Re: [Declude.JunkMail] OT: DNS / Web help

2005-06-06 Thread NIck Hayer
Hi Chris The only thingdifferent about this site is that it uses Windows authentication to force a login. Any ideas? Does the site work with anonymous access enabled? Host header for domain correct? -Nick

Re: [Declude.JunkMail] fromfile filter not working

2005-06-08 Thread Nick Hayer
Heimir Eidskrem wrote: Hi Heimir Not sure why this is not working. Check your log file - if necessary run it on debug for a few emails - this should give you your answer. -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL

Re: [Declude.JunkMail] SmarterMail shortcomings in a gateway environment

2005-07-14 Thread Nick Hayer
On 14 Jul 2005 at 18:49, Matt wrote: Why does this always happen to me... karma -Nick I was looking to leave my IMail/Declude setup as my gateway spam blocking component, and move hosted E-mail to a different server. All I needed in the hosted mail server was something that

Re: [Declude.JunkMail] Spam attack

2005-07-19 Thread Nick Hayer
Hi Richard, Richard Farris wrote: I got hit again with these two [69.60.97.208] 209.97.209.0/24 other than blacklisting the IP, how do you stop it... What I do is lookup the IP on senderbase. puts its ip addresses that send mail in an ip_hosts.txt file and score that

Re: [Declude.JunkMail] Filter not triggering

2005-07-25 Thread Nick Hayer
Declude support - Would you comment on this? Is there a problem with 'CONTAINS' ? Would you kindly share what other issues are being addresses in 'one they are testing now' ? Thanks! -Nick John Carter wrote: I have reported to Declude a problem with the "CONTAINS" statement.

Re: [Declude.JunkMail] Filter not triggering

2005-07-26 Thread Nick Hayer
Hi David, Are you aware of any bugs with the CONTAINS filter statement? Thanks! -Nick David Barker wrote: Kevin, After reviewing your files you had sent me this is the problem you are having: 1. The email you received was encoded in BASE64 (Msg failed BASE64) 2. In your global.cfg you

Re: [Declude.JunkMail] Savvis 64.14.0.0/16

2005-07-27 Thread Nick Hayer
Hello - I am looking for some insight on these guys. I get quite a bit of what is best described as suspicious email from their networks - are they a legit or are they clever spammers? Thanks! -Nick [EMAIL PROTECTED] wrote: Yesterday I complained about the lack of participation on

Re: [Declude.JunkMail] Declude Woes

2005-07-28 Thread Nick Hayer
Hi Will, Sorry you are having problems - Declude is a good product - it may be something simple here. I would say the most common thing is a dns issue - stuff stacks up waiting for dns responses. Check that out first - send more info too! -Nick Will wrote: A number of years ago I

Re: [Declude.JunkMail] Spam box

2005-08-04 Thread Nick Hayer
Richard Farris wrote: Is there a box I can put in front of my Imail server that will help take some of the load off of the spam filtering that Declude is doing Hi Richard - One method is to put ORF in front of your IMail box and via its recipients blacklist feature refuse

Re: [Declude.JunkMail] Spam box

2005-08-04 Thread Nick Hayer
Goran Jovanovic The LAN Shoppe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick Hayer Sent: Thursday, August 04, 2005 1:43 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Spam box Richard Farris wrote

Re: [Declude.JunkMail] Spam box

2005-08-04 Thread Nick Hayer
Hi Andrew - Colbeck, Andrew wrote: Also, I'd be a little skeptical that ORF would do the job for Goran, as he is basically an ISP for multiple organizations. Common :) Don't be so negative.. He would need extracts from their GALs for each organization, or whatever the

Re: [Declude.JunkMail] Spam box

2005-08-04 Thread Nick Hayer
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick Hayer Sent: Thursday, August 04, 2005 6:10 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Spam box Hi Andrew - Colbeck, Andrew wrote: Also, I'd be a little skeptical

Re: [Declude.JunkMail] OT: DNS attacks

2005-08-19 Thread Nick Hayer
Morning Dave, That would deny his internal users the ability to resolve external domains. Well you *may* have me on this one :) I do not know what dns server is being used. I use SimpleDNS so I can allow recursion by ip address/subnet. Bind as well does this: [ recurseallow ]

Re: [Declude.JunkMail] D3: Service stopped on its own, files backed up

2005-08-30 Thread Nick Hayer
David - Would you kindly confirm exactly what version of Declude this 3.0 beta is derived from? Is it 2.0.6.16 ? Thanks -Nick David Barker wrote: Thanks for the feedback. I have posted decludeproc.exe 3.0.12 which should take care of the issue of decludeproc stopping on its own. Also

Re: [Declude.JunkMail] D3: Service stopped on its own, files backed up

2005-08-30 Thread Nick Hayer
included. Thanks - -Nick David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick Hayer Sent: Tuesday, August 30, 2005 10:48 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] D3: Service stopped on its own, files

Re: [Declude.JunkMail] SPFPass - good or bad?

