RE: [Declude.JunkMail] SPAMDOMAINS update for the att conglomerate

2007-10-26 Thread Keith Johnson
John, Can you list multiple REVDNS on a single line when using spamdomains? For example @bellsouth.net .bellsouth. isp.att. Thanks, Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists) Sent: Monday, August 20, 2007 10:55 AM To:

RE: [Declude.JunkMail] Slipping through Declude

2007-02-05 Thread Keith Johnson
is that all 4 messages contained the same body although from different sources. Still awaiting Linda's response at Declude. Thanks, Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Saturday, February 03, 2007 1:09 PM

[Declude.JunkMail] AVG Questions

2006-12-30 Thread Keith Johnson
Support, What is the best way to tell what signature version I am running with the onboard AVG engine? Also, how do I manually pull down a signature if I need to update before the automatic download interval? Thanks for the aid. Keith --- This E-mail came from the Declude.JunkMail

RE: [Declude.JunkMail] 30511 problem

2005-10-25 Thread Keith Johnson
David, Do you have an exhaustive explanation of what exactly each of the new commands does? I have seen a tremendous amount of emails to alter this and alter that, however, what does it actually do and how does one affect the other? Thanks for the aid. Keith -Original Message-

RE: [Declude.JunkMail] DomainKeys

2005-10-10 Thread Keith Johnson
John, Is 3.0.5.5 100% stable? I have seen numerous posts on this forum about ongoing issues with MAILFROM (triggering on local unauth. domains), COUNTRY Test and with Multi-Procs (especially above 100K volume per day). I have a call into Declude support on the above to see what is

RE: [Declude.JunkMail] new root server B address

2005-09-25 Thread Keith Johnson
Davebe, Wow, you read my mind. I saw this as well this week on my Linux dns box. Thanks for the update. Keith From: [EMAIL PROTECTED] on behalf of Dave Doherty Sent: Sat 9/24/2005 10:12 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail]

RE: [Declude.JunkMail] declude / spamassassin

2005-09-20 Thread Keith Johnson
Nick, If you don't mind, is SA heavy on the CPU? What kinda load are you running with SA? We are wanting to pursue it, however, Sanford had mentioned awhile back it would be heavy on the CPU. Thanks again, Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [Declude.JunkMail] declude / spamassassin

2005-09-20 Thread Keith Johnson
Travis, In your setup, your Declude is running on a Windows 2k/2003 box calling your SA server on a Linux box on the same local network? I guess the speeds are much the same as quering a local DNS server for lookups. Sounds great, I will have look into this, my loads are around the same

RE: [Declude.JunkMail] RBL's becoming worthless...

2005-07-27 Thread Keith Johnson
Scott, What type of speed are you getting from using the invuribl? We take in/out well over 70K emails per day on each server, 1 of them takes in/out 150K. As I understand it, it is very CPU intensive. Thanks for the aid. Keith -Original Message- From: [EMAIL PROTECTED]

[Declude.JunkMail] OT-Netcraft Phishing Pheed

2005-05-13 Thread Keith Johnson
Just an fyi. Seems like we could have Declude query a public database of sites. Worth a look. Keith For what it's worth, Netcraft has announced that it is making available to ISPs, hosting companies, etc., a feed of it's phishing sites etc.

RE: [Declude.JunkMail] OT-Netcraft Phishing Pheed

2005-05-13 Thread Keith Johnson
Integration, and Log Parsers. Keith Johnson writes: Just an fyi. Seems like we could have Declude query a public database of sites. Worth a look. Keith For what it's worth, Netcraft has announced that it is making available to ISPs, hosting companies, etc., a feed of it's phishing

RE: [Declude.JunkMail] SMD Files

2005-04-23 Thread Keith Johnson
Darrell, Did you prior adjust your TcpWindowSize value? Keith -Original Message- From: [EMAIL PROTECTED] on behalf of Darrell ([EMAIL PROTECTED]) Sent: Sat 4/23/2005 10:30 AM To: Declude.JunkMail@declude.com Cc: Subject:

