Welcome to Notepad!
I've also been looking for a utility to do this, but haven't found it yet.
Spam Review was recommended to me, but I was disappointed to find out that it
only works with IMail - not SmarterMail. You can download it here -
http://www.sunlightsoftware.com/spamreview.htm
The
I continue to run into a problem where Declude fails to get any response from
the ip4r blacklists, then SmarterMail catches the exact same spam using the
ip4r blacklists(spamcop, cbl, spamhaus, etc.). Declude support implied that
there was a problem with my DNS server. But both Declude and
Message -
From: Gary Steiner [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Saturday, September 03, 2005 11:09 AM
Subject: [Declude.JunkMail] ip4r blacklists
I continue to run into a problem where Declude fails to get any response
from the ip4r blacklists, then SmarterMail
Regarding #5. I've run into spam that was sent to multiple addresses on the
server, and the spam was processed by Declude (it's listed in the log files),
but somehow when this spam is then moved to the hold directory it gets confused
and somehow loses track of the file, and the file doesn't
I'm confused. The page in the Knowledge Base
http://support.declude.com/Customer/KBArticle.aspx?articleid=11
says to put it in the global.cfg file. It also says nothing about adding the
ON switch. I even exchanged emails with Declude support back on Aug. 2
stating that I was putting
I've received a couple replies over time from Declude Support illustrated in
the following header:
Return-Path: [EMAIL PROTECTED] Fri Sep 09 20:22:49 2005
Received: from static-68-162-218-198.BOS.east.verizon.net [68.162.218.198] by
mail.plusultraweb.com with SMTP;
Fri, 9 Sep 2005 20:22:49
I guess it depends on exactly what text it is searching for. In looking at my
log files (set to Debug), I see that when it is checking the COUNTRIES filter I
created, it displays a message like Checking countries: *A . Is it actually
looking for an asterisk followed by an A? Here are some
Unlisted (Asia Pacific)
*R IANA Reserved
*U Unknown
- Original Message -
From: Gary Steiner [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Friday, September 16, 2005 2:06 PM
Subject: re: [Declude.JunkMail] ROUTING and COUNTRIES
I guess it depends on exactly what text
Of Gary Steiner
Sent: Sunday, September 18, 2005 12:11 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] ROUTING and COUNTRIES
If Declude is reading this, maybe they could add these values to their
Knowledge Base.
http://support.declude.com/Customer/KBArticle.aspx?articleid
I guess this would be the best source for current country codes:
http://www.iso.ch/iso/en/prods-services/iso3166ma/02iso-3166-code-lists/list-en1.html
ARIN's list lets you break it down by region:
http://www.arin.net/community/countries.html
Original Message
From: Darrell
, so I have no idea how recent it
is. Does anyone know if it's been updated recently?
~Joe
- Original Message -
From: Gary Steiner [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Monday, September 19, 2005 10:58 AM
Subject: Re: [Declude.JunkMail] Latest ALL_LIST.DAT
I
I've seen very little specific to blocking Spanish spam. There is a blacklist
at http://www.emailbasura.org/ but its effectiveness is somewhat limited.
Original Message
From: A. Clausen [EMAIL PROTECTED]
Sent: Tuesday, September 20, 2005 12:48 PM
To: Declude JunkMail
It used to be that when I sent an email to [EMAIL PROTECTED] I would get an
automatic reply like the following:
Thank you for submitting a ticket to support. Your ticket number is
[xxx--].
Please keep this ticket number for your records and include it in the subject
(including
in your virus.cfg file.
What specific issues are you refering to with 2.x ? I will follow up on this
and respond.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner
Sent: Tuesday, September 27, 2005 12:01 PM
configuration and it might well not be a bug.
