Re: [Declude.JunkMail] OT: Erasing Cisco Pix 515 flash RAM

2005-11-28 Thread Doug Anderson
Only thing I can think of is from monitor mode...copy over the flash with tftp. Otherwise you have to call cisco support and get an erase utility. - Original Message - From: S.J.Stanaitis To: Declude.JunkMail@declude.com Sent: Monday, November 28, 2005 2:00 PM

[Declude.JunkMail] example

2005-05-17 Thread Doug Anderson
Does anyone have an example of a declude junkmail config file they can share which has a inbound from a gateway server? We have an external service scanning the emails for virus and spam (adding x-header only). So our mx record points to them. They then send the email via smtp to us. What

Re: [Declude.JunkMail] example

2005-05-17 Thread Doug Anderson
through multiple servers on their end? Darrell DLAnalyzer - Comprehensive reporting for Declude Junkmail and Virus. Try it today - http://www.invariantsystems.com Doug Anderson writes: Does anyone have an example

Re::Re: [Declude.JunkMail] example

2005-05-17 Thread Doug Anderson
er - Comprehensive reporting for Declude Junkmail and Virus. Try it today - http://www.invariantsystems.com Doug Anderson writes: Does anyone have an example of a declude junkmail config file they can share which has a inbound from a gateway server? We have

[Declude.JunkMail] Strange behavior

2005-05-13 Thread Doug Anderson
Alright, due to "management decisions" they want me to test a product from sprint for spam and virus protection. It is setup a pre-cursor to our imail and declude setup, but is only set to add a x-header into the email. Since I've done this, more spam seems to be coming through. Do I need

[Declude.JunkMail] Opinion

2005-04-05 Thread Doug Anderson
Anyone use Postini before? in addition to? New manager wants to look at it Comments?

Re: [Declude.JunkMail] [IMail Forum] odd behavior

2005-02-24 Thread Doug Anderson
24, 2005 2:48 PM Subject: Re: [IMail Forum] odd behavior Says ameripride.org is on the whitelist (decludes not IMail's) Eric S - Original Message - From: Doug Anderson To: IMail_Forum@list.ipswitch.com Sent: Thursday, February 24, 2005 3

Re: [Declude.JunkMail] [IMail Forum] odd behavior

2005-02-24 Thread Doug Anderson
: Thursday, February 24, 2005 12:48 PMTo: IMail_Forum@list.ipswitch.comSubject: Re: [IMail Forum] odd behavior Says ameripride.org is on the whitelist (decludes not IMail's) Eric S - Original Message - From: Doug Anderson

[Declude.JunkMail] Spamhaus

2004-11-30 Thread Doug Anderson
Anyone use the xbl db from spamhaus? Good, bad, otherwise?

[Declude.JunkMail] would any valid email contain

2004-11-11 Thread Doug Anderson
I'm wondering, would any valid corporate email contain a href=""rect" href=""body 0 contains a href="" and "body 0 contains shape="rect" href="" href="http://%">http://% Any valid reasons these would be in a corporate email?

Re: [Declude.JunkMail] Upgrading from 1.78 to 1.81

2004-10-04 Thread Doug Anderson
Title: Message upgrade manual is in the zip. - Original Message - From: Alejandro Valenzuela To: [EMAIL PROTECTED] Sent: Monday, October 04, 2004 2:29 PM Subject: [Declude.JunkMail] Upgrading from 1.78 to 1.81 Last upgrades from declude, where a

Re: [Declude.JunkMail] Outlook 2003

2004-08-22 Thread Doug Anderson
vb code to give you a dos error code In your declares use Private Declare Sub ExitProcess Lib kernel32 (ByVal uExitCode As Long) and then call ExitProcess 2 - Original Message - From: Dave Doherty [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Sunday, August 22, 2004 10:55 PM Subject:

[Declude.JunkMail] Country Configuration?

2004-07-09 Thread Doug Anderson
After looking at the manual/archives andgetting a little more confused I've decided to consult the masses. What would be the easiest way of adding a few points for emails NOT orgininating from Canada, US, and Mexico? We have users in all three areas so I'm guessing the nonenglish won't work

Re: [Declude.JunkMail] Country Configuration?