2005-09-08 Thread Nick Hayer
Hi David - I like the spfpass test - coupled with filters it does help aginst false positives. [I prepend all my tests with the test type - thanks Kami! - it makes these filters easier to write -] Here is my spfgood filter - I score it with a -12: SKIPIFWEIGHT26 TESTSFAILEDEND

Re: [Declude.JunkMail] SPFPass - good or bad?

2005-09-08 Thread Nick Hayer
Tyran Ormond wrote: That still means that I have to setup includes for each of the possible sending domains, still unacceptable and reason enough for me to discard SPF completely. Well be advised not all your mail will get delivered. I have some insurance agencies whose mail will bounce if

Re: [Declude.JunkMail] Declude 3.0.3 update

2005-09-14 Thread Nick Hayer
Hi Kim, Kim Premuda wrote: We installed the latest 3.0.3 beta tonight; the decludeproc service shot to 99% of CPU and stayed there for 15 minutes. During this time we accumulated over 1000 items in the proc folder; nothing was going out. I experienced the maxed out

Re: [Declude.JunkMail] Declude 3.0.3 update

2005-09-15 Thread Nick Hayer
Hi Kim, Kim Premuda wrote: I experienced the maxed out processor(s) - I only tried it for a few min and then went back to 2.0.16. Haven't tried it since! -Nick Nick, The beta version 3.0.3 does not automatically create the 'work' folder below the 'proc' folder (ie.

Re: [Declude.JunkMail] DNS RBL's

2005-09-15 Thread Nick Hayer
Hi Tim, Timothy Bohen wrote: Thats pretty cool, so which ones should I be running in my global.cfg? Your mileage will vary! Here are the stats from my site for yesterday: http://mdlp.madriveraccess.com/ I would suggest score low - check results often - and tune to fit your needs.

Re: [Declude.JunkMail] DNS RBL's

2005-09-15 Thread Nick Hayer
Hi Matt - Matt wrote: Nick, I think that it is worth while to point out that your stats are likely skewed by dictionary attacks and backscatter. The overwhelming predominance of SURBL and Sniffer-Pharmacy hits (named slightly differently on your system), along with the massive number

[Declude.JunkMail] ROUTING and COUNTRIES

2005-09-16 Thread Nick Hayer
Help from the guru's please... Wouldn't [shouldn't] this email fail the ROUTING test? X-Country-Chain: UNITED STATES-[IANA Reserved]-UNITED STATES-destination X-Note: SMTP Sender: [EMAIL PROTECTED] X-Note: Sent from: [Revdns: [No Reverse DNS]] [RemoteHostDomain: lgvsoft.at] [RemoteIP:

Re: [Declude.JunkMail] Help in creating a Filter

2005-09-17 Thread Nick Hayer
Erik wrote: If Declude could confirm the order of how/which tests are run, it would be nice to know. I agree. The archives may help but as I recall Scott [former of Declude] was nebulous in what the order is. The only thing for sure was filters ran last in the order listed in global.cfg

Re: [Declude.JunkMail] declude / spamassassin

2005-09-20 Thread Nick Hayer
Hi Travis - Sandy's plugin does the 'somehow' part. Simply have it point to your spamd. Here is the line from my global.cfg that may help - EXTERNAL.SPAMASSASSIN_v3.04externalNONZERO e:\imail\declude\spamd\spamc32.exe -D -d 12.152.254.3 -a 16000 -lt 4 ht 100 -f 6

Re: [Declude.JunkMail] declude / spamassassin

2005-09-20 Thread Nick Hayer
to change. what are these flags? spamc32.exe -D -d 12.152.254.3 -a 16000 -lt 4 ht 100 -f If you download Sandy's spamc32.exe it includes docs and samples. He can explain it better than I. [I forgot.. sorry!. ] -Nick - Original Message - From: Nick Hayer [EMAIL PROTECTED

