RE: [Declude.JunkMail] [IMail Forum] odd behavior
As AUTOWHITELIST ON is in your global.cfg is it possible that ameripride.org is in an address book ? David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Doug Anderson Sent: Thursday, February 24, 2005 4:13 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] [IMail Forum] odd behavior That's the thing, I have one white list file (hate whitelists) and ameripride is not in it Did anything change in declude junkmail lately in reguards to whitelists (I just upgrade 2 nights ago)? All I have for references to whitelist are : $default.junkmail WHITELISTFILE D:\Imail\Declude\AWHITELST.txt #note AWhitelst.txt does not include ameripride.org Global.cfg CODE LOGFILE d:\declude\logfiles\dec.log LOGLEVELLOW HOP 0 HIDETESTS CATCHALLMAILS IPNOTINMX NOLEGITCONTENT XINHEADER X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. XINHEADER X-Spam-Tests-Failed: %TESTSFAILED% [%WEIGHT%] XINHEADER X-Country-Chain: %COUNTRYCHAIN% XOUTHEADER X-Note: E-mail scanned by Declude-JunkMail for spam by CRC. XSENDER ON XSPOOLNAME ON XINHEADER X-Note: This E-mail was sent from %REVDNS% ([%REMOTEIP%]). PREWHITELIST ON AUTOWHITELIST ON WHITELIST AUTH . . WHITELIST IP 192.168.0.182 WHITELIST IP 192.168.0.85 WHITELIST IP 192.168.0.86 #Servers on local network (not exposed to public) that send emails (status reports) - Original Message - From: E. Shanbrom (Ipswitch) mailto:[EMAIL PROTECTED] To: IMail_Forum@list.ipswitch.com Sent: Thursday, February 24, 2005 2:48 PM Subject: Re: [IMail Forum] odd behavior Says ameripride.org is on the whitelist (decludes not IMail's) Eric S - Original Message - From: Doug Anderson mailto:[EMAIL PROTECTED] To: IMail_Forum@list.ipswitch.com Sent: Thursday, February 24, 2005 3:03 PM Subject: Re: [IMail Forum] odd behavior Trying to figure out why it's white listed. 02:22 07:40 SMTPD(3664039604421990) [192.168.0.135] connect 221.127.179.32 port 1194 02:22 07:41 SMTPD(3664039604421990) [221.127.179.32] HELO 67.130.17.126 02:22 07:41 SMTPD(3664039604421990) [221.127.179.32] MAIL FROM: [EMAIL PROTECTED] 02:22 07:41 SMTPD(3664039604421990) [221.127.179.32] RCPT TO: [EMAIL PROTECTED] 02:22 07:41 SMTPD(3664039604421990) [221.127.179.32] RCPT TO: [EMAIL PROTECTED] 02:22 07:41 SMTPD(3664039604421990) [221.127.179.32] RCPT TO: [EMAIL PROTECTED] 02:22 07:41 SMTPD(3664039604421990) [221.127.179.32] d:\IMail\spool\D3664039604421990.SMD 201 02:22 07:41 SMTP-(3664039604421990) processing d:\IMail\spool\Q3664039604421990.SMD 02:22 07:41 SMTPD(3664039604421990) [ameripride.org] in white list 02/22/2005 07:41:11 Q3664039604421990 Scanned: Virus Free 02/22/2005 07:41:14 Q3664039604421990 L1 Message OK 02/22/2005 07:41:14 Q3664039604421990 Tests failed [weight=25]: BADHEADERS=WARN CMDSPACE=WARN IPNOTINMX=IGNORE NOLEGITCONTENT=IGNORE REVDNS=WARN TLD=WARN COUNTRY=WARN WEIGHT10PLUS=SUBJECT CATCHALLMAILS=IGNORE 02/22/2005 07:41:14 Q3664039604421990 L2 Message OK 02/22/2005 07:41:14 Q3664039604421990 Tests failed [weight=25]: BADHEADERS=WARN CMDSPACE=WARN IPNOTINMX=IGNORE NOLEGITCONTENT=IGNORE REVDNS=WARN TLD=WARN COUNTRY=WARN WEIGHT10PLUS=SUBJECT CATCHALLMAILS=IGNORE 02/22/2005 07:41:14 Q3664039604421990 Skipping4 E-mail from [EMAIL PROTECTED]; whitelisted [EMAIL PROTECTED] 02/22/2005 07:41:14 Q3664039604421990 Skipping4 E-mail from [EMAIL PROTECTED]; whitelisted [EMAIL PROTECTED] 02/22/2005 07:41:14 Q3664039604421990 L3 Message OK 02/22/2005 07:41:14 Q3664039604421990 Tests failed [weight=0]: CATCHALLMAILS=IGNORE 02:22 07:41 SMTP-(3664039604421990) ldeliver mail.ameripride.org maria.snyder-main (1) [EMAIL PROTECTED] 972 02:22 07:41 SMTP-(3664039604421990) ldeliver mail.ameripride.org reggie.licari-main (1) [EMAIL PROTECTED] 972 02:22 07:41 SMTP-(3664039604421990) ldeliver mail.ameripride.org richard.boudreau-main (1) [EMAIL PROTECTED] 972 02:22 07:41 SMTP-(3664039604421990) finished d:\IMail\spool\Q3664039604421990.SMD status=1 - Original Message - From: Travis Rabe mailto:[EMAIL PROTECTED] To: IMail_Forum@list.ipswitch.com Sent: Thursday, February 24, 2005 1:09 PM Subject: RE: [IMail Forum] odd behavior What
RE: [Declude.JunkMail] Body filter adding extra 10 points
Goran, 1. Do you have a copy of the actual email header ? 2. Is this Qbca31d68008ed51d the only test that failed ? David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, February 25, 2005 10:44 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Body filter adding extra 10 points Hi, I am seeing very strange behaviour with one of my body filters. These are the only three entries with STRICTLY CONFIDENTIAL: BODY2 CONTAINSSTRICTLY CONFIDENTIAL BODY20 CONTAINSSTRICTLY CONFIDENTIAL URGENT BODY20 CONTAINSSTRICTLY CONFIDENTIAL BUSINESS PROPOSAL From the Declude Log: 02/16/2005 16:36:04 Qbca31d68008ed51d Triggered BODY CONTAINS filter FILTER-NIGERIAN-SCAM on STRICTLY CONFIDENTIAL [weight-12; strictly confidential to you a]. And the actual message text which is a plain text message: I would appreciate your keeping the fact of this meeting strictly confidential to you alone. So the question is how did an extra 10 points get added to this? Declude 1.82 on IMail. Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1007 (20050223) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Body filter adding extra 10 points
Can you post the line in your global.cfg file FILTER-NIGERIAN-SCAM I am guessing you may have an extra 10 point being added there that should not be. Lets have a look. Thanks David www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, February 25, 2005 11:20 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Body filter adding extra 10 points David, 4 e-mails with the same text failed. This is what came back to me as part of the SpamAttach.eml file. Do you need anything else? Subject:RE: Governance Working Group Call To: [EMAIL PROTECTED], [EMAIL PROTECTED] From: [EMAIL PROTECTED] Date: 16 Feb 2005 at 17:25:07 Tests Failed: IPNOTINMX [0], REVDNS [4], SIZE-S [0], FILTER-NIGERIAN-SCAM [12], FILTER-PORN [12] Weight: 23 Spool File: Dc8371a990086d99d.SMD To view the E-mail, just click the attachment. Headers: Received: from xxx.xxx.ca [xxx.xxx.xxx.xx] by mail1.gonetworks.net with ESMTP (SMTPD32-8.13) id A8381A990086; Wed, 16 Feb 2005 17:24:56 -0500 Received: by TQSEMAIL with Internet Mail Service (5.5.2657.72) id XVPK2RLX; Wed, 16 Feb 2005 17:28:57 -0500 Message-ID: [EMAIL PROTECTED] From: Michel J. Carter [EMAIL PROTECTED] To: 'Douglas Barrett' [EMAIL PROTECTED], + another dozen TOs Cc: to 2 CC Subject: RE: Governance Working Group Call Date: Wed, 16 Feb 2005 17:28:46 -0500 X-MS-TNEF-Correlator: [EMAIL PROTECTED] MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2657.72) Content-Type: multipart/mixed; boundary=_=_NextPart_000_01C51476.DB426E2C Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, February 25, 2005 10:59 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Body filter adding extra 10 points Goran, 1. Do you have a copy of the actual email header ? 