RE: [Declude.JunkMail] Error 183 in Declude Virus and double processing in Declude JunkMail during heavy load

2005-04-18 Thread Keith Johnson
went on the assumption that my scanners got corrupted and thus deinstalled them and reinstalled them. I thought it was just my server, but it seems it could be a broader issue. Keith Johnson From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Monday, April 18, 2005 4:10

RE: [Declude.JunkMail] Problem loading filter

2005-04-15 Thread Keith Johnson
I believe all is needed here is to add a @ symbol in from of your domain in your .txt file Thus, @phobraun.com per Jessica's request -Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, April 15, 2005 11:12 AM To:

RE: [Declude.JunkMail] Problem loading filter

2005-04-15 Thread Keith Johnson
I have burned by not having deselected Hide file extensions for known file types, thus my example.txt file was really example.txt.txt Could this be the case? Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, April 15,

RE: Re[2]: [Declude.JunkMail] Huge reduction in hold queue

2005-04-01 Thread Keith Johnson
Heinrich, How are you determining your detection rates? Are you using a combination of certain tests or overall test percentages? Thanks for the time. Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Heinrich Richter Sent: Friday, April

RE: [Declude.JunkMail] user settings

2005-03-30 Thread Keith Johnson
Darrell, I am going to have to test that. I asked Scott that same question about a year ago and he said it would shoot the entire email. I will give it a go. Keith Johnson -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL

[Declude.JunkMail] OT: RFC DNS Information

2005-03-07 Thread Keith Johnson
Does the following break in RFC compliance issues with servers required to accept email? Customer has proper PTR Records for IP, however, domain name is a private one, i.e. customer.localThanks for the aid. Denied Message Reads: Our mail system now 'requires' that your outgoing mail

RE: [Declude.JunkMail] OT: Windows 2003 Web Edition for a mail server

2005-02-02 Thread Keith Johnson
Title: Message Andrew, Not sure if this applies here, but here is Microsoft stance on Hyperthreading CPU's... Microsoft says...Per Processor LicensingFor currently available Microsoft servers products licensed on a per processor basis (e.g., Microsoft SQL Server, Microsoft BizTalk

RE: [Declude.JunkMail] [OT] Exchange2Alias Question

2005-01-29 Thread Keith Johnson
, those that understand binary, and those that don't. _ - Original Message - From: Keith Johnson [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, January

RE: [Declude.JunkMail] [OT] Exchange2Alias Question

2005-01-27 Thread Keith Johnson
. _ - Original Message - From: Keith Johnson [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, January 26, 2005 5:32 PM Subject: RE: [Declude.JunkMail

RE: [Declude.JunkMail] [OT] Exchange2Alias Question

2005-01-26 Thread Keith Johnson
Sent: Wednesday, January 26, 2005 12:25 PM To: Keith Johnson Subject: Re: [Declude.JunkMail] [OT] Exchange2Alias Question I opened port 389 through a client firewall from our Imail Server (just in testing) and attempted to query their server using the exchange2alias script, however

[Declude.JunkMail] [OT] Exchange2Alias Question

2005-01-25 Thread Keith Johnson
is additional Rec. Policy added (all users have as 2nd or 3rd address) Thanks for the aid. --- Keith Johnson --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just

RE: [Declude.JunkMail] [OT] Exchange2Aliases - Nested OU's

2005-01-04 Thread Keith Johnson
Sandy, Along those lines, what is the proper way of going about ldap'ing 2 or more OU's in order to get all the email addresses. What I have been doing is calling the script 3 times (different scripts and params) and using the flag that removes all entries on the first pass only.

