RE: [Declude.JunkMail] Notification to customers of change of ownership
First and foremost, congratulations Scott. You have earned the benefits that come with a deal like this. Many of my feelings echo those of Matt. You have done an outstanding job of providing the flexibility and support for a set of excellent products that has become increasingly scarce in today's world. I feel it necessary to say I owe much of what I have now and the success of my company to you and your products. When I was a green Network admin at the start of 2001, I was trying to figure out what I was doing without bringing down a whole network. Then, in May, I had the company mail server (also hosting a few clients) put into my lap because the previous admin could not figure out why we could not send e-mail to AOL. I know nothing about how e-mail worked. With a lot of help from Len, Sandy and you, I began to understand. Though probably unknowingly, you encouraged me to take the time to understand e-mail, answering my questions along the way, whether on a list or direct, even helping me a few times with items not at all related to e-mail. My hosting business only accounts for about 8% of revenue, but without the benefits of your products, that would be only half of that. (Yes, I would like that to be a larger number, but...) However, the hosting business has opened doors and has brought to me my largest networking client. For this, thanks. I feel that the power users of Declude are part of a big family, and look forward with cautious optimism that the makeup of that family will not change but for the better with the new organization. Now, when are you coming to Southern California so I can thank you in person? BTW, how does this affect your interns? ;-) John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Imail 8.1 Trouble
How do we know which interim is the latest? I am currently running: v1.79i1 Regards, Steinar Rasch -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: 11. april 2004 19:21 To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Imail 8.1 Trouble Looks like the website has been updated since this post. Where can I get the interim release now? I'm going to look into that. In the meantime, if anyone needs the latest interim I can send it to them (just E-mail me off-list). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Denne eposten er skannet og funnet fri for virus av Epost.no med Declude og FRISK F-Prot Software. Denne eposten er skannet og funnet fri for virus av Epost.no med Declude og FRISK F-Prot Software. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Notification to customers of change of ownership
I truly believe that this will be beneficial for everyone. To state the obvious, there's always a battle in such arrangements between the bottom line and satisfying expectations, and over time, the bottom line always wins when you are playing with someone else's money. That is definitely true. One of my top concerns was making sure that my customers' needs be met. I have been working with Barry and Charlie for quite some time now, and am confident that they recognize that my input will be very important to their success. So if anyone is concerned with the way that things are working out, please contact me and let me know. Your approach to the business to date has been strikingly similar to open source in many ways, and in other ways customer service-centric in nature or just good old fashioned business. Neither one of these maximizes profits, and when it's your baby, you can make the choice between making decisions that generate more money and more customers or greater personal satisfaction whether or not it is in spite of profits. Barry and Charlie are expecting for this to be a profitable venture (which is the goal of just about every business). While they do plan to grow the business, I feel comfortable that it is going to be at a sustainable rate. Which leads to: I also recognize the value of the argument that says with more resources, capabilities can be expanded at a much faster rate, and for what you might lose to the bottom line, you gain from these capabilities. There is no doubt that limited resources have impacted capabilities to date, though mostly in terms of management and ease of use and not in terms of spam blocking when in capable hands. One of the main reasons I decided to sell the business was because of my limited resources. I was only able to devote a few hours a week to improving the Declude products, and was spending way too much time doing everything from accounting to making changes to the web site. Barry and Charlie have better resources to handle the things that don't need my expertise, which gives me time to focus on the software. I hope that Barry and Charles both understand that Declude is not an inexpensive product and I'm sure that everyone around here expects a continuation of the same principals, or in the very least an upfront disclosure of any plans to derivative from the existing model. Speaking for myself, I've been developing a new business and making decisions based on the existing model, and some changes made at the top can cause my business a great deal of harm. I hope that they also respect the contributions of the community in respect to development, and the value that this represents to the business as a whole. You need look no further than the IMail forum for an example of what happens when you virtually abandon the hardcore followers of a product. I can't say that there won't be any changes, but I believe that most of the changes will be positive. I am not aware of any major changes to the existing model, but if you have any specific concerns, be sure to ask me. I've experienced similar changes a few times, and invariably the bean counters win out over the community and their unique needs, though this tends to take some time and these were also big time buyouts. HomeSite for instance followed much the same path to date with Declude, and Allaire then Macromedia teamed up to harm the product from virtually every avenue while adding expense to the users. When I decided to go with Declude for my new business, I really decided to go with R. Scott Perry. I think one of the main differences here is that I am staying on, and am just as committed to my customers as I was before. So you're still getting R. Scott Perry. While I won't be making all the final decisions, Barry and Charlie understand that there are quite a few people out there that decided to go with R. Scott Perry, and that they all had good reasons for doing that. There may be problems -- but if so, I'm hoping we can anticipate what they might be ahead of time, so I can help avoid them. My hope here is that the new owners maintain and expand the extensibility of the product by putting as many capabilities as possible in the hands of the power users (expanded external filter support and deep customization), while at the same time I imagine they seek to simplify administration for those with less time and interest, and that they don't change for the worse the way the product is licensed for those seeking high volumes. I believe that your expectations here will be met or exceeded. My own biggest concern would be a change at any point in the future that would make Declude significantly more expensive (such as per-user licensing)... Although I can't make any guarantees here, I do not expect that there will be any significant changes to pricing (or the method of licensing). They recognize that the pricing is part of what got