Re: [Declude.JunkMail] declude / spamassassin

2005-09-20 Thread Nick Hayer
Travis Sullivan wrote: SPAMASSASSINexternalnonzero c:\imail\declude\spamc32.exe -cw %WEIGHT% -sw 10 -f choose a weight 0 -f is supposed to be the filename... but the example doesn't give one. So, how does spamc send a file name to spamd? Declude hands it off to it. Actually I

Re: [Declude.JunkMail] declude / spamassassin

2005-09-20 Thread Nick Hayer
Travis Sullivan wrote: So, the only thing I will see in the headers is the total score SA results: X-RBL-Warning: SPAMASSASSIN: Message failed SPAMASSASSIN: 3. And declude scores only for the test group, like other tests in the global.cfg file? Correct. Very slick huh? And good job

Re: [Declude.JunkMail] declude / spamassassin - topic change

2005-09-20 Thread Nick Hayer
Anyway, the next version of SPAMC32 is coming out very soon with the ability to consult a local SPAMC32 log file (rather than the main SPAMD log file) to check which individual SA rules failed for each message; this is a definite need. Hi Sandy, Well since you are working on the

Re: [Declude.JunkMail] declude / spamassassin

2005-09-20 Thread Nick Hayer
Hi Keith, Keith Johnson wrote: Nick, If you don't mind, is SA heavy on the CPU? What kinda load are you running with SA? First I am no authority here but am willing to share my experience. Sandy's spamd32 seems to be no issue as near as I can tell. The cpu issue is with spamd. .I

Re: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted

2005-09-22 Thread Nick Hayer
Thank you David - will let you know if I see any issues! -Nick David Barker wrote: 2 new Directives WAITFORTHREADS 1500 Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5 seconds this can be changed so that when the maximum threads are in use this time specifics the

Re: [Declude.JunkMail] Country Test Very odd Results

2005-09-27 Thread Nick Hayer
Well this is more of a question than a stab - Can we see the full header? Yesterday I had something very similar - email from Venezuela but the ip was registered in Virginian according to Arin. -Nick Darrell ([EMAIL PROTECTED]) wrote: Anyone want to take a stab at this one I would

Re: [Declude.JunkMail] Country testing

2005-10-03 Thread Nick Hayer
David, I just want you to know I really appreciate your participation in this list. I find it very helpful and reassuring! Thanks!! -Nick David Barker wrote: We have received the ticket and are currently looking into the issues regarding MAILFROM and COUNTRY David B www.declude.com

Re: [Declude.JunkMail] New and old locations of Q files while being processed - SpamReview?

2005-10-04 Thread Nick Hayer
John, [or others ] I use SpamReview to review held email. How does this fit now into the mix with 3x Declude? I presume SpamReview will dump the 'return to queue' files back into the /spool dir. Is this ok? -Nick John T (Lists) wrote: I understand that in Declude 2.x and lower

Re: [Declude.JunkMail] chronic junkmail -- new account

2005-10-09 Thread Nick Hayer
Hi - Well this is what I do on these - Right off I put the ip space in my ipfile_suspicious_networks 65.175.2.0/24 Viper Hosting If I keep getting spam from then then they go to the ipfile_networks which I score higher. Same for an entry into ipfile_suspicious_hosts I then I would

Re: [Declude.JunkMail] chronic junkmail -- new account

2005-10-09 Thread Nick Hayer
You are always on top of this stuff Matt! -Nick Matt wrote: This is spam from Scott Ricter, Spamhaus's #1 listed spammer. This particular block is 65.175.2.0/24. Surprisingly it isn't widely listed, but I did find it in MAILPOLICE, and if you have URIBL support, it is also in SURBL

Re: [Declude.JunkMail] Hijack question

2005-10-12 Thread Nick Hayer
Dave, You need to stop/start deccon.exe That wil reset the counter so to speak. Question to Declude support - How does this work with Declude 3x? Thanks! -Nick Dave Doherty wrote: Hi all, Running Declude version 1.82 with Hijack... One of my customers go caught by Hijack a couple of

Re: [Declude.JunkMail] Hijack question

2005-10-12 Thread Nick Hayer
Thanks ! -Nick David Barker wrote: Stop/restart the decludeproc service David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick Hayer Sent: Wednesday, October 12, 2005 12:53 PM To: Declude.JunkMail@declude.com Subject: Re

Re: [Declude.JunkMail] Hijack question

2005-10-13 Thread Nick Hayer
Thanks John! -Nick John T (Lists) wrote: A clarification on how to reset Hijack: For Declude versions 2.x and below, you need to end the Deccon.exe process. It is also best to do this with Imail SMTP and Queue Manager service stopped and no Declude.exe processes running to ensure that no

Re: [Declude.JunkMail] OT: FBI puts stop to Spam King

2005-10-17 Thread Nick Hayer
good link. I saw the apache errors as well - but only 168 total. -Nick Matt wrote: Do you think it is possible that this is connected to the rash of broken spamware that started yesterday (Apache error message from spam zombies)? I have gotten probably 5,000 of those in the last 24 hours.

