I do not think this would work - WEIGHT and WEIGTRANGE tests run last.
[I think!] As Scott suggested the only way I believe is to use the
SKIPIFWEIGHT directive.
For me it would sure be nice if we could use variables in the filter
files eg IF %WEIGHT% xx ELSE END sort of thingy..
-Nick
Thanks Bill,
Bill Landry wrote:
BTW, if you are running ClamAV, and want to take full advantage of
it's phish catching capabilities, you might was to take a look at
adding the phish signature file that Steve Basford put together
I just installed the sigs and within 10 min I had 3 'hits':
Hi Gary,
Gary Steiner wrote:
I've never run ClamAV before. Looking at www.clamav.net, I see there are several Windows ports for it. Is anyone using one of the various Windows ports for ClamAV under W2K3? If so, which one is best?
no idea! But the one I use is
Excellent.
Thanks Scott!
-Nick
Scott Fisher wrote:
Thanks Bill, that's pretty nice. I've tripped over that page before,
but I never noticed the download link.
They are catching phish already here.
For the purposes of the list, here's the command file I put together
to download updates. I
Kami Razvan wrote:
Hi;
It
seems like WEIGTRANGE tests are done at the very end.. no other filter
tests run.
Is that right?
this is correct. - no real exact order but the usual is WEIGHTRANGE
runs last...
-Nick
Regards,
- Kami
Hi John,
What is my best bet - jack up
the score a number of points for any mail coming from 86 87? Many of the
messages hardly trip any of the regular tests.
Wouldn't hurt - use blackholes.us and maybe score 40% of your hold
weight? I would say though blocking a /8 is not a good idea.
Hi Todd,
Todd Richards wrote:
I
have adjusted the thresholds in the Hijack.cfg file (this is a common
practice by our members-only clients)
You can do anALLOWIPxxx.xxx.xxx.xxx and that ip will be
whitelisted.
but how do I release his IP address?
well it used to be
Email customers that forward through me are getting their email bounced
because of the original sending domain's spf policy. I understand this
delima is addressed with Sender Rewriting Scheme
http://www.openspf.org/srs.html
Does anyone have a solution to this w/Declude Imail?
Thanks
PROTECTED]] On Behalf Of Nick Hayer
Sent: Saturday, March 04, 2006 11:40 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] spf breaks email forwarding -
Email customers that forward through me are getting their email bounced
because of the original sending domain's spf policy. I
Matt wrote:
Real-world issues include working around bad implementation, such as
surfglobal.net not configuring their server to reject messages that
fail SPF.
SRS is a work around - and I'm simply asking if anyone has implemented
it on an Imail/Declude platform. Kindly stay on topic I
-DM02.htm
The short version being that if
you make sure that the Q*.SMD file (which can be any filename) contains
the "Q" row and a fully qualified D*.SMD file (which can be any
filename) you can just call:
smtp32.exe Qxxx.SMD and
IMail will queue it up immediately.
Hi Sandy
Sanford Whiteman wrote:
Andrew, I like your workaround with the Program Alias. However, I
think that instead, if people are willing to wait a few weeks to a
month, I can find time to put out a full-fledged external test for
Declude that does much the same thing,
Hi Dave,
I have one of these that will do what you want I believe. - I've moved
on to a Packeteer and a large Catalyst. If you are interested let me know.
http://www.netsys-direct.com/proddetail.php?prod=NS-2024Scat=12
-Nick
Dave Doherty wrote:
Hi, all-
I'll be providing VOIP and Internet
Hi Scott -
I do not quite understand - you could score each line [hit] with the
filter protected with a minweight to fail [to protect against false
positives ] and if necessary to contain the filter from overpowering
the scoring a maxweight to cap. The filter only runs once and will
Hi Craig,
Although you may already do this figured I mention it anyway - this
technique works well to monitor spool traffic eg when a threshold is
reached I get an email - so for example in your code below IF
FFunc.Count 100 [altered path for the spool dir] send me an email...