RE: [Declude.JunkMail] [OT] exchange2aliases for dummies

2004-11-18 Thread Keith Johnson
We have a few customers with multiple OU's that contain employees (i.e. by Departments). Is there a way to include all the OU's on a single LDAP:// parameter line or do I need to just run it several times for each OU and not use the -nc flag except on the very first run. Thanks again, Keith ---

RE: [Declude.JunkMail] [OT] exchange2aliases for dummies

2004-11-15 Thread Keith Johnson
Andrew, Is the only lines you altered in Sandy's script were: cscript exchange2aliases.vbs storeforward.mydomain.com LDAP://10.192.0.1/cn=users,dc=bentall,dc=local mydomain.com mydomain.com Going for a test ride tomorrow. Thanks for the aid, Keith -Original Message-

RE: [Declude.JunkMail] LOG Levels

2004-11-04 Thread Keith Johnson
Mark, I would grab V-Fileviewer, it opens large files in chunks, much faster. Opens 500MB files in seconds. http://www.fileviewer.com Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark E. Smith Sent: Thursday, November 04, 2004 3:56 PM

RE: [Declude.JunkMail] Question about Filters

2004-11-03 Thread Keith Johnson
Scott, Is there any size limitation (# of entries per file) imposed on fromfiles or the number or fromfiles you can have listed in the Global.cfg? Thanks, Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday,

RE: [Declude.JunkMail] Question about Filters

2004-11-03 Thread Keith Johnson
Can you use the SKIPIFWEIGHT and MAXWEIGHT in the fromfiles? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Wednesday, November 03, 2004 2:38 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Question about Filters Scott

[Declude.JunkMail] subjectchars

2004-11-03 Thread Keith Johnson
Anyone have an issue using gmail.com email that is fails the subjectchars test if you place more than one word in the subject line? Line reads: LONGSUBJsubjectchars60 * 0 0 Subject Line used: Test Me Keith --- [This E-mail was scanned for viruses by Declude Virus

[Declude.JunkMail] Question about Filters

2004-11-02 Thread Keith Johnson
, it seems it would be benefical to move the domains from our filter files into fromfiles thus allowing for a reduction on CPU processing since they are run first (while using SKIPIFWEIGHT lines in filters). Thanks for the aid. --- Keith Johnson Senior Network Engineer Network

[Declude.JunkMail] Hijack Question

2004-10-25 Thread Keith Johnson
Does Hijack work with WHITELIST AUTH that Junkmail sees in allowing email to passthru? For example, one of our customers AUTH to our server via their account, it will then not be scanned by Junkmail nor Hijack? Thanks for the time. --- Keith Johnson Senior Network Engineer

RE: [Declude.JunkMail] Hijack Question

2004-10-25 Thread Keith Johnson
? However, using term services on Win2000 SP4 does not allow connection to the console. Thanks for the aid. Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Monday, October 25, 2004 2:51 PM To: [EMAIL PROTECTED] Subject

RE: [Declude.JunkMail] Hijack Question

2004-10-25 Thread Keith Johnson
Scott, (I apologize for the questions, just learning product, since no trial) With the below said, there is really no reason to login and close the deccon.exe via the Desktop unless there is an issue with it or something needs to be hard reset? Some of our customers have had DHA's

[Declude.JunkMail] Skipifweight question

2004-10-20 Thread Keith Johnson
Since the fromfiles are loaded first and weight assigned after it gets a hit, even before RBL's, can I use the skipifweight or STOPATFIRSTHIT option in the fromfiles? Thanks for the aid. Keith --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail

RE: Re[2]: [Declude.JunkMail] Filter file maintenance suggestion

2004-10-06 Thread Keith Johnson
Sanford, What type of CPU overhead do you experience with running SA/SPAMD with Declude? I saw the tech doc and it mentioned that it takes up 20MB of memory for each config file load in serial. Are you aware of anyone running this on machines pulling over 200K emails each day?

RE: [Declude.JunkMail] E-Mail to download v1.8

2004-09-28 Thread Keith Johnson
Jeff, I was able to get it via my account login at www.declude.com. Keith -Original Message- From: [EMAIL PROTECTED] on behalf of Jeff Maze Sent: Tue 9/28/2004 10:33 AM To: [EMAIL PROTECTED] Cc: Subject: [Declude.JunkMail]

[Declude.JunkMail] domainwhitelists flag

2004-09-27 Thread Keith Johnson
Does the DOMAINWHITELISTS flag override the WHITELISTFILE entry that you can list in the per domain config file and is it required? Does it require the whitelist file to be named whitelist.txt? We have been running 1.79 for awhile, but noticed it in the Release notes, but been using