Re: [Declude.JunkMail] OT: FBI puts stop to Spam King

2005-10-17 Thread Nick Hayer
Matt wrote: Are you sure about that? As sure as I can be - Since midnight we have received 1,233 of them. Yesterday was even worse. Today we have received 276. -Nick Matt Nick Hayer wrote: good link. I saw the apache errors as well - but only 168 total. -Nick Matt wrote: Do

Re: [Declude.JunkMail] BADHEADERS

2005-10-19 Thread Nick Hayer
Here ya go Andy: http://www.declude.com/tools/header.php -Nick [EMAIL PROTECTED] wrote: Hi, Can someone point me to detailed info on what the BADHEADERS test looks at and/or how this error can be remedied? Already looked in the declude manual, not enough info. Thanks, Andrew ISP guy ---

Re: [Declude.JunkMail] OT: New DNS Server

2005-10-20 Thread Nick Hayer
Andy - Very kool with the script! Thanks for sharing. I can sure use it - -Nick Andy Schmidt wrote: I have done this in two ways. You can export the registry and then use an editorthat can handle line breaks and other control characters(such as MS Words) to massage the text

Re: [Declude.JunkMail] found something new to me

2005-10-21 Thread Nick Hayer
Hi Travis - I think most folks use combo's - the idea is to further punish an email that fails more than one reliable test [like sniffer and xbl or ???.]. This is where Declude really shines - being able to punish emails further based on previous test results. - you do not have to score

Re: [Declude.JunkMail] found something new to me

2005-10-22 Thread Nick Hayer
Travis - You are not slow - this is some what confusing until you get the hang of it. Are you all set? Do you understand now how it works? -Nick Travis Sullivan wrote: I think I got it... I am slow, I know :) global.cfg contents: COMBO filter C:\IMail\Declude\lists\combo.txt x 0 0

Re: [Declude.JunkMail] found something new to me

2005-10-23 Thread Nick Hayer
Hi Travis - That looks correct - and is how I do mine. One suggestion though - the first line in the filter should be SKIPIFWEIGHTweight that is slightly above your delete weight The idea is here is to prevent a filter from firing needlessly, Along that same idea - filters execute in the

Re: [Declude.JunkMail] found something new to me

2005-10-23 Thread Nick Hayer
email you can see the testing order. -Nick Travis - Original Message - From: Nick Hayer [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Sunday, October 23, 2005 12:09 PM Subject: Re: [Declude.JunkMail] found something new to me Hi Travis - That looks correct - and is how I

Re: [Declude.JunkMail] Hijack Help

2005-10-31 Thread Nick Hayer
Hi Richard, You need to rename the files removing the ip address - so each fire begins with its respective 'Q' or 'D' and put those renamed files in the spool dir. -Nick Richard Farris wrote: Message I had some mail stuck in HOLD2 that I want to let go..I copied it and put it

Re: [Declude.JunkMail] Hijack Help

2005-10-31 Thread Nick Hayer
ernet" - Original Message - From: Nick Hayer To: Declude.JunkMail@declude.com Sent: Monday, October 31, 2005 7:45 AM Subject: Re: [Declude.JunkMail] Hijack Help Hi Richard, You need to rename the files removing the ip address - so each f

Re: [Declude.JunkMail] DNS timeouts

2005-11-01 Thread Nick Hayer
There is in declude.cfg the switch DNSOVERRIDE ; I am not clear if this will take multiple dns boxes or not - -Nick Darrell ([EMAIL PROTECTED]) wrote: Travis, My understanding is that Declude only uses the first DNS server specified in IMAIL. This can be overridden in the global.cfg, but

Re: [Declude.JunkMail] ipfile

2005-11-07 Thread Nick Hayer
Would any one know what ip would trigger a listing in the ipfile? Is it any ip along the route, the connecting ip, or the sending ip? Thanks - -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe

Re: [Declude.JunkMail] ipfile

2005-11-08 Thread Nick Hayer
Travis Sullivan wrote: It is my understanding that it's just the sending IP, the last server that connects to your server. So can there be a way to filter [detect] on the other ip's contained in the route? for example: Host MTA(1)MTA(2) MTA(3). Now MTA(2) is a forwarder and I would

Re: [Declude.JunkMail] Declude Technical Support Tickets

2005-11-09 Thread Nick Hayer
Hi David, David Franco-Rocha [ Declude ] wrote: Please note that we receive a large amount of spam at our technical support email address for the ticket system. When I look through the tickets, I delete whatever looks like spam, as well as all tickets that do not contain a subject.

