Apparently I was too quick on the draw as this line has since been added to
the diag file:
04/16/2013 22:24:21.947[BB86F9-606322-C04138-958B5A-AB7343-94F75B]
IS INVALID KEY
Did someone say something about new keys?
-Original Message-
From: SM Admin
Sent: Tuesday, April 16, 2013
Use this key: CODE 28607230-BF21-4CDE-A59B-A451CC7C9CA0
-Message d'origine-
De : SM Admin [mailto:imailad...@bcwebhost.net]
Envoyé : 17 avril, 2013 2:43
À : Declude.JunkMail@declude.com
Objet : Re: [Declude.JunkMail] No one at Declude?
Apparently I was too quick on the draw as this
Is there a current sample global.cfg available? I haven't looked through
mine in awhile and I may have some outdated RBLs, etc. Would like to see
the current sample just to get an idea of what may have changed.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe,
Todd
It appears that there is no one at Declude
The server that handles this apparently is down and has been for a week
or so.
Go to mail list archive using the link below
Go to the spam version of declude and sort the messages by date
Go back a week or so and read the threads
There is some
Hi John -
Thanks - I actually talked with Linda on Monday afternoon and she got me set
back up with a working installation of Declude.
What about you?
Todd
__
Todd Richards
Director of Technology
National Network, LLC.
Email: to...@nnepa.com
Toll
Just my 2c - users do not need to abandon the Declude product. Declude still
has tremendous value, hijack, routing email, rules etc all you need is a way
to keep Declude running and support which MBF can help you do.
The solution to this tragedy is Declude+Message Sniffer.
David Barker
Thanks David for the vote of confidence. Who do we contact at Declude for
customer support? They seem to be radio silent for now - at least on this list.
Thank you
-Nick
MadRiverAccess.com|Skywaves.net Tech Support
US/Canada 877-873-6482 or International +1-802-229-6574
Emergency Support
There is no-one at Declude, not one person involved in operations. No
engineers, no sales people, no support people no management nothing. The
company right now simply exists as an entity.
The only help you are going to get from MBF.
David
From: Nick Hayer
Ours went down as well this morning. Declude stopped processing with a
licensing error.
I have left several phone messages.
Todd
From: Nick Hayer n...@madriveraccess.com
Sent: Wednesday, April 17, 2013 10:47 AM
To: Declude.JunkMail@declude.com
Well the only thing that has not gone away is this list for some reason.
Even the site went dark for awhile. Why have the the site up, phones on,
list work but kill the license server?David - do you have any insight?
Thank you
-Nick
MadRiverAccess.com|Skywaves.net Tech Support
US/Canada
There are a lot of new spam nets that have just been turned up over the past
few days. Volumes more than doubled for us, with a lot slipping through.
We’ve added quite a few class Cs to our firewall blocks this week as we see
new ones light up that are entirely owned by a spammer. That’s helped
We run an older Declude perpetual license, so we weren’t affected by this
issue, and don’t use Postini, so it’s just the new spam nets over the past
week or so that have affected us.
Darin.
From: Katie La Salle-Lowery
Sent: Wednesday, April 17, 2013 12:56 PM
To: Declude.JunkMail@declude.com
On 2013-04-17 13:06, Katie La
Salle-Lowery wrote:
X-MessageSniffer-Rules:
20-0-0--1-f
Message Sniffer tagged this message with a truncate result.
Result code 20.
Normally we recommend that a Truncate result
In short. That is the reason.
From: Nick Hayer [mailto:n...@madriveraccess.com]
Sent: Wednesday, April 17, 2013 12:23 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] No one at Declude?
There is no-one at Declude, not one person involved in operations. No
engineers, no
I do know. Let me put it this way, it is up not for the benefit of customers.
From: Nick Hayer [mailto:n...@madriveraccess.com]
Sent: Wednesday, April 17, 2013 12:43 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] No one at Declude?
Well the only thing that has not gone
1. Makes sure that SNF is OFF in the \Diags.txt
2. These are my suggested values (please note that you path if
copy/paste) also NONZERO weight can be 20 or 25. Also if you want to break out
the NONZERO codes that is fine too.
SNIFFER external
On 2013-04-17 13:36, David Barker
wrote:
SNIFFER
external NONZERO
"C:\Smartermail\Declude\SNF\SNFClient.exe"
20 0
SNIFFER-CAUTION
On 2013-04-17 13:43, Katie La
Salle-Lowery wrote:
Just
to be clear – 020 should be the truncate and 040 the caution
(opposite of below) according to what Pete sent (http://www.armresearch.com/support/articles/software/snfServer/core.jsp),
right?
For IMail that was true, but I switched to SM last fall and that no longer
appears to be the case. There is no license code in my declude.cfg file and
the cod line says SmarterMail can removed this line.
