[Declude.JunkMail] OT: SMTP latency monitor

2005-08-27 Thread Mark E. Smith
I'm looking for an app that will test the latency/queue speed of email from the Internet through our organization. We have 4 IMAIL/Declude filter/gateway servers in front of our Exchange system. From there we have 3 Front End Exchange servers behind a Foundry load balancer. There are 5 back-end

RE: [Declude.JunkMail] Spam URI Realtime Blocklist - some mirror sites out?

2005-08-14 Thread Mark E. Smith
---Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail Queue Monitoring, Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Mark E. Smith To: Declude.JunkMail

[Declude.JunkMail] Spam URI Realtime Blocklist - some mirror sites out?

2005-08-13 Thread Mark E. Smith
Looks like www.surbl.org has about10 round-robin DNS mirror sites. Onlyhalf actually contains the RBL file used to create the body filter surbl.txt Anyone know anything about this? To test: ipconfig -flushdns Bring this up in IE. http://www.surbl.org/sc.surbl.org.rbldnsd Repeat 4-5

[Declude.JunkMail] Header showing up in body

2005-08-01 Thread Mark E. Smith
Does anyone know why occasionally the SMTP header of Declude will show up in the message body?Here's an example:-0-From: Rachel Horton [mailto:[EMAIL PROTECTED]]Sent: Mon 8/1/2005 11:04 AMSubject:To: [EMAIL PROTECTED]Subject: This week's casesDate: Mon, 01

RE: [Declude.JunkMail] Header showing up in body

2005-08-01 Thread Mark E. Smith
Title: Message It's being viewed in Outlook 2003 through Exchange. It's not a header setting. We just us Declude/Imail as a Gateway for Exchange. Very odd. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck SchickSent: Monday, August 01, 2005 2:30 PMTo:

RE: [Declude.JunkMail] Exchange2Aliases

2005-06-27 Thread Mark E. Smith
Ok so once the initial load is complete, will this bog down Imail (having 20,000 aliases in the registry)? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Monday, June 27, 2005 5:07 PM To: Mark E. Smith Subject: Re

[Declude.JunkMail] Question about load balancers and source IP

2005-06-25 Thread Mark E. Smith
We have 3 declude gateway servers that sit in front of our Exchange system. We want to move the three round-robin DNS servers to a VIP on our Foundry Load Balancers. The load balancers can be setup in a source NAT configuration (which is easier) or DSR (Direct Server Return). In source NAT the

RE: [Declude.JunkMail] Question about load balancers and source IP

2005-06-25 Thread Mark E. Smith
] Question about load balancers and source IP Use SKIPIP John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Mark E. Smith Sent: Saturday, June 25, 2005 3:02 PM To: Declude.JunkMail@declude.com

RE: [Declude.JunkMail] Question about load balancers and source IP

2005-06-25 Thread Mark E. Smith
I have never used a Foundry Load Balancer so my response may be way off. I am assuming it is not functioning as a MTA, but is simply rewriting the source IP portion of packets. Correct but it only does this at the IP level, not at the SMTP protocol level. In other words, Windows IP gets the

RE: [Declude.JunkMail] OT-Microsoft Exchange Tools

2005-02-09 Thread Mark E. Smith
Before we moved to HP Openview (very pricy) we used a combination of Big Brother and IpSwitch What's Up Gold with the Exchange add-in. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tim Buenz Sent: Monday, February 07, 2005 4:57 PM To:

RE: [Declude.JunkMail] [OT] Exchange2aliases Proper switch for LDAP Query

2004-12-22 Thread Mark E. Smith
I *THINK* that the LDAP queries are case sensitive. Try that -- I know that the OU works -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fosseen Sent: Wednesday, December 22, 2004 5:03 PM To: Declude.JunkMail@declude.com Subject: Re:

[Declude.JunkMail] Gateway servers and attachment sizes.

2004-12-18 Thread Mark E. Smith
We have a 5mb attachment limit on our Exchange servers and we use Imail/declude as a gateway. We have the need to allow 10mb attachments to "pass" but only for some people. So, I was thinking that I could create a series of tests: Created a test called "SIZE10MB" for 10mb attachments (with

RE: [Declude.JunkMail] Gateway servers and attachment sizes.