-Nick
shShell.Run(mCmd , 1, TRUE)
End Function
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Nick Hayer
Sent: Sunday, April 02, 2006 7:59 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Hijack Notification
Hi Craig,
Although yo
]
[mailto:[EMAIL PROTECTED]] On
Behalf Of Nick Hayer
Sent: Monday, April
03, 2006 11:03
AM
To:
Declude.JunkMail@declude.com
Subject: Re:
[Declude.JunkMail]
Hijack Notification
Hi John,
John Doyle wrote:
this guy suggested this.
I'm not sure exactly how. looks like if a count
Actually the grammar reminds me of Matt :)
-Nick
John Carter wrote:
I know some of you have seen such before, but the text below is the most
extreme (useless) attempt to get around filters I've seen. It looks like
something my son would text message.
LOL
John
Your c a redi z t doesn't
Hi Dean -
Dean Lawrence wrote:
First, what thresholds are most of you using, that causes minimal
screaming phone calls from client? 8-)
RELAYTHRESHOLD11020
RELAYTHRESHOLD23040
Secondly, how are you handling non-fixed IP users that may send large
(over the thresholds),
this. Do I need to set
this up as a task, or how will it run?
Thanks for any tips.
Todd
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Nick
Hayer
Sent: Monday, April 03, 2006 3:59 PM
Take that code, adjust the paths/email addresses as need be, save
I would ask the questions on their list - this is the Declude junkmail
list - probably over there folks know it better and would get better info.
-Nick
Todd Richards wrote:
Per suggestions from others, I am looking to implement invURIBL on our mail
server (Imail 8.2x with Declude 4.0.9). I
I have trouble deciding if these are generally good or bad lists - do
any of you block them with certainty?
Thanks
-Nick
biglist.com
internetcrusade.com
rmxx.com
edxx.com
[both of the above replace the xx with 01,02,03,etc..]
roving/constantcontact
---
This E-mail came from the
I am
-Nick
[EMAIL PROTECTED] wrote:
If anyone is using Declude with SmarterMail or IMail as a
Gateway could you get in touch with me off the list [EMAIL PROTECTED]
Thanks
Barry
Hi John,
AH, use variables to set the date and then process by date.
simplicity is elegance :)
Now question,
how does that work if say you run the script on 04/01/06? Will it recognize
the day before as 03/31/06 or will it try to say it is 04/00/06?
Well it depends. What files will be
you can email info[AT]dnsstuff.com -
-Nick
Mark Reimer wrote:
I cannot access dnsstuff.com from my network. I think my IP may be
banned but I'm not sure how that would happen. How to I get in contact
with someone to see if I've been banned?
Mark Reimer
---
[This E-mail has been scanned
Hi Sandy,
Sanford Whiteman wrote:
Well, we've lately been running Razor *and* Sniffer and have found no
reason to give up either one.
How do you have Razor configed? eg is it on a win32 box? If so would you
share how you did it?
-Nick
---
This E-mail came from the Declude.JunkMail mailing
Snort will tell you in a heartbeat
-Nick
Marc Catuogno wrote:
I had my ISP (dsl.net) call and tell me that there was virus activity on our
circuit, namely port scans on 445 (maybe Sasser?). I have asked all my
agents to run the removal tool and do windows update. I have run Ethereal
but it
fyi -
I just found these 2 plugins for spamassassin
http://wiki.apache.org/spamassassin/OcrPlugin
http://antispam.imp.ch/patches/patch-ocrtext
That will ocr the gifs, etc. These should help SA be even more effective
within Declude..
-Nick
---
This E-mail came from the Declude.JunkMail
I sure feel this way - not only the releases that are not mentioned but
also the bugs that are described that go unanswered.