RE: [Declude.JunkMail] Imail 8.1 Trouble
How do we know which interim is the latest? You actually don't need to know. You should normally only run an interim if there is a specific need for it (such as a new feature or bug fix). So I would recommend continuing with the interim that you are running now. The one main exception is that if there is a newer released version or beta, you should upgrade to it. For example, if you are running 1.78i10 and 1.79 is out, you should upgrade to 1.79. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] My wishlist for the new company
1- ONLYSENDIFFORGING, and/or Autoforge replace sender by [forged] This is in the suggestion database, and something that will likely be added. 2- %REVDNS% for %REMOTEIP% in declude.virus This too is in the suggestion database, and will likely be added. 3-a way to send notifications based on the banned extension: ONLYSENDIFEXT, SKIPIFEXT (for banext) This was not in the suggestion database, but is now. I want to see an improvement to the banned file notifications, and I think this would be a good improvement. 4- Banext by domain/user This is something that a number of people have requested. It gets more complicated than the other changes, as it may require a change to the way that the Declude Virus per-user/per-domain config files are set up, so this probably will be a long-term project rather than a short-term one. 5-BANZIPEXT/BANEZIPEXT independant from banext, as in There is a good chance that this will happen -- it probably would have been included originally, if we weren't rushed to get the feature out (due to Bagle being able to spread undetected). 6- ALLOWEXT .AXT BANALLATTACHEMNTS This is in the suggestion database (several people have requested it). It's something that I would definitely like to see be added. Declude JM 1-Possibility to specify holding directory for hold action This is often requested, and is getting a higher and higher priority as time goes by. 2- Test on attachement type and size in JM (the size part already available as external thanks to Matt) The attachment type would have to wait until full MIME support is added. Filtering on the size is something that a number of people have requested. 3- %Localrecp%, %remoterecp%, %nblocalrecp%, %nbremoterecp% Those will likely get added. Also, I do not know is this is possible, and/or how it can be done, a way to change the recepient list for an outgoing email: Say instead of a Q/D file with %allrecepients%, split that into individual Q/D, or One Q/D for %localrecep% and one for %remoterecp%, and move those to separate holding directories That's an interesting idea. We have considered the idea of splitting E-mails so there is one per recipient, and if we have an option to do that at some point, we might also have an option for splitting local/remote. . -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Notification to customers of change of ownership
Scott, As a brand new member of the list and trying to learn the SPAM ropes quickly I have been very impressed with the product and your support. (Do you ever sleep? :) I wish you the best of luck with Barry and Charles and congratulations to you for building the company large enough to interest others. Please continue with the great support and answering my newbie questions, I hope to soon learn enough to ask better questions :. Goran Jovanovic The LAN Shoppe E-Mail: [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Notification to customers of change of ownership
Hi, Just a suggestion: Rather then talking to them in the third person, it may be reassuring if they were to introduce themselves to their customers and personally address some of the points that list members have raised. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, April 12, 2004 07:11 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Notification to customers of change of ownership I truly believe that this will be beneficial for everyone. To state the obvious, there's always a battle in such arrangements between the bottom line and satisfying expectations, and over time, the bottom line always wins when you are playing with someone else's money. That is definitely true. One of my top concerns was making sure that my customers' needs be met. I have been working with Barry and Charlie for quite some time now, and am confident that they recognize that my input will be very important to their success. So if anyone is concerned with the way that things are working out, please contact me and let me know. Your approach to the business to date has been strikingly similar to open source in many ways, and in other ways customer service-centric in nature or just good old fashioned business. Neither one of these maximizes profits, and when it's your baby, you can make the choice between making decisions that generate more money and more customers or greater personal satisfaction whether or not it is in spite of profits. Barry and Charlie are expecting for this to be a profitable venture (which is the goal of just about every business). While they do plan to grow the business, I feel comfortable that it is going to be at a sustainable rate. Which leads to: I also recognize the value of the argument that says with more resources, capabilities can be expanded at a much faster rate, and for what you might lose to the bottom line, you gain from these capabilities. There is no doubt that limited resources have impacted capabilities to date, though mostly in terms of management and ease of use and not in terms of spam blocking when in capable hands. One of the main reasons I decided to sell the business was because of my limited resources. I was only able to devote a few hours a week to improving the Declude products, and was spending way too much time doing everything from accounting to making changes to the web site. Barry and Charlie have better resources to handle the things that don't need my expertise, which gives me time to focus on the software. I hope that Barry and Charles both understand that Declude