[Declude.JunkMail] Hijack Release Tool
I just found and used the hijack release tool this morning (C:\Program Files\Declude\declude\resource\tools\HijackRelease.exe). Great job! - I was wondering if it also clears the ip(s) from declude without having to restart the service? Thanks, and keep up the good workRichard Lanard Information Technology Support University of Georgia Small Business Development Center --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack Release Tool
Hi Richard, Thanks for the post. To clear the IP's you still need to stop/start the decludeproc service. David Barker VP Operations | Declude Your Email Security is our business O: 978.499.2933 x7007 F: 978.988.1311 E: [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of rlanard Sent: Thursday, May 10, 2007 3:28 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Hijack Release Tool I just found and used the hijack release tool this morning (C:\Program Files\Declude\declude\resource\tools\HijackRelease.exe). Great job! - I was wondering if it also clears the ip(s) from declude without having to restart the service? Thanks, and keep up the good work Richard Lanard Information Technology Support University of Georgia Small Business Development Center --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Hijack with latest Declude 4.2.23 Imail
I couldn't find this information. I just upgraded to the latest Declude from 1.82 and I use to have to restart IMail deccon.exe to reset Hijack and I did find it's not used in this version. How do I now reset the counter for Hijack. Thanks, Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack with latest Declude 4.2.23 Imail
Deccon.exe is a Declude file no longer used. You restart the DecludeProc.exe. John T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Wiegers Sent: Monday, February 05, 2007 8:25 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Hijack with latest Declude 4.2.23 Imail I couldn't find this information. I just upgraded to the latest Declude from 1.82 and I use to have to restart IMail deccon.exe to reset Hijack and I did find it's not used in this version. How do I now reset the counter for Hijack. Thanks, Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Hijack and IPBYPASS
Not sure when it was changed, but apparently HIJACK now will not track IPs listed in the Global.Cfg file with IPBYPASS. It will look to the IP before that one. Some have been looking for this feature, and it is appreciated. John T eServices For You Seek, and ye shall find! --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Hijack: Blocklist feature request
Product: Declude Security Suite 4.x Function: Hijack Hijack is critical to ISPs today because viruses can show up at any time and get your server on a blacklist before you can detect and react. Problem #1 - After a customer has cleaned out their PC and removed the virus, there must be a method to allow them to send mail again but keep watching for a new virus infection. Currently the only solution is A to restart the Declude service or B put them in an allow section of the HIJACK.CFG file. Neither method is acceptable because A clears out other Hijack'd customers who you haven't yet been able to contact but are still spewing spam. B Allows them to resume sending real mail, but disables monitoring for future infections. Problem #2 - If the DecludeProc service crashes, or it is necessary to reboot, all Hijack entries are cleared. This is not acceptable because it clears out Hijack'd customer(s) still spewing spam. Some spams can get out before they reblacklist themselves. Suggestions- The Hijack function should periodically save out the blacklist state to a file - on IP address addition / change? Add a method of informing DecludeProc to remove an IP address from the blacklist entry. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack: Blocklist feature request
Mike, The operation of Hijack is under review, thank you for your suggestions. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike N Sent: Thursday, July 20, 2006 12:46 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Hijack: Blocklist feature request Product: Declude Security Suite 4.x Function: Hijack Hijack is critical to ISPs today because viruses can show up at any time and get your server on a blacklist before you can detect and react. Problem #1 - After a customer has cleaned out their PC and removed the virus, there must be a method to allow them to send mail again but keep watching for a new virus infection. Currently the only solution is A to restart the Declude service or B put them in an allow section of the HIJACK.CFG file. Neither method is acceptable because A clears out other Hijack'd customers who you haven't yet been able to contact but are still spewing spam. B Allows them to resume sending real mail, but disables monitoring for future infections. Problem #2 - If the DecludeProc service crashes, or it is necessary to reboot, all Hijack entries are cleared. This is not acceptable because it clears out Hijack'd customer(s) still spewing spam. Some spams can get out before they reblacklist themselves. Suggestions- The Hijack function should periodically save out the blacklist state to a file - on IP address addition / change? Add a method of informing DecludeProc to remove an IP address from the blacklist entry. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack: Blocklist feature request
Mike, on problem 2, have you verified this? Decludeproc does indeed create a file in the Imail\Declude directory for use with Hijack. As for clearing an IP, I wonder if editing that file by removing the IP would clear it. Declude? John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike N Sent: Thursday, July 20, 2006 9:46 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Hijack: Blocklist feature request Product: Declude Security Suite 4.x Function: Hijack Hijack is critical to ISPs today because viruses can show up at any time and get your server on a blacklist before you can detect and react. Problem #1 - After a customer has cleaned out their PC and removed the virus, there must be a method to allow them to send mail again but keep watching for a new virus infection. Currently the only solution is A to restart the Declude service or B put them in an allow section of the HIJACK.CFG file. Neither method is acceptable because A clears out other Hijack'd customers who you haven't yet been able to contact but are still spewing spam. B Allows them to resume sending real mail, but disables monitoring for future infections. Problem #2 - If the DecludeProc service crashes, or it is necessary to reboot, all Hijack entries are cleared. This is not acceptable because it clears out Hijack'd customer(s) still spewing spam. Some spams can get out before they reblacklist themselves. Suggestions- The Hijack function should periodically save out the blacklist state to a file - on IP address addition / change? Add a method of informing DecludeProc to remove an IP address from the blacklist entry. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack: Blocklist feature request
When Decludeproc is restart the list of IP's maintained my hijack are reset. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Thursday, July 20, 2006 1:00 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Hijack: Blocklist feature request Mike, on problem 2, have you verified this? Decludeproc does indeed create a file in the Imail\Declude directory for use with Hijack. As for clearing an IP, I wonder if editing that file by removing the IP would clear it. Declude? John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike N Sent: Thursday, July 20, 2006 9:46 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Hijack: Blocklist feature request Product: Declude Security Suite 4.x Function: Hijack Hijack is critical to ISPs today because viruses can show up at any time and get your server on a blacklist before you can detect and react. Problem #1 - After a customer has cleaned out their PC and removed the virus, there must be a method to allow them to send mail again but keep watching for a new virus infection. Currently the only solution is A to restart the Declude service or B put them in an allow section of the HIJACK.CFG file. Neither method is acceptable because A clears out other Hijack'd customers who you haven't yet been able to contact but are still spewing spam. B Allows them to resume sending real mail, but disables monitoring for future infections. Problem #2 - If the DecludeProc service crashes, or it is necessary to reboot, all Hijack entries are cleared. This is not acceptable because it clears out Hijack'd customer(s) still spewing spam. Some spams can get out before they reblacklist themselves. Suggestions- The Hijack function should periodically save out the blacklist state to a file - on IP address addition / change? Add a method of informing DecludeProc to remove an IP address from the blacklist entry. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack: Blocklist feature request
Also it would be nice for it to optionally send an email to the postmaster (or whoever) when hold1 level reached and especially when hold2 level reached. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, July 20, 2006 12:49 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Hijack: Blocklist feature request Mike, The operation of Hijack is under review, thank you for your suggestions. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike N Sent: Thursday, July 20, 2006 12:46 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Hijack: Blocklist feature request Product: Declude Security Suite 4.x Function: Hijack Hijack is critical to ISPs today because viruses can show up at any time and get your server on a blacklist before you can detect and react. Problem #1 - After a customer has cleaned out their PC and removed the virus, there must be a method to allow them to send mail again but keep watching for a new virus infection. Currently the only solution is A to restart the Declude service or B put them in an allow section of the HIJACK.CFG file. Neither method is acceptable because A clears out other Hijack'd customers who you haven't yet been able to contact but are still spewing spam. B Allows them to resume sending real mail, but disables monitoring for future infections. Problem #2 - If the DecludeProc service crashes, or it is necessary to reboot, all Hijack entries are cleared. This is not acceptable because it clears out Hijack'd customer(s) still spewing spam. Some spams can get out before they reblacklist themselves. Suggestions- The Hijack function should periodically save out the blacklist state to a file - on IP address addition / change? Add a method of informing DecludeProc to remove an IP address from the blacklist entry. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack: Blocklist feature request
The file Console.txt seems to be write-only; it is useful for finding out what's going on, but I don't think it's possible to edit and have DecludeProc reread it unless it is just not documented some how. [Console.txt is displayed by the WebConfiguration GUI] - Original Message - From: John T (Lists) [EMAIL PROTECTED] Mike, on problem 2, have you verified this? Decludeproc does indeed create a file in the Imail\Declude directory for use with Hijack. As for clearing an IP, I wonder if editing that file by removing the IP would clear it. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack: Blocklist feature request
Check the archives for an old solution for hold notification. There is a vbs script that will do what your looking for. I have scheduled every 15 min. If there are any files in hold2, it emails me. I use something similar for the outgoing queue in case of a backup. The issue of outgoing mail has gotten much more serious over the years. It's getting to the point that it almost rates as much scrutiny and incoming mail. I've gotten burned from lists, bulk mailings and hijacked machinges. It takes days to get unlisted. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of [EMAIL PROTECTED] Sent: Thursday, July 20, 2006 10:19 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Hijack: Blocklist feature request Also it would be nice for it to optionally send an email to the postmaster (or whoever) when hold1 level reached and especially when hold2 level reached. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, July 20, 2006 12:49 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Hijack: Blocklist feature request Mike, The operation of Hijack is under review, thank you for your suggestions. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike N Sent: Thursday, July 20, 2006 12:46 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Hijack: Blocklist feature request Product: Declude Security Suite 4.x Function: Hijack Hijack is critical to ISPs today because viruses can show up at any time and get your server on a blacklist before you can detect and react. Problem #1 - After a customer has cleaned out their PC and removed the virus, there must be a method to allow them to send mail again but keep watching for a new virus infection. Currently the only solution is A to restart the Declude service or B put them in an allow section of the HIJACK.CFG file. Neither method is acceptable because A clears out other Hijack'd customers who you haven't yet been able to contact but are still spewing spam. B Allows them to resume sending real mail, but disables monitoring for future infections. Problem #2 - If the DecludeProc service crashes, or it is necessary to reboot, all Hijack entries are cleared. This is not acceptable because it clears out Hijack'd customer(s) still spewing spam. Some spams can get out before they reblacklist themselves. Suggestions- The Hijack function should periodically save out the blacklist state to a file - on IP address addition / change? Add a method of informing DecludeProc to remove an IP address from the blacklist entry. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack: Blocklist feature request
Responding to 2 posts. When Decludeproc is restart the list of IP's maintained my hijack are reset. I thought the purpose of the file was to retain IPs even when Decludeproc was restarted or stopped and then started. If not, I would like to suggest this. The file Console.txt seems to be write-only; it is useful for finding out what's going on, but I don't think it's possible to edit and have DecludeProc reread it unless it is just not documented some how. Feature request, a way to remove an IP without having to cycle Decludeproc. [Console.txt is displayed by the WebConfiguration GUI] So far, the hour I spent on my new server to get the Declude Web GUI working was unsuccessful. It also appears to be a bit cumbersome to use. John T eServices For You Seek, and ye shall find! --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack and gateways (WAS compatibility question)
