabla. It would be an idea to keep such messages in a temporary queue and count the messages with different recipients and the

[MBF] AW: all_list.dat

Thank you Markus Von: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] Im Auftrag von David Barker | Mail's Best Friend | 1-866-919-2075 Gesendet: Dienstag, 2. Februar 2016 06:16 An: community@mailsbestfriend.com Betreff: [MBF] Re: all_list.dat

[MBF] catch sender matches recipient

Hi everybody At the moment I follow a new type of (German) phishing attempts having always the sender matching the recipient (on both smtp envelope and headers). In declude loglines I can see Skip AUTOWHITELIST due to the sender matches the recipient. sender=[art@redacted] and

[MBF] Re: catch sender matches recipient

ltiple addresses as you would have to create multiple filters. David From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of Markus Gufler | Limitis Sent: Wednesday, May 4, 2016 5:16 AM To: community@mailsbestfriend.com Subject: [MBF] catch sender matches recipie

[MBF] Re: another question about PCRE

munity@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of Markus Gufler | Limitis Sent: Tuesday, October 4, 2016 4:06 AM To: community@mailsbestfriend.com Subject: [MBF] another question about PCRE Hi all I try to catch URLs like these (screenshot) [cid:image001.jpg@01

[MBF] AW: another question about PCRE

want to make sure the syntax is correct as the regex itself looks like it should be working. From: community@mailsbestfriend.com<mailto:community@mailsbestfriend.com> [mailto:community@mailsbestfriend.com] On Behalf Of Markus Gufler | Limitis Sent: Tuesday, October 4, 2016 11:51 PM To: com

[MBF] another question about PCRE

Hi all I try to catch URLs like these (screenshot) [cid:image003.jpg@01D21E2F.5095DAA0] I tried to do this with two variants of a regex https://regex101.com/r/i3TVSc/1 and https://regex101.com/r/zdJ5r5/1 but both seems not being triggered within Declude. Any idea? Markus

[MBF] AW: ClamAV

Hi Martin We use SCANFILE1 C:\ClAV\ClamDScan.exe --quiet --no-summary -l report.txt VIRUSCODE1 1 REPORT1. It's long time ago, but I remember that the command line paths shouldn't be too long, as then called there will be added also the entire path to the Dxx.smd file in

[MBF] AW: declude virus exclude recipient

ure] Dean Lawrence President Internet Data Technology Phone: 888-438-4381 x701 Web: www.idatatech.com<http://www.idatatech.com/> Email: d...@idatatech.com<mailto:d...@idatatech.com> Programming | Database | Consulting | Training On Nov 18, 2016, at 9:40 AM, Markus Gufler

[MBF] AW: another question about PCRE

Von: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] Im Auftrag von Markus Gufler | Limitis Gesendet: Donnerstag, 6. Oktober 2016 10:54 An: community@mailsbestfriend.com Betreff: [MBF] AW: another question about PCRE Hi David, Andrew Thank you for your feedback. Finally I