2004-07-09 Thread Doug Anderson
if it makes sense or not. Thanks, Dan Geiser [EMAIL PROTECTED] - Original Message - From: Doug Anderson To: [EMAIL PROTECTED] Sent: Friday, July 09, 2004 10:52 AM Subject: [Declude.JunkMail] Country Configuration? After looking

Re: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

2004-07-09 Thread Doug Anderson
Admin server can not be reached...Error 3592. Need any special ports open or anything? - Original Message - From: Jay Calvert To: [EMAIL PROTECTED] Sent: Friday, July 09, 2004 10:49 AM Subject: Re: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database

Re: Re[2]: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

2004-07-09 Thread Doug Anderson
We block all incoming and outgoing icmp traffic. A live reg should check at 80 or 443 because that typical allowable outbound traffic in my opinion. - Original Message - From: Sanford Whiteman [EMAIL PROTECTED] To: Scott Fisher [EMAIL PROTECTED] Sent: Friday, July 09, 2004 11:47 AM

Re: [Declude.JunkMail] NOW OT: ICMP

2004-07-09 Thread Doug Anderson
Actually Russ, ICMP still works. Can you ping 127.0.0.1, the local loop back? Can you ping other items on your local network? It comes down intranet vs internet separated by a firewall. Many corporations kill ICMP externally, but it works fine internally and is used as intended OR they allow

Re: [Declude.JunkMail] OT: Internet Usage Monitoring

2004-03-30 Thread Doug Anderson
web trends firewall suite maybe? - Original Message - From: Kevin Bilbee [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, March 30, 2004 2:43 PM Subject: [Declude.JunkMail] OT: Internet Usage Monitoring Management wants to do web usage mainitoring. They do not at this time want

[Declude.JunkMail] declude virus - additional info

2004-03-03 Thread Doug Anderson
We have mcafee at our location. I understand that I can use declude virus with it - but got some questions 1. which version of mcafee should I use? I have access to both the windows Virus Scan Enterprise 7.1.0 and the dos based Version 4.3.20. 2. If the suggestion is dos based 4.3.20, does anyone

Re: [Declude.JunkMail] Haeds up!

2004-02-25 Thread Doug Anderson
I just got a wave of pif's, scr's, com's, exe's both mcaffee and symantec had updates for a new netsky variant - Original Message - From: Dave Doherty [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, February 25, 2004 1:35 PM Subject: [Declude.JunkMail] Haeds up! I've gotten a

[Declude.JunkMail] idea for a test - maybe

2004-02-20 Thread Doug Anderson
Is there a test out there that checks for an email address in the subject line? Example: Jon Doe gets an email. In the subject line it has: Card #29546 - Award Pending for [EMAIL PROTECTED] I'm seeing alot more of these. A test to match the to email address and subject contains

Re: [Declude.JunkMail] Whitelisting and SPAM

2004-02-18 Thread Doug Anderson
check in global for WHITELIST HABEAS Spammers are putting Habeas headers in to their mail...we've reported 3 of them today to www.habeas.com. - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, February 18, 2004 11:40 AM Subject: Re:

[Declude.JunkMail] Virus Warning - Netsky.b@mm

2004-02-18 Thread Doug Anderson
New ONE Moving fast! Virus Warning - [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.

[Declude.JunkMail] Off topic - iis, web servers and txt files

2004-02-04 Thread Doug Anderson
Ok, I'm running IIS 5.0 on my imail server. I've written a program to read the ldap and create a ldif file. I put the ldif file (xxx.ldif)in a sub directory on the web server and when I put a link to it, it displays it directly in the browser. I want it to download, not display as text.

