Re: [Declude.JunkMail] OT: Using Real E-Mail Address on Web Site

2004-11-10 Thread Rick Davidson
Pull them from a database dynamicly so the page actually has to be visited to display the addys Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Dan Geiser [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, November 10, 2004 11:26 AM

Re: [Declude.JunkMail] OT: Using Real E-Mail Address on Web Site

2004-11-10 Thread Rick Davidson
hey thats pretty cool! :-) Rick Davidson National Systems Manager North American Title Group - script language=Javascript !-- emailname = EmailRecipient emailserver = server.example.com document.write(font face='Verdana' size=2); document.write(a href='mailto:; + emailname + @ + emailserver

[Declude.JunkMail] FYI: TESTFAILED Syntax Gotcha

2004-11-16 Thread Rick Davidson
. :) Rick Davidson National Systems Manager North American Title Group --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe

Re: [Declude.JunkMail] Spamhaus

2004-11-30 Thread Rick Davidson
Yes, it nails alot of spam Rick DavidsonNational Systems ManagerNorth American Title Group- - Original Message - From: Doug Anderson To: [EMAIL PROTECTED] Sent: Tuesday, November 30, 2004 3:11 PM Subject: [Declude.JunkMail] Spamhaus Anyone use the xbl db

[Declude.JunkMail] WAY OT: Syslog entries from Cisco ACL question

2004-12-08 Thread Rick Davidson
10.10.0.72(0) - 10.10.9.18(0), 1 packet permitted udp 10.10.0.98(0) - 10.10.9.10(0), 1 packet I have ALOT of lines with many source and destination addresses, the IPs are valid for the network Thanks for any help Rick Davidson National Systems Manager North American Title Group - --- [This E-mail

[Declude.JunkMail] IPBYPASS Question

2004-12-16 Thread Rick Davidson
Can a CIDR range be used with the IPBYPASS option We just acquired a company who has Postini in the loop and I need to skip their IPs IPBYPASS 64.18.0.0/20 Rick Davidson National Systems Manager North American Title Group --- [This E-mail was scanned for viruses by Declude Virus (http

[Declude.JunkMail] New info in Yahoo HELO string?

2004-12-16 Thread Rick Davidson
from an authed account? Coincidentally the header I grabbed for the sample in this post contained a funny HELO :-) Received: from unknown (HELO ASS) ([EMAIL PROTECTED]@4.41.173.154 with login) Rick Davidson National Systems Manager North American Title Group --- [This E-mail was scanned

Fw: [Declude.JunkMail] New info in Yahoo HELO string?

2004-12-16 Thread Rick Davidson
Davidson National Systems Manager North American Title Group - - Original Message - From: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]; Inc [EMAIL PROTECTED] To: Rick Davidson [EMAIL PROTECTED] Sent: Thursday, December 16, 2004 4:30 PM Subject: Re: [Declude.JunkMail] New info in Yahoo

Re: [Declude.JunkMail] IPBYPASS Question

2004-12-16 Thread Rick Davidson
of the Postini systems keep changing so using the CIDR range is my only option until I can get their email moved entirely. Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Colbeck, Andrew [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, December 16

Re: [Declude.JunkMail] OT: Internet Usage - Monitoring and Filtering Apps

2005-02-15 Thread Rick Davidson
www.astaro.com has a fantastic solution, firewall, IPS, Content filtering, transparent DNS, HTTP and SMTP proxies, anti-virus and anti-spyware for the HTTP SMTP streams. some of the features are ala carte and can get pricy but it is one very nice all in one solution Rick Davidson National

Re: [Declude.JunkMail] Off Topic.

2005-03-18 Thread Rick Davidson
Have you looked at Plesk? http://www.sw-soft.com/ Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Richard Lanard [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, March 18, 2005 11:53 AM Subject: Re: [Declude.JunkMail] Off

Re: [Declude.JunkMail] Insufficient system resources error

2005-06-08 Thread Rick Davidson
this definately is not a declude issue Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Chris Patterson [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, June 03, 2005 3:13 PM Subject: RE: [Declude.JunkMail] Insufficient

Re: [Declude.JunkMail] Insufficient system resources error

2005-06-08 Thread Rick Davidson
the gateways Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Mike Nice [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, June 08, 2005 2:15 PM Subject: Re: [Declude.JunkMail] Insufficient system resources error