I would guess these are some of the reasons this list is so dead now.
oh yea - I started w/ver 1.28 :)
-Nick
John Shacklett wrote:
Hi. Following along with the
in the 80_additional.cf rule set that are very good at tagging these
kinds of image spams.
And finally, Sniffer seems to successfully tag almost 100% of these
image spams, and Razor tags a majority of them, as well.
Bill
- Original Message - From: Nick Hayer [EMAIL PROTECTED
Sanford Whiteman wrote:
In keeping with the increased CPU demands of such tests, the new
version of SPAMC32 will contain the ability to send the request to two
(maybe more than two in future) tiered SPAMD daemons. The second
daemon -- listening on a different port, or on a different
fyi -
Sanesecurity phish downloads have changed as of 5/10. The download file
is gzip'ed and called phish.ndb.gz
-Nick
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives
Hi Matt,
Matt wrote:
I'm trying an upgrade from the 2.x release for the first time,
Why on earth would you want to do that? Was 2x too bug free and you
need some excitement?
-Nick
Hi Matt,
So you see any substantive performance improvement over 2x?
-Nick
Matt wrote:
Jay,
It's not about moving along, it's about limiting the CPU to only 100%,
or at least not piling it on when it gets there. I could be wrong in
assuming that 1 thread = 1 message (hopefully I will be
Hi David [Barker],
Is there a list, or would you kindly post one of the known issues with
Declude? I'm still on 2x because of all the problems reported and what
I perceive as them not being resolved.
Thanks!
-Nick
John Doyle wrote:
Robert
I"m running 8.22 hf2 and Declude
not domain (fixed)
David B
www.declude.com
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick
Hayer
Sent: Monday, June 19, 2006 1:04 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] compatibility question
Hi David [Barker
I have been running 2.0.16 however it has a bug that external tests
will double-dip; eg fail the same external test multiple times... I
reported it to tech support with no resolution - so my only recourse
is to run the latest ver. I am licensed for declude virus, hijack and
JMPro - so I
Hi Sandy,
Sanford Whiteman wrote:
I have been running 2.0.16 however it has a bug that external tests
will double-dip; eg fail the same external test multiple times... I
reported it to tech support with no resolution - so my only recourse
is to run the latest ver.
Is
There is a much more recent avail you can download from 'my account' on
the declude site. If you cannot find it let me know and I will send it
to you.
-Nick
Darrell ([EMAIL PROTECTED]) wrote:
What is the latest all_list.dat file. Mine is dated 9/28/2005.
I am seeing an issue with
Hi Mike,
Here is my understanding of the 2 tests:
If an email originates from a country it will fail the COUNTRY test
If an email passes through a country it will fail the COUNTRIES test
-Nick
Mike N wrote:
I looked in the 4.x Junkmail manual, and couldn't find an
authoritative definition
Andy Schmidt wrote:
Hi Dave,
Sorry everyone -- my mistake.
no biggie. That is what David, our pinada, is for. :)
-Nick
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The
not hesitate to contact me
either by email or call Toll free 1-866-332-5833 Ext.7008
Linda Pagillo
Technical Support Engineer
Declude
- Your
Email security is our
businessT
978.499.2933 office
978.477.8930 efax
[EMAIL PROTECTED]
www.declude.com
From: Nick Hayer
[EMAIL PROTECTED]
Sent: Mon, 17
David Barker wrote:
Declude has
this process and functionality built in to the Declude product which enables
customers to use a command line scanners like ClamWin
snip
Brian Burns port called ClamAV supports clamd which is wicked fast [and
free]. This is a different product from ClamWin.
I
Don Brown wrote:
What is the URL to Brian Burns' port?
http://www.sosdg.org/clamav-win32/
-Nick
Monday, July 17, 2006, 2:05:34 PM, Nick Hayer [EMAIL PROTECTED] wrote:
NH David Barker wrote:
Declude has
this process and functionality built in to the Declude
Sorry but I have not been keeping up w/this thread - we no longer can
use the desktop fpcmd.exe as we have been w/Declude without paying alot
more $$? Can we use the version we have and still get defs?