RE: [Declude.JunkMail] Whitelister / Blacklister

2004-09-20 Thread Keith Johnson
Would love to have a look at it. Thanks for the offer. Keith -Original Message- From: [EMAIL PROTECTED] on behalf of Matt Goodhue Sent: Mon 9/20/2004 8:17 PM To: [EMAIL PROTECTED] Cc: Subject: RE: [Declude.JunkMail] Whitelister /

[Declude.JunkMail] File Lock Issue

2004-09-18 Thread Keith Johnson
I am running Imail 8.13 with Declude 1.79i16 on Win2003 Server and any inbound email to our server receives the following message. If I email locally, I get good clean ldelivers. I checked my AV Scanners and they are not monitoring the server at all, have them disabled. Any suggestions would

RE: [Declude.JunkMail] File Lock Issue

2004-09-18 Thread Keith Johnson
I apologize, to clarify the good clean ldelivers were shown while using Web Messaging, not SMTP. Thanks again for the aid. Keith -Original Message- From: [EMAIL PROTECTED] on behalf of Keith Johnson Sent: Sat 9/18/2004 11:00 AM To: [EMAIL PROTECTED

RE: [Declude.JunkMail] File Lock Issue

2004-09-18 Thread Keith Johnson
. Thanks, Keith -Original Message- From: Keith Johnson on behalf of Keith Johnson Sent: Sat 9/18/2004 11:20 AM To: [EMAIL PROTECTED] Cc: Subject: RE: [Declude.JunkMail] File Lock Issue I apologize, to clarify

RE: [Declude.JunkMail] File Lock Issue

2004-09-18 Thread Keith Johnson
Engineer/Consultant/Owner eServices For You -Original Message- From: Keith Johnson [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Saturday, September 18, 2004 8:31 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail

RE: [Declude.JunkMail] File Lock Issue

2004-09-18 Thread Keith Johnson
Bill, You are the man. I did have Alligate defined and it expired due to them not really adding enhan. for Declude. Sweet, I really appreciate it. Weird issue as Declude Log did not report that it failed on that test. Thanks again, Keith Keith, are you running any external tests?

[Declude.JunkMail] Hijack Question

2004-09-13 Thread Keith Johnson
We currently have 6 versions of Declude (3 Servers with Junkmail and Virus), can I run a Hijack demo on each of the servers? If so, what is the term of the demo? Thanks for the aid. Keith Nf_ynub! 0u%dj)\jgr[xf)+-Nrz;uj)l^r[yjwmmr[x8^j!qy.i0f+r

RE: [Declude.JunkMail] External Test for Subject is Upper Case

2004-08-24 Thread Keith Johnson
Scott Fisher, I heard you mention once that you made a filter to catch Chinese characters in the subject, we have a few customers that get nailed by these often. Was wondering if you could share your thoughts. Thanks, Keith -Original Message- From: [EMAIL

[Declude.JunkMail] SPF Setup

2004-07-29 Thread Keith Johnson
? We also have internal DNS servers for routing email (using BIND) between internally NAT'd servers, do I need to publish SPF records for those as well. Thanks for the clarify. Keith Johnson --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail

RE: [Declude.JunkMail] SPF Setup

2004-07-29 Thread Keith Johnson
Scott, Awesome, thanks for the aid. Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, July 29, 2004 1:48 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPF Setup We virtual host (as well as

[Declude.JunkMail] Outbound Footer - Store and Forward Domains

2004-06-15 Thread Keith Johnson
Is it possible for Declude to add a footer to an outbound email sent through the Imail Server for a customer who is using us to send outbound email. They would like us to scan their outbound email and then tag a 'scanned for viruses' footer to those emails. However, this should only be for this

RE: [Declude.JunkMail] Outbound Footer - Store and Forward Domains

2004-06-15 Thread Keith Johnson
Aww, great idea Scott, I will give it a road test. Thanks, Keith -Original Message- From: [EMAIL PROTECTED] on behalf of R. Scott Perry Sent: Tue 6/15/2004 5:34 PM To: [EMAIL PROTECTED] Cc: Subject: Re: [Declude.JunkMail] Outbound