Re: [Declude.JunkMail] Off topic - iis, web servers and txt files

2004-02-04 Thread Doug Anderson
That's what I'm trying to get away from. Actually have it pop up to open or download. my users have problems understanding right click. Plus I'm rewriting it so that have to enter username and password to get to the link. - Original Message - From: Kevin Bilbee To: [EMAIL

Re: [Declude.JunkMail] Off topic - iis, web servers and txt files

2004-02-04 Thread Doug Anderson
Title: Message I tried mime types for the "web site" and that wasn't working. one of the emails mentioned the onlineworkshop...I forgot about setting it for all of IIS. Now it downloads. Thanks for all the help! Soon to be published...ldaplst - an ldap reader / file creator. I'll post it

Re: [Declude.JunkMail] Slightly OT: calculating bandwidth

2004-02-04 Thread Doug Anderson
Do you have read access to the router's snmp community? if you doMRTG gives some great stats - Original Message - From: Omar K. [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, February 04, 2004 9:26 PM Subject: [Declude.JunkMail] Slightly OT: calculating bandwidth Hello

[Declude.JunkMail] Question / interesting occurence

2004-01-26 Thread Doug Anderson
Is anyone getting on either of these lists getting slammed with [EMAIL PROTECTED] virus? Out Symantec AV is set to email the administrator warnings. Reading through the warnings, they're coming from everywhere outside of the us canada. The weird part is they're only going at the email

Re: [Declude.JunkMail] Question / interesting occurence

2004-01-26 Thread Doug Anderson
Hi Scott, Symantic returns this type of message to the administrator account Message contained a virus Virus detected - [EMAIL PROTECTED] The message was Deleted The message was from [EMAIL PROTECTED] The message was to [EMAIL PROTECTED] Subject: Spam-Junk-Ad: bug announcement Message-Id: [EMAIL

Re: [Declude.JunkMail] [IMail Forum] New, fast-spreading virus

2004-01-26 Thread Doug Anderson
http://vil.nai.com/vil/content/v_100983.htm - Original Message - From: Travis Rabe [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 26, 2004 3:55 PM Subject: RE: [IMail Forum] New, fast-spreading virus McAfee just put out new defs about 30 minutes ago. Travis

[Declude.JunkMail] New MS updates Bug Report emails making the rounds

2004-01-22 Thread Doug Anderson
Thought I'd warn everyone Some different/newer (I haven't seen it before) versions of two emails arefloating around #1 From Microsoft Corporation Network Security to Commercial customer No subject Attachment "UPGRADE88.exe" It claims to be updates from microsoft. #2 From Internet Delivery

[Declude.JunkMail] Off topic - Ldap

2004-01-18 Thread Doug Anderson
I tried this on the normal Imail list with no answers, so I figured since this list is more of the imail power users I'd try here I'm trying to write a vb.net program to query the ldap and create a 3 different files from it. one is a standard csv file, next is an ldif file for importing into Win

Re: [Declude.JunkMail] Russian letters

2003-12-31 Thread Doug Anderson
Careful if using NonEnglish. We have Spanish and French users - nonEnglish can catch them. Don't want to piss off our friends to the north or south. - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, December 31, 2003 1:18 PM Subject: Re:

[Declude.JunkMail] Suggestion

2003-12-23 Thread Doug Anderson
Since old programmers never die, they just flip their bits...and Unix people...I won't go there... I have a suggestion for our declude creators out there. Underfilters you can use CONTAINS, STARTSWITH, ENDSWITH or IS on any of the pieces of an email. I wouldn't mind seeing a MATCHES

[Declude.JunkMail] declude program suggestion (wishlist)

2003-12-23 Thread Doug Anderson
Since old programmers never die, they just flip their bits...and Unix people...I won't go there... I have a suggestion for our declude creators out there. Underfilters you can use CONTAINS, STARTSWITH, ENDSWITH or IS on any of the pieces of an email. I wouldn't mind seeing a MATCHES

[Declude.JunkMail] Stupid question

2003-12-22 Thread Doug Anderson
I'm setting up a Sender "Black list" Given the following header, what would I put in my black list file? Is it the reply to or the from I need to look at? In this instance I would like to kill everything from quill.com, so would I just use that? Received: from om-quill.rgc3.net

Re: [Declude.JunkMail] Stupid question

2003-12-22 Thread Doug Anderson
. Matt Doug Anderson wrote: I'm setting up a Sender Black list Given the following header, what would I put in my black list file? Is it the reply to or the from I need to look at? In this instance I would like to kill everything from quill.com, so would I just use that? Received

