Re: [Declude.JunkMail] Forged-Spam Backscatter

2008-04-03 Thread Kevin Rogers
I'm looking for a little help creating SPF records. I'm trying to use the tools at openspf.org. We only have one server that sends out mail for our domain. We have a secondary server that accepts email sent to our domain if our primary server is down (myriadnetwork.com). After going through

[Declude.JunkMail] Messages Intermittently Getting Through To Specific Domains

2007-10-11 Thread Kevin Rogers
We recently migrated our Imail server to a new Win2003 Server and we are getting disconnected from specific recipient servers (about 20 of them). But only on messages above approx 1500 bytes. Anything below that line seems to get through. So I thought it could be an MTU issue. I read in a

Re: [Declude.JunkMail] SMTP_DELIV_FAILED

2007-10-10 Thread Kevin Rogers
on here. Sorry for being a pain - I appreciate your help. Kevin Kevin Rogers wrote: I appear to be able to telnet to that address - it says 220 mailgate02.healthnet.com ESMTP * SMTP Ready * Darrell ([EMAIL PROTECTED]) wrote: Matt wrote: I haven't followed

Re: [Declude.JunkMail] SMTP_DELIV_FAILED

2007-10-10 Thread Kevin Rogers
QUIT ": connection reset10:10 04:25 SMTP-(b67101e20e53) rl-recv: connection reset Again, thanks for helping out. Kevin Kevin Rogers wrote: I appear to be able to telnet to that address - it says 220 mailgate02.healthnet.com ESMTP * SMTP Ready * Darrell ([EMAIL PROTECTED])

Re: [Declude.JunkMail] SMTP_DELIV_FAILED

2007-10-09 Thread Kevin Rogers
choices. Note that your first log sample shows that you were properly resolving the recipient's MX records, and at least in my test from a second ago, their primary MX server is answering just fine. Matt Kevin Rogers wrote: OK - I turned that off and restarted the SMTP and QManager

Re: [Declude.JunkMail] SMTP_DELIV_FAILED

2007-10-09 Thread Kevin Rogers
I appear to be able to telnet to that address - it says 220 mailgate02.healthnet.com ESMTP * SMTP Ready * Darrell ([EMAIL PROTECTED]) wrote: Matt wrote: I haven't followed this thread much, but it seems fairly obvious what the the problem is related to. When your server is

[Declude.JunkMail] SMTP_DELIV_FAILED

2007-10-08 Thread Kevin Rogers
I'm not sure if this is the right place to post this issue, but here goes: We recently upgraded our server (to Server2003 - running Imail. 8.21, Declude 4.3) and we're getting a lot of delivery failures to specific domains. It looks like the error we used to get before we had a PTR record

Re: [Declude.JunkMail] SMTP_DELIV_FAILED

2007-10-08 Thread Kevin Rogers
for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Kevin Rogers wrote: I'm not sure if this is the right place to post this issue, but here goes: We recently upgraded our server (to Server2003 - running

Re: [Declude.JunkMail] SMTP_DELIV_FAILED

2007-10-08 Thread Kevin Rogers
/URI integration, MRTG Integration, and Log Parsers. Kevin Rogers wrote: I'm not sure if this is the right place to post this issue, but here goes: We recently upgraded our server (to Server2003 - running Imail. 8.21, Declude 4.3) and we're getting a lot of delivery failures to specific

Re: [Declude.JunkMail] SMTP_DELIV_FAILED

2007-10-08 Thread Kevin Rogers
\qb01501a702f1.smd R0 T1 10:08 15:32 SMTP-(b01501a702f1) finished d:\imail\spool\qb01501a702f1.smd status=3 Does this help? Kevin Rogers wrote: FYI - I just noticed that on the SMTP Advanced tab of Imail, the option to Enable SMTP to Listen On All IP's was NOT selected. I'm