2004-12-18 Thread Mark E. Smith
We can't use Sandy's Exchange2Aliases because (at last check) it doesn't pull mail-enabled public folders from AD. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)Sent: Saturday, December 18, 2004 2:59 PMTo: [EMAIL PROTECTED]Subject: RE:

RE: Re[2]: [Declude.JunkMail] Gateway servers and attachment sizes.

2004-12-18 Thread Mark E. Smith
so we need to do it in declude with the SIZE external tests. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Saturday, December 18, 2004 5:28 PM To: Mark E. Smith Subject: Re[2]: [Declude.JunkMail] Gateway servers

RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude

2004-12-16 Thread Mark E. Smith
Having said that could it be one of the external tests that Declude is calling? In other words, it would appear that the problem is with Declude.exe but it's really with a shelled process that declude is calling? That shouldn't cause this -- Declude will timeout the external process

RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude

2004-12-16 Thread Mark E. Smith
We're pushing about 150,000 messages per day through this server. Dual processor 2Ghz, 2GB RAM, RAID 5. This server ONLY runs Imail/Declude as a gateway. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus GuflerSent: Thursday, December 16, 2004 8:08 AMTo:

RE: [Declude.JunkMail] Imail/Declude queues backing up - Narrowed down to Scott Fisher's externals

2004-12-16 Thread Mark E. Smith
I've been able to narrow down the locked file problem to Scott Fisher's external tests. I re-enabled SpamCHK - no problems. If I enable any of the following: size.exe obfsubj.exeHEADER2.exe dispfrom.exe I start seeing random locked files in the \spool directory. Scott, Any thoughts on

RE: [Declude.JunkMail] Imail/Declude queues backing up

2004-12-15 Thread Mark E. Smith
choked on. Updating to 8.05 HF3 fixed it for us, and we haven't seen it since. Darin. - Original Message - From: "Charles Frolick" [EMAIL PROTECTED] To: "Mark E. Smith" [EMAIL PROTECTED] Sent: Tuesday, December 14, 2004 10:24 AM Subject: Re: [Declude.JunkMail] Imail/Declu

RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude

2004-12-15 Thread Mark E. Smith
How does Imail know if Declude has run on these files? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, December 15, 2004 2:41 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Imail/Declude queues backing

RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude

2004-12-15 Thread Mark E. Smith
- Spool directory - an explanation of files http://support.ipswitch.com/kb/IM-19981110-DD08.htm Darin. - Original Message - From: Mark E. Smith To: [EMAIL PROTECTED] Sent: Wednesday, December 15, 2004 7:38 AM Subject: RE: [Declude.JunkMail] Imail/Declude queues

RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude

2004-12-15 Thread Mark E. Smith
Well, of course I knew Ipswitch would say this but I'll post it anyway. :) Ipswitch says that the problem is that declude is locking the file but not unlocking it when it's done. Having said that could it be one of the external tests that Declude is calling? In other words, it would appear that

RE: [Declude.JunkMail] Imail/Declude queues backing up

2004-12-14 Thread Mark E. Smith
haven't seen it since. Darin. - Original Message - From: Charles Frolick [EMAIL PROTECTED] To: Mark E. Smith [EMAIL PROTECTED] Sent: Tuesday, December 14, 2004 10:24 AM Subject: Re: [Declude.JunkMail] Imail/Declude queues backing up Hello Mark, Monday, December 13, 2004, 10:04

[Declude.JunkMail] Processing order Junkmail or Virus

2004-12-09 Thread Mark E. Smith
I know this has been asked before but which processes first Junkmail or Virus? If Virus is first, is there a way to change this? Considering we delete about 50% of inbound messages as spam that would take the load off of the virus scanner.

[Declude.JunkMail] Does STOPALLTESTS really stop all tests?

2004-12-08 Thread Mark E. Smith
I've got a whitelist filter file where I use the action STOPALLTESTS: MAILFROMSTOPALLTESTSCONTAINS@netrends.com This rule is defined as the first rule in my global.cfg (above all of the IP4r, Catchall, externals, etc.) If it trips the WHITELIST filter, why do the other tests

RE: [Declude.JunkMail] Does STOPALLTESTS really stop all tests?