2. Is this Qbca31d68008ed51d the only test that failed ? David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, February 25, 2005 10:44 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Body filter adding extra 10 points Hi, I am seeing very strange behaviour with one of my body filters. These are the only three entries with STRICTLY CONFIDENTIAL: BODY 2 CONTAINSSTRICTLY CONFIDENTIAL BODY 20 CONTAINSSTRICTLY CONFIDENTIAL URGENT BODY 20 CONTAINSSTRICTLY CONFIDENTIAL BUSINESS PROPOSAL From the Declude Log: 02/16/2005 16:36:04 Qbca31d68008ed51d Triggered BODY CONTAINS filter FILTER-NIGERIAN-SCAM on STRICTLY CONFIDENTIAL [weight-12; strictly confidential to you a]. And the actual message text which is a plain text message: I would appreciate your keeping the fact of this meeting strictly confidential to you alone. So the question is how did an extra 10 points get added to this? Declude 1.82 on IMail. Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1007 (20050223) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1007 (20050223) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Errors in virus log
1. In the delcude folder if you are not running Hijackrename the file hijack.cfg to hijack.bak 2. Open your global.cfg comment out the line CONSOLE ON David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff FrantzSent: Friday, February 25, 2005 11:09 AMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] Errors in virus log Im using Declude v2.05 on Imail 8.15. I see the below error for each message in the virus log. 02/25/2005 11:05:26 Q4cb81c81018c9f59 Couldn't find console; starting... (2). 02/25/2005 11:05:26 Q4cb81c81018c9f59 Error starting deccon.exe: 2 02/25/2005 11:05:28 Q4cb81c81018c9f59 Scanned: Virus Free [MIME: 1 3353] 02/25/2005 11:05:40 Q4ccd1c84018c9f5b Couldn't find console; starting... (2). 02/25/2005 11:05:40 Q4ccd1c84018c9f5b Error starting deccon.exe: 2 02/25/2005 11:05:40 Q4ccd1c84018c9f5b MIME file: [text/html][quoted-printable; Length=1139 Checksum=93723] 02/25/2005 11:05:41 Q4ccd1c84018c9f5b Scanned: Virus Free [MIME: 2 1708] 02/25/2005 11:05:52 Q4ca001d002309f4d Couldn't find console; starting... (2). 02/25/2005 11:05:52 Q4ca001d002309f4d Error starting deccon.exe: 2 02/25/2005 11:05:52 Q4ca001d002309f4d MIME file: [text/HTML][*DEFAULT*; Length=26995 Checksum=2039562] 02/25/2005 11:05:52 Q4ca001d002309f4d MIME file: [EMAIL PROTECTED] [base64; Length=26139 Checksum=3515058] 02/25/2005 11:05:53 Q4ca001d002309f4d Scanned: Virus Free [MIME: 3 57993] 02/25/2005 11:06:57 Q4d21207b018a9f70 Couldn't find console; starting... (2). 02/25/2005 11:06:57 Q4d21207b018a9f70 Error starting deccon.exe: 2 02/25/2005 11:06:57 Q4d21207b018a9f70 MIME file: [message/disposition-notification][7bit; Length=174 Checksum=18255] 02/25/2005 11:06:58 Q4d21207b018a9f70 Scanned: Virus Free [MIME: 2 531] What do the messages Couldnt find console and Error starting deccon.exe mean? I was seeing the same errors with Declude v1.82 so I upgraded to v2.05 this morning to see if they would go away. Thanks! -Jeff__ NOD32 1.1007 (20050223) Information __This message was checked by NOD32 antivirus system.http://www.nod32.com
Re: [Declude.JunkMail] casino spam
Kyle, When willyou stop signing up for those gambling sites, you know you can't win? :) No reported increase on our side. David B www.declude.com - Original Message - From: Kyle Fisher To: Declude.JunkMail@declude.com Sent: Friday, February 25, 2005 5:40 PM Subject: [Declude.JunkMail] casino spam Has anyone noticed in the past week an increase in casino, or party poker, etc.. spam? Kyle
Re: [Declude.JunkMail] casino spam
Which can under certain circumstances be correct. If you had signed up with the websitethen declude is correct in identifying them as legitimate email. It is possible we could set up some additional filters to help with a specific type of Spam. David B www.declude.com - Original Message - From: Kyle Fisher To: Declude.JunkMail@declude.com Sent: Friday, February 25, 2005 6:00 PM Subject: RE: [Declude.JunkMail] casino spam Whats funny is I did sign up for an account a couple of weeks ago and I still havent won. I did it for the free set of poker chips. Thats what I figured. Its strange everything will be going fine for a few weeks then for some reason we get a small flood of something. Like casino. What I hate is that these messages getting through fail sniffer but thats it no other tests. Kyle From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David BarkerSent: Friday, February 25, 2005 4:51 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] casino spam Kyle, When willyou stop signing up for those gambling sites, you know you can't win? :) No reported increase on our side. David B www.declude.com - Original Message - From: Kyle Fisher To: Declude.JunkMail@declude.com Sent: Friday, February 25, 2005 5:40 PM Subject: [Declude.JunkMail] casino spam Has anyone noticed in the past week an increase in casino, or party poker, etc.. spam? Kyle
RE: [Declude.JunkMail] Junkmail Syntax
Kyle, From the system documentation written by Scott Perry. IGNORE This action does not do anything (aside from log that the E-mail failed the test). Same as the LOG action. LOG This action does not do anything (aside from log that the E-mail failed the test). Same as the IGNORE action. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Monday, February 28, 2005 4:00 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Junkmail Syntax In the Junkmail file you have DELETE, HOLD, WARN, IGNORE. What does IGNORE actually do? Kyle __ NOD32 1.1011 (20050228) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Is declude.com down?