-Nick
Matt wrote:
F-Prot doesn't care. They don't do volume as a plug-in to mail
Chris Asaro wrote:
Try opening the diags.txt file in your \mailserver\declude directory. Check
to see if you are receiving an invalid key code error.
When I went to 4.20 I had no such error code however the evidently there
was a one hence Declude ceased to function without warning.
-Nick
David - at Declude -
Would you kindly comment on this?
Also on what is Declude 4.3?
-Nick
John T (Lists) wrote:
I guess we all missed the following paragraph in the license agreement:
3.2.6 sub-license, rent, sell, lease, distribute, or otherwise transfer the
Licensed Program save as
Current Service Providers (ie. Before 1 June 06) are under no restrictions
for using Declude; only the CommTouch add-in component.
Excellent!
Thanks for the reply -
-Nick
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL
David,
You have asked for some constructive feedback here regarding this new
offering - I will not ask for a show of hands here :) but I bet a lot
of folks are rolling their eyes simply because of the core Declude
product and its outstanding bugs., inability to release a stable
product,
Hi David,
David Barker wrote:
Nick,
With regards to outstanding bugs I have a list which we are working on, and
as you know I have committed to get these fixed as well
That you have, and your participation on this list is greatly
appreciated. I was only trying to suggest that the past couple
we use http://www.jffnms.org/
-Nick
dfn Systems wrote:
Quiet times are good for off topic subjects Right?
I need a Monitoring program that will show me bandwidth utilization of
my dsl customers to help track down compromised/infected machines.
Regular sniffer programs won't work because
Thanks much Bill,
-Nick
Bill Landry wrote:
For anyone that is possibly running ClamAV for virus scanning, and is
already taking advantage of the added phish detection provided by
Steve Basford's phish.ndb, he has put together another database geared
to tagging scam e-mails, including those
Is there a way to do this without the wizard?
Thanks for any info
-Nick
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
To David at Declude - or anyone else...
I have these lines in my global config Declude 4.3.7:
IPBYPASS12.152.254.14
XINHEADER X-Note: Sent from: [Revdns: %REVDNS%] [RemoteHostDomain:
%REMOTEHOST%] [RemoteIP: %REMOTEIP%] [SenderHost: %SENDERHOST%]
I received this email below
Matt wrote:
Nick,
Do you buy any chance have have this IP also covered by a whitelist
entry of any type in your Global.cfg?
Nope. No where is it listed except on the IPBYPASS line -
-Nick
Matt
Nick Hayer wrote:
To David at Declude - or anyone else...
I have these lines in my
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] IPBYPASS Broke?
Nick,
Do you buy any chance have have this IP also covered by a whitelist
entry of any type in your Global.cfg?
Matt
Nick Hayer wrote:
To David at Declude - or anyone else...
I have these lines in my global
This regex works
\b(PHA)+([a-zA-Z]+(RMA))\b
as well as this one for the other morph
\b(PHA)+([a-zA-Z]+(RMACY))\b
-Nick
Ferrell Ard wrote:
We are seeing a lot of email with the Subject line
Subject: X-IMail-SPAM PHAujyRMA
The KEY to the subject line is
(1) 1st 3 letters are always PHA
(2)
Harry,
Please post to the list the details -
Thanks
-Nick
chris wrote:
Harry
Contact me
off the list if you can, I would
like to help
Chris Asaro
Technical
Support Engineer
Declude
Your Email
security is our
business
866.332.5833toll
free
Matt wrote:
Let me jump in here for a moment.
You guys should have made a deal with Pete instead of CommTouch.
Sniffer blows it out of the water and he has no licensing
restrictions. IMO of course.
mine too! Sniffer does a very good job..