is not an inexpensive product and I'm sure that everyone around here expects a continuation of the same principals, or in the very least an upfront disclosure of any plans to derivative from the existing model. Speaking for myself, I've been developing a new business and making decisions based on the existing model, and some changes made at the top can cause my business a great deal of harm. I hope that they also respect the contributions of the community in respect to development, and the value that this represents to the business as a whole. You need look no further than the IMail forum for an example of what happens when you virtually abandon the hardcore followers of a product. I can't say that there won't be any changes, but I believe that most of the changes will be positive. I am not aware of any major changes to the existing model, but if you have any specific concerns, be sure to ask me. I've experienced similar changes a few times, and invariably the bean counters win out over the community and their unique needs, though this tends to take some time and these were also big time buyouts. HomeSite for instance followed much the same path to date with Declude, and Allaire then Macromedia teamed up to harm the product from virtually every avenue while adding expense to the users. When I decided to go with Declude for my new business, I really decided to go with R. Scott Perry. I think one of the main differences here is that I am staying on, and am just as committed to my customers as I was before. So you're still getting R. Scott Perry. While I won't be making all the final decisions, Barry and Charlie understand that there are quite a few people out there that decided to go with R. Scott Perry, and that they all had good reasons for doing that. There may be problems -- but if so, I'm hoping we can anticipate what they might be ahead of time, so I can help avoid them. My hope here is that the new owners maintain and expand the extensibility of the product by putting as many capabilities as possible in the hands of the power users
Re[2]: [Declude.JunkMail] Notification to customers of change of ownership
Just to add my $.02, I think I have to agree with Matt on 100% of his message. Especially... M I hope that Barry and Charles both understand that Declude is not an M inexpensive product and I'm sure that everyone around here expects a Almost $2500 for add-ons is more than the base product. Declude is good, but not cheap. M in bringing Declude from it's infancy to what it is now, and for that M you get a big (and repeated) congratulations. I'm also very, very Ditto here. Declude is a great product. M thankful that it wasn't Ipswitch, or heaven forbid, Microsoft, that M bought you out :) I didn't think it would be M$, but I've long feared that you would be bought by Ipswitch and all the innovation and responsiveness would have gone down the tube. I'll add my cautious optimism and congratulations. -- Best regards, Davidmailto:[EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT: Call for beta testers
All, MailMage is seeking beta testers for our latest utility, MilterSink. MilterSink is a highly configurable DLL event sink for Microsoft's IIS SMTP service (a.k.a. MS SMTP) allowing for the integration of command-line content scanners. Originally designed to wrap our SPAMC32 client for SpamAssassin, MilterSink can also be used with SortMonster's Message Sniffer or any console-mode milter, and even offers rudimentary support for Declude Junkmail. Basic actions to be taken on scanned messages include header insertion, subject modification, server-side quarantine, or deletion. Advanced features will include multiple milter support (up to four per server), compound tests, message rerouting, and more. All interested should subscribe to the miltersink-beta mailing list at http://listbot.cypressintegrated.com and pursue additional discussion there--I don't want to clutter this list. We'll give the list a couple of days to fill up and will likely distribute the 0.5.0 Beta on Wednesday. As always, documentation brings up the rear. :) Regards, Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Notification to customers of change of ownership
Hi Scott- Allow me to add my congratulations to the others you've received. You have worked hard for this and you deserve whatever reward came to you as a result of this deal. -Dave Doherty Skywaves, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Combine BASE64 and REVDNS?
Hey, Kevin. I do get the usual web page when I go to the CBL homepage you listed. I see that the last update was March-30-2004 when they stated that they had harvested out a lot of their old records. I stopped using CBL on Jan-05-2004, though, because the SpamHaus XBL is a superset of CBL, e.g.: XBL-DYNA ip4r xbl.spamhaus.org * 8 0 XBL-DYNA WARN Andrew 8) -Original Message- From: Kevin Bilbee [mailto:[EMAIL PROTECTED] Sent: Monday, April 12, 2004 10:30 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Combine BASE64 and REVDNS? http://cbl.abuseat.org/lookup.cgi?ip=24.234.0.78 Is CBL still working??? When I try to go to http://cbl.abuseat.org/ it get a page can not be displayed message/cannnot find server error message Kevin Bilbee --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Words found in encoded file atachments
Rick, no, the BODY text filtering searches everywhere, including inside binary attachments. Your best bet is to assign those nasty words with very little weight, don't use very short words, and/or try to match a phrase instead, or use trailing punctuation. For example, I've found that although they are darn common in spam, I can't use these with a weight any higher than 1: tit t1t mlm m1m hgh because of their false positives in binary attachments and BASE64 encodings of attachments. Andrew 8) -Original Message- From: Rick Davidson [mailto:[EMAIL PROTECTED] Sent: Monday, April 12, 2004 10:35 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Words found in encoded file atachments Is it possible to exclude the filters from being triggered when finding words in the file attachment encoding in the message body? I have been getting some false positives on some nasty words that were arbitrarily formed in the encoding segments Rick Davidson National Systems Manager North American Title Group --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Last Action = log line
Nifty! I'm on the current interim without issue, and it's great to have that log line at LOGLEVEL MED. Thanks a bunch, Andrew 8) -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 07, 2004 2:15 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Last Action = log line This will be changed in the next interim release. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Combine BASE64 and REVDNS?