Yes Declude is down. We are aware of the problem and working to resolve this. We will be back up asap. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hirthe, Alexander Sent: Thursday, March 03, 2005 11:45 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Is declude.com down? yes for me. 63.246.13.88 -Original Message- From: Che Vilnonis [mailto:[EMAIL PROTECTED] Sent: Thursday, March 03, 2005 5:24 PM To: Declude Email List Subject: [Declude.JunkMail] Is declude.com down? anyone? Che Vilnonis Application Developer Advertising Systems Incorporated 8470C Remington Avenue Pennsauken, NJ 08110 p: 856.488.2211 f: 856.488.1990 www.asitv.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1017 (20050302) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Clock Time on Declude Support
Thank you for your feedback. Ihave fixed
it.Friday night 10:30 pm. What we do too please our customers ;) As for
the website it is my responsibility and not that of our programmers, so you can
be confident that this does not reflect our programmers skills.
David B
www.declude.com
- Original Message -
From:
Dave Doherty
To: Declude.JunkMail@declude.com
Sent: Friday, March 04, 2005 8:53
PM
Subject: Re: [Declude.JunkMail] OT: Clock
Time on Declude Support
Actually, it shows -4 hours.
GMTas I write thisis 01:46
The code they use on the pagesubtracts five hours, which results in a
value of -4 for the hours. They need to add a line to add 24 if the result is
negative. I'm sure it looks fine 19
hours a day, though...
And no, it does not giveme a lot
of confidence, either, but now that we've aired the problem and the cure,
let's see how long it takes to fix...
-d
SCRIPTfunction tick()
{var hours, minutes, seconds, ap;var intHours, intMinutes,
intSeconds;var today;today = new Date();intHours =
today.getUTCHours()-5;intMinutes =
today.getUTCMinutes();intSeconds = today.getUTCSeconds();
//add
this:
if (intHours
0) {
intHours +=
24
}
if (intHours == 0) {
hours = "12:";
ap = "EST Midnight";} else if
(intHours 12) {hours = intHours+":";ap = " AM EST is the current
time for Declude Support Personnel";} else if (intHours == 12) {hours
= "12:";ap = "EST Noon";} else {intHours = intHours - 12hours
= intHours + ":";ap = "PM EST is the current time for Declude Support
Personnel";}if (intMinutes 10) {minutes =
"0"+intMinutes+":";} else {minutes = intMinutes+":";}if
(intSeconds 10) {seconds = "0"+intSeconds+" ";} else {seconds
= intSeconds+" ";}timeString =
hours+minutes+seconds+ap;Clock.innerHTML =
timeString;window.setTimeout("tick();", 100);}window.>/SCRIPT
- Original Message -
From: "Erik" [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Friday, March 04, 2005 8:25
PM
Subject: [Declude.JunkMail] OT: Clock
Time on Declude Support
Is just my browser, or is Declude's clock
on:https://www.declude.com/SearchResults.asp?Cat=5Off? In CET (Central European Time) of
2:15AM, their clock shows 4:15AM ESTwhen it should be showing 9:15PM
EST..hope this doesn't reflect in their 2.0 programming
code. ;-)---[This E-mail was scanned for viruses
by Declude Virus (http://www.declude.com)]---This E-mail came from the
Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to
[EMAIL PROTECTED],
andtype "unsubscribe Declude.JunkMail". The archives can be
foundat http://www.mail-archive.com.
No virus found in this incoming message.Checked by AVG
Anti-Virus.Version: 7.0.308 / Virus Database: 266.5.7 - Release Date:
3/1/2005
Re: [Declude.JunkMail] OT: Clock Time on Declude Support
Darin,
Check now - is that better? I noticed the flicker
seemed to only occur in FireFox not IE.
David B
www.declude.com
- Original Message -
From:
Darin Cox
To: Declude.JunkMail@declude.com
Sent: Saturday, March 05, 2005 12:20
AM
Subject: Re: [Declude.JunkMail] OT: Clock
Time on Declude Support
FYI...your clock script flickers
needlessly... Instead of refreshing every 1/10 of a second, you might
want to change the following line in your clock script
window.setTimeout("tick();", 100);
Torefresh every second...
window.setTimeout("tick();", 1000);
or even strip off the seconds and just display
minutes.
Many web developers put this in for the "cool"
factor, or because they can, butseconds provide little value in this
case.
Darin.
- Original Message -
From: David Barker
To: Declude.JunkMail@declude.com
Sent: Friday, March 04, 2005 10:33 PM
Subject: Re: [Declude.JunkMail] OT: Clock Time on Declude
Support
Thank you for your feedback. Ihave fixed
it.Friday night 10:30 pm. What we do too please our customers ;) As for
the website it is my responsibility and not that of our programmers, so you
can be confident that this does not reflect our programmers
skills.
David B
www.declude.com
- Original Message -
From:
Dave Doherty
To: Declude.JunkMail@declude.com
Sent: Friday, March 04, 2005 8:53
PM
Subject: Re: [Declude.JunkMail] OT:
Clock Time on Declude Support
Actually, it shows -4 hours.
GMTas I write thisis
01:46 The code they use on the pagesubtracts five hours, which results
in a value of -4 for the hours. They need to add a line to add 24 if the
result is negative. I'm sure it
looks fine 19 hours a day, though...
And no, it does not giveme a
lot of confidence, either, but now that we've aired the problem and the
cure, let's see how long it takes to fix...
-d
SCRIPTfunction tick()
{var hours, minutes, seconds, ap;var intHours, intMinutes,
intSeconds;var today;today = new Date();intHours =
today.getUTCHours()-5;intMinutes =
today.getUTCMinutes();intSeconds = today.getUTCSeconds();
//add
this:
if (intHours
0) {
intHours +=
24
}
if (intHours == 0) {
hours = "12:";
ap = "EST Midnight";} else if
(intHours 12) {hours = intHours+":";ap = " AM EST is the
current time for Declude Support Personnel";} else if (intHours == 12)
{hours = "12:";ap = "EST Noon";} else {intHours = intHours -
12hours = intHours + ":";ap = "PM EST is the current time for
Declude Support Personnel";}if (intMinutes 10) {minutes =
"0"+intMinutes+":";} else {minutes = intMinutes+":";}if
(intSeconds 10) {seconds = "0"+intSeconds+" ";} else
{seconds = intSeconds+" ";}timeString =
hours+minutes+seconds+ap;Clock.innerHTML =
timeString;window.setTimeout("tick();", 100);}window.>/SCRIPT
- Original Message -
From: "Erik" [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Friday, March 04, 2005 8:25
PM
Subject: [Declude.JunkMail] OT: Clock
Time on Declude Support
Is just my browser, or is Declude's clock
on:https://www.declude.com/SearchResults.asp?Cat=5Off? In CET (Central European Time) of
2:15AM, their clock shows 4:15AM ESTwhen it should be showing 9:15PM
EST..hope this doesn't reflect in their 2.0 programming
code. ;-)---[This E-mail was scanned for
viruses by Declude Virus (http://www.declude.com)]---This E-mail came from the
Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail
to [EMAIL PROTECTED],
andtype "unsubscribe Declude.JunkMail". The archives can be
foundat http://www.mail-archive.com.