Re: [Declude.JunkMail] Blocking on resolved domain name

2005-11-16 Thread Nick Hayer
Hi John, What I do in these cases is I have and ip file called IP_FILE_SUSPICIOUS_NETWORK (scored 25% of delete weight) slap this network in there and if it re-occurs I move it to IP_FILE_NETWORK (scored 40% of delete weight.) I have the same scenario for the actual hosts themselves -

Re: [Declude.JunkMail] CMDSPACE Failures

2005-11-16 Thread Nick Hayer
David Barker wrote: Christian, Another way that you could deal with this specific Microsoft Office Outlook build is to create a filter that contains the following: HEADERS -8 CONTAINS Microsoft Office Outlook, Build 11.0.5510 As a suggestion to limit the collateral damage I would

Re: [Declude.JunkMail] OT: another SOBERing though

2005-11-16 Thread Nick Hayer
Well Matt when I read the link I was figuring you were fessing up to how far off you were [are] on SPF - it was only until I read the end that I understood to what you were referring. :) -Nick Matt wrote: Hmm, who would have thunk? Subject: Re: [Declude.JunkMail] SPF Success Date

Re: [Declude.JunkMail] OT: another SOBERing though

2005-11-16 Thread Nick Hayer
;) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick Hayer Sent: Wednesday, November 16, 2005 3:31 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] OT: another SOBERing though Well Matt when I read the link I was figuring you

[Declude.JunkMail] why was this whitelisted?

2005-11-18 Thread Nick Hayer
Hello - I have this log entry : E-mail whitelisted - automatically passing all spam tests [Imail] I cannot figure out why this occurred - does anyone know what [Imail] is to cause a whitelist? Thanks! -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just

Re: [Declude.JunkMail] Imail 2006 standalone

2005-11-18 Thread Nick Hayer
Travis - I am not clear on what you are asking - the global.cfg is where '$default.junkmail' lives for outgoing mail - is that it? -Nick Travis Sullivan wrote: I searched, not a lot to be honest, the archive, and manual, but couldn't find info on setting up outgoing mail scanning with

Re: [Declude.JunkMail] why was this whitelisted?

2005-11-18 Thread Nick Hayer
Right on - Thanks Matt -Nick Matt wrote: Nick, This is a WHITELIST SUBJECT filter in your Global.cfg. It is matching [Imail] in the subject line. Matt Nick Hayer wrote: Hello - I have this log entry : E-mail whitelisted - automatically passing all spam tests [Imail] I cannot figure

Re: [Declude.JunkMail] hops and country code

2005-11-21 Thread Nick Hayer
I believe the COUNTRIES test would flag UK in the example below. COUNTRY would not - -Nick Gary Steiner wrote: Are you saying that if there are multiple countries in the path, it will flag all of them? I haven't seen that. For example, one spam I received today was like this:

Re: [Declude.JunkMail] Global.cfg lines for SPF

2005-11-21 Thread Nick Hayer
Unknown will work as well as I recall.. -Nick Kevin Bilbee wrote: As far as I know declude only supports SPFFAIL and SPFPASS. Please direct me to the release notes/documentation if I am wrong. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [Declude.JunkMail] SMTP service for IMail 8.15 HF2 w/Declude 2.0.6.16 crashing repeatedly

2005-11-28 Thread nick hayer
Matt wrote: Hi Matt - I have not had any issues at all - what other clues do you have to offer? In your logs is there any simularity among the last message processed before the crash(s). Do you record the 'peak memory usage' - to see if there is some kind of of memory issue? Run the smtp

Re: [Declude.JunkMail] SMTP service for IMail 8.15 HF2 w/Declude 2.0.6.16 crashing repeatedly

2005-11-28 Thread nick hayer
that would only add load to my system as a whole. I am in fact working towards doing virus scanning after all JunkMail processes so that I can save on processing power. Matt nick hayer wrote: Matt wrote: Hi Matt - I have not had any issues at all - what other clues do you have to offer? In your