Matt
Gary Steiner wrote:
I've been receiving a flurry of spam over the past two days where the spam
gets delivered with no Declude header in the message. When viewing the log
files, it seems that Declude scanned the message, found
David,
As per our past off-the-list discussion, I had re-lowered the times to 120, but
when this sudden increase of spam occurred yesterday, I raised them back up to
300. It doesn't seem to have had any effect.
Gary
Original Message
From: David Barker [EMAIL PROTECTED]
www.declude.com
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner
Sent: Tuesday, September 27, 2005 6:06 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] opening a ticket with Declude support
David,
As per our past off
I'm confused by the SmarterMail reference. I thought the Q naming convention
was unique to IMail. I'm using SmarterMail 2.6, and the only names I've seen
have been *.EML and *.HDR files. Did an older version of SmarterMail use Q
files? The only renaming I've seen is a switch between
3.0.5.7? How did you get that version?
When I go to the Declude web page and log in to my account, there is a box
there that says Declude Upgrades and in that box it has a link that says
Declude 3.0.5.3. When I click on that link, it takes me to another page that
has some links on it that
I'm trying to understand the different Declude configuration files. I'm
running 3.x Pro with JM and EV under SmarterMail.
I've seen mention of the Declude.cfg file, but my configuration doesn't have
one. I see global.cfg, virus.cfg, confirm.cfg and hijack.cfg, as well as the
I have a spam that produce the following:
X-Country-Chain: [Multicast]-GERMANY-destination
The country code check flagged it as Germany (DE). Is there any way to flag
both hops? I'm using the default setting which has HOP set to 0.
Thanks,
Gary
---
[This E-mail scanned for viruses by
Public Data Network
#*E RIPE Unlisted (Europe, North Africa, Middle East)
#*I Private IP
#*L Loopback
#*M Multicast
#*P APNIC Unlisted (Asia Pacific)
#*R IANA Reserved
#*U Unknown
- Original Message -
From: Gary Steiner [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent
CONTAINS DE and
COUNTRIES 1 CIBTAUBS *A
Also the country filters were broken in early 3.0.5.x versions.
- Original Message -
From: Gary Steiner [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Sunday, November 13, 2005 12:36 AM
Subject: Re: [Declude.JunkMail] hops
Same here. I've been trying for over 8 hours straight with no luck.
Gary Steiner
Original Message
From: Richard Farris [EMAIL PROTECTED]
Sent: Monday, November 28, 2005 7:49 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] F-prot
Anyone using F-Prot
A list of features for the next version of SmarterMail was posted in their
forums this morning, though no release date was given.
http://forums.smartertools.com/ShowPost.aspx?PostID=11125
All previous statements have mentioned end of this year.
Gary Steiner
---
[This E-mail scanned
.
The problem seems to be fixed, as I was finally able to download the new
version with no delays from their web site.
Gary Steiner
Original Message
From: Kevin Bilbee [EMAIL PROTECTED]
Sent: Monday, November 28, 2005 8:20 PM
To: Declude.JunkMail@declude.com
Subject: RE
Will your replacement also work with SmarterMail? I believe the only
difference between IMail and SmarterMail in this case is how they name their
files.
Gary Steiner
Original Message
From: Darin Cox [EMAIL PROTECTED]
Sent: Monday, December 05, 2005 10:29 PM
It doesn't. What happens (and it only seems to happen for the COUNTRIES
filter) is that it prints a line for every line in the filter file. The US
that you see is what it found in the message, and it is comparing US to every
line in the filter file.
Gary
Original Message
The following was posted today on SmarterTools web forums: Q: When will we expect to see v. 3? A: The release date depends on the results of final QA. The product is essentially done, just making sure that all the bugs are out of it. Since mail servers are so critical to people's infrastructure,
I feel the same way. I've answered several questions in their forums and tried to promote discussion where I was able.As for my own questions, I've always received answers, both from their support and from other users.I guess it depends on the nature of the forum and also a little bit of luck.
Based on the following header lines...
X-RBL-Warning: CBL: Blocked - see
http://cbl.abuseat.org/lookup.cgi?ip=222.173.57.68;
X-RBL-Warning: DSBL: http://dsbl.org/listing?222.173.57.68;
X-RBL-Warning: MXRATE-BLOCK:
http://www.mxrate.com/lookup/refused.asp?ipaddress=222.173.57.68;
X-RBL-Warning:
PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner
Sent: Tuesday, November 29, 2005 10:30 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] F-prot
I got the following from F-Prot technical support at 6 AM
this morning:
Unfortunately we
.