Notice the change in the subject line. I am using Imail 8.15 HF2 with declude 4.2 as a gateway, no users on the server. That is the issue you are experience, using Imail/Declude as a blind gateway. This configuration is no longer recommended do to the proliferation of dictionary type spam campaigns where they are sending spam to every possible address not carrying if it is good or bad. It is has been recommended for some time now to configure Imail with the actual e-mail addresses as aliases for the actual destination server. See Sandy's posts for the link to Address2Aliases. John T eServices For You Seek, and ye shall find! --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack Held Notifier
Thanks, Craig. I don't have the FileFunctions object installed (the script errors on it). Where do I get it? Also, shouldn't the last line of the script be Set FFunc = Nothing ? Thanks, Sunday, May 28, 2006, 11:20:41 AM, Craig Edmonds [EMAIL PROTECTED] wrote: CE CE Hi Don, CE Try this. CE Set up a scheduled task to run every 15 minutes CE I do it on the hold1 folder too. CE If there is nothing in the hold queue then nothing happens. CE You might need to install the FileFunctions object but that takes allof two CE seconds. CE --- CE filepath=C:\IMAIL\spool\spam\hold2\*.smd CE emailfrom=[EMAIL PROTECTED] CE emailto=[EMAIL PROTECTED] CE Set FFunc = CreateObject(FileFunctions.files) CE if FFunc.Exists(filepath) then CE FFunc.GetFileList(filepath) CESet objMessage = CreateObject(CDO.Message) CEobjMessage.Subject = (Alert) FFunc.Count Messages in The Hold CE Queue at FormatDateTime(Now, 4) CEobjMessage.From = emailfrom CEobjMessage.To = emailto CEstrBody = strBody There are currently FFunc.Count files in the CE Hold Queue vbCRLF CEstrBody = strBodyvbCRLF CEstrBody = strBody Date:FormatDateTime(Date, 1) - CE FormatDateTime(Now, 4) CEobjMessage.TextBody = strBody CEobjMessage.Send CE end if - CE Kindest Regards CE Craig Edmonds CE 123 Marbella Internet CE W: www.123marbella.com CE E : [EMAIL PROTECTED] CE CE Marbella Guide Web Portal CE W: www.marbellaguide.com CE E: [EMAIL PROTECTED] CE -Original Message- CE From: [EMAIL PROTECTED] CE [mailto:[EMAIL PROTECTED] On Behalf Of Don Brown CE Sent: Sunday, May 28, 2006 6:04 PM CE To: Declude.JunkMail@declude.com CE Subject: [Declude.JunkMail] Hijack Held Notifier CE Does anyone have a copy of Hijack Held Notifier (A VBscript program that CE sends an E-mail whenever Declude Hijack holds any messages)? The link on CE Declude's Web Tools page is broken. CE CE Don Brown - Dallas, Texas USA Internet Concepts, Inc. CE [EMAIL PROTECTED] http://www.inetconcepts.net CE (972) 788-2364Fax: (972) 788-5049 CE CE --- CE This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, CE just send an E-mail to [EMAIL PROTECTED], and type unsubscribe CE Declude.JunkMail. The archives can be found at CE http://www.mail-archive.com. CE [ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank You CE For Using 123 Marbella Internet ] CE [ This E-mail has been scanned for Spam and Viruses by Declude ] CE [ Thank You For Using 123 Marbella Internet ] CE --- CE This E-mail came from the Declude.JunkMail mailing list. To CE unsubscribe, just send an E-mail to [EMAIL PROTECTED], and CE type unsubscribe Declude.JunkMail. The archives can be found CE at http://www.mail-archive.com. Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack Held Notifier
Hi Don, The site where you can get it is here. http://www.xs4all.nl/~jarit/asp/filefunc/ The license about 30 bucks. Well worth it in my eyes. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] Marbella Guide Web Portal W: www.marbellaguide.com E: [EMAIL PROTECTED] = -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Brown Sent: Tuesday, May 30, 2006 12:01 AM To: Craig Edmonds Subject: Re: [Declude.JunkMail] Hijack Held Notifier Thanks, Craig. I don't have the FileFunctions object installed (the script errors on it). Where do I get it? Also, shouldn't the last line of the script be Set FFunc = Nothing ? Thanks, Sunday, May 28, 2006, 11:20:41 AM, Craig Edmonds [EMAIL PROTECTED] wrote: CE CE Hi Don, CE Try this. CE Set up a scheduled task to run every 15 minutes CE I do it on the hold1 folder too. CE If there is nothing in the hold queue then nothing happens. CE You might need to install the FileFunctions object but that takes CE allof two seconds. CE --- CE filepath=C:\IMAIL\spool\spam\hold2\*.smd CE emailfrom=[EMAIL PROTECTED] CE emailto=[EMAIL PROTECTED] CE Set FFunc = CreateObject(FileFunctions.files) CE if FFunc.Exists(filepath) then CE FFunc.GetFileList(filepath) CESet objMessage = CreateObject(CDO.Message) CEobjMessage.Subject = (Alert) FFunc.Count Messages in The CE Hold Queue at FormatDateTime(Now, 4) CEobjMessage.From = emailfrom CEobjMessage.To = emailto CEstrBody = strBody There are currently FFunc.Count CE files in the Hold Queue vbCRLF CEstrBody = strBodyvbCRLF CEstrBody = strBody Date:FormatDateTime(Date, 1) - CE FormatDateTime(Now, 4) CEobjMessage.TextBody = strBody CEobjMessage.Send CE end if - CE Kindest Regards CE Craig Edmonds CE 123 Marbella Internet CE W: www.123marbella.com CE E : [EMAIL PROTECTED] CE CE Marbella Guide Web Portal CE W: www.marbellaguide.com CE E: [EMAIL PROTECTED] CE -Original Message- CE From: [EMAIL PROTECTED] CE [mailto:[EMAIL PROTECTED] On Behalf Of Don Brown CE Sent: Sunday, May 28, 2006 6:04 PM CE To: Declude.JunkMail@declude.com CE Subject: [Declude.JunkMail] Hijack Held Notifier CE Does anyone have a copy of Hijack Held Notifier (A VBscript CE program that sends an E-mail whenever Declude Hijack holds any CE messages)? The link on Declude's Web Tools page is broken. CE CE Don Brown - Dallas, Texas USA Internet Concepts, Inc. CE [EMAIL PROTECTED] http://www.inetconcepts.net CE (972) 788-2364Fax: (972) 788-5049 CE CE --- CE This E-mail came from the Declude.JunkMail mailing list. To CE unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type CE unsubscribe Declude.JunkMail. The archives can be found at CE http://www.mail-archive.com. CE [ This E-mail has been scanned for Spam and Viruses by Declude ] [ CE Thank You For Using 123 Marbella Internet ] CE [ This E-mail has been scanned for Spam and Viruses by Declude ] [ CE Thank You For Using 123 Marbella Internet ] CE --- CE This E-mail came from the Declude.JunkMail mailing list. To CE unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type CE unsubscribe Declude.JunkMail. The archives can be found at CE http://www.mail-archive.com. Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. [ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank You For Using 123 Marbella Internet ] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Hijack Held Notifier
Does anyone have a copy of Hijack Held Notifier (A VBscript program that sends an E-mail whenever Declude Hijack holds any messages)? The link on Declude's Web Tools page is broken. Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack Held Notifier
Hi Don, Try this. Set up a scheduled task to run every 15 minutes I do it on the hold1 folder too. If there is nothing in the hold queue then nothing happens. You might need to install the FileFunctions object but that takes allof two seconds. --- filepath=C:\IMAIL\spool\spam\hold2\*.smd emailfrom=[EMAIL PROTECTED] emailto=[EMAIL PROTECTED] Set FFunc = CreateObject(FileFunctions.files) if FFunc.Exists(filepath) then FFunc.GetFileList(filepath) Set objMessage = CreateObject(CDO.Message) objMessage.Subject = (Alert) FFunc.Count Messages in The Hold Queue at FormatDateTime(Now, 4) objMessage.From = emailfrom objMessage.To = emailto strBody = strBody There are currently FFunc.Count files in the Hold Queue vbCRLF strBody = strBodyvbCRLF strBody = strBody Date:FormatDateTime(Date, 1) - FormatDateTime(Now, 4) objMessage.TextBody = strBody objMessage.Send end if - Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] Marbella Guide Web Portal W: www.marbellaguide.com E: [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Brown Sent: Sunday, May 28, 2006 6:04 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Hijack Held Notifier Does anyone have a copy of Hijack Held Notifier (A VBscript program that sends an E-mail whenever Declude Hijack holds any messages)? The link on Declude's Web Tools page is broken. Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. [ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank You For Using 123 Marbella Internet ] [ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank You For Using 123 Marbella Internet ] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack Notification
Hi Nick -
I like this. Do I need to set this up as a task, or
how will it run?
Thanks for any tips.
Todd
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Nick
HayerSent: Monday, April 03, 2006 3:59 PMTake that code, adjust the paths/email
addresses as need be, save it as a .vbs file and give it a twirl. Set the count
real low so you can see it work and then set it to whatever alarm level you
would like --Nick
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Nick
HayerSent: Monday, April 03,
2006 11:03 AMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Hijack
Notification
Hi John,John
Doyle wrote: this guy suggested this.I'm not sure exactly how. looks like if a count is some value send themail.
I was just suggesting that the number of files in
the spool dir exceed some number [100?] then send an email. I got
the idea from the hijack vbs code [Thanks!] on the declude website which I
kludged to work to notify for the spool overflows.. -Nick#
spool_mon.vbsfSpool = "e:\imaillogs\spool"aMail = "e:\imail\imail1.exe
"mFrom = "-u '[EMAIL PROTECTED]'
"mTo1 = "-t '[EMAIL PROTECTED],[EMAIL PROTECTED]'
"if GetFileCount(fSpool) 100 then
MailNotice "Spool", GetFileCount(fSpool), mTo1end ifFunction
GetFileCount(folderspec) Dim fso, f, f1,
fc Set fso =
CreateObject("Scripting.FileSystemObject") Set f =
fso.GetFolder(folderspec) Set fc =
f.Files GetFileCount = fc.countEnd
FunctionFunction MailNotice(fname, fcount, mTo)
Dim mCmd, mSubj, WshShell set WshShell =
WScript.CreateObject("WScript.Shell") mSubj = "-s 'Mail
held in " fname ": " fcount "' "
mCmd = aMail mFrom mTo mSubj "-f
placeholder.txt" Return = WshShell.Run(mCmd , 1,
TRUE)End
Function
Re: [Declude.JunkMail] Hijack Notification
You can also run the spoolviewer app on the Declude
tools page, http://www.declude.com/Articles.asp?ID=100.
It gives a bit more info.
We run it via batch file every 3 or 4 hours to
watch spool usage, echoing results to a file and using imail1.exe to send the
file as the message body. With it we can see indications of high volumes
of both outgoing and incoming traffic.
Darin.
- Original Message -
From: Todd Richards
To: Declude.JunkMail@declude.com
Sent: Friday, April 07, 2006 10:02 AM
Subject: RE: [Declude.JunkMail] Hijack Notification
Hi Nick -
I like this. Do I need to set this up as a task, or
how will it run?
Thanks for any tips.
Todd
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Nick
HayerSent: Monday, April 03, 2006 3:59 PMTake that code, adjust the paths/email
addresses as need be, save it as a .vbs file and give it a twirl. Set the count
real low so you can see it work and then set it to whatever alarm level you
would like --Nick
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Nick
HayerSent: Monday, April 03,
2006 11:03 AMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Hijack
Notification
Hi John,John
Doyle wrote: this guy suggested this.I'm not sure exactly how. looks like if a count is some value send themail.
I was just
suggesting that the number of files in the spool dir exceed some number
[100?] then send an email. I got the idea from the hijack vbs code
[Thanks!] on the declude website which I kludged to work to notify for the
spool overflows.. -Nick# spool_mon.vbsfSpool =
"e:\imaillogs\spool"aMail = "e:\imail\imail1.exe "mFrom = "-u '[EMAIL PROTECTED]'
"mTo1 = "-t '[EMAIL PROTECTED],[EMAIL PROTECTED]'
"if GetFileCount(fSpool) 100 then
MailNotice "Spool", GetFileCount(fSpool), mTo1end ifFunction
GetFileCount(folderspec) Dim fso, f, f1,
fc Set fso =
CreateObject("Scripting.FileSystemObject") Set f =
fso.GetFolder(folderspec) Set fc =
f.Files GetFileCount = fc.countEnd
FunctionFunction MailNotice(fname, fcount, mTo)
Dim mCmd, mSubj, WshShell set WshShell =
WScript.CreateObject("WScript.Shell") mSubj = "-s 'Mail
held in " fname ": " fcount "' "
mCmd = aMail mFrom mTo mSubj "-f
placeholder.txt" Return = WshShell.Run(mCmd , 1,
TRUE)End
Function
Re: [Declude.JunkMail] Hijack Notification
Hi Todd,
I run it every 30 min with the Windows scheduler -
-Nick
-
Original Message -
From:
Todd Richards
To: Declude.JunkMail@declude.com
Sent: Friday, April 07, 2006 10:02 AM
Subject: RE: [Declude.JunkMail] Hijack Notification
Hi Nick -
I like this. Do I need to set
this up as a task, or how will it run?
Thanks for any tips.
Todd
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Nick
Hayer
Sent: Monday, April 03, 2006 3:59 PM
Take that code, adjust the paths/email addresses as need be, save it as
a .vbs file and give it a twirl. Set the count real low so you can see
it work and then set it to whatever alarm level you would like -
-Nick
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Nick
Hayer
Sent: Monday, April
03, 2006 11:03 AM
To: Declude.JunkMail@declude.com
Subject: Re:
[Declude.JunkMail] Hijack Notification
Hi John,
John Doyle wrote:
this guy suggested this.
I'm not sure exactly how. looks like if a count is some value send the
mail.
I was just suggesting that the number of files in the spool dir exceed
some number [100?] then send an email. I got the idea from the hijack
vbs code [Thanks!] on the declude website which I kludged to work to
notify for the spool overflows..
-Nick
# spool_mon.vbs
fSpool = "e:\imaillogs\spool"
aMail = "e:\imail\imail1.exe "
mFrom = "-u '[EMAIL PROTECTED]'
"
mTo1 = "-t '[EMAIL PROTECTED],[EMAIL PROTECTED]'
"
if GetFileCount(fSpool) 100 then
MailNotice "Spool", GetFileCount(fSpool), mTo1
end if
Function GetFileCount(folderspec)
Dim fso, f, f1, fc
Set fso = CreateObject("Scripting.FileSystemObject")
Set f = fso.GetFolder(folderspec)
Set fc = f.Files
GetFileCount = fc.count
End Function
Function MailNotice(fname, fcount, mTo)
Dim mCmd, mSubj, WshShell
set WshShell = WScript.CreateObject("WScript.Shell")
mSubj = "-s 'Mail held in " fname ": " fcount
"' "
mCmd = aMail mFrom mTo mSubj "-f
placeholder.txt"
Return = WshShell.Run(mCmd , 1, TRUE)
End Function
RE: [Declude.JunkMail] Hijack Notification
Thanks Nick and Darin for both of your
respones!
