RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude

2004-12-16 Thread Mark E. Smith
Having said that could it be one of the external tests that Declude is calling? In other words, it would appear that the problem is with Declude.exe but it's really with a shelled process that declude is calling? That shouldn't cause this -- Declude will timeout the external process

RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude

2004-12-16 Thread Markus Gufler
Never seen this problem but at this time I've running 3 external tests. in your cfg I can see 12 different calls of external programs Add the call of declude.exe and maybe 2 av-engines and multiply this number by the number of messages your server is processing each day. I assume it will

RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude

2004-12-16 Thread Mark E. Smith
We're pushing about 150,000 messages per day through this server. Dual processor 2Ghz, 2GB RAM, RAID 5. This server ONLY runs Imail/Declude as a gateway. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus GuflerSent: Thursday, December 16, 2004 8:08 AMTo:

[Declude.JunkMail] IPBYPASS Question

2004-12-16 Thread Rick Davidson
Can a CIDR range be used with the IPBYPASS option We just acquired a company who has Postini in the loop and I need to skip their IPs IPBYPASS 64.18.0.0/20 Rick Davidson National Systems Manager North American Title Group --- [This E-mail was scanned for viruses by Declude Virus

RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude

2004-12-16 Thread Markus Gufler
So 150,000 msgs x 15 exes = 225 ... due to prefiltered viruses let's say 1,500,000 exe calls each day. Or in other words: each processor has to run around 8 exes each second, not considering peak and low-traffic times. Markus From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

RE: [Declude.JunkMail] Imail/Declude queues backing up - Narrowed down to Scott Fisher's externals

2004-12-16 Thread Mark E. Smith
I've been able to narrow down the locked file problem to Scott Fisher's external tests. I re-enabled SpamCHK - no problems. If I enable any of the following: size.exe obfsubj.exeHEADER2.exe dispfrom.exe I start seeing random locked files in the \spool directory. Scott, Any thoughts on

Re: [Declude.JunkMail] declude problems after imail upgrade.

2004-12-16 Thread R. Scott Perry
I did recive this spam in my inbox this morning. As you can see it does not have any declude info and no Imail spam info either. What do the IMail and Declude log files show for the E-mail?What version of IMail are you running? What version of Declude are you running?

[Declude.JunkMail] New info in Yahoo HELO string?

2004-12-16 Thread Rick Davidson
I have started to notice alot of headers lately with @x.x.x.x with login included in them from yahoo SMTP servers (including mail from sbcglobal.net customers). Maybe it isn't new but looks like something decent to key in on when looking for legit mail. What is the likeliness of spam coming

Re: [Declude.JunkMail] declude problems after imail upgrade.

2004-12-16 Thread R. Scott Perry
I did search the declude log file for [EMAIL PROTECTED] but could not find anything.. If you use the XSPOOLNAME ON option in the \IMail\Declude\global.cfg file, it will be easy to find the entries for the E-mail in the log file. If you do not use the XSPOOLNAME ON option, you may need to look

Re: [Declude.JunkMail] declude problems after imail upgrade.

2004-12-16 Thread Heimir Eidskrem
Here is 2 messages that did fail weight350 and did get saved in the weight350 directory. This is working correctly, expect there are no declude headers for the messages. Below each message is the lines from the declude log file: Received: from z-point.de [24.202.78.132] by deepspace.i360.net

Re: [Declude.JunkMail] declude problems after imail upgrade.

2004-12-16 Thread R. Scott Perry
Here is 2 messages that did fail weight350 and did get saved in the weight350 directory. This is working correctly, expect there are no declude headers for the messages. Below each message is the lines from the declude log file: The only time that I have seen this happen (an E-mail that didn't

[Declude.JunkMail] mailpolice

2004-12-16 Thread Glen Harvy
Hi, Is anyone using mailpolice and if so what details are required in the global.cfg file? _ Glen Harvy Aquarius Communications for all your Internet Needs. Phone 9977 3788 Fax 9977 3844 --- [This E-mail was scanned for viruses by Declude Virus

Fw: [Declude.JunkMail] New info in Yahoo HELO string?

2004-12-16 Thread Rick Davidson
Hey who ever this is on this list can you turn this off please, its a tad bit inapropriate for a public list don't you think? I started getting these today each time I posted to the junkmail list. From: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]; Inc [EMAIL PROTECTED] Rick

[Declude.JunkMail] AVFILTER Combo

2004-12-16 Thread Markus Gufler
Hi all, Due to the constat increasing number of needless virus warning messages from dumb av-scanners not knowing what worms are forging I've tried to set up a COMBO filter to catch this messages as spam. (Text filter files for Junkmail Pro) On (remove the space in the middle)

Re: [Declude.JunkMail] declude problems after imail upgrade.

2004-12-16 Thread Heimir Eidskrem
I did recive this spam in my inbox this morning. As you can see it does not have any declude info and no Imail spam info either. Received: from 64.95.220.80 [217.96.6.120] by deepspace.i360.net (SMTPD32-8.14) id AB6D3008E; Thu, 16 Dec 2004 00:30:05 -0600 Received: from beforehand.purpossz.com

RE: [Declude.JunkMail] IPBYPASS Question

2004-12-16 Thread Colbeck, Andrew
But, Rick, Postini does a fabulous job of spam and virus control. Just ask them! You won't need to IPBYPASS them at all. Andrew (tongue firmly in cheek) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Thursday, December 16, 2004

Re: [Declude.JunkMail] IPBYPASS Question

2004-12-16 Thread Rick Davidson
LOL Andrew, thats why I call them Postweenie Here is what I need to bypass: Received: from equal.iaxs.net (localhost [127.0.0.1]) by equal.iaxs.net (8.12.11/8.12.11) with ESMTP id iBGHrg1m020919 for AddressRemoved; Thu, 16 Dec 2004 11:53:42 -0600 (CST) Received: (from [EMAIL PROTECTED]) by

RE: [Declude.JunkMail] declude problems after imail upgrade.

2004-12-16 Thread Kaj Søndergaard Laursen
Hi I also got one mail that I noticed did not have any Declude headers (it was spam, that's why I checked the headers to see why it was not marked as spam) From the logs I found traces of the e-mail in Imail, and in Declude Virus, but not in Declude Spam. I made no changes to the setup of

Re: [Declude.JunkMail] declude problems after imail upgrade.

2004-12-16 Thread Heimir Eidskrem
Scott, This is from the my first email regarding this: Hello there, I did an upgrade to 8.14 tonight and im seeing a few things thats are different. Tech info: Imail 8.14 Declude 1.81 (Junkmail/virus Pro) Server 2.6Ghz Xeon/1GB Ram I am capturing spam so I know Declude is working. Issue 1. I