Re: [Declude.JunkMail] X-SPAM header for SpamAssassin using SPAMC32

2005-11-28 Thread nick hayer
Hi Geoff Geoff Varney wrote: Hi all, I now successfully have JunkMail using SPAMC32 to access a Linux spamd server for SPAM. I am training the bayes database as the user that SPAMC32 is using to contact the spamd server. However, in this setup I am not getting any subject

[Declude.JunkMail] web email detection

2005-11-28 Thread nick hayer
I am trying to detect emails that are sent via webmail - be it from yahoo, hotmail, etc. Can that be reliably done? What do I need to look for in the headers? Thanks! -Nick --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail

Re: [Declude.JunkMail] web email detection

2005-11-29 Thread nick hayer
: nick hayer [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, November 28, 2005 5:56 PM Subject: [Declude.JunkMail] web email detection I am trying to detect emails that are sent via webmail - be it from yahoo, hotmail, etc. Can that be reliably done? What do I need to look

Re: [Declude.JunkMail] Inserting Filtered Text in Headers

2005-11-29 Thread nick hayer
Dan Geiser wrote: X-Spam-Tests-Failed: IPNOTINMX, NOLEGITCONTENT, WEIGHT-HOLD, KROPKA-IP, PSBL, UCEPROTECTL1, FILTER-SUBJECT ('olex') [148] ...or something similar to that. a WARN will give you the line number within the filter that failed. That has been my solut'n.. -Nick It would

Re: [Declude.JunkMail] OT: Old Imail Forum

2005-12-01 Thread Nick Hayer
Title: OT: Old Imail Forum Hi Sharyn, We missed ya! What bring you back to this neck of the woods? -Nick Sharyn Schmidt wrote: I just tried signing up for the IMAIL forum after a long absence and I'm noticing it is all webbased now? Is the old Forum still around

Re: [Declude.JunkMail] weighting domains

2005-12-01 Thread Nick Hayer
Hi Kevin Lots you could do - to wack this guy you could have a filter that that said REMOTEIP END NOTCONTAINS 65.249.245. REVDNS 0 CONTAINS csh. I am not sure if REMOTEIP or REVDNS or MAILFROM is appropriate but you get the idea.. In addition you could have an ipfile that you could list

Re: [Declude.JunkMail] weighting domains

2005-12-01 Thread Nick Hayer
I would suggest you look to add a URI filtering product like out invURIBL. David of Declude - Will this feature be available in a future release? Thanks -Nick All of these domains are listed on SURBL/URIBL. URI filtering is very effective at capturing these patterns well before these

Re: [Declude.JunkMail] weighting domains

2005-12-01 Thread nick hayer
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick Hayer Sent: Thursday, December 01, 2005 1:55 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] weighting domains I would suggest you look to add a URI filtering product like out invURIBL. David of Declude

Re: [Declude.JunkMail] ANN: Availability of 5xxSink 0.5.00, IIS SMTP event sink for text-file recipient validation

2005-12-03 Thread Nick Hayer
Thanks Sandy - very kool! On a block is any message returned to the sending mta - like a 550 or? Configurable would be nice but I will not go as far as ask for it to be a feature - however on the other hand : For a feature - I need to be able to wild card a domain. Currently maybe 5-10% of

Re: [Declude.JunkMail] OT Snow

2005-12-03 Thread Nick Hayer
Matt wrote: I wouldn't care at all if the year was 3 months shorter. Well at the expense of 25% shorter lifespan? Come on - its not that bad!. [ Here in VT the kids have been snowboarding since before Thanksgiving. Had 8 of snow at the house last night!] -Nick Matt Orin Wells wrote:

Re: [Declude.JunkMail] OT Snow

2005-12-05 Thread Nick Hayer
Hi David, David Lewis-Waller wrote: If you could put up with petrol at 93p a litre (which by my calc is approx $5.90 per U.S. gallon) In the US taxes are based on income - whereas for you it would seem to be based on consumption - I actually do not know which is 'cheaper' but it would

Re: [Declude.JunkMail] Spam with gif getting through

2005-12-06 Thread Nick Hayer
Hi Todd, Todd wrote: Quite a bit of spam has been getting though lately. IPR tests are not stopping it and it only contains gif as the message body. I am including one of gifs. Any way to stop this? I use three filters - 2 have to kick off for the third to fire which