Todd
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Nick
HayerSent: Friday, April 07, 2006 9:32 AMTo:
Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Hijack
Notification
Hi Todd,I run it every 30 min with the Windows
scheduler - -Nick
-
Original Message -
From:
Todd Richards
To: Declude.JunkMail@declude.com
Sent: Friday, April 07, 2006 10:02 AM
Subject: RE: [Declude.JunkMail] Hijack Notification
Hi Nick -
I like this. Do I need to set this up as a task, or
how will it run?
Thanks for any tips.
Todd
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Nick HayerSent: Monday, April 03, 2006 3:59
PMTake that code, adjust the paths/email
addresses as need be, save it as a .vbs file and give it a twirl. Set the
count real low so you can see it work and then set it to whatever alarm level
you would like --Nick
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Nick
HayerSent: Monday, April
03, 2006 11:03 AMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Hijack
Notification
Hi John,John
Doyle wrote: this guy suggested this.I'm not sure exactly how. looks like if a count is some value send themail.
I was just suggesting that the number of files
in the spool dir exceed some number [100?] then send an email. I
got the idea from the hijack vbs code [Thanks!] on the declude website which
I kludged to work to notify for the spool overflows.. -Nick#
spool_mon.vbsfSpool = "e:\imaillogs\spool"aMail =
"e:\imail\imail1.exe "mFrom = "-u '[EMAIL PROTECTED]'
"mTo1 = "-t '[EMAIL PROTECTED],[EMAIL PROTECTED]'
"if GetFileCount(fSpool) 100 then
MailNotice "Spool", GetFileCount(fSpool), mTo1end ifFunction
GetFileCount(folderspec) Dim fso, f, f1,
fc Set fso =
CreateObject("Scripting.FileSystemObject") Set f =
fso.GetFolder(folderspec) Set fc =
f.Files GetFileCount = fc.countEnd
FunctionFunction MailNotice(fname, fcount,
mTo) Dim mCmd, mSubj, WshShell
set WshShell = WScript.CreateObject("WScript.Shell")
mSubj = "-s 'Mail held in " fname ": " fcount "'
" mCmd = aMail mFrom mTo mSubj
"-f placeholder.txt" Return = WshShell.Run(mCmd , 1,
TRUE)End
Function
[Declude.JunkMail] Hijack Question
Hi All, I've run Junkmail and EVA Pro products for the past couple of years, but not Hijack. I'm a little confused with the docs though and just want to make sure that I am reading them correctly. With Hijack, there is no per domain and per user configuration, correct? The only way to opt-out someone from being affected by it is by whitelisting their IP, right? If that is the case, I have 2 questions: First, what thresholds are most of you using, that causes minimal screaming phone calls from client? 8-) Secondly, how are you handling non-fixed IP users that may send large (over the thresholds), but not absorbent amounts of mail? Thanks, Dean-- __Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/Corporate Internet Development and Marketing Specialists
Re: [Declude.JunkMail] Hijack Question
Hi Dean - Dean Lawrence wrote: First, what thresholds are most of you using, that causes minimal screaming phone calls from client? 8-) RELAYTHRESHOLD11020 RELAYTHRESHOLD23040 Secondly, how are you handling non-fixed IP users that may send large (over the thresholds), but not absorbent amounts of mail? ALLOWADDR[EMAIL PROTECTED] -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack Question
Hi Nick, Thanks for your input. I didn't see anything related to ALLOWADDR in the manual, are there other commands available? Thanks, Dean On 4/5/06, Nick Hayer [EMAIL PROTECTED] wrote: Hi Dean -Dean Lawrence wrote: First, what thresholds are most of you using, that causes minimal screaming phone calls from client? 8-)RELAYTHRESHOLD11020RELAYTHRESHOLD23040 Secondly, how are you handling non-fixed IP users that may send large (over the thresholds), but not absorbent amounts of mail? ALLOWADDR[EMAIL PROTECTED]-Nick---This E-mail came from the Declude.JunkMail mailing list.Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail.The archives can be foundat http://www.mail-archive.com. -- __Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists
RE: [Declude.JunkMail] Hijack Question
Unfortunately it is not in the manual. Too bad.. but it is in the release notes http://www.declude.com/Articles.asp?ID=122 1.69 [Beta, 16 Apr 2003] ADDED ALLOWADDR option, to allow up to 20 E-mail addresses to send unlimited E-mail. Panda Consulting S.A. Luis Alberto Arango E. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean LawrenceSent: Miércoles, 05 de Abril de 2006 12:57 p.m.To: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Hijack Question Hi Nick, Thanks for your input. I didn't see anything related to ALLOWADDR in the manual, are there other commands available? Thanks, Dean On 4/5/06, Nick Hayer [EMAIL PROTECTED] wrote: Hi Dean -Dean Lawrence wrote: First, what thresholds are most of you using, that causes minimal screaming phone calls from client? 8-)RELAYTHRESHOLD11020RELAYTHRESHOLD23040 Secondly, how are you handling non-fixed IP users that may send large (over the thresholds), but not absorbent amounts of mail? ALLOWADDR[EMAIL PROTECTED]-Nick---This E-mail came from the Declude.JunkMail mailing list.Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".The archives can be foundat http://www.mail-archive.com.-- __Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists
RE: [Declude.JunkMail] Hijack Question
Release notes don't show any other commands Luis Arango From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Panda Consulting S.A. Luis Alberto Arango Sent: Miércoles, 05 de Abril de 2006 04:48 p.m. To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Hijack Question Unfortunately it is not in the manual. Too bad.. but it is in the release notes http://www.declude.com/Articles.asp?ID=122 1.69 [Beta, 16 Apr 2003] ADDED ALLOWADDR option, to allow up to 20 E-mail addresses to send unlimited E-mail. Panda Consulting S.A. Luis Alberto Arango E. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Miércoles, 05 de Abril de 2006 12:57 p.m. To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hijack Question Hi Nick, Thanks for your input. I didn't see anything related to ALLOWADDR in the manual, are there other commands available? Thanks, Dean On 4/5/06, Nick Hayer [EMAIL PROTECTED] wrote: Hi Dean - Dean Lawrence wrote: First, what thresholds are most of you using, that causes minimal screaming phone calls from client? 8-) RELAYTHRESHOLD11020 RELAYTHRESHOLD23040 Secondly, how are you handling non-fixed IP users that may send large (over the thresholds), but not absorbent amounts of mail? ALLOWADDR[EMAIL PROTECTED] -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists __ [Email scanned for viruses] [Email escaneado contra virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack Question
Thanks Luis, I should know to check the release notes for these little tidbits that have not made it into the manual. Dean On 4/5/06, Panda Consulting S.A. Luis Alberto Arango [EMAIL PROTECTED] wrote: Release notes don't show any other commandsLuis Arango From: [EMAIL PROTECTED][mailto:[EMAIL PROTECTED]] On Behalf Of Panda Consulting S.A. Luis Alberto Arango Sent: Miércoles, 05 de Abril de 2006 04:48 p.m. To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Hijack Question Unfortunately it is not in the manual. Too bad.. but it is in therelease notes http://www.declude.com/Articles.asp?ID=122 1.69 [Beta, 16 Apr 2003] ADDED ALLOWADDR option, to allow up to 20 E-mail addresses to sendunlimited E-mail. Panda Consulting S.A. Luis Alberto Arango E. From: [EMAIL PROTECTED][mailto: [EMAIL PROTECTED]] On Behalf Of Dean Lawrence Sent: Miércoles, 05 de Abril de 2006 12:57 p.m. To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hijack Question Hi Nick, Thanks for your input. I didn't see anything related toALLOWADDR in the manual, are there other commands available? Thanks, Dean On 4/5/06, Nick Hayer [EMAIL PROTECTED] wrote: Hi Dean - Dean Lawrence wrote: First, what thresholds are most of you using, thatcauses minimal screaming phone calls from client? 8-) RELAYTHRESHOLD11020 RELAYTHRESHOLD23040 Secondly, how are you handling non-fixed IP users that may send large (over the thresholds), but not absorbent amountsof mail? ALLOWADDR[EMAIL PROTECTED] -Nick --- This E-mail came from the Declude.JunkMail mailinglist.To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.The archivescan be found at http://www.mail-archive.com . -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists__[Email scanned for viruses] [Email escaneado contra virus]---This E-mail came from the Declude.JunkMail mailing list.Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.The archives can be foundat http://www.mail-archive.com.-- __ Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381http://www.idatatech.com/Corporate Internet Development and Marketing Specialists
RE: [Declude.JunkMail] Hijack Notification
Thank you for the input. I'll give it a try this week. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Craig Edmonds Sent: Sunday, April 02, 2006 7:42 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Hijack Notification Importance: High Hi John, Not sure if this is any help but I found a basic way to handle this as I had problems with clients ringing up saying I sent out some mails and they have not gone...etc etc etc, and of course when I check the hold2 directory there are 500 emails in there. What I do is have a basic setup that checks for me every 30 minutes if there are some .smd files in the C:\IMAIL\spool\spam\hold2 folder and if it finds any, it emails me a simple email telling me how many *smd files there are which then goes to my blackberry letting me know. I am pretty sure there is an easier way but this is my 10 minute solution and it works for me. 1) I installed the following object on the mail server http://www.xs4all.nl/~jarit/asp/filefunc/download.html 2) made a .vbs file called check4files.vbs and put it in the C:\IMAIL\spool\spam\hold2 dir. The code in the .vbs file is like this.. === filepath=C:\IMAIL\spool\spam\hold2\*.smd emailfrom=[EMAIL PROTECTED] emailto=[EMAIL PROTECTED] Set FFunc = CreateObject(FileFunctions.files) if FFunc.Exists(filepath) then FFunc.GetFileList(filepath) Set objMessage = CreateObject(CDO.Message) objMessage.Subject = (Alert) FFunc.Count Messages in The Hold Queue objMessage.From = emailfrom objMessage.To = emailto strBody = strBody There are currently FFunc.Count files in the Hold Queue vbCRLF strBody = strBodyvbCRLF strBody = strBody Date:FormatDateTime(Date, 1) - FormatDateTime(Now, 4) objMessage.TextBody = strBody objMessage.Send end if 3) Then I set up a scheduled task in the windows schduled tasks to run the file every 30 minutes. I hope that helps you. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] = -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Wednesday, March 29, 2006 9:25 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Hijack Notification Does anyone have a utility to email a notification when hijack holds an ip address permanently? Thanks in advance John --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. [ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank You For Using 123 Marbella Internet ] [ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank You For Using 123 Marbella Internet ] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack Notification
this guy suggested this. I'm not sure exactly how. looks like if a count is some value send the mail. john -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Nick Hayer Sent: Sunday, April 02, 2006 7:59 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hijack Notification Hi Craig, Although you may already do this figured I mention it anyway - this technique works well to monitor spool traffic eg when a threshold is reached I get an email - so for example in your code below IF FFunc.Count 100 [altered path for the spool dir] send me an email... -Nick Craig Edmonds wrote: Hi John, Not sure if this is any help but I found a basic way to handle this as I had problems with clients ringing up saying I sent out some mails and they have not gone...etc etc etc, and of course when I check the hold2 directory there are 500 emails in there. What I do is have a basic setup that checks for me every 30 minutes if there are some .smd files in the C:\IMAIL\spool\spam\hold2 folder and if it finds any, it emails me a simple email telling me how many *smd files there are which then goes to my blackberry letting me know. I am pretty sure there is an easier way but this is my 10 minute solution and it works for me. 1) I installed the following object on the mail server http://www.xs4all.nl/~jarit/asp/filefunc/download.html 2) made a .vbs file called check4files.vbs and put it in the C:\IMAIL\spool\spam\hold2 dir. The code in the .vbs file is like this.. === filepath=C:\IMAIL\spool\spam\hold2\*.smd emailfrom=[EMAIL PROTECTED] emailto=[EMAIL PROTECTED] Set FFunc = CreateObject(FileFunctions.files) if FFunc.Exists(filepath) then FFunc.GetFileList(filepath) Set objMessage = CreateObject(CDO.Message) objMessage.Subject = (Alert) FFunc.Count Messages in The Hold Queue objMessage.From = emailfrom objMessage.To = emailto strBody = strBody There are currently FFunc.Count files in the Hold Queue vbCRLF strBody = strBodyvbCRLF strBody = strBody Date:FormatDateTime(Date, 1) - FormatDateTime(Now, 4) objMessage.TextBody = strBody objMessage.Send end if 3) Then I set up a scheduled task in the windows schduled tasks to run the file every 30 minutes. I hope that helps you. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] = -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Wednesday, March 29, 2006 9:25 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Hijack Notification Does anyone have a utility to email a notification when hijack holds an ip address permanently? Thanks in advance John --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. [ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank You For Using 123 Marbella Internet ] [ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank You For Using 123 Marbella Internet ] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack Notification
Hi John,
John Doyle wrote:
this guy suggested this.