2004-12-08 Thread Mark E. Smith
Ok so this is really working how I'd like it to The rule is defined with a global.cfg weight of -1000 If the domain is whitelisted then the -1000 is applied to any non-filter type tests and NO other filters are run. In essence the domain is whitelisted because all of the other non-filter

[Declude.JunkMail] Log file locking

2004-12-08 Thread Mark E. Smith
I have 3 inbound relayers running declude and I want to consolidate the log files to a single system. I'm planning on using Microsoft's robocopy utility to copy the log files. I'm not sure if robocopy locks the source file during the copy or not so here's my question.. IF the log file is locked

[Declude.JunkMail] Filter processing problem OR needed rather than AND.

2004-11-16 Thread Mark E. Smith
I have a filter that I've built for one of my customers that allows them to whitelist items JUST for their domain. The way that I do this is to add the following lines to their whitelist filter: ALLRECIPSEND NOTCONTAINS@domain1. ALLRECIPSEND NOTCONTAINS@domain2.

RE: [Declude.JunkMail] [OT] ldap2alias/alias2ldap - finer points

2004-11-14 Thread Mark E. Smith
Example, you may have a mail enabled folder, but only one group is allowed to send to it. Why would you want the script to create that? Because we have many public folders that are emailed from the outside. For example [EMAIL PROTECTED] or [EMAIL PROTECTED] are public folders for us.

[Declude.JunkMail] OT: First felony conviction for spam - Convicted junk e-mailer sent 10 million messages a day

2004-11-14 Thread Mark E. Smith
Trial reveals spammer techniques Convicted junk e-mailer sent 10 million messages a day LEESBURG, Virginia (AP) -- As one of the world's most prolific spammers, Jeremy Jaynes pumped out at least 10 million e-mails a day with the help of 16 high-speed lines, the kind of Internet capacity a

RE: [Declude.JunkMail] [OT] ldap2alias/alias2ldap - finer points

2004-11-13 Thread Mark E. Smith
One other thing that I noticed (and reported to Sandy) was that in an Exchange environment: 1. All SMTP addresses for a given user don't have aliases created. For example, I use mark_smith, mesmith, and msmith. Only my primary SMTP address was output. 2. Distribution Lists aren't exported 3. Mail

RE: Re[2]: [Declude.JunkMail] Question on Dell Poweredge 1750

2004-11-10 Thread Mark E. Smith
We only use Imail as a Gateway. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of sbsi lists Sent: Tuesday, November 09, 2004 5:01 PM To: Markus Gufler Subject: Re[2]: [Declude.JunkMail] Question on Dell Poweredge 1750 Hi Markus, Interested in

RE: [Declude.JunkMail] OT: Using Real E-Mail Address on Web Site

2004-11-10 Thread Mark E. Smith
Most spiders actually visit the page anyway so this doesn't help. The Javascript method usually works best. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Wednesday, November 10, 2004 11:44 AM To: [EMAIL PROTECTED] Subject: Re:

RE: [Declude.JunkMail] Question on Dell Poweredge 1750

2004-11-09 Thread Mark E. Smith
1.) Anyone has had the known Imail-NIC problems with this Ethernet ports? We have 4 1750's using adapter teaming without any problem. Although I've never heard of an application level issue with a NIC (in WinNT+) 2.) The system is preconfigured with Win2003 Server on 2 x 80 GB RAID 1 SCSI

RE: [Declude.JunkMail] anyone know how to stop this?

2004-11-08 Thread Mark E. Smith
I've been trapping them with the various suntrust strings in the subject line. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Monday, November 08, 2004 3:00 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] anyone know how to

[Declude.JunkMail] OT: Maps of Spam, Viruses, and Dictionary harvest attacks.

2004-11-07 Thread Mark E. Smith
Interesting maps by Postini that illuminate the geographical origins of spam, viruses and directory harvest attacks. Map shortcuts: Spam http://postini.com/stats/world-spam-2048.jpg Viruses http://postini.com/stats/world-virus-2048.jpg Directory harvest attacks

RE: [Declude.JunkMail] OT: Maps of Spam, Viruses, and Dictionary harvest attacks.