Andrew, You can save an extra lookup by using the combined address: XBLip4rsbl-xbl.spamhaus.org127.0.0.480 SBLip4rsbl-xbl.spamhaus.org127.0.0.2200 Declude will only do one lookup per unique address/DNSBL and then apply the result codes to all associated tests. Both tests can return a hit for the same IP under this arrangement. Note that the impact of this one change is fairly minor, but with a lot of minor changes, I have managed to get another half cup of juice out of my current server. Matt Colbeck, Andrew wrote: Hey, Kevin. I do get the usual web page when I go to the CBL homepage you listed. I see that the last update was March-30-2004 when they stated that they had harvested out a lot of their old records. I stopped using CBL on Jan-05-2004, though, because the SpamHaus XBL is a superset of CBL, e.g.: XBL-DYNA ip4r xbl.spamhaus.org * 8 0 XBL-DYNA WARN Andrew 8) -Original Message- From: Kevin Bilbee [mailto:[EMAIL PROTECTED] Sent: Monday, April 12, 2004 10:30 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Combine BASE64 and REVDNS? http://cbl.abuseat.org/lookup.cgi?ip=24.234.0.78 Is CBL still working??? When I try to go to http://cbl.abuseat.org/ it get a page can not be displayed message/cannnot find server error message Kevin Bilbee --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Words found in encoded file atachments
Yea I understand that but I am catching words like p*nis and c*nt that should have a heavy weight and for some reason it seems to be only PDF file attachments. Just thought it would be possible to skip that portion of the body due to the formating. Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Colbeck, Andrew [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, April 12, 2004 2:05 PM Subject: RE: [Declude.JunkMail] Words found in encoded file atachments Rick, no, the BODY text filtering searches everywhere, including inside binary attachments. Your best bet is to assign those nasty words with very little weight, don't use very short words, and/or try to match a phrase instead, or use trailing punctuation. For example, I've found that although they are darn common in spam, I can't use these with a weight any higher than 1: tit t1t mlm m1m hgh because of their false positives in binary attachments and BASE64 encodings of attachments. Andrew 8) -Original Message- From: Rick Davidson [mailto:[EMAIL PROTECTED] Sent: Monday, April 12, 2004 10:35 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Words found in encoded file atachments Is it possible to exclude the filters from being triggered when finding words in the file attachment encoding in the message body? I have been getting some false positives on some nasty words that were arbitrarily formed in the encoding segments Rick Davidson National Systems Manager North American Title Group --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Imail 8.1 Trouble
I'm running Imail 8.10 with Declude 1.79 and I've had to restart the Imail services a couple of times since the upgrade. Should I be running a different version of declude? thanks, Larry Craddock --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Link to download the Interim Release
Hi Scott, It seems that the link used for downloading the Interim releases doesn't work anymore since the site has been updated. Can you send me the new link, please. Thanks, Adrian --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Words found in encoded file atachments
...or a trailing space. Base64 encoding doesn't use punctuation or spaces. Your list would never hit base64 if all you did was add a space, and that would probably hit more often than with punctuation. Staying away from words 5 characters or less also helps because for each additional character, you are about 28 times less likely to see that pattern in base64 code. Needlesstosay, I'm not big on word filtering, though I do have several filters, all scored very low. Matt Colbeck, Andrew wrote: Rick, no, the BODY text filtering searches everywhere, including inside binary attachments. Your best bet is to assign those nasty words with very little weight, don't use very short words, and/or try to match a phrase instead, or use trailing punctuation. For example, I've found that although they are darn common in spam, I can't use these with a weight any higher than 1: tit t1t mlm m1m hgh because of their false positives in binary attachments and BASE64 encodings of attachments. Andrew 8) -Original Message- From: Rick Davidson [mailto:[EMAIL PROTECTED] Sent: Monday, April 12, 2004 10:35 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Words found in encoded file atachments Is it possible to exclude the filters from being triggered when finding words in the file attachment encoding in the message body? I have been getting some false positives on some nasty words that were arbitrarily formed in the encoding segments Rick Davidson National Systems Manager North American Title Group --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Imail 8.1 Trouble
This may be duplicated ... if so, please ignore. I'm running Imail 8.1 and Declude 1.79 and have had to restart Imail services a couple of times since upgrading. Should I be running a different version of Declude? thanks, Larry Craddock - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, April 12, 2004 6:19 AM Subject: RE: [Declude.JunkMail] Imail 8.1 Trouble How do we know which interim is the latest? You actually don't need to know. You should normally only run an interim if there is a specific need for it (such as a new feature or bug fix). So I would recommend continuing with the interim that you are running now. The one main exception is that if there is a newer released version or beta, you should upgrade to it. For example, if you are running 1.78i10 and 1.79 is out, you should upgrade to 1.79. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Combine BASE64 and REVDNS?