RE: [Declude.JunkMail] Declude version 1.79 and Delog

2004-06-01 Thread Keith Johnson
Scott, Did the Msg Failed line under LOGLEVEL MID to report the individual line numbers that it failed in a filter test get moved to HIGH? Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, June 01, 2004 12:50 PM

RE: [Declude.JunkMail] Declude version 1.79 and Delog

2004-06-01 Thread Keith Johnson
Scott, Thanks, we have been running along with MID since the beginning, all along, upgrading the interim releases. We just this week needed to know which line it failed on in one of our filter files. This is what we get now in our log. I will up to HIGH this week. Thanks,

[Declude.JunkMail] Whitelistfile

2004-05-14 Thread Keith Johnson
Scott, Can I point to two whitelistfile's in the per user config file for junkmail (i.e. to WHITELISTFILE entries on separate lines). For example, one to main corporate then a personal one. Thanks, Keith --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

RE: [Declude.JunkMail] Acting as a gateway for domains on other servers

2004-02-19 Thread Keith Johnson
Samantha, We have had this type of setup in place for years, works great. We filter tons of email for Exchange, Domino, and other SMTP Servers. Let me know if I can give aid. Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bridges,

RE: [Declude.JunkMail] Acting as a gateway for domains on other servers

2004-02-19 Thread Keith Johnson
and viruses? What about the rules via Imail...they don't run do they??? I user a lot of rules to block email and with this solution they could not take advantage of rules.ima, right? -Original Message- From: Keith Johnson [mailto:[EMAIL PROTECTED] Sent: Thursday, February 19, 2004 2:59 PM

[Declude.JunkMail] Line Issues

2004-02-11 Thread Keith Johnson
Scott, Are you aware of any issues related to filter files in which the log reports and weights against a line in the filter, however, it was the line below or above it that should have got triggered? For example, lets stay that line 39 states: BODY 5

RE: [Declude.JunkMail] Line Issues

2004-02-11 Thread Keith Johnson
Scott, Should I run the latest interim release to fix this issue? Just had a few upset customers, thanks, Keith -Original Message- From: [EMAIL PROTECTED] on behalf of R. Scott Perry Sent: Wed 2/11/2004 8:11 PM To: [EMAIL PROTECTED]

[Declude.JunkMail] Vacation Message Dilema

2004-02-10 Thread Keith Johnson
I have a few users on a domain who have a vacation in place. For those users, I have a Per-User Declude config that uses the MailBox function for the Weight20 test. Does the vacation message get triggered on the actually Main inbox or also sub mailboxes? What I am noticing is that when I check

[Declude.JunkMail] Option Request

2004-02-04 Thread Keith Johnson
Is it possible that in a Store/Forward scenario that when a WEIGHT20 test is reached to insert a X-Note in the Header, much like we take action with RouteTo or Mailbox? Thanks, Keith --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from

RE: [Declude.JunkMail] Option Request

2004-02-04 Thread Keith Johnson
Use the action of WARN. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Wednesday, February 04, 2004 8:16 AM To: [EMAIL PROTECTED] Subject

RE: [Declude.JunkMail] Option Request

2004-02-04 Thread Keith Johnson
John, Thanks again, found it in the manual. Thanks for your time. Keith -Original Message- From: Keith Johnson Sent: Wednesday, February 04, 2004 12:02 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Option Request John, Can this WARN have a specific custom

[Declude.JunkMail] Log Error

2004-02-04 Thread Keith Johnson
I received the following error in the log file and subsequently the email did not ROUTETO although it was listed on the WEIGHT20 line, it went on to the main mailbox of the customer un-routed. Is there any reason for the Error? I checked the log and only had one other instance of this for the

RE: [Declude.JunkMail] Log Error

2004-02-04 Thread Keith Johnson
Scott, Thanks for your aid, it is always appreciated. I passed a similar explanation on to our customer. I'll watch our logs for any patterns. Keith -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 04, 2004 6:27 PM To: [EMAIL