2004-11-07 Thread Mark E. Smith
Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark E. Smith Sent: Sunday, November 07, 2004 9:30 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OT: Maps of Spam, Viruses, and Dictionary harvest attacks. Interesting maps by Postini that illuminate

RE: [Declude.JunkMail] OT: expanding beyond one mailhost

2004-11-05 Thread Mark E. Smith
Will having a mis-matched round-robin MX record vs. HELO on the SMTP server cause any issues with Spam filters? IOW, Let's say I setup 1 MX entry: MX - MX.domain.com (Pref 10) Then Round robin: A - MX.domain.com - 192.168.100.1 A - MX.domain.com - 192.168.100.2 A -

RE: [Declude.JunkMail] Spammer in the news

2004-11-05 Thread Mark E. Smith
What are we all going to do when there are no more spammers? :) Sorta' like living in a town that's driven by tourism and saying I hate the tourists. :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Friday, November 05, 2004

[Declude.JunkMail] LOG Levels

2004-11-04 Thread Mark E. Smith
I've always used LOGLEVEL HIGH on my systems but I'm reconsidering that these days since our logs are running 250mb - 350mb. I use a number of log reports (DLAnalyizer, etc) If I switch to LOGLEVEL MID will I lose anything in my log reporting utils? --- [This E-mail was scanned for viruses by

RE: [Declude.JunkMail] LOG Levels

2004-11-04 Thread Mark E. Smith
Declude logs at HIGH range between 1.2 and 1.6 GIGABYTES. The log for 11/3 is 1,701,795 KB. - Original Message - From: Mark E. Smith [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, November 04, 2004 9:03 AM Subject: [Declude.JunkMail] LOG Levels I've always used LOGLEVEL

RE: [Declude.JunkMail] OT: expanding beyond one mailhost

2004-11-04 Thread Mark E. Smith
Andrew, We have 3 equal MX records and 3 A records for load balancing and redundancy. We also have a 4th MX which is physically off-site that's a lower preference level. I put load-balancing in quotes because we still see our number 1 server take the brunt of the load. Mark -Original

RE: [Declude.JunkMail] LOG Levels

2004-11-04 Thread Mark E. Smith
as the other tools are interesting, nothing beats a database for it's in depth ability to look at different data elements. -- Original Message -- From: Mark E. Smith [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Thu, 4 Nov 2004 15:55:35 -0500 We

RE: [Declude.JunkMail] Earthlink Porn Spam

2004-11-02 Thread Mark E. Smith
Matt, Can you resend that filter? I checked on the archive and the attachment isn't there. Thanks. Mark From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Tuesday, November 02, 2004 12:36 AMTo: [EMAIL PROTECTED]Subject: Re: [Declude.JunkMail]

RE: [Declude.JunkMail] Earthlink Porn Spam

2004-11-02 Thread Mark E. Smith
Matt, Thanks -- didn't see that. Can you post your (ALL) and (LAST) global configs and a brief explanation of how you're using them? Thanks Mark From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Tuesday, November 02, 2004 9:31 AMTo: [EMAIL

[Declude.JunkMail] Slightly OT: Mail size for gateways

2004-11-02 Thread Mark E. Smith
In one of my configurations, I'm running Imail/Declude in a Gateway only setup for an Exchange system. I was reviewing some of my DLAnalyzer logs and notices a number of single messages that were 51mb, 22mb, 30mb, etc. Since there's no way (that I've found) to prohibit the SMTP send size,

RE: [Declude.JunkMail] Slightly OT: Mail size for gateways

2004-11-02 Thread Mark E. Smith
Yup. We do this but I was just trying to think of a way to do it on the external relayers (Imail/Declude). From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)Sent: Tuesday, November 02, 2004 6:42 PMTo: [EMAIL PROTECTED]Subject: RE:

[Declude.JunkMail] Specific filter for one domain

2004-11-01 Thread Mark E. Smith
Is there a way to have a filter run for only one domain you're hosting? I'm running Junkmail Pro I was thining I could put an ENDIF something in the beginning. Here's why... I'm hosting a gateway system for a organization that needs to filter specific keywords so they make sure these messages

RE: [Declude.JunkMail] Specific filter for one domain

2004-11-01 Thread Mark E. Smith
work? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry Sent: Monday, November 01, 2004 10:39 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Specific filter for one domain - Original Message - From: Mark E. Smith [EMAIL