Matt
Gary Steiner wrote:
Based on the following header lines...
X-RBL-Warning: CBL: Blocked - see
http://cbl.abuseat.org/lookup.cgi?ip=222.173.57.68;
X-RBL-Warning: DSBL: http://dsbl.org/listing?222.173.57.68;
X-RBL-Warning: MXRATE-BLOCK:
http://www.mxrate.com/lookup
. If this was an IP4R test, the proper variable would either be
%IP4R% or %REMOTEIP%. If this was a RHSBL test, the variable would be
%MAILFROM%.
Matt
Gary Steiner wrote:
So would this work?
BASURA WARN X-RBL-Warning: %TESTNAME%:
http://www.emailbasura.org/cgi-bin/consultaip.pl?%TESTDOMAIN
basically just gave up on it.
Gary Steiner
Original Message
From: Will [EMAIL PROTECTED]
Sent: Tuesday, January 17, 2006 10:08 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] decludeproc causing dns queries to fail
Thank you for the feedback
There is a posting on the SmarterTools Forums that discusses the current
SmarterMail 3.0 BETA test.
http://forums.smartertools.com/forums/11870/ShowPost.aspx
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list.
More info on the new release has been posted here:
http://forums.smartertools.com/forums/12089/ShowPost.aspx
Original Message
From: Gary Steiner [EMAIL PROTECTED]
Sent: Tuesday, January 17, 2006 2:27 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail
Possibly this has something to do with the release today of SmarterMail 3.0.
Original Message
From: Bill Landry [EMAIL PROTECTED]
Sent: Thursday, February 09, 2006 12:36 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] New 4.0 version of Declude?
I
There seems to be early talk on the SmartTools Forums of bugginess in SM 3.0. I for one am not in any hurry to install it, especially since most of my customers need the Spanish language translation, and that hasn't been released yet. For those interested, this little blip is from the SmarterTools
I've never run ClamAV before. Looking at www.clamav.net, I see there are
several Windows ports for it. Is anyone using one of the various Windows ports
for ClamAV under W2K3? If so, which one is best?
Thanks,
Gary Steiner
Original Message
From: Bill Landry [EMAIL
I received a couple with the broken gif as late as yesterday. The Declude
headers end up at the bottom of the message, but they are there. I'm running
Declude 3.0.5.26 and SmarterMail 2.6.
Gary
Original Message
From: Erik [EMAIL PROTECTED]
Sent: Tuesday, February 28,
now,
as 3.0.5.26 had serious problems with handling certain kinds of mime
encapsulate messages. We actually had to roll back to 3.0.5.23 after
reporting the issues with 3.0.5.26 to Declude. Version 3.0.6 fixed this
issue.
Bill
- Original Message -
From: Gary Steiner [EMAIL
I've been having this problem with Declude going back to August and my
installation of 2.0.6. I'm currently running 3.0.6.4 with SmarterMail 2.6. It
seems that irregularly Declude's ip4r tests time out, but SmarterMail
redundantly running the same tests has no trouble picking up the spam. I
@declude.com
Subject: RE: [Declude.JunkMail] ip4r failure
What is the OS of the DNS server being used?
John T
eServices For You
Seek, and ye shall find!
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Gary Steiner
Sent
for you mail server resolution. I do this on the Imail
server itself. Speeds up resolution.
John T
eServices For You
Seek, and ye shall find!
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Gary Steiner
Sent: Wednesday
Create some sort of counter weight. Use an ipfile with 209.191.87.115 or even
209.191.87.0/24, or whitelist mail.mud.yahoo.com depending on how open you want
to be. Though counter weights are always better than whitelisting.
Gary
Original Message
From: mail-lists [EMAIL
may be using poor
judgment and assuming that no one would ever discuss HTML tags in a plain
text email and not parsing them.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Gary Steiner
Sent: Thursday, March 23, 2006 8:47 AM
, to do some bracket replacement in
order to keep plain/text elements from becoming functional in the HTML view.
Showing a message that is plain/text as HTML is fine just so long as
they replace the brackets.