[Declude.JunkMail] OT: Setting Up DNS Service on Server 2003

2007-10-08 Thread Kevin Rogers
Does anyone have any simple instructions on how to setup the DNS service for Windows 2003 Server? We only host 2 domains and our DNS records are hosted by Network Solutions. Our old server (windows 2000 server) had the DNS service setup already when I took over the admin, so I never had to

Re: [Declude.JunkMail] SMTP_DELIV_FAILED

2007-10-08 Thread Kevin Rogers
message. Like Yahoo.com. On Oct 8, 2007, at 6:52 PM, Kevin Rogers wrote: I've turned on verbose logging and it appears that the listen on all IPs option did not work. But here is a better log snippet: 10:08 15:32 SMTPD(b01501a702f1) [192.168.0.4] connect 64.121.33.15 port 5672 10:08 15

Re: [Declude.JunkMail] OT: Setting Up DNS Service on Server 2003

2007-10-08 Thread Kevin Rogers
http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Kevin Rogers wrote: Does anyone have any simple instructions on how to setup the DNS service for Windows 2003

Re: [Declude.JunkMail] SMTP_DELIV_FAILED

2007-10-08 Thread Kevin Rogers
properties. John T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers Sent: Monday, October 08, 2007 4:37 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] SMTP_DELIV_FAILED I can ping yahoo.com. These errors

Re: [Declude.JunkMail] Looking for an Secure Email Solution that works with Imail Premium 2006.2 and declude 4.x

2007-06-13 Thread Kevin Rogers
Has anyone heard of or used either PostX (now a part of Ironport, which is now a part of Cisco) or ZixMail? We are in the market for a secure email solution as well and would like to know if anyone on this board is using something that they could recommend. Kevin [EMAIL PROTECTED] wrote: I

[Declude.JunkMail] blocking IP range

2006-01-05 Thread Kevin Rogers
I remember someone on this list said that if I wanted to add a weight to a series of IP addresses in the same range I could do it this way: 1. In my global.cfg add an external test pointing to a file, adding some weight to it 2. In that file, have a list of IP addresses for example:

[Declude.JunkMail] weighting domains

2005-12-01 Thread Kevin Rogers
Some of our users are getting a lot of spam from various domains that all have this in the beginning: csh Like: csh.dbfm.org [65.249.245.172] csh.mdcg.net [65.249.245.159] csh.jtdz.org [65.249.245.150] csh.xmdc.org [65.249.245.168] csh.kvyh.com [65.249.245.204] I have the Pro versions of

Re: [Declude.JunkMail] Local Users Should be Whitelisted, right?

2005-10-13 Thread Kevin Rogers
for Declude And Imail. IMail Queue Monitoring, Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Kevin Rogers [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, October 13, 2005 1:04 AM Subject: Re

[Declude.JunkMail] Local Users Should be Whitelisted, right?

2005-10-12 Thread Kevin Rogers
We have a user on one of our domains who sent an email to someone else at the same domain. Shouldn't this message automatically be whitelisted? Here's a log snippet: 10/11/2005 10:39:38 QF8BA082193B2 CMDSPACE:8 SPAMHEADERS:3 . Total weight = 11. 10/11/2005 10:39:38 QF8BA082193B2

Re: [Declude.JunkMail] Local Users Should be Whitelisted, right?

2005-10-12 Thread Kevin Rogers
how you are configured. Darrell --- invURIBL - Intelligent URI Filtering. Stops the SPAM that RBL's don't catch. Download a copy today - http://www.invariantsystems.com - Original Message - From: Kevin Rogers [EMAIL PROTECTED] To: Declude.JunkMail

[Declude.JunkMail] External Filter - Can we check the sender's IP address?

2005-10-12 Thread Kevin Rogers
I know that you can make your own filters with the PRO version. I'd like to check to see if the message is coming from a certain IP address - if it is I want to subtract 5 from the weight. Is this how I do it? FILTERFILE.txt -- REMOTEIP IS xxx.xxx.xxx.xxx

Re: [Declude.JunkMail] Local Users Should be Whitelisted, right?