I'm not sure exactly how. looks like if a count is some value send the
mail.
I was just suggesting that the number of files in the spool dir exceed
some number [100?] then send an email. I got the idea from the hijack
vbs code [Thanks!] on the declude website which I kludged to work to
notify for the spool overflows..
-Nick
# spool_mon.vbs
fSpool = "e:\imaillogs\spool"
aMail = "e:\imail\imail1.exe "
mFrom = "-u '[EMAIL PROTECTED]' "
mTo1 = "-t '[EMAIL PROTECTED],[EMAIL PROTECTED]' "
if GetFileCount(fSpool) 100 then
MailNotice "Spool", GetFileCount(fSpool), mTo1
end if
Function GetFileCount(folderspec)
Dim fso, f, f1, fc
Set fso = CreateObject("Scripting.FileSystemObject")
Set f = fso.GetFolder(folderspec)
Set fc = f.Files
GetFileCount = fc.count
End Function
Function MailNotice(fname, fcount, mTo)
Dim mCmd, mSubj, WshShell
set WshShell = WScript.CreateObject("WScript.Shell")
mSubj = "-s 'Mail held in " fname ": " fcount
"' "
mCmd = aMail mFrom mTo mSubj "-f
placeholder.txt"
Return = WshShell.Run(mCmd , 1, TRUE)
End Function
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Nick Hayer
Sent: Sunday, April 02, 2006 7:59 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Hijack Notification
Hi Craig,
Although you may already do this figured I mention it anyway - this
technique works well to monitor spool traffic eg when a threshold is
reached I get an email - so for example in your code below IF
FFunc.Count 100 [altered path for the spool dir] send me an email...
-Nick
Craig Edmonds wrote:
Hi John,
Not sure if this is any help but I found a basic way to handle this as I
had
problems with clients ringing up saying "I sent out some mails and they
have
not gone"...etc etc etc, and of course when I check the hold2 directory
there are 500 emails in there.
What I do is have a basic setup that checks for me every 30 minutes if
there
are some .smd files in the C:\IMAIL\spool\spam\hold2 folder and if it finds
any, it emails me a simple email telling me how many *smd files there are
which then goes to my blackberry letting me know.
I am pretty sure there is an easier way but this is my 10 minute solution
and it works for me.
1) I installed the following object on the mail server
http://www.xs4all.nl/~jarit/asp/filefunc/download.html
2) made a .vbs file called check4files.vbs and put it in the
C:\IMAIL\spool\spam\hold2 dir.
The code in the .vbs file is like this..
===
filepath="C:\IMAIL\spool\spam\hold2\*.smd"
emailfrom="[EMAIL PROTECTED]"
emailto="[EMAIL PROTECTED]"
Set FFunc = CreateObject("FileFunctions.files")
if FFunc.Exists(filepath) then
FFunc.GetFileList(filepath)
Set objMessage = CreateObject("CDO.Message")
objMessage.Subject = "(Alert) " FFunc.Count " Messages in The Hold
Queue"
objMessage.From = emailfrom
objMessage.To = emailto
strBody = strBody "There are currently " FFunc.Count " files in
the
Hold Queue" vbCRLF
strBody = strBody "" vbCRLF
strBody = strBody "Date: " FormatDateTime(Date, 1) " - "
FormatDateTime(Now, 4)
objMessage.TextBody = strBody
objMessage.Send
end if
3) Then I set up a scheduled task in the windows schduled tasks to run the
file every 30 minutes.
I hope that helps you.
Kindest Regards
Craig Edmonds
123 Marbella Internet
W: www.123marbella.com
E : [EMAIL PROTECTED]
=====
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of John Doyle
Sent: Wednesday, March 29, 2006 9:25 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Hijack Notification
Does anyone have a utility to email a notification when hijack holds an ip
address permanently?
Thanks in advance
John
---
This E-mail came from the Declude.JunkMail mailing list. To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
[ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank
You
For Using 123 Marbella Internet ]
[ This E-mail has been scanned for Spam and Viruses by Declude ]
[ Thank You For Using 123 Marbella Internet ]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
uns
RE: [Declude.JunkMail] Hijack Notification
I think I understand, Im not a programmer and its semi Greek to me. I like the idea of getting notified if the spool file begins to fill up, I check it now and then and if would be nice To simply be notified if it begins to back up for whatever reason. John . From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Monday, April 03, 2006 11:03 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hijack Notification Hi John, John Doyle wrote: this guy suggested this.I'm not sure exactly how. looks like if a count is some value send themail. I was just suggesting that the number of files in the spool dir exceed some number [100?] then send an email. I got the idea from the hijack vbs code [Thanks!] on the declude website which I kludged to work to notify for the spool overflows.. -Nick # spool_mon.vbs fSpool = e:\imaillogs\spool aMail = e:\imail\imail1.exe mFrom = -u '[EMAIL PROTECTED]' mTo1 = -t '[EMAIL PROTECTED],[EMAIL PROTECTED]' if GetFileCount(fSpool) 100 then MailNotice Spool, GetFileCount(fSpool), mTo1 end if Function GetFileCount(folderspec) Dim fso, f, f1, fc Set fso = CreateObject(Scripting.FileSystemObject) Set f = fso.GetFolder(folderspec) Set fc = f.Files GetFileCount = fc.count End Function Function MailNotice(fname, fcount, mTo) Dim mCmd, mSubj, WshShell set WshShell = WScript.CreateObject(WScript.Shell) mSubj = -s 'Mail held in fname : fcount ' mCmd = aMail mFrom mTo mSubj -f placeholder.txt Return = WshShell.Run(mCmd , 1, TRUE) End Function -Original Message-From: [EMAIL PROTECTED][mailto:[EMAIL PROTECTED]]On Behalf Of Nick HayerSent: Sunday, April 02, 2006 7:59 AMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Hijack NotificationHi Craig,Although you may already do this figured I mention it anyway - thistechnique works well to monitor spool traffic eg when a threshold isreached I get an email - so for example in your code below IFFFunc.Count 100 [altered path for the spool dir] send me an email...-NickCraig Edmonds wrote: Hi John,Not sure if this is any help but I found a basic way to handle this as I had problems with clients ringing up saying I sent out some mails and they have not gone...etc etc etc, and of course when I check the hold2 directorythere are 500 emails in there.What I do is have a basic setup that checks for me every 30 minutes if there are some .smd files in the C:\IMAIL\spool\spam\hold2 folder and if it findsany, it emails me a simple email telling me how many *smd files there arewhich then goes to my blackberry letting me know.I am pretty sure there is an easier way but this is my 10 minute solutionand it works for me.1) I installed the following object on the mail serverhttp://www.xs4all.nl/~jarit/asp/filefunc/download.html2) made a .vbs file called check4files.vbs and put it in theC:\IMAIL\spool\spam\hold2 dir.The code in the .vbs file is like this..===filepath=C:\IMAIL\spool\spam\hold2\*.smdemailfrom=[EMAIL PROTECTED]emailto=[EMAIL PROTECTED]Set FFunc = CreateObject(FileFunctions.files)if FFunc.Exists(filepath) thenFFunc.GetFileList(filepath) Set objMessage = CreateObject(CDO.Message) objMessage.Subject = (Alert) FFunc.Count Messages in The HoldQueue objMessage.From = emailfrom objMessage.To = emailto strBody = strBody There are currently FFunc.Count files in the Hold Queue vbCRLF strBody = strBodyvbCRLF strBody = strBody Date: FormatDateTime(Date, 1) - FormatDateTime(Now, 4) objMessage.TextBody = strBody objMessage.Sendend if3) Then I set up a scheduled task in the windows schduled tasks to run thefile every 30 minutes.I hope that helps you.Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED]=-Original Message-From: [EMAIL PROTECTED][mailto:[EMAIL PROTECTED]] On Behalf Of John DoyleSent: Wednesday, March 29, 2006 9:25 PMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] Hijack NotificationDoes anyone have a utility to email a notification when hijack holds an ipaddress permanently?Thanks in advanceJohn---This E-mail came from the Declude.JunkMail mailing list. To unsubscribe,just send an E-mail to [EMAIL PROTECTED], and type unsubscribeDeclude.JunkMail. The archives can be found athttp://www.mail-archive.com.[ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank You For Using 123 Marbella Internet ][ This E-mail has been scanned for Spam and Viruses by Declude ][ Thank You For Using 123 Marbella Internet ]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED
Re: [Declude.JunkMail] Hijack Notification
John Doyle wrote:
I think I
understand, Im not a
programmer and its semi Greek to me.
I like the
idea of getting notified if the
spool file begins to fill up, I check it now and then and if would be
nice
To simply be
notified if it begins to back
up for whatever reason.
agreed!
Take that code, adjust the paths/email addresses as need be, save it as
a .vbs file and give it a twirl. Set the count real low so you can see
it work and then set it to whatever alarm level you would like -
-Nick
John
.
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On
Behalf Of Nick Hayer
Sent: Monday, April
03, 2006 11:03
AM
To:
Declude.JunkMail@declude.com
Subject: Re:
[Declude.JunkMail]
Hijack Notification
Hi John,
John Doyle wrote:
this guy suggested this.
I'm not sure exactly how. looks like if a count is some value send the
mail.
I was just suggesting that the number of files in the spool dir exceed
some
number [100?] then send an email. I got the idea from the hijack
vbs code [Thanks!] on the declude website which I kludged to work to
notify for
the spool overflows..
-Nick
# spool_mon.vbs
fSpool = "e:\imaillogs\spool"
aMail = "e:\imail\imail1.exe "
mFrom = "-u '[EMAIL PROTECTED]'
"
mTo1 = "-t '[EMAIL PROTECTED],[EMAIL PROTECTED]'
"
if GetFileCount(fSpool) 100 then
MailNotice "Spool", GetFileCount(fSpool), mTo1
end if
Function GetFileCount(folderspec)
Dim fso, f, f1, fc
Set fso =
CreateObject("Scripting.FileSystemObject")
Set f = fso.GetFolder(folderspec)
Set fc = f.Files
GetFileCount = fc.count
End Function
Function MailNotice(fname, fcount, mTo)
Dim mCmd, mSubj, WshShell
set WshShell =
WScript.CreateObject("WScript.Shell")
mSubj = "-s 'Mail held in " fname
": " fcount "' "
mCmd = aMail mFrom mTo mSubj
"-f placeholder.txt"
Return = WshShell.Run(mCmd , 1, TRUE)
End Function
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Nick Hayer
Sent: Sunday, April 02, 2006 7:59 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Hijack Notification
Hi Craig,
Although you may already do this figured I mention it anyway - this
technique works well to monitor spool traffic eg when a threshold is
reached I get an email - so for example in your code below IF
FFunc.Count 100 [altered path for the spool dir] send me an email...
-Nick
Craig Edmonds wrote:
Hi John,
Not sure if this is any help but I found a basic way to handle this as I
had
problems with clients ringing up saying "I sent out some mails and they
have
not gone"...etc etc etc, and of course when I check the hold2 directory
there are 500 emails in there.
What I do is have a basic setup that checks for me every 30 minutes if
there
are some .smd files in the C:\IMAIL\spool\spam\hold2 folder and if it finds
any, it emails me a simple email telling me how many *smd files there are
which then goes to my blackberry letting me know.
I am pretty sure there is an easier way but this is my 10 minute solution
and it works for me.
1) I installed the following object on the mail server
http://www.xs4all.nl/~jarit/asp/filefunc/download.html
2) made a .vbs file called check4files.vbs and put it in the
C:\IMAIL\spool\spam\hold2 dir.
The code in the .vbs file is like this..
===
filepath="C:\IMAIL\spool\spam\hold2\*.smd"
emailfrom="[EMAIL PROTECTED]"
emailto="[EMAIL PROTECTED]"
Set FFunc = CreateObject("FileFunctions.files")
if FFunc.Exists(filepath) then
FFunc.GetFileList(filepath)
Set objMessage = CreateObject("CDO.Message")
objMessage.Subject = "(Alert) " FFunc.Count " Messages in The Hold
Queue"
objMessage.From = emailfrom
objMessage.To = emailto
strBody = strBody "There are currently " FFunc.Count " files in
the
Hold Queue" vbCRLF
strBody = strBody "" vbCRLF
strBody = strBody "Date: " FormatDateTime(Date, 1) " - "
FormatDateTime(Now, 4)
objMessage.TextBody = strBody
objMessage.Send
end if
3) Then I set up a scheduled task in the windows schduled tasks to run the
file every 30 minutes.
I hope that helps you.