I stopped using CBL on Jan-05-2004, though, because the SpamHaus XBL is a superset of CBL, e.g.: Looking at the individual results on my server CBL has had 32% of correct votes (Between 04/01/04 and 04/11/04) In the same timerange XBL has had 30% of correct votes. (really a superset?) The absolute number of false positives (for the individual tests) was with 204 for CBL compared to 43 for XBL more then 4 times higher. In relative numbers this are false positive rates of 0,25% for CBL and 0,05% for XBL. There are other ip4r tests like IPWHOIS, NOBASUE and FIVETEN-SRC having a FP-rate of 3, 4 and 5% (in this order) Another report shows that both tests have a congruity of 90% for positive results. XBL has positive results - without a result from CBL - in 19% of all cases. (values from 24 hours from begin of february) So in my opinion both tests are very good. However looking at the subject line of this thread I would really love to see a new test type that allows us to give extra points if certain combinations of tests has failed. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Words found in encoded file atachments
Thanks Matt, the trailing space trick will do... I have the luxury of being tough on specific words so I am :-) Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Matt [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, April 12, 2004 2:21 PM Subject: Re: [Declude.JunkMail] Words found in encoded file atachments ...or a trailing space. Base64 encoding doesn't use punctuation or spaces. Your list would never hit base64 if all you did was add a space, and that would probably hit more often than with punctuation. Staying away from words 5 characters or less also helps because for each additional character, you are about 28 times less likely to see that pattern in base64 code. Needlesstosay, I'm not big on word filtering, though I do have several filters, all scored very low. Matt Colbeck, Andrew wrote: Rick, no, the BODY text filtering searches everywhere, including inside binary attachments. Your best bet is to assign those nasty words with very little weight, don't use very short words, and/or try to match a phrase instead, or use trailing punctuation. For example, I've found that although they are darn common in spam, I can't use these with a weight any higher than 1: tit t1t mlm m1m hgh because of their false positives in binary attachments and BASE64 encodings of attachments. Andrew 8) -Original Message- From: Rick Davidson [mailto:[EMAIL PROTECTED] Sent: Monday, April 12, 2004 10:35 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Words found in encoded file atachments Is it possible to exclude the filters from being triggered when finding words in the file attachment encoding in the message body? I have been getting some false positives on some nasty words that were arbitrarily formed in the encoding segments Rick Davidson National Systems Manager North American Title Group --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Notification to customers of change of ownership
Please continue with the great support and answering my newbie questions, I hope to soon learn enough to ask better questions :. Don't worry, I will continue answering questions here (and on the IMail Forum). :) -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Notification to customers of change of ownership
Just a suggestion: Rather then talking to them in the third person, it may be reassuring if they were to introduce themselves to their customers and personally address some of the points that list members have raised. I've passed this on to Barry, and suggested that he join the list -- hopefully, you will be hearing from him soon on the list. Things are extremely busy right now, but customer service is a top priority of his, so I have a feeling he will make this a priority. :) -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Link to download the Interim Release
It seems that the link used for downloading the Interim releases doesn't work anymore since the site has been updated. Can you send me the new link, please. We're working on that one. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Notification to customers of change of ownership
On 12 Apr 2004 at 14:44, R. Scott Perry wrote: Don't worry, I will continue answering questions here (and on the IMail Forum). :) If Chucky Barry don't work you promise you won't leave us correct? -Nick Hayer -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. [AUTOMATED NOTE: Your mail server [170.222.200.91] is missing a reverse DNS entry. All Internet hosts are required to have a reverse DNS entry. The missing reverse DNS entry will cause your mail to be treated as spam on some servers, such as AOL.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] New ownership.
