I actually reached for an older linux distro called sentinix. Comes kind of
out of the box with Snort/ACD and Nagios/Nagios Admin.
A little dated but as it sits behind a very secure firewall it is extremely
effective and fairly painless and has a cost of $0.
Chris
-Original Message-
Id turn on verbose logging in imail
and declude. In the Declude log file something did not go quite right at
17:14:34:513.
It looks like Imail is functioning ok but
declude miss handled the email\attachment in question.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Guhl, Markus (LDS) wrote:
hi,
are those files backing up regular incomming mails or are they *.fwd
and *.gse files?
what happens when you put a mail (d*.smd and q*.smd) into spool by
hand (something like a false positiv)?
which version of imail do you use?
I've tried manipulating
Title: Logged spam getting to mailbox
Hello,
I'm having trouble with a particular spam message getting to my mailbox each day. The declude log file shows the scanning and scoring. However, the message that lands in the mailbox shows no sign of being scanned.ie there are no X-RBL headers in
Title: Logged spam getting to mailbox
Odd - just because its always the same email. What number do you delete
on? Although the logs will balloon in size running the Declude in DEBUG
may shed some light. I presume this is Declude 3x ver?
-Nick
Agid, Corby wrote:
Hello,
I'm
For those that are interested in the effect of multi-CPU's and
hyperthreading has with an IMail/Declude setup, here's some additional
research.
I previously tested my dual Xeon setup with both hyperthreading enabled
and disabled, and found that the utilization jumped an astonishing ~100%
Title: Logged spam getting to mailbox
Andrew probably nailed this. In at least some versions of Declude, the
headers that it inserts could land in the body of the message due to
bad folding techniques that the spammer uses (sometimes also legitimate
mailers will produce this flaw). Your client
Title: Logged spam getting to mailbox
Current version does not fix this "folding" problem.
Declude is testing a newer version that may fix the problem, but no joy
yet.
Mattwrote:
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
MattSent: Tuesday, January 24, 2006 4:34 PMTo:
And since ATT now owns SBC, aren't we getting back to Ma Bell?
John T
eServices For You
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
Sent: Tuesday, January 24, 2006 3:56 PM
To: JunkMail Declude
Subject:
Title: Logged spam getting to mailbox
Nick, FYI, by gatewaying through MS SMTP/ORF, that actually normalizes
the headers before it gets to Declude and therefor this behavior is not
seen. You will however see some of the original headers left in the
body on some messages, but not the ones from
Title: Logged spam getting to mailbox
Well I'm somewhat more confused as I don't really know
what "bad folding" means. However, I don't see any of the X-headers in the
message body.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
MattSent: Tuesday, January 24,
Title: Logged spam getting to mailbox
Corby,
I also received a bunch of these, and one copy that I came up with in a
hold box showed that the headers were in fact broken. My MS SMTP
gateway shows the From, Bcc, and locally inserted MS SMTP headers at
the very bottom
of this message. That's
I think you've got it backwards, SBC acquired ATT but is keeping the ATT
name.
Bill
- Original Message -
From: John T (Lists) [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Tuesday, January 24, 2006 4:23 PM
Subject: RE: [Declude.JunkMail] Earthlink/prodigy
And since ATT now
Title: Logged spam getting to mailbox
Corby,
I assumed that you weren't using an MS gateway, I was just letting you
know that what happened to these headers was going to be different on
my system.
I have tons of spam on my system generated by this spamware and it's
all showing the same
Title: Logged spam getting to mailbox
Ok, thanks very much. I'll see if they'll get me the
latest 2.x version to see if that works. Can you clarify
somethingare you saying that you're receiving mail from the same spammer
that's causing my problem, but your system is handling it
Does it make a difference who is supplying the bed and who is supplying the
bedding?
John T
eServices For You
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Bill Landry
Sent: Tuesday, January 24, 2006 5:29 PM
To:
Title: Logged spam getting to mailbox
Corby,
Because of MS SMTP handling the E-mail before it reaches my
IMail/Declude system, Declude always inserts it's headers in the proper
block, however MS SMTP can cause some of the pre-Declude headers
(original) to appear in either the top of the body
I have been having problems with incomplete or broken headers in lots of spam
messages. Sometimes I will see the missing headers in
the body of the message, sometimes not. See below for example. The subject
when the message arrived in the inbox was: Subject:
EXPLICIT: Nice online dating booty
18 matches
Mail list logo