Re: [Declude.JunkMail] CBL:Fw: news

2005-12-06 Thread Nick Hayer
The filter will stop processing if "Content-Type: image/gif " in not contained in the body of the email. -Nick Todd wrote: Scott, I am looking through the Declude manualto determine what you are doing. I don't think I understand NOTCONTAINS. I would think CONTAINS mean

Re: [Declude.JunkMail] CBL:Fw: news

2005-12-07 Thread Nick Hayer
Try CONTAINS instead of BEGINSWITH Make sure you have at least one crlf [a bunch would not hurt] at the end of the filter file. -Nick Todd wrote: I created a filter with the string BODY0BEGINSWITHimg src=""> The declude.cfg goes like this GIFINBODYFILTER filter

Re: [Declude.JunkMail] CBL:Fw: news

2005-12-07 Thread Nick Hayer
News SUBJECT 50 STARTSWITH press release SUBJECT 50 STARTSWITH news SUBJECT 50 STARTSWITH top news SUBJECT 50 STARTSWITH headline news -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Wednesday, December 07, 2005 1:16 PM

Re: [Declude.JunkMail] Senderbase

2005-12-14 Thread Nick Hayer
Scott Fisher wrote: Does anyone have software to convert an IPFile to an DNS zone? My IPFile has poped over 100 kb... I can do it in a heartbeat for you in foxpro - I need a sample zone and the ip file. If you have a copy of foxpro I will include the code back to you. -Nick -

[Declude.JunkMail] does anyone punish email from these folks?

2005-12-20 Thread Nick Hayer
I sure do get allot of spam from this ip space - are they legit and are lacking in their monitoring or ? Thanks - -Nick OrgName:WholeSale Internet OrgID: WHOLE-125 Address:1102 Grand Ave Suite 905 City: Kansas City StateProv: MO PostalCode: 64106 Country:US

Re: [Declude.JunkMail] Decludeproc abend

2005-12-21 Thread Nick Hayer
John T (Lists) wrote: Is abend some kind of French word? AbnormalEnding. - circa 1985 - coined with the introduction of Microsoft products. -Nicko ;) John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [Declude.JunkMail] Decludeproc abend

2005-12-22 Thread Nick Hayer
I was trying to make a joke but it is hard to do vie email at times. :) Especially to Windows diehards :))) I learned the abend term from Novell which is where I presumed it was coined. I know nothing about mainframe admin so it may have been born there. -Nick Sanford Whiteman wrote:

Re: [Declude.JunkMail] Hardware Issue

2005-12-26 Thread Nick Hayer
Hi David, Would you kindly elaborate on the ramifications of such a failure? I am interested in when its fixed but more importantly its ramifications. Are you saying that a hardware/network/software issue on your end can in anyway disarm/defuse/alter/change the way Declude functions on its

Re: [Declude.JunkMail] Declude Hardware Issue

2005-12-27 Thread Nick Hayer
David, David Franco-Rocha wrote: B) Your software is NEVER downgraded for any reason, either automatically or otherwise hmm - would you kindly shut down your key server for awhile and monitor the list in the meantime? -Nick We have had a few reports from customers who

Re: [Declude.JunkMail] How to get negative rounded SA result usiing SPAMC32

2006-01-06 Thread Nick Hayer
Sanford Whiteman wrote: I don't think it's me, I think it's Declude. Seems Declude is not even interpreting these as zero scores, but simply not matching them to any test definition at all? That's a substantial bug, if so. Can anyone else, I cannot get neg values returned I'm running

Re: [Declude.JunkMail] OT: MaxDSNSize

2006-01-11 Thread Nick Hayer
Matt - So Are you using ORF to tarpit or MS SMTP and if the latter besides the 2 reg tweaks below do you make any other changes? The threads thing is ok? Thanks -Nick Matt wrote: I just confirmed that this works properly. If the size limit is exceeded for the DSN, it strips all

Re: [Declude.JunkMail] ANN: SPAMC32 (SpamAssassin SPAMC for Declude) 0.5.58 released

2006-01-11 Thread Nick Hayer
Thanks Sandy! -Nick Sanford Whiteman wrote: -- SPAMC32 Release 0.5.58 1/10/2006 * Release notes for this version: [ + Added feature] [ * Improved/changed feature ] [ - Bug fix ] [ ^ Cosmetic/naming change ]

Re: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Nick Hayer
Matt wrote: I'm sure that Nick will volunteer to have his server monitored by me so that I can test this out on another box. I believe that he is also on 2.0.6.16 as well. sure and I am. Off list we need to discuss - -Nick Matt David Barker wrote: FYI Hyperthreading

Re: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Nick Hayer
Markus Gufler wrote: My conclusion for this day: Normaly I should stay in bed today as I'm more ill then healthy. Agreed! We need you Markus so get well! -Nick From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Friday, January

[Declude.JunkMail] malware or virii?