No virus found in this incoming message.Checked by AVG
Anti-Virus.Version: 7.0.308 / Virus Database: 266.5.7 - Release Date:
3/1/2005
No virus found in this incoming message.Checked by AVG
Anti-Virus.Version: 7.0.308 / Virus Database: 266.5.7 - Release Date:
3/1/2005
RE: [Declude.JunkMail] Any word on the 2.06 release?
Maybe you missed the post that was made a few days ago. There have been a number of posts on the JunkMail list regarding the DELETE issue and a fix is currently being tested both internally and externally. Subject to receiving a green light from our external testers and no new issues arising we anticipate delivering a release (2.0.6) shortly. The changes to 2.0.5 are still currently being tested. We want to ensure clear communication with our customers. Do you have specific questions to which we have not responded? David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Brumm Sent: Wednesday, March 16, 2005 2:29 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Any word on the 2.06 release? It's starting to look like things are going downhill since Scott left. I don't remember ever having to wait this long for a issue to be resolved. I don't feel comfortable with v2.xx until these issues are addressed. I hope they get things togetherthis was always a very responsive company in the past. Gary At 11:06 AM 3/16/2005, you wrote: Me either Declude has been pretty silent with a lack of communication in all areas. -Original Message- From: [EMAIL PROTECTED] [ mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] ] On Behalf Of Darin Cox Sent: Wednesday, March 16, 2005 5:17 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Any word on the 2.06 release? I haven't heard anything in the past couple of weeks about the fixes to 2.05 that were being worked on...still waiting to see the fixes before upgrading from 1.82. Darin. ComsecNet Dedicated Data Services Stockton, CA Phone:(209) 463-2809 Fax:(209) 938-0481 Email: [EMAIL PROTECTED] Web: www.comsec.net http://www.comsec.net/ This message is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error please destroy this message and notify the sender by reply email. __ NOD32 1.1027 (20050316) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Any word on the 2.06 release?
Target release date for 2.0.6 - 28 March 04 List of known issues which have been addressed ACTIONS Incorrectly run against the copyall account Overflow system for SmarterMail as in IMail COPYFILE action issue with SmarterMail Delete action clarified and enhanced We are currently working on all outstanding high priority issues. If there are any other known issue's please let us know. List of enhancements Enhanced Logging on actions Enhanced option for Hold Action High Level Declude Settings File declude.cfg added Several new directives New tools for tech support to help with trouble shooting When we release 2.0.6 there will be release notes explaining these in more detail. We will be posting information to a new Development forum which we have setup at http://www.declude.com/forum where we will communicate ongoing development activity in particular development cycle. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Wednesday, March 16, 2005 3:31 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Any word on the 2.06 release? Didn't miss it...it's just been a while since that was posted. Is there a target date for 2.06? I've asked for a list of known issues with 2.05 previously, with no answer. Also wanted to know if all known issues were being addressed in 2.06. Darin. - Original Message - From: David Barker [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, March 16, 2005 2:44 PM Subject: RE: [Declude.JunkMail] Any word on the 2.06 release? Maybe you missed the post that was made a few days ago. There have been a number of posts on the JunkMail list regarding the DELETE issue and a fix is currently being tested both internally and externally. Subject to receiving a green light from our external testers and no new issues arising we anticipate delivering a release (2.0.6) shortly. The changes to 2.0.5 are still currently being tested. We want to ensure clear communication with our customers. Do you have specific questions to which we have not responded? David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Brumm Sent: Wednesday, March 16, 2005 2:29 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Any word on the 2.06 release? It's starting to look like things are going downhill since Scott left. I don't remember ever having to wait this long for a issue to be resolved. I don't feel comfortable with v2.xx until these issues are addressed. I hope they get things togetherthis was always a very responsive company in the past. Gary At 11:06 AM 3/16/2005, you wrote: Me either Declude has been pretty silent with a lack of communication in all areas. -Original Message- From: [EMAIL PROTECTED] [ mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] ] On Behalf Of Darin Cox Sent: Wednesday, March 16, 2005 5:17 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Any word on the 2.06 release? I haven't heard anything in the past couple of weeks about the fixes to 2.05 that were being worked on...still waiting to see the fixes before upgrading from 1.82. Darin. ComsecNet Dedicated Data Services Stockton, CA Phone:(209) 463-2809 Fax:(209) 938-0481 Email: [EMAIL PROTECTED] Web: www.comsec.net http://www.comsec.net/ This message is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error please destroy this message and notify the sender by reply email. __ NOD32 1.1027 (20050316) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
RE: [Declude.JunkMail] Any word on the 2.06 release?
Yes I did mean 28 March 05 but considering most people need things yesterday I guess you could say that was appropriate :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Thursday, March 17, 2005 11:07 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Any word on the 2.06 release? Target release date for 2.0.6 - 28 March 04 David B www.declude.com I take it you mean 28 March 05? ;) John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1027 (20050316) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Off Topic.