Kindest Regards
Craig Edmonds
123 Marbella Internet
W: www.123marbella.com
E : [EMAIL PROTECTED]
=====
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL
RE: [Declude.JunkMail] Hijack Notification
QueueMon is excellent for monitoring and logging these things, and very affordable too. http://www.invariantsystems.com/queuemon/ FYI, it doesn't official support SmarterMail, but it works perfectly fine on my SmarterMail servers. Thanks! - Jay Sudowski // Handy Networks LLC Director of Technical Operations Providing Shared, Reseller, Semi Managed and Fully Managed Windows 2003 Hosting Solutions Tel: 877-70 HANDY x882 | Fax: 888-300-2FAX www.handynetworks.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Monday, April 03, 2006 4:51 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Hijack Notification I think I understand, I'm not a programmer and it's semi Greek to me. I like the idea of getting notified if the spool file begins to fill up, I check it now and then and if would be nice To simply be notified if it begins to back up for whatever reason. John . From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Monday, April 03, 2006 11:03 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hijack Notification Hi John, John Doyle wrote: this guy suggested this. I'm not sure exactly how. looks like if a count is some value send the mail. I was just suggesting that the number of files in the spool dir exceed some number [100?] then send an email. I got the idea from the hijack vbs code [Thanks!] on the declude website which I kludged to work to notify for the spool overflows.. -Nick # spool_mon.vbs fSpool = e:\imaillogs\spool aMail = e:\imail\imail1.exe mFrom = -u '[EMAIL PROTECTED]' mTo1 = -t '[EMAIL PROTECTED],[EMAIL PROTECTED]' if GetFileCount(fSpool) 100 then MailNotice Spool, GetFileCount(fSpool), mTo1 end if Function GetFileCount(folderspec) Dim fso, f, f1, fc Set fso = CreateObject(Scripting.FileSystemObject) Set f = fso.GetFolder(folderspec) Set fc = f.Files GetFileCount = fc.count End Function Function MailNotice(fname, fcount, mTo) Dim mCmd, mSubj, WshShell set WshShell = WScript.CreateObject(WScript.Shell) mSubj = -s 'Mail held in fname : fcount ' mCmd = aMail mFrom mTo mSubj -f placeholder.txt Return = WshShell.Run(mCmd , 1, TRUE) End Function -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Nick Hayer Sent: Sunday, April 02, 2006 7:59 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hijack Notification Hi Craig, Although you may already do this figured I mention it anyway - this technique works well to monitor spool traffic eg when a threshold is reached I get an email - so for example in your code below IF FFunc.Count 100 [altered path for the spool dir] send me an email... -Nick Craig Edmonds wrote: Hi John, Not sure if this is any help but I found a basic way to handle this as I had problems with clients ringing up saying I sent out some mails and they have not gone...etc etc etc, and of course when I check the hold2 directory there are 500 emails in there. What I do is have a basic setup that checks for me every 30 minutes if there are some .smd files in the C:\IMAIL\spool\spam\hold2 folder and if it finds any, it emails me a simple email telling me how many *smd files there are which then goes to my blackberry letting me know. I am pretty sure there is an easier way but this is my 10 minute solution and it works for me. 1) I installed the following object on the mail server http://www.xs4all.nl/~jarit/asp/filefunc/download.html 2) made a .vbs file called check4files.vbs and put it in the C:\IMAIL\spool\spam\hold2 dir. The code in the .vbs file is like this.. === filepath=C:\IMAIL\spool\spam\hold2\*.smd emailfrom=[EMAIL PROTECTED] emailto=[EMAIL PROTECTED] Set FFunc = CreateObject(FileFunctions.files) if FFunc.Exists(filepath) then FFunc.GetFileList(filepath) Set objMessage = CreateObject(CDO.Message) objMessage.Subject = (Alert) FFunc.Count Messages in The Hold Queue objMessage.From = emailfrom objMessage.To = emailto strBody = strBody There are currently FFunc.Count files in the Hold Queue vbCRLF strBody = strBodyvbCRLF strBody = strBody Date: FormatDateTime(Date, 1) - FormatDateTime(Now, 4) objMessage.TextBody = strBody objMessage.Send end if 3) Then I set up a scheduled task in the windows schduled tasks to run the file every 30 minutes. I hope that helps you. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] = -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Wednesday, March 29, 2006 9:25 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Hijack Notification Does anyone
RE: [Declude.JunkMail] Hijack Notification
Hi John, Not sure if this is any help but I found a basic way to handle this as I had problems with clients ringing up saying I sent out some mails and they have not gone...etc etc etc, and of course when I check the hold2 directory there are 500 emails in there. What I do is have a basic setup that checks for me every 30 minutes if there are some .smd files in the C:\IMAIL\spool\spam\hold2 folder and if it finds any, it emails me a simple email telling me how many *smd files there are which then goes to my blackberry letting me know. I am pretty sure there is an easier way but this is my 10 minute solution and it works for me. 1) I installed the following object on the mail server http://www.xs4all.nl/~jarit/asp/filefunc/download.html 2) made a .vbs file called check4files.vbs and put it in the C:\IMAIL\spool\spam\hold2 dir. The code in the .vbs file is like this.. === filepath=C:\IMAIL\spool\spam\hold2\*.smd emailfrom=[EMAIL PROTECTED] emailto=[EMAIL PROTECTED] Set FFunc = CreateObject(FileFunctions.files) if FFunc.Exists(filepath) then FFunc.GetFileList(filepath) Set objMessage = CreateObject(CDO.Message) objMessage.Subject = (Alert) FFunc.Count Messages in The Hold Queue objMessage.From = emailfrom objMessage.To = emailto strBody = strBody There are currently FFunc.Count files in the Hold Queue vbCRLF strBody = strBodyvbCRLF strBody = strBody Date:FormatDateTime(Date, 1) - FormatDateTime(Now, 4) objMessage.TextBody = strBody objMessage.Send end if 3) Then I set up a scheduled task in the windows schduled tasks to run the file every 30 minutes. I hope that helps you. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] = -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Wednesday, March 29, 2006 9:25 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Hijack Notification Does anyone have a utility to email a notification when hijack holds an ip address permanently? Thanks in advance John --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. [ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank You For Using 123 Marbella Internet ] [ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank You For Using 123 Marbella Internet ] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack Notification
Hi Craig, Although you may already do this figured I mention it anyway - this technique works well to monitor spool traffic eg when a threshold is reached I get an email - so for example in your code below IF FFunc.Count 100 [altered path for the spool dir] send me an email... -Nick Craig Edmonds wrote: Hi John, Not sure if this is any help but I found a basic way to handle this as I had problems with clients ringing up saying I sent out some mails and they have not gone...etc etc etc, and of course when I check the hold2 directory there are 500 emails in there. What I do is have a basic setup that checks for me every 30 minutes if there are some .smd files in the C:\IMAIL\spool\spam\hold2 folder and if it finds any, it emails me a simple email telling me how many *smd files there are which then goes to my blackberry letting me know. I am pretty sure there is an easier way but this is my 10 minute solution and it works for me. 1) I installed the following object on the mail server http://www.xs4all.nl/~jarit/asp/filefunc/download.html 2) made a .vbs file called check4files.vbs and put it in the C:\IMAIL\spool\spam\hold2 dir. The code in the .vbs file is like this.. === filepath=C:\IMAIL\spool\spam\hold2\*.smd emailfrom=[EMAIL PROTECTED] emailto=[EMAIL PROTECTED] Set FFunc = CreateObject(FileFunctions.files) if FFunc.Exists(filepath) then FFunc.GetFileList(filepath) Set objMessage = CreateObject(CDO.Message) objMessage.Subject = (Alert) FFunc.Count Messages in The Hold Queue objMessage.From = emailfrom objMessage.To = emailto strBody = strBody There are currently FFunc.Count files in the Hold Queue vbCRLF strBody = strBodyvbCRLF strBody = strBody Date:FormatDateTime(Date, 1) - FormatDateTime(Now, 4) objMessage.TextBody = strBody objMessage.Send end if 3) Then I set up a scheduled task in the windows schduled tasks to run the file every 30 minutes. I hope that helps you. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] = -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Wednesday, March 29, 2006 9:25 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Hijack Notification Does anyone have a utility to email a notification when hijack holds an ip address permanently? Thanks in advance John --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. [ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank You For Using 123 Marbella Internet ] [ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank You For Using 123 Marbella Internet ] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Hijack Notification
Does anyone have a utility to email a notification when hijack holds an ip address permanently? Thanks in advance John --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack Notification
There is a scheduled script that I use that was created by another user a couple years ago. I will post it to the list later tonight if desired. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of John Doyle Sent: Wednesday, March 29, 2006 11:25 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Hijack Notification Does anyone have a utility to email a notification when hijack holds an ip address permanently? Thanks in advance John --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack help
Hi Todd, Todd Richards wrote: I have adjusted the thresholds in the Hijack.cfg file (this is a common practice by our members-only clients) You can do anALLOWIPxxx.xxx.xxx.xxx and that ip will be whitelisted. but how do I release his IP address? well it used to be start/stop deccon.exe [I am still on 2x] - I suggest start/stop all the declude processes - Also, is there a way that I can release the messages that are in the hold rename them and put them back in the spool folder - again 2x instructions... -Nick folder? Thanks for any help. Todd __ Todd Richards National Network, Inc. [EMAIL PROTECTED] 402.778.7903 --- [This E-mail scanned for viruses by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack help
Thanks Nick. I did add the IP to allow. The process is now decludeproc, which did release the IP. I got a script from another list that did the renaming / moving and I am all set! Thanks! Todd -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Friday, March 03, 2006 8:52 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hijack help Hi Todd, Todd Richards wrote: I have adjusted the thresholds in the Hijack.cfg file (this is a common practice by our members-only clients) You can do anALLOWIPxxx.xxx.xxx.xxx and that ip will be whitelisted. but how do I release his IP address? well it used to be start/stop deccon.exe [I am still on 2x] - I suggest start/stop all the declude processes - Also, is there a way that I can release the messages that are in the hold rename them and put them back in the spool folder - again 2x instructions... -Nick folder? Thanks for any help. Todd __ Todd Richards National Network, Inc. [EMAIL PROTECTED] 402.778.7903 --- [This E-mail scanned for viruses by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude] --- [This E-mail scanned for viruses by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Hijack help
Hi Everyone - New to the list so I hope this is the appropriate place to send this. We upgraded our Junkmail contract on Monday, and with it we are now running Hijack. Tuesday, one of our clients sent out a mass mailing from his CMS, and HiJack did what it was supposed to and put a block on his IP address. I have adjusted the thresholds in the Hijack.cfg file (this is a common practice by our members-only clients) but how do I release his IP address? I see his IP listed in the console.txt file. Also, is there a way that I can release the messages that are in the hold folder? Thanks for any help. Todd __ Todd Richards National Network, Inc. [EMAIL PROTECTED] 402.778.7903 --- [This E-mail scanned for viruses by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack help
Todd, I have a script on my site that will handle the renaming of all of the files. The instructions are inside of the script if you open it with a text editor, but in essence, all you do is call it like so: C:\HijackReprocess.vbs IP=204.94.24.45 SF=D:\Spool\ You have to customize it for the IP encoded in the renamed files and the spool file location. It is hard coded to expect to see a directory called hold2 under the spool. I'm not sure if Declude has changed this, but that's an easy edit. http://www.mailpure.com/software/decludefilters/beta/ Matt Todd Richards wrote: Hi Everyone - New to the list so I hope this is the appropriate place to send this. We upgraded our Junkmail contract on Monday, and with it we are now running Hijack. Tuesday, one of our clients sent out a mass mailing from his CMS, and HiJack did what it was supposed to and put a block on his IP address. I have adjusted the thresholds in the Hijack.cfg file (this is a common practice by our members-only clients) but how do I release his IP address? I see his IP listed in the console.txt file. Also, is there a way that I can release the messages that are in the hold folder? Thanks for any help. Todd __ Todd Richards National Network, Inc. [EMAIL PROTECTED] 402.778.7903 --- [This E-mail scanned for viruses by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack help
Matt - Wonderful - it worked like a champ! Thank you so much for sharing this! Todd -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Thursday, March 02, 2006 6:54 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hijack help Todd, I have a script on my site that will handle the renaming of all of the files. The instructions are inside of the script if you open it with a text editor, but in essence, all you do is call it like so: C:\HijackReprocess.vbs IP=204.94.24.45 SF=D:\Spool\ You have to customize it for the IP encoded in the renamed files and the spool file location. It is hard coded to expect to see a directory called hold2 under the spool. I'm not sure if Declude has changed this, but that's an easy edit. http://www.mailpure.com/software/decludefilters/beta/ Matt Todd Richards wrote: Hi Everyone - New to the list so I hope this is the appropriate place to send this. We upgraded our Junkmail contract on Monday, and with it we are now running Hijack. Tuesday, one of our clients sent out a mass mailing from his CMS, and HiJack did what it was supposed to and put a block on his IP address. I have adjusted the thresholds in the Hijack.cfg file (this is a common practice by our members-only clients) but how do I release his IP address? I see his IP listed in the console.txt file. Also, is there a way that I can release the messages that are in the hold folder? Thanks for any help. Todd __ Todd Richards National Network, Inc. [EMAIL PROTECTED] 402.778.7903 --- [This E-mail scanned for viruses by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude] --- [This E-mail scanned for viruses by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack Help