-Nick
---This E-mail came from the
Chris Anton wrote:
Hello... We are using declude 2.somethign... we are pegged at 100% processor usage and are wondering what is the best way to determine how long each test takes.
Do you have filter 'optimizers' in your filters eg - SKIPIFWEIGHT and
STOPATFIRSTHIT in your filter files?
Todd Richards wrote:
Thanks Kevin. This is what I was wondering about, so I will look into how
to implement.
something like this:
WEIGHTRANGE.SPAM.LOW weightrange x x 10 12
triggered on a weight of 10 to 12 inclusive
WEIGHTRANGE.SPAM.MID weightrange x x 13 15
Craig Edmonds wrote:
How
can I whitelist based on Reverse DNS?
REMOTEIP WHITELIST CIDR 64.4.240.0/20
REVDNS WHITELIST ENDSWITH .paypal.com
etc...
-Nick
Kindest Regards
Craig Edmonds
123 Marbella Internet
W: www.123marbella.com
---
This E-mail came from the
Hi David F,
David Franco-Rocha [ Declude ] wrote:
The broken line terminators are not necessarily of the same type in a
given message. In addition, they are not necessarily adjacent to each
other (with leading whitespace or unprintable characters on a
line).What may appear obvious to the
Hi Karl,
Post a sample with full headers so we can see what the scofflaw is
sending you
-Nick
Karl Hentschel wrote:
Thanks for the tip, but unfortunately I am not using the Pro version of
Declude so I cannot create my own filters. Are others being slammed with
stock spam recently?
IVETEN-SRC [4], DYNHELO [5]
X-Country-Chain: CANADA-FRANCE-destination
X-IMAIL-SPAM-PHRASE: (8965064d00d0eb56, our hottest pick)
X-RCPT-TO: xxx@ourdomain.com
Status: U
X-IMail-Rule: H~x-imail-spam:xxx@ourdomain.comData-
X-IMAIL-SPAM-PHRASE IT'S BUD
X-UIDL: 463095290
From:
[EMAI
effectively with any IP4r list.
-
Original Message -
From:
Nick Hayer
To:
declude.junkmail@declude.com
Sent:
Thursday, November 09, 2006 4:51 PM
Subject:
Re: [Declude.JunkMail] Spam not being caught
So far - and I have been hammered as well
Scott Fisher wrote:
I get over a 1000 spam a day from
this spammer.
If you don't have a pattern would you mind sending me off list a few of
the ones you do receive from different days? I do not recognize this
gut so I would like to see more of his product.
-Nick
Hi Mark,
I just sent you off list my \share\clamav dir zipped up...
-Nick
Mark Reimer wrote:
My daily.inc
folder is missing from the
clam directory. Could anyone please help me?
Mark
Reimer
IT System Admin
American CareSource
972-308-6887
can you post the headers from samples that were delivered on different days?
Then we can help I betcha
-Nick
Dave Doherty wrote:
Yes, it is similar. For some reason, sniffer doesn't seem to getting
all of them.
I wonder if something like
FROM 10 CONTAINS %SUBJECT%
might work
-Dave
nothing - Matt with his trickery is adding more weight to a last hop
that fails the test...
-Nick
Darin Cox wrote:
Then what was wrong with my example?
Darin.
- Original Message -
*From:* Matt mailto:[EMAIL PROTECTED]
*To:* declude.junkmail@declude.com
Doherty
Skywaves, Inc.
97 Webster Street
Worcester, MA 01603
508-425-7176
[EMAIL PROTECTED]
- Original Message - From: Nick Hayer
[EMAIL PROTECTED]
To: declude.junkmail@declude.com
Sent: Wednesday, November 15, 2006 5:38 PM
Subject: Re: [Declude.JunkMail] New pattern
can you post
Any other undocumented's that you can share? :)
-Nick
David Barker wrote:
Just an FYI you may find it useful, in the global.cfg:
BLKLST ON
Writes a text file to the \spool\blklst.txt containing the IP and weight of
emails eg.