Fred, There are quite a few out there I have heard that http://www.hostingaccelerator.com/ is pretty good. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frederick Samarelli Sent: Friday, March 18, 2005 11:24 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Off Topic. I am looking for recommendations of software that allows users to manage there own web domain. We host websites for many people and we are looking to give them more control. Some sort of Portal/Control Panel. We are a windows shop. Thanks. Fred Samarelli --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1028 (20050318) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] filter files
Joe here is a very basic filter but hopefully will help get you started: SKIPIFWEIGHT 16 MINWEIGHTTOFAIL 3 MAXWEIGHT 12 #Subject SUBJECT 3 CONTAINS Online Pharmacy #Words BODY 5 CONTAINS Meds BODY 2 CONTAINS cheap Perscriptions BODY 2 CONTAINS No prescription required BODY 2 CONTAINS No Doctor Visits #Medication BODY 2 CONTAINS codiene BODY 2 CONTAINS Codeine BODY 2 CONTAINS vicodin BODY 2 CONTAINS viagra BODY 2 CONTAINS Cialis #URBL BODY 12 CONTAINS fopq.org BODY 12 CONTAINS awayhowbad.com BODY 12 CONTAINS royalmeds.info BODY 12 CONTAINS uncompromisingmind.com BODY 12 CONTAINS simply-meds.com BODY 12 CONTAINS ritheworldofall.com BODY 12 CONTAINS medberthgood.com #Spam Indicators BODY 12 CONTAINS Cia|is BODY 12 CONTAINS Cialls Here are some good links too: http://www.mailpure.com/software/decludefilters/ http://it.farmprogress.com/declude/declude.htm http://www.declude.com/Articles.asp?ID=100 David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Raykiewicz Sent: Monday, March 21, 2005 3:44 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] filter files I am currently thinking about using a filter file to filter out some unwanted messages. Does anyone have some sample filter files that I could use as a starting point? I sure would appreciate some help getting started on this. Joe __ NOD32 1.1030 (20050319) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] filter files
Joe, Sniffer well definitely add a lot of value to scanning content. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Raykiewicz Sent: Monday, March 21, 2005 8:54 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] filter files Thanks to both of you. I am looking to get mostly obscene stuff, but the medical stuff would be very good to catch also. I will start with this and then adventure out on my own:D On a side note has anyone used Message Sniffer, and would it help with this type of stuff or am i looking in the wrong direction? Thanks again, Joe -- Original Message -- From: David Barker [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Mon, 21 Mar 2005 16:04:55 -0500 Joe here is a very basic filter but hopefully will help get you started: SKIPIFWEIGHT 16 MINWEIGHTTOFAIL 3 MAXWEIGHT 12 #Subject SUBJECT 3 CONTAINS Online Pharmacy #Words BODY 5 CONTAINS Meds BODY 2 CONTAINS cheap Perscriptions BODY 2 CONTAINS No prescription required BODY 2 CONTAINS No Doctor Visits #Medication BODY 2 CONTAINS codiene BODY 2 CONTAINS Codeine BODY 2 CONTAINS vicodin BODY 2 CONTAINS viagra BODY 2 CONTAINS Cialis #URBL BODY 12 CONTAINS fopq.org BODY 12 CONTAINS awayhowbad.com BODY 12 CONTAINS royalmeds.info BODY 12 CONTAINS uncompromisingmind.com BODY 12 CONTAINS simply-meds.com BODY 12 CONTAINS ritheworldofall.com BODY 12 CONTAINS medberthgood.com #Spam Indicators BODY 12 CONTAINS Cia|is BODY 12 CONTAINS Cialls Here are some good links too: http://www.mailpure.com/software/decludefilters/ http://it.farmprogress.com/declude/declude.htm http://www.declude.com/Articles.asp?ID=100 David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Raykiewicz Sent: Monday, March 21, 2005 3:44 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] filter files I am currently thinking about using a filter file to filter out some unwanted messages. Does anyone have some sample filter files that I could use as a starting point? I sure would appreciate some help getting started on this. Joe __ NOD32 1.1030 (20050319) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ___ Webmail delivered by Microlandcomputers.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1031 (20050321) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelisting our Domain
It depends on the reason for using WHITELIST AUTH if it is because outgoing mail is being marked as spam or held you can look at the settings and ACTIONS in global.cfg also you could try adding the following line to your global.cfg WHITELIST FROM @yourdomain.com Where yourdomain is actually the name of your domain David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Monday, April 04, 2005 11:03 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Whitelisting our Domain Oops.. not that I know of. I believe it wasn't until V8 that IMail passed the info to Junkmail. Your best bet may be IP whitelists (negative weighting, really) using the ipfile test. Darin. - Original Message - From: [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, April 04, 2005 10:43 AM Subject: Re: [Declude.JunkMail] Whitelisting our Domain I'm using IMail 7.14 and I noticted that in the Declude help page that WHITELIST AUTH only works with V8 and above? Is there any way to do this with V7.14? Yes. If all users send through your server, then use SMTP AUTH on all clients and configure Junkmail to whitelist AUTHing users. If not, but all mail comes in from static IPs, you could use an IP whitelist to bypass for those IPs. Darin. - Original Message - From: Kevin Stanford [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, April 04, 2005 10:25 AM Subject: [Declude.JunkMail] Whitelisting our Domain If we whitelist our domain will Spam that spoofs our email addresses and domain also be whitelisted? If so, how can I circumvent it? Thanks, Kevin --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1044 (20050402) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Mailbox stats
You could look at DLAnalyzer which provides an easy way to generate comprehensive reports on Declude Virus and Junkmail. http://www.invariantsystems.com/dlanalyzer/ David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Friday, April 08, 2005 9:10 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Mailbox stats Does anyone have any simple software to analyze the imail logs and for a domain give stats one number of mails in and out and a list of where mails are coming from and going to?. I have a customer asking for these kind of stats and I suspect there is something out there. Would rather not spend a lot of time and effort to achieve it however. Thanks Harry Vanderzand inTown Internet Computer Services --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1049 (20050406) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DYNHELO Test
Any feedback on these tests and performance will be appreciated here is some info on these tests. BCC bcc 10 x 5 0 This test type, checks to see if there are more than X known BCC:'s for this E-mail (where X is the first test-type-specific piece of information set to 10 in this example). It simply goes through each recipient, and checks to see if the E-mail contains the E-mail address of the recipient. The first piece of test-type-specific information is the minimum number of BCC:'s required in order for the E-mail to fail the test. DYNHELO dynhelo x x 5 0 This test type, attempts to detect dynamic IPs in HELO/EHLO hostnames. This test should be quite effective, since mailservers on IPs that have dynamic-like reverse DNS entries will *not* normally send an HELO/EHLO that looks dynamic. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, April 12, 2005 1:12 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] DYNHELO Test Is anyone using the DYNHELO test in Declude - if so do you have any information on it? What specifically is it looking for? False positive rate?I found it in the new global.cfg file, but did not see any references to it in the manual. Also, for the BCC test any thoughts on what the sweet spot tends to be - by default it comes at 10. Has anyone tweaked this? Darrell -- Try invURIBL - an advanced URI filtering test that will block more than 85% of all SPAM with the default configuration? Try it for free http://www.invariantsystems.com/invuribl/default.htm --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1058 (20050412) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude
If you are forwarding mail to another server in other words using Declude for OUTBOUND scanning the Actions are defined in the global.cfg also consider it will be using the xoutheaders in your global.cfg. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of A. Clausen Sent: Tuesday, April 12, 2005 1:15 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude Alright, I've run a few tests, and much of it seems to be working. However, when I look at the headers, it says X-Note: This E-mail was scanned by Declude JunkMail for spam. but I'm not seeing X-Spam-Tests-Failed or any of the other headers. I do have a directory set up in the declude directory with a $default$.junkmail file, but I'm fairly certain that Declude is not using that file at all, and is likely defaulting to the global.cfg settings. -- A. Clausen --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1058 (20050412) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DYNHELO Test
Yes, I agree, I thought I would post it anyway as he had said he could not find any info of these tests in the manual. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Sent: Tuesday, April 12, 2005 1:22 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test On 12 Apr 2005 at 13:16, David Barker wrote: Hi David, BCC bcc 10 x 5 0 This test type, checks to see if there are more than X known BCC:'s I think Darrell's question was related to optimum setting rather than functionality. -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1058 (20050412) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] DYNHELO Test
That is correct, these two tests were among several tests added to the global.cfg file, as they were documented by Scott, however they are not available in the current declude.exe as we move forward with adding additional tests these will very likely be activated in future releases. David B www.declude.com - Original Message - From: Colbeck, Andrew [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, April 12, 2005 5:50 PM Subject: RE: [Declude.JunkMail] DYNHELO Test From my own experimentation, I'd say that as of today in v2.0.6 DYNHELO is definitely working. IPURL and ENCODEDURL are definitely not working. The two URL based tests only show up in Debug mode as *not* being triggered. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Tuesday, April 12, 2005 2:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test Is it available now? Is it working in 2.0.6? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Tuesday, April 12, 2005 5:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test Probably meant not available (at the time). Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Tuesday, April 12, 2005 05:09 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DYNHELO Test Why is IPURL listed as Currently N/A ? Not Applicable? To what? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Something new with v 2.0.6
Title: Message Fredrick, But with these there are no spaces in the x line: but with this one X-Spam-Tests-Failed-Weight: there is a space. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frederick SamarelliSent: Wednesday, April 13, 2005 4:28 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Something new with v 2.0.6 Good Thought but I have these others without problem. Thanks. XINHEADER X-Note: Total spam weight of this E-mail is %WEIGHT%.XINHEADERX-RBL-Warning: Total weight: %WEIGHT%XINHEADERX-Note: This E-mail was scanned filtered by TCB [%VERSION%] for SPAM virus.XINHEADERX-Note: Sent from: %MAILFROM%XINHEADERX-Note: Sent from Reverse DNS: %REVDNS% ([%REMOTEIP%])XINHEADERX-Note: Recipient(s): %REALRECIPS%- Original Message - From: Andy Schmidt To: Declude.JunkMail@declude.com Sent: Wednesday, April 13, 2005 4:02 PM Subject: RE: [Declude.JunkMail] Something new with v 2.0.6 Hi Frederick: I don't know if this has been asked/suggested already and I don't have time to go back to the RFCs to see if embedded spaces are permitted in the header name. But have you ever tried eliminating that space: XINHEADERX-Spam-Tests-Failed Weight: %TESTSFAILEDWITHWEIGHTS% replace with: XINHEADERX-Spam-Tests-Failed-Weight: %TESTSFAILEDWITHWEIGHTS% May be the problem is that there is a CR/LF followed by a line that contains no header name(due to the embedded space) following by another CR/LF. May be those two CR/LF without valid header information inbetween are interpreted as "start of message body" by some entities? Best RegardsAndy SchmidtPhone: +1 201 934-3414 x20 (Business)Fax: +1 201 934-9206 -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frederick SamarelliSent: Wednesday, April 13, 2005 03:42 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Something new with v 2.0.6 Mike/Matt (thanks for your help) You should be able to duplicated by just forwarding an email to an outside account using the problem line at the bottom. As not to confuse things I simplified the process. Send an email from [EMAIL PROTECTED]= [EMAIL PROTECTED](forwarded to) = [EMAIL PROTECTED] This run through only one server on my network. Header from My AOL account. Return-Path: [EMAIL PROTECTED]Received: from rly-xm04.mx.aol.com (rly-xm04.mail.aol.com [172.20.83.105]) by air-xm03.mail.aol.com (v105.26) with ESMTP id MAILINXM31-606425d743d132; Wed, 13 Apr 2005 15:34:25 -0400Received: from bks.tcbinc.com (bks.tcbinc.com [64.124.117.196]) by rly-xm04.mx.aol.com (v105.26) with ESMTP id MAILRELAYINXM42-606425d743d132; Wed, 13 Apr 2005 15:34:21 -0400Received: from SMTP32-FWD by bks.tcbinc.com (SMTP32) id A741100040470EC67; Wed, 13 Apr 2005 15:33:42 Received: from web51806.mail.yahoo.com [206.190.38.237] by bks.tcbinc.com (SMTPD32-8.15) id A41140470; Wed, 13 Apr 2005 15:33:37 -0400Received: (qmail 50369 invoked by uid 60001); 13 Apr 2005 19:34:12 -Comment: DomainKeys? See http://antispam.yahoo.com/domainkeysDomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; b=M12dWrk8x99pS4FhLTVJbfbgIc60YrjkjS/Vi2yiCoare5X2fk5F+zDzAA2XuOKAyAuKoj3EEGBHc6gPlwybZ/TMSShXoJtIypUpKUZZrm7SoU0rx30hedmPe9IecDArBynamRJFf8HjmCsGFKGIwJhKUjwV4wNnw1wLdarF7SE= ;Message-ID: [EMAIL PROTECTED]Received: from [64.124.117.139] by web51806.mail.yahoo.com via HTTP; Wed, 13 Apr 2005 12:34:12 PDTDate: Wed, 13 Apr 2005 12:34:12 -0700 (PDT)From: Frederick Samarelli [EMAIL PROTECTED]Subject: test10To: [EMAIL PROTECTED]MIME-Version: 1.0Content-Type: text/plain; charset=us-asciiX-RBL-Warning: SNIFFERZERO: Message failed SNIFFERZERO: 0.X-Declude-Sender: [EMAIL PROTECTED] [206.190.38.237]X-Declude-Spoolname: D741100040470EC67.SMDX-Note: Total spam weight of this E-mail is 0.X-RBL-Warning: Total weight: 0X-Note: This E-mail was scanned filtered by TCB [2.0.6] for SPAM virus.X-Spam-Tests-Failed: SNIFFERZERO Message Body (should only be the word test10) X-Spam-Tests-Failed Weight: SNIFFERZERO [0]X-Spam-Time:15:33:42X-Weight: 0X-Mailfrom: samarelli.yahoo.comX-Note: Sent from: [EMAIL PROTECTED]X-Note: Sent from Reverse DNS: web51806.mail.yahoo.com ([206.190.38.237])X-Hello: web51806.mail.yahoo.comX-Note: Recipient(s): [EMAIL PROTECTED]X-Country-Chain: UNITED STATES-destinationX-AOL-IP: 64.124.117.196X-AOL-SCOLL-SCORE:0:0:0:X-AOL-SCOLL-URL_COUNT:0test10 Culprit: XINHEADERX-Spam-Tests-Failed Weight: %TESTSFAILEDWITHWEIGHTS%__ NOD32 1.1059 (20050412) Information __This message was checked by NOD32 antivirus
RE: [Declude.JunkMail] Could not move spam to hold! error since 2.0.6?
