RE: [Declude.JunkMail] OT: Software for copying files with permissions

This looks like what I'm looking for. We are not interested in using the DFS option, everything will be going on one server I can buy something 3rd party, as well, if anyone has any suggestions for something that might work better than this. In the past I have found that the free MS tools are

[Declude.JunkMail] OT - Can you reach my site?

Had a spiffy little DNS problem the other day, everything should be OK at this point, but. Can anyone not reach http://www.faucet.com/ ? Thanks, Sam SJ.Stanaitis - Network Administrator Decorative Product Source, Inc. 845-294-4373 x160 --- This E-mail came from the

RE: [Declude.JunkMail] OT - Can you reach my site?

Hi Sam I am able to get to the site. I am in Massachusetts US David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of SJ.Stanaitis Sent: Wednesday, June 27, 2007 8:41 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT - Can you reach my site? Had a spiffy

Re: Re[2]: [Declude.JunkMail] Using Footer32 in per domain configuration

Hi Sandy, I never thought to check that since it was a Declude external test, but thanks for that info. I was referring to your announcement notes that detailed the switches. I was hoping you'd chime in g Darin. - Original Message - From: Sanford Whiteman [EMAIL PROTECTED] To:

AW: [Declude.JunkMail] OT - Can you reach my site?

I can reach it Greetings from Heilbronn, Germany J Alex Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von SJ.Stanaitis Gesendet: Mittwoch, 27. Juni 2007 14:41 An: declude.junkmail@declude.com Betreff: [Declude.JunkMail] OT - Can you reach my site? Had a spiffy little DNS problem

[Declude.JunkMail] New PDF worm?

I'm getting gobs of PDF's snagged in my antispam filter, they're not triggering any AV yet, anyone else seeing this? SJ.Stanaitis - Network Administrator Decorative Product Source, Inc. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to

Re: [Declude.JunkMail] New PDF worm?

Yep. Darin. - Original Message - From: SJ.Stanaitis To: declude.junkmail@declude.com Sent: Wednesday, June 27, 2007 11:17 AM Subject: [Declude.JunkMail] New PDF worm? I'm getting gobs of PDF's snagged in my antispam filter, they're not triggering any AV yet, anyone else seeing

RE: [Declude.JunkMail] New PDF worm?

Yes I am seeing the same thing although when I run the pdf through a virus check it comes up clean. I opened one of the files and it was just stock spam. If anyone is running the CB-ATTACH.txt filter I would suggest commenting out this line for now. #BODY -10 PCRE

RE: [Declude.JunkMail] New PDF worm?

SJ, they're not viruses, they're spam sent from zombies. Probably pump and dump stock spam, and if they're like what I've been seeing, they have the same anti-OCR techniques that were previously sent as jpg. http://www.mail-archive.com/[EMAIL PROTECTED]/msg03447.html and:

Re: [Declude.JunkMail] New PDF worm?

SJ, Andrew posted a blurb from SANS a couple of days ago. Pump and dump scams now in PDF Published: 2007-06-20, Last Updated: 2007-06-20 21:33:39 UTC by Maarten Van Horenbeeck (Version: 1) Apparently the groups behind what we know as pump and dump spam have found a new way to bypass spam

Re: [Declude.JunkMail] New PDF worm?

Hi David, What's the CB-ATTACH.txt filter? Darin. - Original Message - From: David Barker To: declude.junkmail@declude.com Sent: Wednesday, June 27, 2007 11:24 AM Subject: RE: [Declude.JunkMail] New PDF worm? Yes I am seeing the same thing although when I run the pdf through a

RE: [Declude.JunkMail] New PDF worm?

It is a filter I use to reduce the weights on attachments not likely to be spam, you can log into your account at Declude and download the sample filters. David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Wednesday, June 27, 2007 12:20 PM To:

RE: [Declude.JunkMail] New PDF worm?

I'll suggest an alternative to this. If you're using the CB-ATTACH filter and you want to keep it without giving spammers too much entry, use an END filter with your blacklist tests. If the sender's IP address is in the blacklist, the CB-ATTACH test will stop. This will still counterweight

RE: [Declude.JunkMail] New PDF worm?

Great idea. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Wednesday, June 27, 2007 12:40 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] New PDF worm? I'll suggest an alternative to this. If you're using the CB-ATTACH filter

Re[4]: [Declude.JunkMail] Using Footer32 in per domain configuration

I never thought to check that since it was a Declude external test, but thanks for that info. I was referring to your announcement notes that detailed the switches. Gotcha. I always implement command-line help switches for my command-line apps, FTR, even if they are meant to be forked

Re: Re[4]: [Declude.JunkMail] Using Footer32 in per domain configuration

Excellent practice. I should have thought to look. Appreciate it, Sandy! Darin. - Original Message - From: Sanford Whiteman [EMAIL PROTECTED] To: Darin Cox declude.junkmail@declude.com Sent: Wednesday, June 27, 2007 4:29 PM Subject: Re[4]: [Declude.JunkMail] Using Footer32 in per