Matt
Gary Steiner wrote:
I can't get SmarterTools to see this as a bug
-
From: Gary Steiner [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Thursday, March 23, 2006 6:42 PM
Subject: Re: [Declude.JunkMail] OT: port forwarding
Matt,
I tried all that...
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send
I've seen all the talk for and against SPF on this list, and I've been trying
to decide how much weight I want to give SPF. (I'm currently using Declude
3.0.6.4 and SmarterMail 2.6). I started playing around with SmarterMail's SPF
tags by setting them to a low or zero weight just so I could
-
From: Gary Steiner [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Thursday, March 30, 2006 6:36 PM
Subject: [Declude.JunkMail] SPF tests in Declude
I've seen all the talk for and against SPF on this list, and I've been
trying to decide how much weight I want to give SPF
tests that I
haven't paid much attention but assumed the default was correct. Thanks Scott,
and all the others who patiently gave the answer in the past.
Gary
Original Message
From: Gary Steiner [EMAIL PROTECTED]
Sent: Thursday, March 30, 2006 8:51 PM
To: Declude.JunkMail
I've seen something similar to this, though in that paticular case it was a
redundant quote or apostrophe in the name part of the email address.
Original Message
From: Orin Wells [EMAIL PROTECTED]
Sent: Saturday, April 01, 2006 8:09 PM
To: Declude.JunkMail@declude.com
I received a spam from 209.200.224.192 which Declude reported as
X-Country-Chain: [ARIN Unlisted]-destination
I went to www.arin.net and did a whois, and 209.200.224.192 came up as a
typical US company. What is ARIN unlisted?
Gary
---
This E-mail came from the Declude.JunkMail mailing
Now that I have installed Declude 3.1 with SmarterMail 2.6, I see that Declude
is whitelisting certain addresses based on SmarterMail's Trusted Senders
section of My Spam Filtering. Is there any way to turn this feature off in
Declude so that it continues to function as part of SmarterMail but
I found after doing an install of Declude 4.2.3, that it contained an
all_list.dat file with a date of 3/29/2006 and a file size of 310kb (318,376
bytes).
Gary
Original Message
From: Scott Fisher [EMAIL PROTECTED]
Sent: Wednesday, May 03, 2006 1:44 PM
To:
Before I started seeing these spams, my Declude logs were set to MID, and each
of these new spams would show the same three lines:
06/04/2006 07:25:39.868 50467903 Error in envelope file:
c:\SmarterMail\Spool\proc\work\50467903.hdr
06/04/2006 07:25:46.165 50467903 AHBL:6 CBL:14 DSBL:6
No. Most likely it is because declude.junkmail typically experiences a lot of
traffic, but recently it's been extremely quiet. I guess some folks just got
paranoid.
Instead of posting test messages, it would be better if folks asked a
question or made an appropriate comment to start a
Try the SUBJECTCHARS test. It will catch spam that has a certain number of characters in the subject. For 60 characters and a weight of 4 the test would be
SUBJECTCHARS subjectchars 60 x 4 0
From:
I believe Declude Support has to do it manually on their end. However, they
are closed on the weekend, so you are not going to get any response from them
til Monday (unless they are taking off Monday in conjunction with the 4th of
July, in which case you may have to wait until Wednesday).
What is the ZEROHOUR test? I see it in the X-Declude headers, but I don't have
it defined in any of my config files. I don't see it mentioned in any of the
manuals either.
Gary
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL
Now that I've installed 4.2.20, I'm getting a lot of messages in the error
folder (I'm running SmarterMail 3.3.2369). Most of them seem to be spam, but
there are some good messages in there. Am I now going to have to scan this
folder for false positives just like the held spam folder?
Here
I just went into Add or Remove Programs under the Control Panel of my W2K3
server to remove something unrelated to Declude, and noticed that Declude
Security Suite is listed there three times. When I click on Click here for
support information for each entry, they give versions as follows:
, but for some reason SmarterMail is
allowing Declude to have them even though they are not complete.
John T
eServices For You
Seek, and ye shall find!
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Tuesday, July 11, 2006 12
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Gary Steiner
Sent: Tuesday, July 11, 2006 3:13 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Here is SmarterTools take on the problem
are working with them to resolve this between us.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Tuesday, July 11, 2006 5:31 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20
be
doing) rather than move them to the \error directory would that solve your
problem ?