In your $default$.junkmail where you have a HOLD as an Action try putting a %DATE% after eg: WEIGHT20HOLD %DATE% David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Ryan Sent: Monday, April 18, 2005 11:57 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Could not move spam to hold! error since 2.0.6? Hi all, Running Declude Junkmail Pro 2.0.6 on Imail 8.15. I upgraded Declude to 2.0.6 from 2.0.5 on 4/15 and have gotten a few of these seemingly randoml log errors every day since. Nothing else on the server changed but Declude. 04/15/2005 11:19:37 QDB810281006E1D24 ERROR: Could not move spam to hold! Code: [123] Error String: [The filename, directory name, or volume label syntax is incorrect.] [D:\IMAIL\SPOOL\DDB810281006E1D24.SMD] [X-RBL-Warning: %TESTNAME%: %WARNING%\DDB810281006E1D24.SMD] 04/15/2005 20:48:06 Q60C2026A01442C0A ERROR: Could not move spam to hold! Code: [3] Error String: [The system cannot find the path specified.] [D:\IMAIL\SPOOL\D60C2026A01442C0A.SMD] [D:\IMAIL\SPOOL\spam\[JUNKMAIL] \D60C2026A01442C0A.SMD] I didn't see anything in the archives but I'm not the best searcher. So forgive me if it's been covered. It appears to be happening with messages addressed to multiple users and some are configured to WARN and others configured to HOLD. Is anyone else seeing these? Is this a known issue? Thanks! --Todd. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1067 (20050417) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] PERCENT test confusion
Will, Just to make sure, your Imail is passing on mail to another server and therefore acting as a gateway that is why you are using OUTBOUND actions correct? David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Will Sent: Wednesday, April 20, 2005 9:22 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] PERCENT test confusion I'm trying to understand why my mail server is sending so many messages to the quarantine folders instead of just marking the headers. In fact, the vast majority of my SPAM is going to the spool/spam folder since updating all the declude rules. The only test I have set to HOLD is the PERCENT test and when I look at the messages being quarantined, none of them have a percent symbol in the To: line. Since there are so many messages failing this test, I am concerned that there is legitimate content I am missing, though I have yet to find one from the hundred thousand messages it caught just yesterday. Should I be concerned and does anyone have good insight about how the PERCENT test works? It seems too good to be true that such a simple test would catch so much SPAM. I'm running Imail 8.15 on 2003. Below is a copy of my declude test actions: # RBL IP4R TESTS OUTBOUND BLITZEDALL WARN CBL WARN DSBLWARN ORDBWARN MXRATE-ALLOWWARN MXRATE-BLOCKWARN MXRATE-SUSPICIOUS WARN SBL WARN SORBS-HTTP WARN SORBS-SOCKS WARN SORBS-MISC WARN SORBS-SMTP WARN SORBS-SPAM WARN SORBS-WEB WARN SORBS-BLOCK WARN SORBS-ZOMBIEWARN SORBS-DUHL WARN SPAMCOP WARN BONDEDSENDERWARN # ADDITIONAL RBL IP4R TESTS OUTBOUND #MTLDB WARN CSMA-SBLWARN INTERSILWARN SPAMBAG WARN FIVETENSRC WARN JAMMDNSBL WARN # RHBSL TESTS OUTBOUND DSN WARN NOABUSE WARN NOPOSTMASTERWARN MAILPOLICE-BULK WARN MAILPOLICE-PORN WARN MAILPOLICE-FRAUDWARN # OTHER TESTS OUTBOUND BADHEADERS WARN BASE64 WARN BCC WARN CMDSPACEWARN COMMENTSWARN DYNHELO WARN ENCODEDURL WARN HELOBOGUS WARN IPURL WARN MAILFROMWARN PERCENT HOLD REVDNS WARN ROUTING WARN SPAMHEADERS WARN SPFFAIL WARN SPFPASS WARN SUBJECTSPACES WARN SUBJECTCHARSWARN #NONENGLISH WARN # FILTERS OUTBOUND #SUBJECTWARN #WORD WARN # 3RD PARTY OUTBOUND #SNIFFERWARN #SPAMCHKWARN #INV-URIBL WARN # TRIGGERS OUTBOUND WEIGHT10WARN WEIGHT14WARN WEIGHT20WARN --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1072 (20050420) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Forwarding
It depends a few factors: 1. If you have the PRO version you have the ability to do outbound scanning 2. If you are using WHITELIST AUTH or Whitelisting your domains or Whitelisting your IP anything originating from your domain will not be stopped. 3. Declude can be configured to catch spam on your outbound mail. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of A. Clausen Sent: Friday, May 06, 2005 1:39 PM To: Declude JunkMail Subject: [Declude.JunkMail] Forwarding This is probably a fairly stupid question, but I was wondering whether or not if you forwarded a local user to another external address (ie. Yahoo or AOL) would Declude still catch spam via the accounts's junkmail file? -- A. Clausen --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1089 (20050505) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Custom Filter Diagnosis Help
It can be a good idea to take into account the IPNOTINMX and NOLEGITCONTENT which can bring down the weight under the threshold because this is a total of -8 I set the SKIPIFWEIGHT 8 points higher. Eg. I mark on WEIGHT15 SUBJECT so I use SKIPIFWEIGHT 23 David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Friday, May 13, 2005 12:11 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Custom Filter Diagnosis Help Kim, Keep in mind SKIPIFWEIGHT is a very good thing as it saves resources by not processing the filter file if the weight is at or above the line. I would leave it, but just set it at a weight where you know the message is SPAM and do not want to expend the resources on the filter file. Darrell --- DLAnalyzer - FREE reporting for Declude Junkmail and Virus - http://www.invariantsystems.com Kim Premuda writes: Are you using anything like SKIPIFWEIGHT options in the filter or ENDS clauses. Yes, this particular custom filter has the following two lines at the beginning of the filter definition: TESTSFAILED END CONTAINS BYPASS SKIPIFWEIGHT 16 BYPASS never shows up in the line of filter tests, so SKIPIFWEIGHT may be the culprit. I'll comment out the SKIPIFWEIGHT line and see what happens (most likely, my misunderstanding of how SKIPIFWEIGHT works). Thanks for the help! -- Kim W. Premuda FastWave Internet Services San Diego, CA -- --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1094 (20050512) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SO OT its' almost embarrasing: How to get in touch with Yahoo?
Title: SO OT its' almost embarrasing: How to get in touch with Yahoo? Sharyn, I do not think there is anything they will do to change the search engine rankings. The only way I would think you could resolve this is to ensure your website ranks higher using legitimate SEO techniques. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharyn SchmidtSent: Friday, May 13, 2005 2:09 PMTo: IMail_Forum@list.ipswitch.comCc: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] SO OT its' almost embarrasing: How to get in touch with Yahoo? Hi, When one does a search on yahoo for Todhunter International, a company and their URL that is not affiliated with us is being returned. My CEO wants me to ensure the reference to this company is removed when doing a yahoo search for Todhunter International. I don't know know where to begin. I have been all over yahoo's site, but any "contact us" or help link, is just an automated help engine, with no link to a real person. Suggestions? Thanks in advance! Sharyn __ NOD32 1.1095 (20050513) Information __This message was checked by NOD32 antivirus system.http://www.nod32.com
RE: [Declude.JunkMail] SO OT its' almost embarrasing: How to get in touch with Yahoo?