Ben
-Original Message-
From: Randy Armbrecht
Sent: Wednesday, April 17, 2013 10:43
Why the negative weight on Caution? What’s the logic behind that?
Thanks,
Ben
From: Pete McNeil
Sent: Wednesday, April 17, 2013 10:47 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] No one at Declude?
On 2013-04-17 13:36, David Barker wrote:
SNIFFER
On 2013-04-17 13:52, SM Admin wrote:
Why the negative weight on Caution? What’s the logic behind that?
The Caution result is based on a special case with a small amount of
information:
Sniffer is saying: This IP is new, and the first message or two that it
sent was spam. The current message
Sorry for the confusion: This is the correct VERSION. Please update your
Sniffer Configs. (Sorry I missed this lack of sleep trying to keep everyone
afloat) I am going to post this same information to the MBF Message List.
SNIFFER external NONZERO
FYI... I spot-checked some of the domains involved in what we were seeing.
Many were two or three years old, so the new domain test would not work on
them.
On the report, there are log parsers that will do that for you, including
Grep and Sawmill. We don’t use those, but import our logs into SQL
It seems clear at this point that the failure of Declude's licensing
system is causing widespread havoc for their customers, and they are not
responding to support issues, or any issues at all, and that they are in
fact out of business. Therefore I am going to share the key that allows
Declude to
Hi Darin,
I don't have stats but in manual checks it seems to be about 50% of my spam.
stepvalve.net
Creation date: 16 Apr 2013 16:13:00
Expiration date: 16 Apr 2014 08:13:00
kunstkennis.com
Updated Date: 17-apr-2013
Creation Date: 16-apr-2013
shoputc.com
Creation date: 16 Apr 2013 19:24:13
So what needs to be done with ClamAV?
-Original Message-
From: Matt
Sent: Wednesday, April 17, 2013 11:24 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] ***DECLUDE NO-AUTHENTICATION KEY***
It seems clear at this point that the failure of Declude's licensing
system is
Pete,
Is the data in truncate.gbudb.net duplicated in Sniffer?
Thank you
-Nick
MadRiverAccess.com|Skywaves.net Tech Support
US/Canada 877-873-6482 or International +1-802-229-6574
Emergency Support 24/7: supp...@skywaves.net
General and Non-Emergency support ticket:
Matt
I've been told if you have sniffer running and you block SNF RETURN CODE
049 AND 055 you block most virus's.
I ended up putting different weights for the return codes years ago.
I score them high enough to delete on weight only and as well delete on
the names
Here is my setup from global
On 2013-04-17 15:20, Nick Hayer wrote:
Is the data in truncate.gbudb.net duplicated in Sniffer?
No.
Each SNF node has it's own view of the world.
The truncate bl has an aggregate view from all SNF nodes.
That means that it's good to use truncate
I'm going to share some old information from 2009 that I put together
for integrating ClamAV. Note that I cannot confirm at this moment
whether these directions are perfectly accurate for the most recent code
available, so please update this if you find issues. _Please also pay
close attention to
Phew - thanks for posting this.
This WAS scary. Within a few minutes I had hundreds of spam emails in my
inbox... Stopped the SMTP service and Queue service. This CODE did seem to help!
-Original Message-
From: Stephan Chayer [mailto:scha...@intrasoft.net]
Sent: Wednesday, April 17,
Uh - but with that code, the internal SNF is turned off?
So one has to configure Sniffer has an external test with a separate Sniffer
license code?
-Original Message-
From: Stephan Chayer [mailto:scha...@intrasoft.net]
Sent: Wednesday, April 17, 2013 5:37 AM
To:
Yes Internal Sniffer is no longer a valid option. Need to switch to external.
-Original Message-
From: Andy Schmidt [mailto:andy_schm...@hm-software.com]
Sent: Thursday, April 18, 2013 12:06 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] No one at Declude?
Uh - but
So - is there any advantage of using the hosts file trick (to invalidate the
license server IP address) http://mailsbestfriend.com/declude-fix
vs. using the special bypass license code?
Does one enable more functions that the other?
-Original Message-
From: David Barker
If internal SNF is still ON then it can conflict with external Message Sniffer
by grabbing the port which SNF uses. By using our fix will ensure internal SNF
is turned OFF. If using the bypass key has everything OFF then that is fine too.
-Original Message-
From: Andy Schmidt
Thanks David,
So, OTHER than Sniffer, any OTHER advantages of using the HOSTS trick vs. the
Bypass key?
-Original Message-
From: David Barker [mailto:david.bar...@mailsbestfriend.com]
Sent: Thursday, April 18, 2013 1:09 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
36 matches
Mail list logo