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Wednesday, July 12, 2006 3:41 AM
To: declude.junkmail@declude.com
I don't have STOPATFIRSTHIT in my body filter, and it always stops the first
time it finds something.
Original Message
From: Michael Thomas - Mathbox [EMAIL PROTECTED]
Sent: Friday, July 14, 2006 2:31 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail]
Wow! It's like one of those MasterCard commercials.
Here's an example server based on list prices:
SmarterMail Enterprise Edition (Unlimited Domains and Users) - $899
Declude Security Suite for Smartermail Enterprise (Unlimited Domains) -
$1750 Annual Subscription
F-Prot Antivirus
I guess someone is going to make an official announcement today about Declude
4.3? I see that its downloadable in my account, but it would be nice to know
what I'm getting before I install it, especially the new Commtouch stuff.
The Restrictions listed next to the Add Commtouch section are
for the software and now
have to pay them some of your meager profits?
John T
eServices For You
Seek, and ye shall find!
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Gary Steiner
Sent: Tuesday, July 18, 2006 11:24 AM
To: declude.junkmail
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Tuesday, July 18, 2006 4:09 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Declude 4.3
So, that being said, under what conditions can
I'm having this same problem with AVG. I'm running Declude 4.3 with the latest
version of SmarterMail.
Gary
Original Message
From: Darrell \([EMAIL PROTECTED]) [EMAIL PROTECTED]
Sent: Monday, July 24, 2006 12:59 PM
To: declude.junkmail@declude.com
Subject: Re:
Today I discovered a new spam on my server that at first I thought might be a
virus. It had the subject line Bill Summary - Invoice #36644 and August
Payment Summary, Invoice #48729 with the number being random. It delivers its
message inside an attached word document called invoice.doc. When
service to have them flip the switch so you
can place support tickets.
Kevin
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Gary Steiner
Sent: Thursday, September 07, 2006 5:17 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail
: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management
module
I think it means you have to pick up the phone and call them.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Friday, September 08, 2006 12:12 AM
David,
Is the NONSTANDARDHDR test on by default, or do you need to add it to your
virus.cfg file? I've been running every version since 4.2.20, and I have never
seen a message with a broken header moved to my \virus folder.
Gary
Original Message
From: David Barker [EMAIL
Say I have the following in my $default$.junkmail file:
FILTER-PHISH COPYTO [EMAIL PROTECTED]
WEIGHT20 HOLD %DATE%
If both tests are triggered on the same email, the COPYTO never occurs. It
only does the HOLD. I tried switching the order of the tests in the
$default$junkmail file and the
do what I want to do using filters or some other aspect of Declude?
Original Message
From: Gary Steiner [EMAIL PROTECTED]
Sent: Thursday, October 12, 2006 1:48 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] HOLD overrides COPYTO as last action?
Say I have
You can find links to several pages with filter samples at
http://it.farmprogress.com/declude/declude.htm
Original Message
From: Craig Edmonds [EMAIL PROTECTED]
Sent: Saturday, October 14, 2006 12:53 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail]
I found this RBL monitor through Google, though have not used it myself:
http://www.cmsconnect.com/BLM/BLMonitor.htm
Anyone have any experience with this or some other similar product?
Gary
Original Message
From: Markus Gufler [EMAIL PROTECTED]
Sent: Monday, October 16,
SmarterTools just announced some information about the next release of
SmarterMail. They are releasing SmarterMail 4.x beta around Novemember 6th.
Check out the official statements here:
http://forums.smartertools.com/forums/thread/21267.aspx
---
This E-mail came from the
So you are implying that those of us who are not running Commtouch, if we
remove the ZEROHOUR statement from the global.cfg the X-Declude-RefID line in
the headers will go away?
(How to get rid of that line is a question that has been asked here before.)
Original Message
I'm using most of the ones you mention, and the ones I'm using all work. He's
what I have in my global.config that matches your list:
AHBLip4rdnsbl.ahbl.org * 7 0
DSBLip4rlist.dsbl.org * 8 0
MAILPOLICE-BULK rhsbl
Is it because when it reaches WEIGHT19 and does the ROUTETO [EMAIL PROTECTED],
the message is delivered? Then when it tries to perform the action of WEIGHT32
the message is already gone?