1.1.1.1 23
2.2.2.2 7
David Barker
Director of
Thanks for sharing Karl, nice work!
-Nick
IS - Systems Eng. (Karl Drugge) wrote:
The newest PERL script. Slices, dices, etc ... Throw it in a
directory, edit a few environment variables at the top of the script,
dump in a few Declude logs, run it, enjoy. Requires PERL, of course.
Hi John,
John T (Lists) wrote:
I have 3 gateway servers running IIS with ORF. These are my MX records for
all my domains.
ORF has identified and blocked 71% of incoming email on my primary gateway.
ORF has identified and blocked 81% of incoming email on my secondary
gateway.
I see the
fyi -
http://www.darkreading.com/document.asp?doc_id=116685WT.svl=news2_1
-Nick
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at
Hi Scott,
Scott Fisher wrote:
Are there any end users who are using the VAMSOFT IMAGE SPAM AGENT tht
would like to comment on it's effectiveness / processor utilization?
it seems to not use much cpu; its effectiveness is ok. In case you are
unaware it does not ocr the email, it just works on
Hi Chuck,
I use Alligate. It does some very fancy stuff prior to the 'data'
command [among other things afterward] that on my system block 95%
of incoming traffic prior to receiving the email. And this is not
done with ip blacklists..
-Nick
Chuck Schick wrote:
Anyone using a spam
David,
Do not take all these suggestions personal.
You are our pinata - remember? :)
-Nick
David Barker wrote:
- Pulled out the bad package
Did this.
- Rolled a new package (with an incremented version number) with the
missing DLL, tested the package successfully and
Hi Rick,
Having a bad day?
-Nick
Rick Klinge wrote:
Will you morons please remove me from your spam list?
*From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
*Sent:* Monday, February 04, 2008 10:33 PM
*To:* declude.junkmail@declude.com
*Subject:* [Declude.JunkMail] re:
Andre -
Colbeck, Andrew wrote:
David Barker said:
DEC ADD Added date, Time, Email, Spool name, Weight and Tests
failed
to the BLKLST log
I thinks its the recording to the blklst.txt file that lives in the
\spool dir.
I have forgotten the files purpose...
-Nick
Fellow Declude users - .
I have a small application that will allow Declude for Imail to run -
without Imail - on an Alligate server. The result is Declude
functionality on an Alligate gateway!
The app is in production but before any formal release I am looking for
a few folks to help me
Colbeck, Andrew wrote:
I use Alligate from Solid Oak Software, and I like it a lot.
as do I.
The really slick part is how it reduces bandwidth - it *very* accurately
distinguishes spam etal before the DATA command thereby preventing the
unwanted emails from ever being received..
Hi Scott,
Scott Fosseen wrote:
I guess I am looking for a word of encouragement from the alligate
supporters out there that I should stay diligent or if there are any tips
you can share.
Alligate is unbelievable with what it does and with what little resource
it uses. It is the way to go -
fyi -
Alligate has started its own maillist - to join:
[EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
The mailing list address is [EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]
-Nick
Dave Marchette wrote:
Always copy and paste, and always don't allow a trailing space at the
end of the domain
Hi David -
Below was forwarded to me - as a long time Decluder I am very
disappointed in seeing something like this -
-Nick
http://dozierinternetlawpc.cybertriallawyer.com/computer-lawyer
DECLUDE, INC. AND DNSSTUFF, LLC. v. R. SCOTT PERRY DISTRICT OF
MASSACHUSETTS (BOSTON)
no?
Kindest Regards
Craig Edmonds
123 Marbella Internet Services
W: www.123marbella.com http://www.123marbella.net/
E : [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
*From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of
*Nick Hayer
*Sent:* 09 September 2008 16:16
Hi -
Are there any release notes as to how this version differs from 4.4.18?
Are these release notes posted on the Declude site?