RE: [Declude.JunkMail] OT- Getting a URL de-listed on AOL

2004-01-30 Thread Keith Johnson
Marc, I had great succes with the AOL Postmaster line at: 1.888.212.5537 I worked with a guy named, John Rardin, he fixed a few client issues in a timely fashion. I emailed him a few of the client emails and he was able to figure out why it was being blocked by them and in 1 case they

RE: [Declude.JunkMail] Mydoom.b

2004-01-29 Thread Keith Johnson
The most recent update today from F-Prot will catch it, just checked it in the virlist. Keith -Original Message- From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] Sent: Thursday, January 29, 2004 2:03 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Mydoom.b It is not

[Declude.JunkMail] Log File

2004-01-28 Thread Keith Johnson
What would cause extra CR in the middle of a line in the Virus or Declude log files or incomplete line entries? We have a Parser that runs through to pull out info, however, at times it will encounter the above and have to skip the entries. Thanks for the info. Keith --- [This E-mail was

RE: [Declude.JunkMail] DNS Warnings

2004-01-26 Thread Keith Johnson
). Also, if Declude gets this back, it cancels processing of not only the DNS based tests, but also filters or external programs (i.e. Sniffer) according to the log. Thanks for the aid. Keith From: Keith Johnson Sent: Sunday, January 25, 2004 1:55 PMTo: [EMAIL PROTECTED]Subject: RE

[Declude.JunkMail] DNS Warnings

2004-01-25 Thread Keith Johnson
I noticed in our Declude Log (running MID) that we have numerous of the below message (different domains). Is this telling me that there was no MX or A record listed for the lookup domain? I pretty sure, however, just wanted to check, thanks for the aid. Keith WARNING: DNS server

RE: [Declude.JunkMail] DNS Warnings

2004-01-25 Thread Keith Johnson
Scott, Thanks for the aid. I'm with you on the second point, I think our DNS server (Bind 8.4.3) attempted to verify the domain (all of them look spam in nature) and couldn't find an A or MX listed for them and returned back to Declude that warning. I appreciate the speedy response,

RE: [Declude.JunkMail] DNS Warnings

2004-01-25 Thread Keith Johnson
Scott, A took some time and went through the log and found that the following was true on all the ones I checked (around 50) entries, the following examples were found using dnsreport.com about the Warnings: Getting MX record for mail3b-better-health.wsol8423.com... Received an

RE: [Declude.JunkMail] DNS Warnings

2004-01-25 Thread Keith Johnson
Scott, I took some time and went through the log and found that the following was true on all the ones I checked (around 50) entries, the following examples were found using dnsreport.com about the Warnings: Getting MX record for

[Declude.JunkMail] Clarification

2004-01-21 Thread Keith Johnson
We are giving our Declude filters an overhaul this week, adding in all the functionality of the new 'beta' tests and I wanted to ensure I am good on the following: Using Examples SKIPWEIGHT 70 MAXWEIGHT 60 MINWEIGHT 20 MAXWEIGHT: If during the run of the

RE: [Declude.JunkMail] Clarification

2004-01-21 Thread Keith Johnson
, 2004 10:44 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Clarification That is all correct (just one note to clarify, though: END will stop processing that one filter, but other tests will run). -Scott At 10:35 AM 1/21/2004, Keith Johnson wrote: We

[Declude.JunkMail] New XBL from Spamhaus

2004-01-04 Thread Keith Johnson
I read the following on the Register. Does anyone know if we can include this into Declude? Thanks for the aid: Clip taken from: http://www.theregister.co.uk/content/55/34690.html However, Spamhaus plans to fight back. Yesterday, it released its

[Declude.JunkMail] Imail 8.05 Release

2003-12-19 Thread Keith Johnson
Scott, It looks as if IpSwitch may have fixed the issue in 8.05 that keeps Declude from being called. Taken from 8.05 Release Notes... o Queuemgr: Decreased the possibility that during a queue run the queuemgr might process files before a third party process locks the message. Keith