Title: Message I had some mail stuck in HOLD2 that I want to let go..I copied it and put it into the spool on Saturday and it is still there...it has the IP it came from in front of the ID of the emailhow do I makethe systemsend out this email... Richard FarrisEthixs Online1.270.247. Office1.800.548.3877 Tech Support"Crossroads to a Cleaner Internet"
Re: [Declude.JunkMail] Hijack Help
Hi Richard, You need to rename the files removing the ip address - so each fire begins with its respective 'Q' or 'D' and put those renamed files in the spool dir. -Nick Richard Farris wrote: Message I had some mail stuck in HOLD2 that I want to let go..I copied it and put it into the spool on Saturday and it is still there...it has the IP it came from in front of the ID of the emailhow do I makethe systemsend out this email... Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support "Crossroads to a Cleaner Internet"
Re: [Declude.JunkMail] Hijack Help
Is there and easy way to do that...besides one at a time.. Richard FarrisEthixs Online1.270.247. Office1.800.548.3877 Tech Support"Crossroads to a Cleaner Internet" - Original Message - From: Nick Hayer To: Declude.JunkMail@declude.com Sent: Monday, October 31, 2005 7:45 AM Subject: Re: [Declude.JunkMail] Hijack Help Hi Richard,You need to rename the files removing the ip address - so each fire begins with its respective 'Q' or 'D' and put those renamed files in the spool dir.-NickRichard Farris wrote: I had some mail stuck in HOLD2 that I want to let go..I copied it and put it into the spool on Saturday and it is still there...it has the IP it came from in front of the ID of the emailhow do I makethe systemsend out this email... Richard FarrisEthixs Online1.270.247. Office1.800.548.3877 Tech Support"Crossroads to a Cleaner Internet"
RE: [Declude.JunkMail] Hijack Help
Yes, use a renamer application http://www.snapfiles.com/freeware/system/fwfilerename.html David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard FarrisSent: Monday, October 31, 2005 8:57 AMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Hijack Help Is there and easy way to do that...besides one at a time.. Richard FarrisEthixs Online1.270.247. Office1.800.548.3877 Tech Support"Crossroads to a Cleaner Internet" - Original Message - From: Nick Hayer To: Declude.JunkMail@declude.com Sent: Monday, October 31, 2005 7:45 AM Subject: Re: [Declude.JunkMail] Hijack Help Hi Richard,You need to rename the files removing the ip address - so each fire begins with its respective 'Q' or 'D' and put those renamed files in the spool dir.-NickRichard Farris wrote: I had some mail stuck in HOLD2 that I want to let go..I copied it and put it into the spool on Saturday and it is still there...it has the IP it came from in front of the ID of the emailhow do I makethe systemsend out this email... Richard FarrisEthixs Online1.270.247. Office1.800.548.3877 Tech Support"Crossroads to a Cleaner Internet"
Re: [Declude.JunkMail] Hijack Help
I use http://www.fauland.com/ 'rename your files' program. -Nick Richard Farris wrote: Is there and easy way to do that...besides one at a time.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support "Crossroads to a Cleaner Internet" - Original Message - From: Nick Hayer To: Declude.JunkMail@declude.com Sent: Monday, October 31, 2005 7:45 AM Subject: Re: [Declude.JunkMail] Hijack Help Hi Richard, You need to rename the files removing the ip address - so each fire begins with its respective 'Q' or 'D' and put those renamed files in the spool dir. -Nick Richard Farris wrote: I had some mail stuck in HOLD2 that I want to let go..I copied it and put it into the spool on Saturday and it is still there...it has the IP it came from in front of the ID of the emailhow do I makethe systemsend out this email... Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support "Crossroads to a Cleaner Internet"
Re: [Declude.JunkMail] Hijack Help
Thanxs, that just save me hours of work... Richard FarrisEthixs Online1.270.247. Office1.800.548.3877 Tech Support"Crossroads to a Cleaner Internet" - Original Message - From: David Barker To: Declude.JunkMail@declude.com Sent: Monday, October 31, 2005 7:58 AM Subject: RE: [Declude.JunkMail] Hijack Help Yes, use a renamer application http://www.snapfiles.com/freeware/system/fwfilerename.html David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard FarrisSent: Monday, October 31, 2005 8:57 AMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Hijack Help Is there and easy way to do that...besides one at a time.. Richard FarrisEthixs Online1.270.247. Office1.800.548.3877 Tech Support"Crossroads to a Cleaner Internet" - Original Message - From: Nick Hayer To: Declude.JunkMail@declude.com Sent: Monday, October 31, 2005 7:45 AM Subject: Re: [Declude.JunkMail] Hijack Help Hi Richard,You need to rename the files removing the ip address - so each fire begins with its respective 'Q' or 'D' and put those renamed files in the spool dir.-NickRichard Farris wrote: I had some mail stuck in HOLD2 that I want to let go..I copied it and put it into the spool on Saturday and it is still there...it has the IP it came from in front of the ID of the emailhow do I makethe systemsend out this email... Richard FarrisEthixs Online1.270.247. Office1.800.548.3877 Tech Support"Crossroads to a Cleaner Internet"
Re: [Declude.JunkMail] Hijack question
Thanks John! -Nick John T (Lists) wrote: A clarification on how to reset Hijack: For Declude versions 2.x and below, you need to end the Deccon.exe process. It is also best to do this with Imail SMTP and Queue Manager service stopped and no Declude.exe processes running to ensure that no process will try to call Deccon.exe during the time you are ending the process, as I have documented cases under load where ending the process from the Task Manager did not reset the count completely. This only occurs under load and accessing remotely. If you are at the console and close the Deccon.exe console window, it completely resets the counts. For Declude versions 3.x and above, you need to restart the Decludeproc service. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack question
Thanks. -d - Original Message - From: John T (Lists) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, October 13, 2005 1:41 AM Subject: RE: [Declude.JunkMail] Hijack question A clarification on how to reset Hijack: For Declude versions 2.x and below, you need to end the Deccon.exe process. It is also best to do this with Imail SMTP and Queue Manager service stopped and no Declude.exe processes running to ensure that no process will try to call Deccon.exe during the time you are ending the process, as I have documented cases under load where ending the process from the Task Manager did not reset the count completely. This only occurs under load and accessing remotely. If you are at the console and close the Deccon.exe console window, it completely resets the counts. For Declude versions 3.x and above, you need to restart the Decludeproc service. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Hijack question
Hi all, Running Declude version 1.82 with Hijack... One of my customers go caught by Hijack a couple of days ago as a result of some activity with mailing list software he was trying out. Needless to say, he now has a thorough understanding of our UCE policy. But ever since, everything he sends - even just a single message at a time - gets caught by Hijack and placed in Hold2. I recall that there was a second step after renaming the messages and putting them back into the queue, but it has been so long since I had an outgoing spam problem that I forget what that was. There doesn't seem to be a mention of it on the Declude website. Any help would be appreciated. DaveDoherty Skywaves, Inc. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack question
Dave, You need to stop/start deccon.exe That wil reset the counter so to speak. Question to Declude support - How does this work with Declude 3x? Thanks! -Nick Dave Doherty wrote: Hi all, Running Declude version 1.82 with Hijack... One of my customers go caught by Hijack a couple of days ago as a result of some activity with mailing list software he was trying out. Needless to say, he now has a thorough understanding of our UCE policy. But ever since, everything he sends - even just a single message at a time - gets caught by Hijack and placed in Hold2. I recall that there was a second step after renaming the messages and putting them back into the queue, but it has been so long since I had an outgoing spam problem that I forget what that was. There doesn't seem to be a mention of it on the Declude website. Any help would be appreciated. DaveDoherty Skywaves, Inc. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack question
That was it! The one thing I didn't try. (Of course!) -d - Original Message - From: Nick Hayer [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, October 12, 2005 12:52 PM Subject: Re: [Declude.JunkMail] Hijack question Dave, You need to stop/start deccon.exe That wil reset the counter so to speak. Question to Declude support - How does this work with Declude 3x? Thanks! -Nick Dave Doherty wrote: Hi all, Running Declude version 1.82 with Hijack... One of my customers go caught by Hijack a couple of days ago as a result of some activity with mailing list software he was trying out. Needless to say, he now has a thorough understanding of our UCE policy. But ever since, everything he sends - even just a single message at a time - gets caught by Hijack and placed in Hold2. I recall that there was a second step after renaming the messages and putting them back into the queue, but it has been so long since I had an outgoing spam problem that I forget what that was. There doesn't seem to be a mention of it on the Declude website. Any help would be appreciated. DaveDoherty Skywaves, Inc. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack question
Stop/restart the decludeproc service David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Wednesday, October 12, 2005 12:53 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hijack question Dave, You need to stop/start deccon.exe That wil reset the counter so to speak. Question to Declude support - How does this work with Declude 3x? Thanks! -Nick Dave Doherty wrote: Hi all, Running Declude version 1.82 with Hijack... One of my customers go caught by Hijack a couple of days ago as a result of some activity with mailing list software he was trying out. Needless to say, he now has a thorough understanding of our UCE policy. But ever since, everything he sends - even just a single message at a time - gets caught by Hijack and placed in Hold2. I recall that there was a second step after renaming the messages and putting them back into the queue, but it has been so long since I had an outgoing spam problem that I forget what that was. There doesn't seem to be a mention of it on the Declude website. Any help would be appreciated. DaveDoherty Skywaves, Inc. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack question
Thanks ! -Nick David Barker wrote: Stop/restart the decludeproc service David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick Hayer Sent: Wednesday, October 12, 2005 12:53 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hijack question Dave, You need to stop/start deccon.exe That wil reset the counter so to speak. Question to Declude support - How does this work with Declude 3x? Thanks! -Nick Dave Doherty wrote: Hi all, Running Declude version 1.82 with Hijack... One of my customers go caught by Hijack a couple of days ago as a result of some activity with mailing list software he was trying out. Needless to say, he now has a thorough understanding of our UCE policy. But ever since, everything he sends - even just a single message at a time - gets caught by Hijack and placed in Hold2. I recall that there was a second step after renaming the messages and putting them back into the queue, but it has been so long since I had an outgoing spam problem that I forget what that was. There doesn't seem to be a mention of it on the Declude website. Any help would be appreciated. DaveDoherty Skywaves, Inc. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack question
A clarification on how to reset Hijack: For Declude versions 2.x and below, you need to end the Deccon.exe process. It is also best to do this with Imail SMTP and Queue Manager service stopped and no Declude.exe processes running to ensure that no process will try to call Deccon.exe during the time you are ending the process, as I have documented cases under load where ending the process from the Task Manager did not reset the count completely. This only occurs under load and accessing remotely. If you are at the console and close the Deccon.exe console window, it completely resets the counts. For Declude versions 3.x and above, you need to restart the Decludeproc service. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HiJack Deccon in 3.0.5
Hi, Just upgraded to Declude version 3.0.5 today (from 1.8!) and I'm a little unsure of how to monitor HiJack. Can't get the deccon.exe to open although I know declude now runs as a service. Had a look at the HiJack manual but can't find anything and done a quick search in the archives too. What am I missing? Could anyone point me in the right direction? Thanks. Lyndon Eaton. Email checked by UKsubnet anti-virus service To prevent email abuse block spam contact [EMAIL PROTECTED] Tel: +44(0)9063407727 (calls cost £1.50/minute) Fax: +44(0)8712360300 Web: www.uksubnet.net Powered by UKsubnet Internet Service Provider Business to Business Internet (ISP) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HiJack Deccon in 3.0.5
My understanding is Deccon is no longer used. A new GUI is in the works. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Lyndon Eaton Sent: Tuesday, September 27, 2005 6:41 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] HiJack Deccon in 3.0.5 Hi, Just upgraded to Declude version 3.0.5 today (from 1.8!) and I'm a little unsure of how to monitor HiJack. Can't get the deccon.exe to open although I know declude now runs as a service. Had a look at the HiJack manual but can't find anything and done a quick search in the archives too. What am I missing? Could anyone point me in the right direction? Thanks. Lyndon Eaton. Email checked by UKsubnet anti-virus service To prevent email abuse block spam contact [EMAIL PROTECTED] Tel: +44(0)9063407727 (calls cost £1.50/minute) Fax: +44(0)8712360300 Web: www.uksubnet.net Powered by UKsubnet Internet Service Provider Business to Business Internet (ISP) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HiJack Deccon in 3.0.5