Thanks
-Nick
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe
). As we have just put out the 4.4.20 I have not as of yet
updated the .txt file, which I will do later today.
David B
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick
Hayer
Sent: Sunday, September 28, 2008 1:46 PM
To: declude.junkmail@declude.com
Subject
Hi David,
Are there any new features, etc for Declude, soon to be released or
planned? If so would you elaborate?
-Nick
David Barker wrote:
Part of the interim release debug logging it will be removed for the actual
release.
David Barker
VP Operations Declude
Your Email security is
Hi David,
David Barker wrote:
We may want to create a new test which would trigger if multiple countries
are in the routing. Any thoughts would be welcome.
I do not think it would add much value For example I have a Russian
company that send all their email via Hong Kong. I suspect there
Not sure if this is what you are asking - you could do something like
this for a particular recip subject pairing:
ALLRECIPS END NOTCONTAINS x
SUBJECT END NOTCONTAINS xx
REVDNS delete weight CONTAINS .
-Nick
David Barker wrote:
No there is not. If you want to blacklist I would
Todd -
I will second David on this - Alligate is the best gateway - no question
about it - and it does integrate perfectly with Declude.
-Nick
David Barker wrote:
Hi Todd,
Alligate has way better greylisting capabilities than SmarterMail.
SmarterMails implementation is somewhat
Was it not working? yawn. Never noticed. On my end AVG is superfluous
behind Alligate. We just do not see a virii leakage. We run ClamD for
phishing and I do not see in its logs any virus captures.
-Nick
From: David Barker dbar...@declude.com
Sent:
SmarterMail. Its the way to go. Ver 6 will support ActiveSync [ as an addon]
and the web interface is excellent.
I have one remaining Imail server - 9x version - to convert..
-Nick
From: Chuck Schick cha...@warp8.com
Sent: Tuesday, August 11, 2009 1:07
maybe hijack is grabbing them? Look in the /spam2 dir
-Nick
From: Scott Fosseen [Prairie Lakes AEA] sfoss...@aea8.k12.ia.us
Sent: Wednesday, August 26, 2009 2:46 PM
To: decludejunkmail declude.junkmail@declude.com
Subject: [Declude.JunkMail] Missing
Hi Pete,
Question - is this blacklist info already contained withing any Sniffer
test? I am wondering about double dipping so to speak - if the info is
within Sniffer which rulebase?
-Nick
MadRiverAccess.com|Skywaves.com Tech Support
US/Canada 877-873-6482 or International +1-802-229-6574
here ya go
IP4R.GBUBD ip4r truncate.gbudb.net 127.0.0.1 9 0
Above scores a 9 on a hit..
-Nick
MadRiverAccess.com|Skywaves.com Tech Support
US/Canada 877-873-6482 or International +1-802-229-6574
Emergency Support 24/7: supp...@skywaves.net
General and Non-Emergency support
?
- Michael Cummins
From: supp...@declude.com
[mailto:supp...@declude.com] On Behalf Of Nick Hayer
Sent: Friday, April 30, 2010 11:00 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] We have opened up truncate.gbudb.net
here
ya go
IP4R.GBUBD
ip4r truncate.gbudb.net
Hi Michael,
I guess this is best said - let it go,,,Alligate is the the way to go in
front of Declude - Contact them again - they probaby will be glad to set you up
with at trial even of some sort,
-Nick
MadRiverAccess.com|Skywaves.com Tech Support
US/Canada 877-873-6482 or International
Hi Harry,
Below is a script I copied from the list long ago - edit as applicable for
your setup, save it as a .vbs file and run it every 15 min or so
-Nick
fHold1 = \\192.168.254.23\goofy\imail\spool
fHold2 = \\192.168.254.23\goofy\imail\spool\proc
aMail = e:\imail\imail1.exe
mFrom = -u
201 - 300 of 329 matches
Mail list logo