RE: [Declude.JunkMail] JunkMail - Base64 and Exchange Messages

2004-11-01 Thread Mark E. Smith
This is a know Outlook 2000 OWA issue. There are some counter weights that you can put into place -- seach the mail-archive on this. You're correct that no few legit messages should be sent this way but there are some exceptions. For example, Dell.com sends its quotes this way. Why are you

[Declude.JunkMail] Adding Tests failed and weight to the body

2004-10-29 Thread Mark E. Smith
Is there any way to add the tests failed and other information to the body of the message -- maybe as a footer? Similar to the FOOTER option in Declude Virus? Mark --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the

RE: [Declude.JunkMail] Adding Tests failed and weight to the body

2004-10-29 Thread Mark E. Smith
] [mailto:[EMAIL PROTECTED] On Behalf Of Mark E. Smith Sent: Friday, October 29, 2004 10:02 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Adding Tests failed and weight to the body Is there any way to add the tests failed and other information to the body of the message -- maybe as a footer

RE: [Declude.JunkMail] Adding Tests failed and weight to the body

2004-10-29 Thread Mark E. Smith
Any idea why this isn't working then? The footer isn't in the body. snip 10/29/2004 10:52:08 Q58eb9dc3003eff1d WHITELISTFILTER:-1100 . Total weight = -1100. 10/29/2004 10:52:08 Q58eb9dc3003eff1d Using [incoming] CFG file e:\IMail\Declude\netrends.com\mark_smith.junkmail. 10/29/2004 10:52:08

[Declude.JunkMail] FOOTER Action

2004-10-29 Thread Mark E. Smith
Looks like the footer action doesn't work with HTML email. Is this a know issue or by design? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL

[Declude.JunkMail] SURBL Lists.

2004-10-29 Thread Mark E. Smith
I recently added Roger Eriksson's SURBL filter and was wondering if anyone was using this to also pull the other SURBL lists at http://www.surbl.org/ Currently Roger's script only uses the sc.surbl.org.rbldnsd list. http://www.botany.gu.se/download/decludescript/SURBL_filter.zip --- [This

[Declude.JunkMail] Counterweight filter when MAILFROM is spoofed

2004-10-28 Thread Mark E. Smith
Does anyone have a filter to deal with sites that purposely spoof the MAILFROM address? For example, when eBay sends an email question from one user to another through its site is puts the sender's email address. Many sites will allow a viewer to send an article to someone but spoof the

RE: Re[2]: [Declude.JunkMail] Spam getting through

2004-10-28 Thread Mark E. Smith
This is a good argument for the delayed-scan-and-deliver feature I suggested previously. The porn guys you are probably talking about we call the mad-lib pornsters. Every day or so they will come out with a brand new set of domains delivering a wide array of porn traffic. Actually, our

RE: CBL:RE: [Declude.JunkMail] Declude and Ipswitch ICS

2004-10-27 Thread Mark E. Smith
All, We're missing one huge point and that is why purchase support agreements from Ipswitch. Let's review. 1. To get phone support. 2. To get major software updates. Everyone else keeps adding: 3. To get security hotfixes. However, #3 is incorrect: From Ipswitch.com Patches and Upgrades -

RE: [Declude.JunkMail] Declude and Ipswitch ICS

2004-10-27 Thread Mark E. Smith
I don't think any of us would be as upset if a year ago Ipswitch published their intentions to kill off Imail which would have allowed everyone to come up with migration plans or upgrade. Exactly. In fact, I find Ipswitch's actions to be completely deceitful. Here is the email from the 8.12

RE: [Declude.JunkMail] Declude development strategy

2004-10-27 Thread Mark E. Smith
Barry, Thanks for the insight. My only suggestion (and this might be the case) is to continue to upgrade the current product and it's dependency on Imail for at least 12-24 months. Those of us who are simply using Imail for a Gateway have no real need to move off of it in the short term. Thanks!

RE: [Declude.JunkMail] Best Practices for handing legit email flagged as spam?

2004-10-27 Thread Mark E. Smith
Rick, I was looking at your filter -- great idea. One question (which falls under the processing order) If you have: BODY STOPALLTESTS CONTAINS Content-Type: application/x-zip-compressed I think Declude Virus will still grab this correct? Mark -Original Message- From: [EMAIL

RE: [Declude.JunkMail] Best Practices for handing legit email flagged as spam?