Sorry for the delay in posting, John is correct we are replacing the Console with new functionality. This is currently in design and we will update you just as soon as we have a clearer picture of the delivery date. Barry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, September 27, 2005 10:47 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] HiJack Deccon in 3.0.5 My understanding is Deccon is no longer used. A new GUI is in the works. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Lyndon Eaton Sent: Tuesday, September 27, 2005 6:41 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] HiJack Deccon in 3.0.5 Hi, Just upgraded to Declude version 3.0.5 today (from 1.8!) and I'm a little unsure of how to monitor HiJack. Can't get the deccon.exe to open although I know declude now runs as a service. Had a look at the HiJack manual but can't find anything and done a quick search in the archives too. What am I missing? Could anyone point me in the right direction? Thanks. Lyndon Eaton. Email checked by UKsubnet anti-virus service To prevent email abuse block spam contact [EMAIL PROTECTED] Tel: +44(0)9063407727 (calls cost £1.50/minute) Fax: +44(0)8712360300 Web: www.uksubnet.net Powered by UKsubnet Internet Service Provider Business to Business Internet (ISP) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HiJack Deccon in 3.0.5
OK thanks for confirming. Regards, Lyndon Eaton John is correct we are replacing the Console with new functionality. This is currently in design and we will update you just as soon as we have a clearer picture of the delivery date. Email checked by UKsubnet anti-virus service To prevent email abuse block spam contact [EMAIL PROTECTED] Tel: +44(0)9063407727 (calls cost £1.50/minute) Fax: +44(0)8712360300 Web: www.uksubnet.net Powered by UKsubnet Internet Service Provider Business to Business Internet (ISP) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack
IPB v4.0 will produce a report of nobody aliases on all of your domains. http://www.martekware.com/ipb Evans Martin -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Richard Farris Sent: Monday, August 29, 2005 10:46 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hijack Can you give me instructions on finding the nobody aliases.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Dave Doherty [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, August 27, 2005 9:10 AM Subject: Re: [Declude.JunkMail] Hijack Hi Richard- Hijack is for outbound mail from your IMail server. It prevents your users from sending too many outbound messages. It works really well for that, but I do not know of any function in Hijack that looks at inbound mail volume by IP. That is a very good idea, though! As for your server being overtaxed, the quickest fix may be to search for a delete nobody aliases, If you are under a dictionary attack, you may be asked Declude to process thousands of messages an hour, if not a minute! If you have a lot of domains and you are familiar with the Windows registry, you can find and delete nodoby aliases easily with a registry search. -Dave - Original Message - From: Richard Farris [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, August 27, 2005 6:40 AM Subject: [Declude.JunkMail] Hijack Can I use my Hijack to watch where email is coming from in real time and make adjustments to delete certain IPs if I see several being deleted from that IP...as long as I have checked out the IP first in arin.net...I want to delete the IP in Imail so the Declude don't have to look at itmy server is really being taxed at certain times of the day.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack
I also posted a VBS script a couple of months ago that could be easily modified to do this. It's in the archives. Darin. - Original Message - From: Evans Martin [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, August 31, 2005 9:05 PM Subject: RE: [Declude.JunkMail] Hijack IPB v4.0 will produce a report of nobody aliases on all of your domains. http://www.martekware.com/ipb Evans Martin -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Richard Farris Sent: Monday, August 29, 2005 10:46 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hijack Can you give me instructions on finding the nobody aliases.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Dave Doherty [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, August 27, 2005 9:10 AM Subject: Re: [Declude.JunkMail] Hijack Hi Richard- Hijack is for outbound mail from your IMail server. It prevents your users from sending too many outbound messages. It works really well for that, but I do not know of any function in Hijack that looks at inbound mail volume by IP. That is a very good idea, though! As for your server being overtaxed, the quickest fix may be to search for a delete nobody aliases, If you are under a dictionary attack, you may be asked Declude to process thousands of messages an hour, if not a minute! If you have a lot of domains and you are familiar with the Windows registry, you can find and delete nodoby aliases easily with a registry search. -Dave - Original Message - From: Richard Farris [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, August 27, 2005 6:40 AM Subject: [Declude.JunkMail] Hijack Can I use my Hijack to watch where email is coming from in real time and make adjustments to delete certain IPs if I see several being deleted from that IP...as long as I have checked out the IP first in arin.net...I want to delete the IP in Imail so the Declude don't have to look at itmy server is really being taxed at certain times of the day.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack
Can you give me instructions on finding the nobody aliases.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Dave Doherty [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, August 27, 2005 9:10 AM Subject: Re: [Declude.JunkMail] Hijack Hi Richard- Hijack is for outbound mail from your IMail server. It prevents your users from sending too many outbound messages. It works really well for that, but I do not know of any function in Hijack that looks at inbound mail volume by IP. That is a very good idea, though! As for your server being overtaxed, the quickest fix may be to search for a delete nobody aliases, If you are under a dictionary attack, you may be asked Declude to process thousands of messages an hour, if not a minute! If you have a lot of domains and you are familiar with the Windows registry, you can find and delete nodoby aliases easily with a registry search. -Dave - Original Message - From: Richard Farris [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, August 27, 2005 6:40 AM Subject: [Declude.JunkMail] Hijack Can I use my Hijack to watch where email is coming from in real time and make adjustments to delete certain IPs if I see several being deleted from that IP...as long as I have checked out the IP first in arin.net...I want to delete the IP in Imail so the Declude don't have to look at itmy server is really being taxed at certain times of the day.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack
Download IMailUsers.exe from the following site and run it on your server: http://www.smartbusiness.com/imail/ At the bottom of the list in the file that it generates will be all of the domains that have nobody aliases. They will all start with @, i.e. @example.com. Matt Richard Farris wrote: Can you give me instructions on finding the nobody aliases.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Dave Doherty [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, August 27, 2005 9:10 AM Subject: Re: [Declude.JunkMail] Hijack Hi Richard- Hijack is for outbound mail from your IMail server. It prevents your users from sending too many outbound messages. It works really well for that, but I do not know of any function in Hijack that looks at inbound mail volume by IP. That is a very good idea, though! As for your server being overtaxed, the quickest fix may be to search for a delete nobody aliases, If you are under a dictionary attack, you may be asked Declude to process thousands of messages an hour, if not a minute! If you have a lot of domains and you are familiar with the Windows registry, you can find and delete nodoby aliases easily with a registry search. -Dave - Original Message - From: Richard Farris [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, August 27, 2005 6:40 AM Subject: [Declude.JunkMail] Hijack Can I use my Hijack to watch where email is coming from in real time and make adjustments to delete certain IPs if I see several being deleted from that IP...as long as I have checked out the IP first in arin.net...I want to delete the IP in Imail so the Declude don't have to look at itmy server is really being taxed at certain times of the day.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack
Hi Richard- Do not attempt this unless you are familair with the registry, as you can screw up your machine beyond repair if you make a mistake. I have not used the tool Matt recommended. but it is certainly safer than working directly on the registry. Having said that, if you wish to proceed, and you already have some familiarity with the registry, open regedit, navigate to HKLM\SOFTWARE\Ipswitch\Imail\domains and search for nobody using the registry search tool. -Dave - Original Message - From: Richard Farris [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, August 29, 2005 11:45 AM Subject: Re: [Declude.JunkMail] Hijack Can you give me instructions on finding the nobody aliases.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Dave Doherty [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, August 27, 2005 9:10 AM Subject: Re: [Declude.JunkMail] Hijack Hi Richard- Hijack is for outbound mail from your IMail server. It prevents your users from sending too many outbound messages. It works really well for that, but I do not know of any function in Hijack that looks at inbound mail volume by IP. That is a very good idea, though! As for your server being overtaxed, the quickest fix may be to search for a delete nobody aliases, If you are under a dictionary attack, you may be asked Declude to process thousands of messages an hour, if not a minute! If you have a lot of domains and you are familiar with the Windows registry, you can find and delete nodoby aliases easily with a registry search. -Dave - Original Message - From: Richard Farris [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, August 27, 2005 6:40 AM Subject: [Declude.JunkMail] Hijack Can I use my Hijack to watch where email is coming from in real time and make adjustments to delete certain IPs if I see several being deleted from that IP...as long as I have checked out the IP first in arin.net...I want to delete the IP in Imail so the Declude don't have to look at itmy server is really being taxed at certain times of the day.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack
I can do that..thanxs a bunch.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Dave Doherty [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, August 29, 2005 12:48 PM Subject: Re: [Declude.JunkMail] Hijack Hi Richard- Do not attempt this unless you are familair with the registry, as you can screw up your machine beyond repair if you make a mistake. I have not used the tool Matt recommended. but it is certainly safer than working directly on the registry. Having said that, if you wish to proceed, and you already have some familiarity with the registry, open regedit, navigate to HKLM\SOFTWARE\Ipswitch\Imail\domains and search for nobody using the registry search tool. -Dave - Original Message - From: Richard Farris [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, August 29, 2005 11:45 AM Subject: Re: [Declude.JunkMail] Hijack Can you give me instructions on finding the nobody aliases.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Dave Doherty [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, August 27, 2005 9:10 AM Subject: Re: [Declude.JunkMail] Hijack Hi Richard- Hijack is for outbound mail from your IMail server. It prevents your users from sending too many outbound messages. It works really well for that, but I do not know of any function in Hijack that looks at inbound mail volume by IP. That is a very good idea, though! As for your server being overtaxed, the quickest fix may be to search for a delete nobody aliases, If you are under a dictionary attack, you may be asked Declude to process thousands of messages an hour, if not a minute! If you have a lot of domains and you are familiar with the Windows registry, you can find and delete nodoby aliases easily with a registry search. -Dave - Original Message - From: Richard Farris [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, August 27, 2005 6:40 AM Subject: [Declude.JunkMail] Hijack Can I use my Hijack to watch where email is coming from in real time and make adjustments to delete certain IPs if I see several being deleted from that IP...as long as I have checked out the IP first in arin.net...I want to delete the IP in Imail so the Declude don't have to look at itmy server is really being taxed at certain times of the day.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Hijack webmail
been having problems with some webmails not beiing delivered just noticed that hijack is holding many mails from 127.0.0.1 should we allow ip 127.0.0.1 so that webmail works correcly ?
Re: [Declude.JunkMail] Hijack webmail
Absolutely. Declude uses this IP when it has none to go by, and Webmail along with NDR's will appear this way. Matt Serge wrote: been having problems with some webmails not beiing delivered just noticed that hijack is holding many mails from 127.0.0.1 should we allow ip 127.0.0.1 so that webmail works correcly ?
Re: [Declude.JunkMail] Hijack webmail
Hi Serge- This has pros and cons. If you have a lot of legit volume through webmail, then you should increase your limits in Hijack. If that doesn't work for you, then perhaps you should allow the IP. I have it in my config file, but I generally keep it rem'd out because we get a relatively small volume of webmail outbound traffic. I "un-rem" it if I need to clear the outbound queue because of an unusual event. The problem with allowing the local address on a regular basisis that a user could log onto the webmail and hit it with a form submission bot, sending outbazillions of emails from your server. -Dave Doherty Skywaves, Inc. - Original Message - From: Serge To: Declude.JunkMail@declude.com Sent: Monday, August 29, 2005 10:09 PM Subject: [Declude.JunkMail] Hijack webmail been having problems with some webmails not beiing delivered just noticed that hijack is holding many mails from 127.0.0.1 should we allow ip 127.0.0.1 so that webmail works correcly ?