RE: [Declude.JunkMail] Declude not taking action

2003-12-06 Thread Keith Johnson
Although this is not the same issue as Declude not getting called, I did want to bring it to everyones attention. For those of you that Store and Forward to other email servers, Imail 8.04 is having issues with removing body text from emails on the smtp rdeliver action to a remote server. I

RE: [Declude.JunkMail] BODY STARTSWITH

2003-11-25 Thread Keith Johnson
Scott, For those of us that have had email (daily) skipping Declude calling would it be good for us to move up to the 1.76i27 to have that logged for you? Keith -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 25, 2003 1:03 PM To: [EMAIL

FW: [Declude.JunkMail] Declude does not see email

2003-11-24 Thread Keith Johnson
Title: Re: [Declude.JunkMail] Declude does not see email Scott, This issue of Declude (1.76i and Imail 8.04)not seeing email has picked up tremendously in the past week or so. We are starting to see this a lot in our own email as well as our customers reporting it. It seems to be

RE: [Declude.JunkMail] Declude does not see email

2003-11-24 Thread Keith Johnson
Title: Re: [Declude.JunkMail] Declude does not see email Kami, That is exactly what I am seeing, no record of it. It scares me that email is getting through our system for our customers, yet it is unscanned. We handle total of about 150K emails each day across two servers and we are seeing

[Declude.JunkMail] Store and Forward Question

2003-11-17 Thread Keith Johnson
Since Imail doesn't have a way to reject an email based on its size when a domain is setup in a Gateway scenario (i.e. store and forward), I thought I would post this to the Declude community. Does Declude JMPro have a way to bounce an email based upon its size? What we are seeing, is when an

[Declude.JunkMail] Strange Anomaly

2003-11-17 Thread Keith Johnson
We are running Declude JMPro Version 1.76i13. Most of our domains are setup using the Per Domain configuration, in those configs, we have setup ROUTETO statements to route their spam to a certain email address either local or remote. Since last Thursday (off and on before that), some spam email

RE: [Declude.JunkMail] Strange Anomaly

2003-11-17 Thread Keith Johnson
Does the Declude JunkMail log file show any information about the E-mail? There have been unconfirmed reports of IMail v8 skipping Declude processing that we are investigating I have a few emails saved that passed through Declude unscanned if they would be helpful. We are starting to see this

[Declude.JunkMail] Declude w/Sniffer

2003-11-03 Thread Keith Johnson
We use both Declude (1.76beta) and Sniffer and both work great. However, we are are in the process of trying to run several Sniffer tests and take action on individual return codes rather than nonzero. It is my understanding that Declude will only call the Sniffer test once although numerous

RE: [Declude.JunkMail] Missing Declude headers incorrect weights

2003-10-20 Thread Keith Johnson
I have also noticed today that it appears Declude JunkMail is no longer calculating weights correctly. If you upgrade to the latest interim release at http://www.declude.com/release/176i/declude.exe , it takes care of this issue. Wasn't actually expecting a response until tomorrow

RE: [Declude.JunkMail] What is this test?

2003-10-16 Thread Keith Johnson
Mike, The Easynet-Dyna test is an external ip4r DNS test setup in your global.cfg file. See the Declude link below to see further info on this. http://www.declude.com/Junkmail/support/ip4r.htm Keith -Original Message- From: Michael Graveen [mailto:[EMAIL

[Declude.JunkMail] JM handling of Aliases

2003-10-02 Thread Keith Johnson
We have a unique issue in that we have a customer that gets email to user-user (alias) that goes to an account called useruser (without the hyphen), both on our server, within same domain. When a spam email comes in addressed to the alias and other users within the same domain, it gets scanned by

RE: [Declude.JunkMail] JM handling of Aliases

2003-10-02 Thread Keith Johnson
Scott, Would you like the Declude Log or the Sys Log from IMail? This domain was setup as mail.domain.com in Imail and there is an alias on it for domain.com (transfer from another vendor Imail server), I have a Declude folder called mail.domain.com, however do I need one called