2005-10-12 Thread Kevin Rogers
And Imail. IMail Queue Monitoring, Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Kevin Rogers [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, October 12, 2005 6:48 PM Subject: Re

[Declude.JunkMail] Weights not properly adding up?

2005-09-07 Thread Kevin Rogers
I've noticed that on many messages lately, a message's failed tests weights do not correspond to the weights I have in my global.cfg file. For example, these are from the X-SPAM-TESTS-FAILED line of four different messages: SORBS-DUHL, CMDSPACE [7] - should be 12 CMDSPACE [3] - should be 8

[Declude.JunkMail] Sniffer Question

2005-09-02 Thread Kevin Rogers
I just setup Sniffer for the first time and I'm wondering what people have their external test weight set to. My global.cfg came with a sniffer test already configured (though it was commented out) to have a weight of 7, which actually gives it a weight of 8 for some reason I couldn't figure

Re: [Declude.JunkMail] Sniffer Question

2005-09-02 Thread Kevin Rogers
to 35. I hold at 25 and delete at 35. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kevin Rogers Sent: Friday, September 02, 2005 4:37 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Sniffer

Re: [Declude.JunkMail] IMail 8.02

2005-08-25 Thread Kevin Rogers
We had this problem several times and have now forbid our offices from using Exchange. It took down not only our server, but several major insurance companies mail servers as well. It was a disaster. I can't believe this bug didn't make more press. It's a huge issue (for Exchange servers

[Declude.JunkMail] CMDSPACE

2005-08-24 Thread Kevin Rogers
A little while back I wrote about how BADHEADERS and HELOBOGUS were catching a lot of legit email. The same is true of CMDSPACE and COMMENTS. This is what it says at declude.com CMDSPACE: The CMDSPACE test looks for a technical violation of the RFCs. This test works very well because it

Re: [Declude.JunkMail] CMDSPACE

2005-08-24 Thread Kevin Rogers
Thanks. How do I increase the COMMENT threshhold? Darrell ([EMAIL PROTECTED]) wrote: My users get a lot of legit emails that get flagged with both these and then end up with a weight of 12 and get put in their bulk folder. I mean a lot. Just regular emails sent from Aetna.com,

Re: [Declude.JunkMail] CMDSPACE

2005-08-24 Thread Kevin Rogers
By the way, I do use WHITELIST AUTH for my own users, but the CMDSPACE test flags emails sent from other people to our users. So I guess I don't understand how WHITELIST AUTH would help in that situation. Darrell ([EMAIL PROTECTED]) wrote: My users get a lot of legit emails that get flagged

[Declude.JunkMail] BADHEADERS and HELOBOGUS coming up a lot

2005-08-18 Thread Kevin Rogers
These tests (especially BADHEADERS) seem to be catching a lot of legit mail lately. I've attached one of the headers It seems like many of the emails are sent from Exchange servers. What exactly makes the headers bad?Any ideas? Received: from ss_email.ssc.internal [216.201.186.154] by

[Declude.JunkMail] How do I let through mail from a known spammer?

2005-04-25 Thread Kevin Rogers
We have some users that get newsletters sent from an organization that uses another company to send out their newsletters. This other company is listed on spam databases. I don't want to whitelist this other company, but I want the original company's newsletters to get through. From: FAIFA

[Declude.JunkMail] search for spam

2005-02-09 Thread Kevin Rogers
We have some users that are reporting that emails being sent from a certain domain are not getting through to them. I would like to find those messages in my spam folder to check to see if they are being caught and why. Is there a way to quickly find messages in my spam folder from a

[Declude.JunkMail] multiple actions

2005-01-30 Thread Kevin Rogers
I would like to HOLD Weight 20 and move them to the Imail/spam/weight20/ folder. How do I do both? Thanks --- [This E-mail was scanned for viruses.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list.