Does Declude allow for multiple instances of the same action where subsequent
actions are performed, or
SmarterTools just announced a features list for the next release of
SmarterMail. They are releasing SmarterMail 4.x beta on Monday, November 13th.
(They estimate a final release of 4.x around January.)
The new features include greylisting and integration with SpamAssassin.
Check out the
Same in SmarterMail. It is interesting when you receive one of these messages
to find the Declude header lines at the end of the message, and the one or two
header lines that SmarterMail appends (after Declude hands the message back to
SmarterMail) right where they should be at the end of the
I'm also using SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14, and
have had CMDSPACE configured for quite a while, but hadn't thought anything
about it. When I saw your message I ran DLanalyzer on my logs for the past two
weeks and saw that there were no hits for CMDSPACE at all.
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail
I see that too, I will look into this.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Friday, November 10, 2006 2:27 PM
Well, you can have a separate $default$.junkmail file for each domain, so
whatever unique tests you wanted for a domain you would just define it in your
global.cfg and then list it in the $default$.junkmail for that domain.
Gary
Original Message
From: Dean Lawrence [EMAIL
BLITZEDALL went offline in May (see http://opm.blitzed.org). Other than that,
all the ones you are using I am also using.
Other IP4R tests that I am using successfully that you are not:
ADNSBL dnsbl.antispam.or.id
BASURA bl.emailbasura.org
CSMA-SBLbl.csma.biz
IMP-SPAM
You might want to run it for a little while to see what results you get. I've
gotten a lot of false positives with Sniffer.
Gary
Original Message
From: David Dodell [EMAIL PROTECTED]
Sent: Thursday, November 30, 2006 10:41 PM
To: Declude.JunkMail@declude.com
Subject:
For those SmarterMail owners who may have noticed that SmarterTools has been
offline for over 24 hours, you can read about it here:
http://www.crystaltech.com/forum/topic.asp?TOPIC_ID=16305
Gary
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an
Declude has an entry in their Knowledge Base that lists the regions:
http://support.declude.com/Customer/KBArticle.aspx?articleid=35KBSearchID=6746
As for country codes, the most official source is probably the IANA:
http://www.iana.org/root-whois/index.html
Thought they probably get their
Regardless of which anti-virus program you are using, you can easily add ClamAV
to give you an extra layer of protection (and it's free). Besides, I've often
seen ClamAV pick up new viruses long before F-prot adds them.
Gary
Original Message
From: Serge [EMAIL PROTECTED]
It should read http://shopping.declude.com/Articles.asp?ID=97
When Declude updated its web site a couple months ago, they missed a lot of the
old links. All you need to do with the old link is to change www to
shopping.
Original Message
From: Mike Wiegers [EMAIL PROTECTED]
It's better to weight your whitelist rather than have an IP be fully
whitelisted. You would have an entry like this
WHITELIST-IPipfile C:\{MAILSERVER}\Declude\Filters\WHITELIST-IP.txt
x -20 0
In the file WHITELIST-IP.txt you would have something like this
123.456.78.90
Submit a sample through http://www.virustotal.com
and it will show you which anti-virus programs are currently identifying it.
Gary
Original Message
From: S.J.Stanaitis [EMAIL PROTECTED]
Sent: Friday, December 22, 2006 4:09 PM
To: declude.junkmail@declude.com
Subject:
Anybody notice a significant drop in spam?
From the CNN web site:
Quake knocks Asia back to pre-Internet days
http://www.cnn.com/2006/WORLD/asiapcf/12/27/taiwan.quake.ap/index.html
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL
David,
Has any progress been made on this issue? Using SmarterMail Enterprise
3.3.2439 and Declude 4.3.23, I still am not seeing CMDSPACE getting any hits.
Gary Steiner
Original Message
From: David Barker [EMAIL PROTECTED]
Sent: Monday, November 13, 2006 10:38 AM
1 - 100 of 143 matches
Mail list logo