First and foremost congratulations. Thank you. :) Second -- mta connection: POSTFIX! If I could do at the gateway servers what I do at the mailbox server, there would be NO load at the mailbox server. We're looking into it. :) Third -- The website looks very corporate, while that's not a bad thing, the other site was more... homey. Features smeatures, give me TEXT. :) I'll pass this on to the people who are in charge of the web site. I, too, prefer text! We seem to be a rare breed, though. Finally, congratulations to Barry and Charles, they could not have bought into a better product, or have a more dedicated Director of Software Architecture... G -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Notification to customers of change of ownership
Have you already started considering which other MTA's you will try to integrate with? No decisions have been made yet, but it looks like a gateway product (which would be compatible with all SMTP servers) may be the way that we go. I want to suggest Xmail Server (http://www.xmailserver.org). I have looked at making Declude work with it before, but never found the time to write the middleware needed. I like Xmail for it's speed and configurability, and the next release will add integrated IMAP finally. I also like the suggestion of MS SMTP service, but either dealing with sinks used in MS SMTP is very difficult or developers think admins are suckers, I have never seen a cheap addin for MS SMTP, even simple ones. Of course, feel free to correct me if they do exist. Thanks for the suggestions -- we will take a note of this. Another question, will there be any consideration in making Declude multi-platform? It is something that we are giving serious thought to. At this point, it isn't a high priority -- but something that is being considered as we do development work. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] Notification to customers of change of ownership
I have never seen a cheap addin for MS SMTP, even simple ones. http://www.mail-archive.com/declude.junkmail%40declude.com/msg17599.html I suppose it depends on what you mean by add-in, but... --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[2]: [Declude.JunkMail] Notification to customers of change of ownership
I saw that when you posted it (also know as when it hit my mailbox), after I posted mine. And I stand corrected. Thanks, Chuck Frolick ArgoLink.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Monday, April 12, 2004 3:49 PM To: Charles Frolick Subject: Re[2]: [Declude.JunkMail] Notification to customers of change of ownership I have never seen a cheap addin for MS SMTP, even simple ones. http://www.mail-archive.com/declude.junkmail%40declude.com/msg17599.html I suppose it depends on what you mean by add-in, but... --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] CBL
Is CBL still running. I have nto been able to get to their web site for a few days now??? Kevin Bilbee --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Country Codes
I know transition pains are happening but I cannot access the country dat file at http://www.declude.com/release/179/all_list.dat or http://www.declude.com/179/all_list.dat Plus I noticed that the release notes do not have anything about the newest beta. The top of both Manual pages need the Latest Version:... updated. The link in the body of the JM page is correct but not worded correctly on the AV page. John Olden - Systems Administrator Champaign Park District --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] FW: CBL
OK it is working vor me now. Must have been some kind of DNS cache issue or something. I flushed my DNS cache and it is working now. Sorry about the subject line in the last post. Kevin Bilbee -Original Message- From: Kevin Bilbee [mailto:[EMAIL PROTECTED] Sent: Monday, April 12, 2004 3:59 PM To: Subject: CBL Is CBL still running. I have nto been able to get to their web site for a few days now??? Kevin Bilbee --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Country Codes
I know transition pains are happening but I cannot access the country dat file at http://www.declude.com/release/179/all_list.dat or http://www.declude.com/179/all_list.dat Sorry about that -- they should be at http://www.declude.com/version/beta/all_list.dat shortly. Note that the new URLs for the betas/releases will be static URLs (IE a URL for the latest beta, rather than a URL for v1.79 today and a URL for v1.80 when the next version is ready). Plus I noticed that the release notes do not have anything about the newest beta. The top of both Manual pages need the Latest Version:... updated. The link in the body of the JM page is correct but not worded correctly on the AV page. Thanks for pointing this out -- there are some pages on the new website that still need to be updated to the latest version. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Surbl.org
From the IMGATE list: http://surbl.org/ Interesting concept. Anyone here tried it? Ive been planning to upgrade SA on my personal acct here and have a few hours to kill on Tues so I think I'm going to add it and see how well it does. Any chance this can be made to work with Declude? Thanks Jason [AUTOMATED NOTE: Your mail server [66.140.194.140] is missing a reverse DNS entry. All Internet hosts are required to have a reverse DNS entry. The missing reverse DNS entry will cause your mail to be treated as spam on some servers, such as AOL.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Call for beta testers
All, While no one has protested, it's possible that the beta invitation might have looked like a commercial plug to some of you. We initially thought of indicating otherwise outright, but decided that it that might look as if _we_ had protested too much. grin For the record, this project is mostly underway to treat our Exchange clients to a taste of Sniffer and get a little more respect for our coding group. We currently expect to make MilterSink available free of charge. True, it's impossible to rule out a huge volume of feature requests and a pay (shareware-cheap) version down the line, but this is not in any current plan and was not the motivation for my post. Again, sorry if y'all felt spammed. Incidentally, I have kept this off the IMail Forum because it embraces competitive technology, even if free. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Spamreview
Has anyone responded to this. It is a great program... I wish I had a VB program to do the work. Fred - Original Message - From: Tom Schwarz [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, April 10, 2004 9:45 AM Subject: [Declude.JunkMail] Spamreview Scott, We have switched email systems and will no longer be supporting SpamReview. It is written in VB6.0. You have any suggestions of someone that we can turn it over to? Have a Great Day, Tom -- Where Online Shopping Is Fun http://www.shopping-headquarters.com -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Spamreview
We have switched email systems and will no longer be supporting SpamReview. It is written in VB6.0. You have any suggestions of someone that we can turn it over to? All right, hand it over. I'm in too deep to get out now. :) --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Surbl.org