2004-10-27 Thread Mark E. Smith
at quite a few zip viruses and didnt see any of them using the Content-Type: application/x-zip-compressed in the mime info Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Mark E. Smith [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent

RE: [Declude.JunkMail] Best Practices for handing legit email fla gged as spam?

2004-10-27 Thread Mark E. Smith
nfo Rick Davidson National Systems Manager North American Title Group - - Original Message - From: "Mark E. Smith" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 27, 2004 1:03 PM Subject: RE: [Declude.JunkMail] Best Practices for handing legit email flagged as s

RE: [Declude.JunkMail] Best Practices for handing legit email fla gged as spam?

2004-10-27 Thread Mark E. Smith
in the header. I don't understand your comment about Microsoft Outlook; I didn't mention it, so it's not clear to mewhat you're clarifying. Andrew. -Original Message-From: Mark E. Smith [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 27, 2004 1:10 PMTo

RE: Re[2]: [Declude.JunkMail] Determining a BCC Recipient

2004-10-27 Thread Mark E. Smith
I have an application that acts as a POP3 mail client and writes the message body (with basic header info) to disk as a .txt file. I drop them into a folder hierarchy based on the date, etc which Microsoft Index server indexes (free w/ Windows). Just look for the message via a query based web

RE: [Declude.JunkMail] Best Practices for handing legit email fla gged as spam?

2004-10-27 Thread Mark E. Smith
it, so it's not clear to mewhat you're clarifying. Andrew. -Original Message-From: Mark E. Smith [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 27, 2004 1:10 PMTo: [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] Best Practices

RE: [Declude.JunkMail] Determining a BCC Recipient

2004-10-27 Thread Mark E. Smith
Why not just turn the Archive feature of IMAIL SMTP on and route that way? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Wednesday, October 27, 2004 5:20 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Determining a BCC

[Declude.JunkMail] STOPALLTESTS

2004-10-27 Thread Mark E. Smith
Sorry for the repeated posts but I think my question might have been lost in another thread. I'm working on a BYPASS Filter to identify ham. But I'm running into a problem. It seems that if STOPALLTESTS is used in place of the weight like: BODYSTOPALLTESTSCONTAINS

RE: [Declude.JunkMail] Solution to death of IMail

2004-10-26 Thread Mark E. Smith
What makes everyone think that Declude won't work with Ipswitch ICS? I'll bet that the core MTA in ICS is identical to Imail -- probably 99% of the same SMTP code. Unless the Spool folder, file name structure and ability to call your own SMTP32D transport is removed, I'll bet that it works. Has

RE: RE: [Declude.JunkMail] Solution to death of IMail

2004-10-26 Thread Mark E. Smith
Markus, RE: IPSwitch's strategy urges me to completely ignore this product. They should see, that offending customers this way is absolutely not acceptable. First voices on the imail list are confirming my expectation that ICS is neither comparable with Exchange. I agree 100% with you. I

[Declude.JunkMail] MS SMTP

2004-10-26 Thread Mark E. Smith
Re: using MS SMTP. I believe that Scott addressed this once before but I'll take a shot at it. If memory serves me correctly, I think the problem with MS SMTP is that there isn't an easy way to shim declude between the SMTP listener service and the MTA. Remember that in Imail the SMTP service

[Declude.JunkMail] Ipswitch/Imail...

2004-10-26 Thread Mark E. Smith
I would recommend that all contract owners call Ipswith to voice their concerns. I told them that we've paid for 4 professional contracts which were supposed to get us support, fixes, AND major upgrades. Considering we've never called for support, and now that they've decided to discontinue Imail,

[Declude.JunkMail] MAILFROM vs Declude Sender

2004-10-26 Thread Mark E. Smith
What SMTP field does the MAILFROM filter search look at? I thought it was the MAILFROMSMTP field but sometimes I think it reads the REPLYTO SMTP Field.

RE: [Declude.JunkMail] Ipswitch/Imail... Actionable?

2004-10-26 Thread Mark E. Smith
Yeah and we all get $10.00 in coupons good for an Ipswitch product. :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Evans Martin Sent: Tuesday, October 26, 2004 1:30 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Ipswitch/Imail...

[Declude.JunkMail] REPLYTO field filter.

