Declude 4.10.42
I've been experimenting with Hijack, and I found a bug.
"hijack.cfg" with
RELAYTHRESHOLD1 10 30
RELAYTHRESHOLD2 30 200
I send an email to an external mail account at 10:15.
I check "console.txt" at 10:16 and I see my IP with "relayed 1 E-mail" and
1:00 minutes.
I send a mail to another external email account at 10:23.
I check "console.txt" at 10:24 and I see my IP with "relayed 2 E-mails" and
9:00 minutes.
I check "console.txt" at 10:26 and I don't see my IP.
I really should see my IP with "relayed 1 E-mail" and 3:00 minutes.
Is the problem of how to display the data console.txt?
The problem is that "hijack" do not save a list of the IP, timestamp, and
number of recipients in order to calculate these values correctly?
Another question:
What is the significance of the number that sometimes appears between the IP
and the word "relayed" in "console.txt?
Thank you.
Ruben Marti.
----- Original Message -----
From: Mon Mariola - Rubén
To: declude.junkmail@declude.com
Sent: Wednesday, January 13, 2010 6:37 PM
Subject: Re: [Declude.JunkMail] Declude Hijack
Sorry, another question:
Is there any problem with incoming and outgoing emails if I restart
decludeproc?
What problems can I find if I restart decludeproc?
I worry about this.
Thank you.
Ruben Marti.
----- Original Message -----
From: David Barker
To: declude.junkmail@declude.com
Sent: Wednesday, January 13, 2010 4:50 PM
Subject: RE: [Declude.JunkMail] Declude Hijack
You cannot unblock a single IP. Restarting the decludeproc will reset
the counter.
David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
dbar...@declude.com
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Mon
Mariola - Rubén
Sent: Wednesday, January 13, 2010 10:45 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Declude Hijack
How do I unblock an IP that is banned for exceeding the 2nd threshold?
Thank you.
Ruben Marti.
----- Original Message -----
From: David Barker
To: declude.junkmail@declude.com
Sent: Wednesday, January 13, 2010 3:27 PM
Subject: RE: [Declude.JunkMail] Declude Hijack
Hijack is the solution to your problem. As we count the number of
emails
from a specific IP or address with the latest release. When the hold2
threshold is reached these messages are quarantined, regardless of
whether
they are whitelisted or authenticated.
We will be updating the Hijack manual with this latest release of
4.10.42
The console is no longer used as this information has been replaced by
the
\Declude\console.txt file. The ALLOWIP and ALLOWADDR are used if you
want to
exempt users or IP's from triggering hijack.
David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
dbar...@declude.com
-----Original Message-----
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of
Mon
Mariola - Rubén
Sent: Tuesday, January 12, 2010 9:42 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Declude Hijack
Some time ago I'm declude user, initially with imail and in recent
years
with SmarterMail. Now with SmarterMail 5.5 and Declude 4.10.42.
Now I have a problem not solved. Some adware, or viruses, steal the
account
settings of outlook express to my customers. So my server sends mail
without
checking because they are authenticated. Every time this happens I
have to
block the email account of my client, I contact him to remove the
adware
from your computer and when I confirmed that your computer is
disinfected to
reactivate your account. This is being increasingly common and this
week has
come to me SenderBase rate of poor reputation.
Does anyone else have this problem? How do you solve?
I have tried using Declude Hijack, but I can not figure out how to
unblock
an IP that is blocked for exceeding the limit 2.
From Hijack manual:
"Since the spammer has passed the 2nd threshold, he is banned, and all
his
Email gets held permanently in \ spool \ spam \ HOLD2. He will only be
able
to send mail again if the Declude Console is closed ... In which case
he
will get banned again as soon as he passed the 2nd threshold again. "
What is "Declude Console"?
Declude Hijack seems like a good option in theory but in my case I
have
clients that send emails via Outlook Express and CCO. I think I can
solve
this problem by creating a list of users to avoid them with ALLOWIP or
ALLOWADDR.
Thank you.
Ruben Marti.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