Re: [Declude.JunkMail] Insufficient system resources error

2005-06-09 Thread Rick Davidson
'? (7 to 20 Megabytes) I wouldn't be surprised by some type of logging problem. I occasionally see truncated/incomplete log lines in the file. This would certainly seem to be some sort of bug related to logging. - Original Message - From: Rick Davidson [EMAIL PROTECTED

Re: [Declude.JunkMail] Insufficient system resources error

2005-06-11 Thread Rick Davidson
8.2 hf2 Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Chris Patterson [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, June 10, 2005 1:13 PM Subject: RE: [Declude.JunkMail] Insufficient system resources error Hey Rick

Re: [Declude.JunkMail] IMail 8.21 Update

2005-07-28 Thread Rick Davidson
this patch. Rick Davidson National Systems Manager North American Title Group - Original Message - From: William Stillwell [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, July 28, 2005 1:10 PM Subject: [Declude.JunkMail] IMail 8.21 Update Anybody install this yet? Any

Re: [Declude.JunkMail] Paranoia

2005-12-03 Thread Rick Davidson
let me know if you get the BANEXT .snow working, we got 24 inches yesterday and last night, good ol Lake Erie lake effect snow... sigh Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Markus Gufler [EMAIL PROTECTED] To: Declude.JunkMail

Re: [Declude.JunkMail] OT: Imail Aliases

2006-01-20 Thread Rick Davidson
Just setup the new domain on your gateways and script them the same way, my company grows through aquisition, I have 5 domains on my gateways and use the aliases trick. Rick DavidsonNational Systems ManagerNorth American Title Group- - Original Message - From: Mark Smith

Re: [Declude.JunkMail] Declude as a Gateway

2006-04-14 Thread Rick Davidson
I used Imail and Declude as a gateway and will continue to do so when we convert our users to exchange Rick Davidson North American Title Group National Systems Manager 4667 MacArthur Blvd. Suite 240 Newport Beach, CA 92660 Phone: 951-233-6342 Fax: 949-251-9283 Email: [EMAIL PROTECTED

[Declude.JunkMail] RE: email being delivered with blank body. What happened to body?

2011-04-04 Thread Rick Davidson
Look for these messages in your log files WARNING: EOF in multipart processing I had that problem when I upgraded to Interceptor 3.4.10.48 back in Feb, I had to roll back to the previous version I was running which is 3.4.42 I have yet to hear back on that one, if anyone has a fix I’d like to

RE: [Declude.JunkMail] RE: email being delivered with blank body. What happened to body?

2011-04-04 Thread Rick Davidson
- From: Rick Davidson rdavid...@nat.com Sent 4/4/2011 8:33:10 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] RE: email being delivered with blank body. What happened to body? Look for these messages in your log files WARNING: EOF in multipart processing I had that problem when

RE: [Declude.JunkMail] email being delivered with blank body. What happened to body?

2011-04-05 Thread Rick Davidson
Login to the interim area Go to interceptor There is a dir called 3.4.10.59 Swap out the decludeproc.exe files I am running it this morning and indeed that issue does not exist, however the diags.txt says it is 3.4.10.49 -- rick From: Harry Vanderzand [mailto:ha...@intown.net] Sent: Tuesday,

RE: [Declude.JunkMail] email being delivered with blank body. What happened to body?

2011-04-05 Thread Rick Davidson
and someo...@nat.commailto:someo...@nat.com from some...@msn.commailto:some...@msn.com instead of what was contained in the headers Rolled back to previous version… -- Rick From: Rick Davidson Sent: Tuesday, April 05, 2011 8:37 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail

RE: [Declude.JunkMail] white list or positive weight for a specific To address?

2011-06-19 Thread Rick Davidson
Why not use the HELO or REVDNS? REVDNS is going to be the safest because of the difficulty in forging it HELO -10 CONTAINS smtp.declude.com or HELO WHITELIST CONTAINS smtp.declude.com REVDNS -10 CONTAINS smtp.declude.com or REVDNS WHITELIST CONTAINS smtp.declude.com or even blanket the headers

RE: [Declude.JunkMail] white list or positive weight for a specific To address?