2004-10-25 Thread Mark E. Smith
Is there a way to check data in the REPLYTO field? I don't see it with the MAILTO, SUBJECT, etc I'm trying to setup a filter that will trap for our domain in the REPLYTO and MAILFROM fields IF our domain is specified. In other words, rarely should you see and email address coming in from the

RE: [Declude.JunkMail] iMail, Declude and Killer Web Mail Installation Question

2004-10-22 Thread Mark E. Smith
Adding to this, I use the mounted volume feature (added in W2000 and to Unix on day 1) so that the filesystem seems seamless to Imail/Declude/Sniffer, etc. For example, I have the following volumes: C:\ System e:\ Imail F:\ Imail Spool --- Mounted to e:\imail\spool g:\ Declude

RE: [Declude.JunkMail] How to tell which version I have

2004-10-22 Thread Mark E. Smith
declude.exe -ver From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff PereiraSent: Thursday, October 21, 2004 5:22 PMTo: [EMAIL PROTECTED]Subject: [Declude.JunkMail] How to tell which version I have How can I tell which version of Declude Junkmail I

RE: [Declude.JunkMail] IMail 8 upgrade

2004-10-22 Thread Mark E. Smith
Just install and then apply the hotfixes. Nothing much else if you're doing an upgrade. Oh, for Gateway setups, I disable the queue system and DNS cache. Otherwise I've found that you run in the the possibility of putting your main mail system on the skiplist. Mark -Original Message-

RE: [Declude.JunkMail] How to tell which version I have

2004-10-22 Thread Mark E. Smith
kMail] How to tell which version I have Uh...shouldn't that be "decude - diag"? Darin. - Original Message ----- From: Mark E. Smith To: [EMAIL PROTECTED] Sent: Friday, October 22, 2004 2:04 PM Subject: RE: [Declude.JunkMai

RE: [Declude.JunkMail] regEx question

2004-10-22 Thread Mark E. Smith
Stupid question but where/how can you use regEx in Declude? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Friday, October 22, 2004 4:46 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] regEx question Ok, I'm a bit of a newbit

RE: Re[2]: [Declude.JunkMail] regEx question

2004-10-22 Thread Mark E. Smith
Can you use RegEx in SpamChk? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Friday, October 22, 2004 5:14 PM To: Mark E. Smith Subject: Re[2]: [Declude.JunkMail] regEx question Stupid question but where/how can you use

[Declude.JunkMail] Somewhat OT question...

2004-10-22 Thread Mark E. Smith
Does anyone know if there's a plug-in for Outlook that lets you easily see the SMTP header? We're doing massive re-tuning to our Declude Gateway system which sits in front of a 15,000 user Exchange system which moves about 420,000 messages through our 4 Declude inbound MX gateways a day. For now

RE: [Declude.JunkMail] Somewhat OT question...

2004-10-22 Thread Mark E. Smith
could be configured to view the entire message, including headers, without any action. Darin. - Original Message - From: Mark E. Smith [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, October 22, 2004 5:57 PM Subject: [Declude.JunkMail] Somewhat OT question... Does anyone

RE: [Declude.JunkMail] Somewhat OT question...

2004-10-22 Thread Mark E. Smith
- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Mark E. Smith Sent: Friday, October 22, 2004 3:47 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Somewhat OT question... Outlook Express doesn't talk MAPI to an Exchange server

[Declude.JunkMail] SPAMCHK

2004-10-21 Thread Mark E. Smith
Anyone know how to report the SPAMCHK test weight in the SMTP header? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe

[Declude.JunkMail] Recommendations on moving to a 0-100 scale from a 0-20 weight scale

2004-10-20 Thread Mark E. Smith
I'm tinkering around with SPAMCHK and it recommends moving to a 0-100 scale. Has anyone done this before? If so, should I just increase my current weights proportionally from 0-20 to 0-100? Thanks --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This

[Declude.JunkMail] Newsletters, News Alerts, and List Serves

2004-10-20 Thread Mark E. Smith
Does anyone have a decent filter for Newsletters, Yahoo/Google News Alerts, etc? We've re-worked out filters and everything's working well now except the Requested Bulk email (Newsletters, automated mailings, etc). Thanks --- [This E-mail was scanned for viruses by Declude Virus