I responded on the IMGate list, as well. We have been running if for a few days on our SA gateways, and it has been working great, flagging lots of spam. Bill - Original Message - From: Jason [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, April 12, 2004 8:37 PM Subject: [Declude.JunkMail] Surbl.org From the IMGATE list: http://surbl.org/ Interesting concept. Anyone here tried it? Ive been planning to upgrade SA on my personal acct here and have a few hours to kill on Tues so I think I'm going to add it and see how well it does. Any chance this can be made to work with Declude? Thanks Jason [AUTOMATED NOTE: Your mail server [66.140.194.140] is missing a reverse DNS entry. All Internet hosts are required to have a reverse DNS entry. The missing reverse DNS entry will cause your mail to be treated as spam on some servers, such as AOL.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Surbl.org
Any chance this can be made to work with Declude? Well, SpamAssassin can. :) Another innocent plug... --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Surbl.org
Innocent? ;). We are already using spamchk as an external test. I would like to avoid adding spamassassin as well. I was thinking more along the lines of integrating the test into the declude core... Jason -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Monday, April 12, 2004 11:05 PM To: Jason Subject: Re: [Declude.JunkMail] Surbl.org Any chance this can be made to work with Declude? Well, SpamAssassin can. :) Another innocent plug... --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] Surbl.org
We are already using spamchk as an external test. I would like to avoid adding spamassassin as well. Alrighty--but _very_ different animals. Everything SpamChk does can be done with SA rules, AFAIK (not that those rules have been precisely reproduced as yet). And SA's hit rate with the available custom rulesets is very high (not Sniffer high, but very high). None of this is any slur whatsoever on Markus and his handiwork, which we use as well. Anyway, SURBL will probably get into Declude soon enough, per Scott. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Surbl.org
Scott's already said that they would be looking at integrating the functionality into Declude JunkMail: http://www.mail-archive.com/[EMAIL PROTECTED]/msg17502.html Bill - Original Message - From: Jason [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, April 12, 2004 9:22 PM Subject: RE: [Declude.JunkMail] Surbl.org Innocent? ;). We are already using spamchk as an external test. I would like to avoid adding spamassassin as well. I was thinking more along the lines of integrating the test into the declude core... Jason -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Monday, April 12, 2004 11:05 PM To: Jason Subject: Re: [Declude.JunkMail] Surbl.org Any chance this can be made to work with Declude? Well, SpamAssassin can. :) Another innocent plug... --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Spamreview
We did. Waiting to see what Tom decides... Darin. - Original Message - From: Frederick Samarelli [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, April 12, 2004 11:50 PM Subject: Re: [Declude.JunkMail] Spamreview Has anyone responded to this. It is a great program... I wish I had a VB program to do the work. Fred - Original Message - From: Tom Schwarz [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, April 10, 2004 9:45 AM Subject: [Declude.JunkMail] Spamreview Scott, We have switched email systems and will no longer be supporting SpamReview. It is written in VB6.0. You have any suggestions of someone that we can turn it over to? Have a Great Day, Tom -- Where Online Shopping Is Fun http://www.shopping-headquarters.com -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Notification to customers of change of ownership
Scott, While I respect open source, I think the greater market opportunity for a for profit gateway product is on Windows based servers using MS SMTP. For one, it would probably allow your current base of IMail users to make use of it on the same server if they had a port forwarding firewall to handle SMTP AUTH (or you could also configure the gateway to do the AUTH for them and do away with the need for port forwarding), but more importantly, there is a large market of Exchange and MDaemon servers out there that could also make use of the product, and hopefully marry the capabilities into as few different sets of code as possible. Businesses that pay for their mail server software are much more likely to pay for their spam and virus blocking software as well, while those using things like Postfix are more likely to go the SpamAssassin/open source route. Although Windows costs money as a platform, so do extra servers and extra rack space (and extra servers to support). So having a single box-solution would be better than a multiple box solution except in very large installations where provisioning is already a practical reality. I would be surprised to see a good business case for any other platform offering the most potential unless you were planing on creating your own SMTP engine, though I'm sure that individually we may have many different needs that don't fit one generalized mold. From what I have seen with VAMSoft's ORF, you should be able to access all the data used with IMail except for alias resolution, with the obvious caveat that the account list would need to be exported (which could be done with a simple tool), or maybe you could build the hooks in as you do now. Another suggestion might be to simplify the code base by marrying the capabilities across versions and providing different levels according the number of accounts similar to how IMail does their licensing. This probably roughly matches the breakdown of your service currently, with heavier users opting for the more expensive options. My concern here is more so the speed of the introduction of new features and bug fixes, and the more platforms that you support along with the options available according to the version might make such things more difficult to maintain. This would also lessen the support and documentation needed according to the current forms of differentiation among versions. From a business perspective, this might provide better cost justification for lower volume users that seek out more advanced capabilities, and this group represents the majority of mail servers out there and plenty of business opportunity. And to keep this from impacting the smaller group of current users that this could impact negatively (charging more according to volume and not capabilities), you might want to think about grand fathering them in to a modified licensing scheme. Just thought I would mention these things since I'm sure you are actively thinking about alternatives right now. Matt R. Scott Perry wrote: Have you already started considering which other MTA's you will try to integrate with? No decisions have been made yet, but it looks like a gateway product (which would be compatible with all SMTP servers) may be the way that we go. I want to suggest Xmail Server (http://www.xmailserver.org). I have looked at making Declude work with it before, but never found the time to write the middleware needed. I like Xmail for it's speed and configurability, and the next release will add integrated IMAP finally. I also like the suggestion of MS SMTP service, but either dealing with sinks used in MS SMTP is very difficult or developers think admins are suckers, I have never seen a cheap addin for MS SMTP, even simple ones. Of course, feel free to correct me if they do exist. Thanks for the suggestions -- we will take a note of this. Another question, will there be any consideration in making Declude multi-platform? It is something that we are giving serious thought to. At this point, it isn't a high priority -- but something that is being considered as we do development work. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/
Re: [Declude.JunkMail] Combine BASE64 and REVDNS?
