RE: [Declude.JunkMail] F-prot

2006-01-05 Thread John T \(Lists\)
This really belongs on the Virus list. I finally just got logged into their server and am downloading now. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Wednesday, January 04, 2006

[Declude.JunkMail] V3 updated filter files

2006-01-05 Thread Markus Gufler
Question: what files in v3 are read once durring service startup and what files are read for each message. For example what happens if I update certain text filter files but do not restart the decludeproc ? Markus --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] ---

Re: [Declude.JunkMail] V3 updated filter files

2006-01-05 Thread David Franco-Rocha
Markus, There is currently no need to restart the Decludeproc service when you change a filter or configuration file; files are read for each message processed, just as with the versions of Declude prior to 3.x. This will not always be the case, however, as we continue to streamline and modify

RE: [Declude.JunkMail] V3 updated filter files

2006-01-05 Thread Markus Gufler
Ok, thank you for the fast response. Your intention to streamline the product is welcome to me. Maybe you can simplify for us admins things me anabling some or different methods to start a re-read of the config and filter files. For example: 1.) Watch for a certain email processed by declude

[Declude.JunkMail] Review folder

2006-01-05 Thread Markus Gufler
Another question: What's happened with messages in the review-folder? Whas they delivered and why are they stored in this folder? Markus --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just

Re: [Declude.JunkMail] V3 updated filter files

2006-01-05 Thread Mike Nice
I'll second the request to minimize service restarts ... My favorite solution for this type of problem is to scan the file dates and reread them only on a date change (older or newer). A directory query takes a fraction of the time to read and parse a file. - Original Message -

Re: [Declude.JunkMail] V3 updated filter files

2006-01-05 Thread Darrell \([EMAIL PROTECTED])
In my experience I have added info to filters, global.cfg, and virus.cfg and had it take affect without restarting the decludeproc. The only time I ever need to restart the decludeproc is when I make changes to the declude.cfg file. Darrell --- Check

[Declude.JunkMail] Do I admit to this...?

2006-01-05 Thread David Lewis-Waller
This is a small tale of my own incompetence which, I hope, others may learn from Our domain had been getting a lot of SPAM email over the Christmas holiday and I had initially put it down to seasonal ill will but was surprised at the sheer volume of unmarked email that was getting through.

[Declude.JunkMail] blocking IP range

2006-01-05 Thread Kevin Rogers
I remember someone on this list said that if I wanted to add a weight to a series of IP addresses in the same range I could do it this way: 1. In my global.cfg add an external test pointing to a file, adding some weight to it 2. In that file, have a list of IP addresses for example:

RE: [Declude.JunkMail] RBL warning

2006-01-05 Thread Dan Horne
You should also prefix custom header names with X-, eg: X-CustomHeaderName: %TESTNAME%... Etc Matt wrote on Wednesday, January 04, 2006 11:35 PM: These are the text records returned from the blacklist. It might also be Declude inserting the full lookup in the place of a text record

Re: [Declude.JunkMail] blocking IP range

2006-01-05 Thread Scott Fisher
global.cfg: MAILFROM-IP-BLACKLIST ipfile D:\imail\declude\FPFilters\MailFrom-IP.txt x 150 0 Mailfrom-ip.txt: 199.232.98.0/24 199.232.98.0/24 insiderbizclub.com added 05-26-06 199.237.50.179 199.237.50.179 greatlaurel.net added 04-16-05 Either and IP address or a IP and CIDR.

Re: [Declude.JunkMail] blocking IP range

2006-01-05 Thread J Porter
I believe ipfile is specifically used to block single IPs and blocks of IPs. The file it relates to should have a list of single IPs or IP/CIDR. After the IP, the remainder of the line is only used for comments. Otherwise you can also have a test (just as you state you've already got) in

RE: [Declude.JunkMail] RBL warning

2006-01-05 Thread Gary Steiner
So would this work? BASURA WARN X-RBL-Warning: %TESTNAME%: http://www.emailbasura.org/cgi-bin/consultaip.pl?%TESTDOMAIN% I am uncertain what you mean by not have any spaces before the first colon. In the example above, are you saying be careful not to have a space between Warning and the

Re: [Declude.JunkMail] RBL warning

2006-01-05 Thread Matt
Gary, That will work. The issue with the first colon is that for a header to be properly formated, there must be no spaces before the first colon. Most use dashes where a space might otherwise be, just as you have done. Matt Gary Steiner wrote: So would this work? BASURA WARN

Re: [Declude.JunkMail] RBL warning

2006-01-05 Thread Matt
One other thing. The link that you definied probably won't work properly. If this was an IP4R test, the proper variable would either be %IP4R% or %REMOTEIP%. If this was a RHSBL test, the variable would be %MAILFROM%. Matt Gary Steiner wrote: So would this work? BASURA WARN

Re: [Declude.JunkMail] RBL warning

2006-01-05 Thread Gary Steiner
Thanks Matt. Original Message From: Matt [EMAIL PROTECTED] Sent: Thursday, January 05, 2006 9:59 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] RBL warning One other thing. The link that you definied probably won't work properly. If this was an