[Declude.JunkMail] Hijack
Can I use my Hijack to watch where email is coming from in real time and make adjustments to delete certain IPs if I see several being deleted from that IP...as long as I have checked out the IP first in arin.net...I want to delete the IP in Imail so the Declude don't have to look at itmy server is really being taxed at certain times of the day.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack
Hi Richard- Hijack is for outbound mail from your IMail server. It prevents your users from sending too many outbound messages. It works really well for that, but I do not know of any function in Hijack that looks at inbound mail volume by IP. That is a very good idea, though! As for your server being overtaxed, the quickest fix may be to search for a delete nobody aliases, If you are under a dictionary attack, you may be asked Declude to process thousands of messages an hour, if not a minute! If you have a lot of domains and you are familiar with the Windows registry, you can find and delete nodoby aliases easily with a registry search. -Dave - Original Message - From: Richard Farris [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, August 27, 2005 6:40 AM Subject: [Declude.JunkMail] Hijack Can I use my Hijack to watch where email is coming from in real time and make adjustments to delete certain IPs if I see several being deleted from that IP...as long as I have checked out the IP first in arin.net...I want to delete the IP in Imail so the Declude don't have to look at itmy server is really being taxed at certain times of the day.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Hijack helpful hint
I do not know why I never thought of this before, and if some one has posted it before I must have missed it. When legit messages end up being held in HOLD2, after removing the offensive files per your policy, move the D files back into the spool and move the Q file into the overflow folder. Declude will then process the files and call SMTP32 to deliver them. Of course, that is after renaming them. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Hijack Question
Does Hijack work with WHITELIST AUTH that Junkmail sees in allowing email to passthru? For example, one of our customers AUTH to our server via their account, it will then not be scanned by Junkmail nor Hijack? Thanks for the time. --- Keith Johnson Senior Network Engineer Network Advocates, Inc. 9001 Shelbyville Road Burhans Hall, Suite 260 Louisville, KY 40228 TEL: 502.992.5928 FAX: 502.412.1058 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack Question
Also, I see where Hijack requires Deccon.exe. We run Win2000 SP4 and terminal service into the server for remote admin. Does deccon.exe only run on the console session? I read that when the threshhold2 value is reached, deccon is opened and once it is closed the flag will be reset? However, using term services on Win2000 SP4 does not allow connection to the console. Thanks for the aid. Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Monday, October 25, 2004 2:51 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Hijack Question Does Hijack work with WHITELIST AUTH that Junkmail sees in allowing email to passthru? For example, one of our customers AUTH to our server via their account, it will then not be scanned by Junkmail nor Hijack? Thanks for the time. --- Keith Johnson Senior Network Engineer Network Advocates, Inc. 9001 Shelbyville Road Burhans Hall, Suite 260 Louisville, KY 40228 TEL: 502.992.5928 FAX: 502.412.1058 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack Question
Does Hijack work with WHITELIST AUTH that Junkmail sees in allowing email to passthru? No. The Declude products do not share configuration files. For example, one of our customers AUTH to our server via their account, it will then not be scanned by Junkmail nor Hijack? It will not be scanned by Declude JunkMail (if you use WHITELIST AUTH), but it will be scanned by Declude Hijack. One of the reasons for this is that many ISPs have spammers that create otherwise legitimate accounts, and spam from them. Another reason is that some spammers are trying to use SMTP AUTH with known E-mail addresses and common passwords. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack Question
I see where Hijack requires Deccon.exe. We run Win2000 SP4 and terminal service into the server for remote admin. Does deccon.exe only run on the console session? Yes, it does -- otherwise, it would not be able to keep track of data properly (since the user sessions normally only last as long as a user is online). I read that when the threshhold2 value is reached, deccon is opened and once it is closed the flag will be reset? Close. The window is opened as soon as an E-mail arrives. If you close the window, the flags will be reset, and the window will be opened when the next E-mail arrives. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack Question
I think when the Deccon window reopens depends on when all the SMTP processes have ended and started afresh. On my heavy-traffic server, Deccon won't reopen until all the SMTP processes have ended. What I do is close the Console, open Task Manager, pause SMTP, watch for all the declude.exe instances to disappear, then Stop and Restart SMTP. - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, October 25, 2004 2:24 PM Subject: RE: [Declude.JunkMail] Hijack Question I see where Hijack requires Deccon.exe. We run Win2000 SP4 and terminal service into the server for remote admin. Does deccon.exe only run on the console session? Yes, it does -- otherwise, it would not be able to keep track of data properly (since the user sessions normally only last as long as a user is online). I read that when the threshhold2 value is reached, deccon is opened and once it is closed the flag will be reset? Close. The window is opened as soon as an E-mail arrives. If you close the window, the flags will be reset, and the window will be opened when the next E-mail arrives. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hijack Question
Scott, (I apologize for the questions, just learning product, since no trial) With the below said, there is really no reason to login and close the deccon.exe via the Desktop unless there is an issue with it or something needs to be hard reset? Some of our customers have had DHA's lately and wanting to head this off, and Hijack seems like a good fit. What are most using as their Threshhold weights in an ISP type arena? Thanks again, Keith Close. The window is opened as soon as an E-mail arrives. If you close the window, the flags will be reset, and the window will be opened when the next E-mail arrive. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] HiJack
Now that I have HiJack, I found out yesterday when sending a mass email to all my customers that they were held...how do I take myself out of HiJack...just turn it off while I send out messages or is there another way.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] HiJack
On 28 Sep 2004 at 11:44, Richard Farris wrote: Hi Richard, You need to whitelist your ip, regretfully there is no way to config by domain - -Nick Now that I have HiJack, I found out yesterday when sending a mass email to all my customers that they were held...how do I take myself out of HiJack...just turn it off while I send out messages or is there another way.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HiJack
In the hijack.cfg file add: # An ALLOWIP line will let an IP address send unlimited E-mail. ALLOWIP x.x.x.x -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Farris Sent: Tuesday, September 28, 2004 11:45 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] HiJack Now that I have HiJack, I found out yesterday when sending a mass email to all my customers that they were held...how do I take myself out of HiJack...just turn it off while I send out messages or is there another way.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] HiJack
The current version of HiJack supports 'whitelisting' by sending address in hijack.cfg. ALLOWADDR [EMAIL PROTECTED] - Original Message - From: Mike Wiegers [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, September 28, 2004 11:57 AM Subject: RE: [Declude.JunkMail] HiJack In the hijack.cfg file add: # An ALLOWIP line will let an IP address send unlimited E-mail. ALLOWIP x.x.x.x -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Farris Sent: Tuesday, September 28, 2004 11:45 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] HiJack Now that I have HiJack, I found out yesterday when sending a mass email to all my customers that they were held...how do I take myself out of HiJack...just turn it off while I send out messages or is there another way.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] HiJack
Scott - wow. Now when did that occur? I see no reference of this anywhere. Are there any other switches? Thanks -Nick Hayer On 28 Sep 2004 at 14:37, Glenn \ WCNet wrote: The current version of HiJack supports 'whitelisting' by sending address in hijack.cfg. ALLOWADDR [EMAIL PROTECTED] - Original Message - From: Mike Wiegers [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, September 28, 2004 11:57 AM Subject: RE: [Declude.JunkMail] HiJack In the hijack.cfg file add: # An ALLOWIP line will let an IP address send unlimited E-mail. ALLOWIP x.x.x.x -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Farris Sent: Tuesday, September 28, 2004 11:45 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] HiJack Now that I have HiJack, I found out yesterday when sending a mass email to all my customers that they were held...how do I take myself out of HiJack...just turn it off while I send out messages or is there another way.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] HiJack
On 28 Sep 2004 at 16:15, R. Scott Perry wrote: That was added to v1.69, per http://www.declude.com/relnotes.htm . Thanks. It may make a nice addition to the manual as well. :) -Nick -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack Question
We currently have 6 versions of Declude (3 Servers with Junkmail and Virus), can I run a Hijack demo on each of the servers? If so, what is the term of the demo? Thanks for the aid. Unfortunately, we do not have a demo version of Declude Hijack. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Hijack Question
We currently have 6 versions of Declude (3 Servers with Junkmail and Virus), can I run a Hijack demo on each of the servers? If so, what is the term of the demo? Thanks for the aid. Keith Nf_ ynub! 0u%dj)\jgr[xf)+-Nrz;uj)l^r[yjwmmr[x8^j!qy.i0f+r
[Declude.JunkMail] Hijack Not working on internal customers
I have had a continuing problem with Hijack. I have several business customers with 25 plus work stations, these customers are getting caught in hijack on outgoing mails. I have added ALLOWIP entries for all the customers with no success. It seems as though declude reads hijack cfg for a certain number of ALLOWIP entries then gives up on the last few entries. I am using 1.75 with IMail 7.15. Any suggestions? -jeff --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack Not working on internal customers
On 22 Jun 2004 at 7:07, Jeffrey M Donley wrote: Hi Jeff, So in your hijack.cfg file you have ALLOWIP xxx.xxx.xxx.xxx and in the HOLDx dir hijack is retaining emails from the allowip addresses? If that is the case I suggest stopping and restarting declude console to reset hijack; if that doesn't help review your hijack logs and email Scott... -Nick Hayer I have had a continuing problem with Hijack. I have several business customers with 25 plus work stations, these customers are getting caught in hijack on outgoing mails. I have added ALLOWIP entries for all the customers with no success. It seems as though declude reads hijack cfg for a certain number of ALLOWIP entries then gives up on the last few entries. I am using 1.75 with IMail 7.15. Any suggestions? -jeff --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack Not working on internal customers
I have had a continuing problem with Hijack. I have several business customers with 25 plus work stations, these customers are getting caught in hijack on outgoing mails. I have added ALLOWIP entries for all the customers with no success. It seems as though declude reads hijack cfg for a certain number of ALLOWIP entries then gives up on the last few entries. I am using 1.75 with IMail 7.15. Any suggestions? v1.75 only allows you to have a maximum of 20 ALLOWIP lines -- if you upgrade to the latest beta, it allows you to have up to 100. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack question
Hi, Is it possible to get Hijack to run after DJMP? This would help me to better manage my backup mailserver - The only way to do that would be if you are also running Declude Virus, you could use the AVAFTERJM ON option to force Declude Virus to run after Declude JunkMail, which also forces Declude Hijack to run last (since Declude Hijack always runs after Declude Virus). Wasn't there something about *no virusscanning* if a held e-mail was returned to the queue using this option? Groetjes, Bonno Bloksma Back up my hard drive? How do I put it in reverse? --- [E-mail scanned at tio.nl for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack question
Is it possible to get Hijack to run after DJMP? This would help me to better manage my backup mailserver - The only way to do that would be if you are also running Declude Virus, you could use the AVAFTERJM ON option to force Declude Virus to run after Declude JunkMail, which also forces Declude Hijack to run last (since Declude Hijack always runs after Declude Virus). Wasn't there something about *no virusscanning* if a held e-mail was returned to the queue using this option? In the past, that was the case. However, Declude Virus will now always run before Declude Hijack, so this is not an issue anymore. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack question
Hi, Is it possible to get Hijack to run after DJMP? This would help me to better manage my backup mailserver - The only way to do that would be if you are also running Declude Virus, you could use the AVAFTERJM ON option to force Declude Virus to run after Declude JunkMail, which also forces Declude Hijack to run last (since Declude Hijack always runs after Declude Virus). Wasn't there something about *no virusscanning* if a held e-mail was returned to the queue using this option? In the past, that was the case. However, Declude Virus will now always run before Declude Hijack, so this is not an issue anymore. Eventhough the poster was talking about HiJack, I forgot to mention I was asking about JunkMail. When using this option will a message held by Junkmail and returned to the queue ever be scannen for virusses? I remember reading JM would move it to the hold before VIR could scan it for virusses. When later returning it to the queue it would never be scanned again, nor for JM nor for virusses. Groetjes, Bonno Bloksma --- [E-mail scanned at tio.nl for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack question
Eventhough the poster was talking about HiJack, I forgot to mention I was asking about JunkMail. When using this option will a message held by Junkmail and returned to the queue ever be scannen for virusses? I remember reading JM would move it to the hold before VIR could scan it for virusses. When later returning it to the queue it would never be scanned again, nor for JM nor for virusses. That is the main drawback to the AVAFTERJM ON option -- E-mails that are held by Declude JunkMail and returned to the queue will not be scanned for viruses. But you really should only be returning held E-mails to the queue if they are E-mails that are desired (that do not contain viruses). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack question
Scott - Is it possible to get Hijack to run after DJMP? This would help me to better manage my backup mailserver - Thanks -Nick Hayer --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack question
Is it possible to get Hijack to run after DJMP? This would help me to better manage my backup mailserver - The only way to do that would be if you are also running Declude Virus, you could use the AVAFTERJM ON option to force Declude Virus to run after Declude JunkMail, which also forces Declude Hijack to run last (since Declude Hijack always runs after Declude Virus). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack question
On 17 Jun 2004 at 17:47, R. Scott Perry wrote: Perfect. Thanks! -Nick Is it possible to get Hijack to run after DJMP? This would help me to better manage my backup mailserver - The only way to do that would be if you are also running Declude Virus, you could use the AVAFTERJM ON option to force Declude Virus to run after Declude JunkMail, which also forces Declude Hijack to run last (since Declude Hijack always runs after Declude Virus). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack OT Windows IP question
Scott, I have a colo that I gateway to. The colo box is Windows 2000 running Exchange ; Hijack monitors his traffic which runs on my server. All had been fine now however they are running on their server a moderated list(s). List software is SVList. The largest list has ~ 300 members. So when the list sends out Hijack will hold the email. Hijack settings are : RELAYTHRESHOLD1 10 20 RELAYTHRESHOLD2 30 80 So now I have whitelisted their ip [ALLOWIP setting] to allow everything to function. Is there *any* way to allow a different HIJACK setting based on IP and or MAILFROM? [ A colos email traffic - since we are looking at all the traffic from a mailserver from a particular ip - is different than monitoring ip's from individual users. The MAILFROM piece would work well here since I could WHITELIST the list] Any thoughts on how I can make this work without whitelisting? I also have DJMPro. OT Question: SVList does not have a setting to work off a particular IP. Is there a way to make an IP on a windows box 'primary' or 'default' in the sense programs such as SVList will *always* use it? If so this would solve my problem Thanks as always -Nick Hayer --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hijack OT Windows IP question
Is there *any* way to allow a different HIJACK setting based on IP and or MAILFROM? No. It's either unlimited E-mail, or the standard settings. Any thoughts on how I can make this work without whitelisting? I also have DJMPro. The only other option I can think of would be to increase the standard settings to a high enough value that their E-mail can get through. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Hijack ALLOWIP
I have recently added an IP in the hijack.cfg file. Mail that comes from this IP still is counted and sent to the hold2 directory. I am running 1.75 with Imail 7.15. Any suggestions? -j --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