Andrew, That's the first I heard about that zone including the Blitzed tests. Their information is confusing as it appears on their site. It may be that there is no 127.0.0.5 result and the dash means that the values lie between 4 and 6 or 2 and 6. I believe that with just SBL and CBL data, they also listed it as 2-4, meaning 2 or 4 and not 2 through 4. It might be that this means that SBL is 127.0.0.2, CBL/XBL is 127.0.0.4, and Blitzed is 127.0.0.6. Please let me know the results of your findings after another day of monitoring and I'll likewise update my own tests. Thanks, Matt Colbeck, Andrew wrote: Good point, Matt. I think I implemented this before SpamHaus had made some of their description more explicit, or more likely, I was just obtuse. My interpretation of their description had led me to believe that the sbl-xbl.spamhaus.org domain was a "join" on the two dnsbl databases, ** which is wrong **, and I didn't want that anyway, because I wanted to score the two results differently. On going back to the website, I find that they have also incorporated blitzed.opm.org which is also good news, and I'm sure counts in large part to the success of my XBL-DYNA test; it also means that I was making 3 dnsbl lookups where one would have sufficed! To cover the XBL and BLITZED tests, they supply 3 different answers (127.0.0.4, 127.0.0.5, 127.0.0.6) I haven't seen any documentation on what information SpamHaus is conveying with these 3 values ... in 3 hours of testing, I haven't had any hits that returned 127.0.0.5 The reason I was using BLITZEDALL is that a given IP address can appear with multiple values, with each representing the kind of trojan/zombie for which it tested positive. But I only wanted to score once per test per IP. Blah blah blah... So that I can still score SBL as high as I prefer, and still score XBL lower, I now have something like this: SBLip4rsbl-xbl.spamhaus.org127.0.0.2120 XBLip4rsbl-xbl.spamhaus.org* 80 Each hit will be counted by SBL and XBL, which still achieves SBL scoring 20, and XBL scoring only 8, but is misleading because when you get a hit on XBL, it might not have been a zombie, but a SBL spammer. So, that cuts 3 dnsbl lookups down to 1, but with some loss of accuracy in why an IP is in XBL; that may be over-optimizing for some people. Andrew 8) -Original Message- From: Matt [mailto:[EMAIL PROTECTED]] Sent: Monday, April 12, 2004 11:08 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Combine BASE64 and REVDNS? Andrew, You can save an extra lookup by using the combined address: XBLip4rsbl-xbl.spamhaus.org127.0.0.4 80 SBLip4rsbl-xbl.spamhaus.org127.0.0.2200 Declude will only do one lookup per unique address/DNSBL and then apply the result codes to all associated tests. Both tests can return a hit for the same IP under this arrangement. Note that the impact of this one change is fairly minor, but with a lot of minor changes, I have managed to get another half cup of juice out of my current server. Matt Colbeck, Andrew wrote: Hey, Kevin. I do get the usual web page when I go to the CBL homepage you listed. I see that the last update was March-30-2004 when they stated that they had harvested out a lot of their old records. I stopped using CBL on Jan-05-2004, though, because the SpamHaus XBL is a superset of CBL, e.g.: XBL-DYNA ip4r xbl.spamhaus.org * 8 0 XBL-DYNA WARN Andrew 8) -Original Message- From: Kevin Bilbee [mailto:[EMAIL PROTECTED]] Sent: Monday, April 12, 2004 10:30 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Combine BASE64 and REVDNS? http://cbl.abuseat.org/lookup.cgi?ip=24.234.0.78 Is CBL still working??? When I try to go to http://cbl.abuseat.org/ it get a page can not be displayed message/cannnot find server error message Kevin Bilbee --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