[Declude.JunkMail] SPAMCOP Question

2003-12-19 Thread Doug Anderson
I was looking at the headers and saw SPAMCOP : Blocked Is that how it should be - what it's returning? If not, ideas on what could be wrong? X-RBL-Warning: SORBS-SPAM: Spam Received See: http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=66.111.254.21X-RBL-Warning: SPAMCOP: Blocked - see

Re: [Declude.JunkMail] OT: DNS Issue (HELP)

2003-12-19 Thread Doug Anderson
From an earthlink dsl user Ping test 1 wltx.com 56 60 Success 2 wltx.com 56 60 Success 3 wltx.com 56 60 Success 4 wltx.com 56 60 Success 5 wltx.com 56 60 Success trace rt 1 0 0 172.16.0.254 2 35 35 172.31.255.251 3 30 -5 192.168.5.53 4 30 0 209.247.34.177 ge-8-0-131.ipcolo1.Chicago1.Level3.net 5

[Declude.JunkMail] Active X filter

2003-12-18 Thread Doug Anderson
If anyone wants BODY4CONTAINSobject classid=""BODY4CONTAINS.cab#version=BODY4CONTAINSparam name=" ACTIVEX-FILTERfilterActiveX-filter.txtx40 Seems to work. Anyone got anything else?

Re: [Declude.JunkMail] Active X filter

2003-12-18 Thread Doug Anderson
filter What will this filter out...will it filter out email like MyPoints.com which is not a good idea.. Richard FarrisEthixs Online1.270.247. Office1.800.548.3877 Tech Support - Original Message ----- From: Doug Anderson To: [EMAIL PROTECTED]

[Declude.JunkMail] Filter question

2003-12-16 Thread Doug Anderson
This may sound stupid, but if I create a filter searching for a string in an email... BODY2CONTAINSxyz and the email contains 4 instances of that string now is the xyx time for all xyz good men xyz to come to the aid xyz of their country does the filter return an internal value of 8 or 2?

Re: [Declude.JunkMail] WHITELIST AUTH

2003-12-15 Thread Doug Anderson
So in Global if I have PREWHITELIST ON WHITELIST IP XXX.XXX.XXX.XXX/XXX where XXX.XXX.XXX.XXX/XXX is an ip in our local range it will bypass all spam tests? (using 8.04 1.77) - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 15,

[Declude.JunkMail] whitelist

2003-12-15 Thread Doug Anderson
What is auth in the commented out whitelist? I'm trying to bypass spam testing for internal emails on the local network, any examples? Right now I have in global PREWHITELISTONWHITELISTHABEASAUTOWHITELIST ON#WHITELISTAUTHWHITELIST IP 192.168.0.0/22WHITELIST IP 10.1.0.0/22WHITELIST IP

Re: [Declude.JunkMail] whitelist

2003-12-15 Thread Doug Anderson
I have the beta in place already, users all have to authenticate (no relay what-so-ever) Any additional settings or reg hacks? - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 15, 2003 1:07 PM Subject: Re: [Declude.JunkMail]

[Declude.JunkMail] declude junkmail and external tests (info)

2003-12-12 Thread Doug Anderson
Previously posted on Imail site: When does declude junkmail add it's xheaders? Do it add as it conducts it's test(s)? can I conduct a test (if exists) on a previously added header? Maybe I should explain it better I wrote an external phrase test program. I'm trying to come up with a way

Re: [Declude.JunkMail] declude junkmail and external tests (info)

2003-12-12 Thread Doug Anderson
so if I have in global.cfg: PHRASESCAN external nonzero D:\Imail\mail_ameripride_org\phrscan.exe %REVDNS% 10 0 it will give me: phrscan (Private IP) c:\IMail\spool\D1234567.SMD phrscan (timeout) c:\IMail\spool\D1234567.SMD depending on internal emails vs external emails or does %REVDNS%

Re: [Declude.JunkMail] declude junkmail and external tests (info)

2003-12-12 Thread Doug Anderson
oPPs! I think the %REVDNS% was getting timeout because both the box and imails dns settings were still set to the ip of the box (durning install and testing phase) for the primary. Modified them to point to the dns server. It was the only thing having dns issues to my knowledge (users weren't