2011-06-21 Thread Rick Davidson
Thanks Sandy, interesting response, it got me thinking a bit wouldnt the spammer/attacker need to have delegated authority over the source ip address space and control of DNS infrastructure to forge a PTR record? I have been doing this a while and I dont recall ever seeing a message

[Declude.JunkMail] regular expressions and IS

2011-08-09 Thread Rick Davidson
I am working on a combo filter to catch the aol/hotmail/yahoo url spam is there a way to use a regular expression with IS body 0 IS/PCRE (?i:^http\:\/\/.*\.(html|htm|php)$) any suggestions welcome -- Rick CONFIDENTIALITY NOTICE This e-mail message and any attachments contain confidential

RE: [Declude.JunkMail] regular expressions and IS

2011-08-09 Thread Rick Davidson
dbar...@declude.com wrote: The expression is the IS Can you post a few examples of what you trying to catch ? -Original Message- From: Rick Davidson [mailto:rdavid...@nat.com] Sent: Tuesday, August 09, 2011 2:34 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail

[Declude.JunkMail] AOL Header Test

2011-09-06 Thread Rick Davidson
Hello, I have a combo test for scrutinizing AOL and the large webmail providers, I am trying to trigger on an AOL X header with this HEADERS 0 CONTAINS X-SPAM-FLAG: YES any idea why this wouldn't hit? -- Rick CONFIDENTIALITY NOTICE This e-mail message and any

RE: [Declude.JunkMail] AOL Header Test

2011-09-08 Thread Rick Davidson
CONTAINS X-Spam-Flag: YES http://postmaster.aol.com/Postmaster.FAQ.php Andrew. From: Rick Davidson [mailto:rdavid...@nat.com] Sent: Tuesday, September 06, 2011 3:06 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] AOL Header Test Hello, I have

[Declude.JunkMail] Blank TO Test?

2011-09-23 Thread Rick Davidson
How would one go about triggering on a message with a blank or missing TO field? -- Rick CONFIDENTIALITY NOTICE This e-mail message and any attachments contain confidential and/or privileged information for the sole use of the intended recipient. If you are not the intended recipient, you

RE: [Declude.JunkMail] whitlist receiving address

2011-09-27 Thread Rick Davidson
in the global.cfg you can use WHITELIST TO some...@domain.com in a filter you can use something like this ALLRECIPS WHITELIST CONTAINS some...@domain.com -- Rick From: Harry Vanderzand [mailto:ha...@intown.net] Sent: Tuesday, September 27, 2011 4:25 PM To: Declude.JunkMail@declude.com Subject:

RE: [Declude.JunkMail] Filter help

2011-10-12 Thread Rick Davidson
have you tried just adding BALCOMLAWHOLD f:\Balcomlawhold to the default.junkmail file in the declude root? -- Rick -Original Message- From: Heimir Eidskrem [mailto:decl...@i360.net] Sent: Wednesday, October 12, 2011 5:41 PM To: Declude.JunkMail@declude.com Subject:

[Declude.JunkMail] Regex Greed Issue

2011-11-03 Thread Rick Davidson
I am trying to use the following regex to catch phishing URLs like http://www.usps.com.scam.com http\:\/\/www.*?\.com\..*?\.com The issue is the question marks do not stop the greediness of the * it will catch

RE: [Declude.JunkMail] Regex Greed Issue

2011-11-03 Thread Rick Davidson
Subject: RE: [Declude.JunkMail] Regex Greed Issue Hi Rick, Are you sure your regex catches the long URL how did you test it ? David -Original Message- From: Rick Davidson [mailto:rdavid...@nat.com] Sent: Thursday, November 03, 2011 6:38 PM To: Declude.JunkMail@declude.com Subject

RE: [Declude.JunkMail] Regex Greed Issue

2011-11-04 Thread Rick Davidson
Message- From: Rick Davidson [mailto:rdavid...@nat.com] Sent: Thursday, November 03, 2011 10:38 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Regex Greed Issue well based on your response I guessed you couldn't reproduce it with the example I sent, I confirmed that, and I am

[Declude.JunkMail] Move Interceptor Spool dir to RAM drive?

2012-02-01 Thread Rick Davidson
Hi Guys, This is aimed at Interceptor users I am battling some disk latency issues (exceeding max achievable IOPS for system), I am trying to move my spool folder to a RAM disk. I updated the paths in Alligate to point to the RAM drive but Declude doesn't know to look there, any ideas aside

<    1   2