RE: [Declude.JunkMail] JM handling of Aliases

2003-10-02 Thread Keith Johnson
For the alias, you'll need to use the domain that the alias resolves to. If it resolves to the official name of the domain (mail.domain.com), then you can use the same directory. But if you are using a different domain for the alias than the official name of the domain, then you would need to

[Declude.JunkMail] Understanding Return Codes

2003-09-23 Thread Keith Johnson
shows a return of *. I just wanted to get a sanity check on the proper use of return codes, especially if they list as Various. Also, if the show in the Global.cfg as *, yet on the Declude Website have a return code, should I replace the * with a code. Thanks for the time. Keith Johnson N¬f

[Declude.JunkMail] Is it possible

2003-09-22 Thread Keith Johnson
I have a strange request, however, I don't think it can be done. I have a store-and-forward domain (Exchange User) that would like for us to forward individual spam email to another location for each individual user. The catch is, they don't want to send us their individual user email addresses

RE: [Declude.JunkMail] [IMail Forum] thank you, thank you, Verisign!! and BIND9 Veri sign-rape patch Verisign!! and BIND9 Veri sign-rape patch

2003-09-18 Thread Keith Johnson
Scott, If I add the new interim release, what does JM Pro do to an email it finds with this trigger? Do I need to add anything to the global.cfg file? Thanks for the aid. Keith -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Thursday, September 18, 2003

RE: [Declude.JunkMail] Declude v1.75 bogs down the server

2003-09-05 Thread Keith Johnson
Scott, The DECODE OFF option; what would it not catch (i.e. Spam) had the option been turned on? I understand Base64, but what kind of HTML decoding? We have a server at capacity as well, but we are not adding anymore customers to it, however, at times the CPU is at 100% which causes

RE: [Declude.JunkMail] Declude failing openrelay test

2003-09-04 Thread Keith Johnson
Mishi, I am running 8.02 and 7.15HF2 with Relay for Addresses and Declude JM Pro 1.75i and I just ran the test and produced perfect results on both machines. It only reported 'Unknown User' and 'Not a local gateway', which is great. What relay setting are you running and version of

RE: [Declude.JunkMail] Declude failing openrelay test

2003-09-04 Thread Keith Johnson
r to relay. -Original Message-From: Keith Johnson [mailto:[EMAIL PROTECTED] On Behalf Of Keith JohnsonSent: Thursday, September 04, 2003 8:34 AMTo: [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] Declude failing openrelay test Mishi, I am running

[Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Keith Johnson
I have a customer who only wants to get email to a list of valid employees, no one else (i.e. ex-employees). However, the list of ex-employees is too long for him to come up with, thus he gave me the list of valids. I looked, but I don't think Declude has a HEADER tag called DOESNOT CONTAIN,

RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Keith Johnson
Scott, The problem with using the CONTAINS is that I would have to have a list of the ex-employees and the only list he can put together is the good employees. Thus if I used the CONTAINS I would be hitting good employee email. Any other suggestions, thanks for your time. Keith What

RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Keith Johnson
Delete the nobody alias. Then, only valid email in his domain will be accepted. Delete all old employees not on the list of valid names you just received from the domain. -Original Message- From: Keith Johnson The problem with using the CONTAINS is that I would have to have a list

RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Keith Johnson
Scott, SWEET, that is a great idea, I'll give it a go, you are the man. Keith Johnson CONTAINS *would* work in this way. For example: HEADERS -1000 CONTAINS [EMAIL PROTECTED] HEADERS -1000 CONTAINS [EMAIL PROTECTED] ... In this case, an E-mail

RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Keith Johnson
Scott, I spoke to soon. If I use the weighting method, it hurts my ability to use the Weight system to guard them against Spam. Your thoughts... Keith -Original Message- From: Keith Johnson Sent: Tue 9/2/2003 1:27 PM To: [EMAIL PROTECTED

RE: [Declude.JunkMail] Need aid on Declude Header rule

2003-09-02 Thread Keith Johnson
Scott, Since we house mulitple domains (using spam filtering) and this filter test is used in the Global file it seems it would fail every other domain email (i.e. 1000 weight) that we house on the same box?! Is there a way to only define it for use in the default config file for that

  1   2   >