2006-01-20 Thread Nick Hayer
What do you think? I asked Matt and he said for me to try the link :) -Nick Received: from mx2.madriveraccess.com [12.152.254.14] by mx1.vtbass.com with ESMTP (SMTPD32-8.15) id A234DC20330; Fri, 20 Jan 2006 20:45:24 -0500 Received: from hugin5.snet.uvm.dk ([195.231.243.86]) by

Re: [Declude.JunkMail] malware or virii?

2006-01-21 Thread Nick Hayer
, and maybe note the submission to the Sniffer list, though I'm sure that Pete is seeing this also. Matt Nick Hayer wrote: What do you think? I asked Matt and he said for me to try the link :) -Nick Received: from mx2.madriveraccess.com [12.152.254.14] by mx1.vtbass.com with ESMTP (SMTPD32-8.15

[Declude.JunkMail] I seem to get alot of spam from the 'legit' lists.

2006-01-22 Thread Nick Hayer
Does anyone block them ? bcentral.com, bcentralhost.com, linkexchange.com, listbot.com, and listbuilder.com Thanks for your input - -Nick --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe,

Re: [Declude.JunkMail] OT - Server Watching.

2006-01-23 Thread Nick Hayer
Hi Jerod, I use jffnms http://www.jffnms.org/ Its open source [free] runs on all platforms and is very good. -Nick Jerod M. Bennett wrote: Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to

Re: [Declude.JunkMail] OT - Server Watching.

2006-01-23 Thread Nick Hayer
John T (Lists) wrote: BTW, what server did DAD stand for? (It never made it off the design board, of if it did it never became a beta, only an alpha.) well with family court so prevalent I would guess MOM got all of DAD's stuff? -Nick :) John T eServices For

Re: [Declude.JunkMail] Logged spam getting to mailbox

2006-01-24 Thread Nick Hayer
Title: Logged spam getting to mailbox Odd - just because its always the same email. What number do you delete on? Although the logs will balloon in size running the Declude in DEBUG may shed some light. I presume this is Declude 3x ver? -Nick Agid, Corby wrote: Hello, I'm

Re: [Declude.JunkMail] ANN: SMTP Gateway

2006-01-25 Thread Nick Hayer
Sanford Whiteman wrote: Has no one realized that this product is a commercial competitor to IMail or SmarterMail, with no relevance to Declude? I missed the post. .I actually had to look in my deleted emails to find the email to which you were referring.. Obviously you are right - I

[Declude.JunkMail] 'Nigerian Sales'

2006-01-30 Thread Nick Hayer
Morning.. Below is a sample email - which I classify as Nigerian sales. I am having a tough time flagging them as the come from generally generally legit accounts, have no links, etc. I have a filter that kinda works but no question a lot slips thru. Can anyone suggest a way I can get these?

Re: [Declude.JunkMail] elabs3.com

2006-02-08 Thread Nick Hayer
X-Note: X-Note: This email was scanned for spam. [Details at http://spamstats.madriveraccess.com] X-Note: This email has been virus scanned by F-Prot,McAfee AV, and ClamAV. X-Note: Please send abuse reports to [EMAIL PROTECTED] X-Country-Chain: X-Hello: X-Note: SMTP

Re: [Declude.JunkMail] Declude 4 changes ... worried...

2006-02-10 Thread Nick Hayer
X-Note: X-Note: This email was scanned for spam. [Details at http://spamstats.madriveraccess.com] X-Note: This email has been virus scanned by F-Prot,McAfee AV, and ClamAV. X-Note: Please send abuse reports to [EMAIL PROTECTED] X-Country-Chain: X-Hello: X-Note: SMTP

Re: [Declude.JunkMail] Opinion

2006-02-15 Thread Nick Hayer
X-Note: X-Note: This email was scanned for spam. [Details at http://spamstats.madriveraccess.com] X-Note: This email has been virus scanned by F-Prot,McAfee AV, and ClamAV. X-Note: Please send abuse reports to [EMAIL PROTECTED] X-Country-Chain: X-Hello: X-Note: SMTP

<    1   2   3   4   >