Title: Message Can you give the URL so we can see what site you are talking about. Also there is NO way Yahoo is going to reallytell you why they are listed, search engine listings are a highly guarded secret. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharyn SchmidtSent: Friday, May 13, 2005 2:31 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] SO OT its' almost embarrasing: How to get in touch with Yahoo? I do not think there is anything they will do to change the search engine rankings. The only way I would think you could resolve this is to ensure your website ranks higher using legitimate SEO techniques. I would settle for just speaking to someone to find out WHY it's coming up on a search. This company does not use our name, there is no reference to it on their website, no reason for it to appear on a search for Todhunter International. Matter of fact, the words that are highlighted in the summary blurb dont mention Todhunter at all "todhunter international Interstate Sales of New Jersey, LLC. is a consortium of food industry professionals with over 120 years of diversified experience. ... economic restraint are necessary. Interstate Sales of New Jersey can bring ... Copyright 2002 INTERSTATE SALES OF NEW JERSEY ... Why would that come up under a search for our company?__ NOD32 1.1095 (20050513) Information __This message was checked by NOD32 antivirus system.http://www.nod32.com
RE: [Declude.JunkMail] Tests for only one domain
Try adding the following line to the filter (which basically says do not run this filter if the recipients domain is not listed) ALLRECIPS END NOTCONTAINS @domain.com David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Heimir Eidskrem Sent: Wednesday, June 15, 2005 11:55 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Tests for only one domain Hey, I have a customer that wants to filter on certain words. I did create the filter and it works but my question is this: Since I now have a new test in the global.cfg file, the test is ran for every email and every domain. That seems to be a waste of resources. Any way I can run this test ONLY for the domain? Also, they want to block all free mail providers like hotmail,yahoo, etc. I assume I just make another filter for that but again I will be running filters on emails that does not need to be filtered. Would it be better just to add a Imail rule to block the domains? Does the Imail rules allows this: @hotmail.com? H. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1140 (20050614) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Un-Obfuscating Subjects
Dan, You can use a base64 decoder http://www.opinionatedgeek.com/dotnet/tools/Base64Decode/Default.aspx =?iso-8859-1?B?SG9ybnkgcGlsbHMgLSA3NSUgT0ZG?= is Horny pills - 75% OFF Trim the string down to SG9ybnkgcGlsbHMgLSA3NSUgT0ZG David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Friday, July 08, 2005 10:55 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Un-Obfuscating Subjects Hello, All, When reviewing caught spam I usually have a handful of messages with subjects that are obfuscated. I know they aren't really obfuscated but instead are using a different encoding. Does anyone have a web site or tool where I could go and drop in the text, e.g... =?iso-8859-1?B?SG9ybnkgcGlsbHMgLSA3NSUgT0ZG?= so I can see exactly what the user would be seeing if the e-mail actually made it all the way to the e-mail client? Thanks In Advance, Dan Geiser [EMAIL PROTECTED] --- E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. __ NOD32 1.1152 (20050623) Information __ This message was checked by NOD32 antivirus system. http://www.eset.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter not triggering
Kevin,Please email me a copy of your global.cfg with the filter you
are using as well as the email body and header of the email that did not trigger
the test and I will have a look at it. dbarker @
declude.comThanksDavid Bwww.declude.com
From: Kevin Bilbee
To: Declude.JunkMail@declude.com
Sent: Monday, July 25, 2005 11:16
AM
Subject: RE: [Declude.JunkMail] Filter
not triggering
Well
that would explain why many of my filters are not as effective as they used to
be. Has Declude announced when the fix will be
available
Kevin Bilbee
-Original Message-From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On Behalf Of John
CarterSent: Monday, July 25, 2005 8:05 AMTo: Declude.JunkMail@declude.comSubject:
RE: [Declude.JunkMail] Filter not triggering
I have reported to Declude a problem with the
"CONTAINS" statement. Prior to 2.0.6 (or somewhere around
there)it worked oncharacter match, but after an upgrade to
Declude it only works on a word match. (In other words you could not longer
match on a string of characters within a word.) This would affect your
situation.
I believe the fix is caught up in the wait for the
newest version (the one they are testing now.)
John
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kevin
BilbeeSent: Monday, July 25, 2005 9:10 AMTo: JunkMail
DecludeSubject: [Declude.JunkMail] Filter not
triggering
The attached email is not getting trapped by my
STOCKFILTER??? Here are the log lines. They do not indicate any issues with
the STOCKFILTER. In the STOCKFILTER this line should be hitting
BODY 10CONTAINS (OTC:
Any idea why this email is not triggering this
line and assigning 10 points Could declude not be decoding the
BASE64 This also seems to be an intermittent issue!
07/24/2005 19:57:36 Q551E097C0333 Filter
HELOFILTER: Not skipping E-mail due to current weight of 2.07/24/2005
19:57:36 Q551E097C0333 Filter VIRUSTRAP: Not skipping E-mail due to
current weight of 2.07/24/2005 19:57:36 Q551E097C0333 Filter
REVDNSFILTER: Not skipping E-mail due to current weight of 2.07/24/2005
19:57:36 Q551E097C0333 Filter: Set max weight to 19.07/24/2005
19:57:36 Q551E097C0333 Filter: Set max weight to 13.07/24/2005
19:57:36 Q551E097C0333 Filter: Set max weight to 14.07/24/2005
19:57:36 Q551E097C0333 Filter: Set max weight to 5.07/24/2005
19:57:36 Q551E097C0333 Filter STOCKFILTER: Not skipping E-mail due to
current weight of 2.07/24/2005 19:57:36 Q551E097C0333 Filter: Set
max weight to 15.07/24/2005 19:57:36 Q551E097C0333 Filter
BODYFILTER: Not skipping E-mail due to current weight of 2.07/24/2005
19:57:36 Q551E097C0333 NOABUSE:2 . Total weight = 2.07/24/2005
19:57:36 Q551E097C0333 Using [incoming] CFG file
D:\IMAIL\Declude\$default$.junkmail.07/24/2005 19:57:36
Q551E097C0333 Redirecting [EMAIL PROTECTED]
to file
D:\Imail\declude\junkmailfiles\standardabrasives.com.junkmail.07/24/2005
19:57:36 Q551E097C0333 Msg failed NOABUSE ("Not supporting [EMAIL PROTECTED]"). Action="">07/24/2005
19:57:36 Q551E097C0333 Msg failed BASE64 (A binary encoded text or HTML
section was found in this E-mail.). Action="">07/24/2005 19:57:36
Q551E097C0333 L1 Message OK07/24/2005 19:57:36 Q551E097C0333
Subject: Stocks in Play07/24/2005 19:57:36 Q551E097C0333 From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
IP: 200.182.78.150 ID: M2005072419564304108
07/24/2005 19:57:36 Q551E097C0333 Tests
failed [weight=2]: NOABUSE=WARN BASE64=WARN IPNOTINMX=IGNORE 07/24/2005
19:57:36 Q551E097C0333 Action(s) taken for [copyall_account] = IGNORE
WARN [LAST ACTION="">07/24/2005 19:57:36 Q551E097C0333 Using
[incoming] CFG file D:\IMAIL\Declude\$default$.junkmail.07/24/2005
19:57:36 Q551E097C0333 Redirecting [EMAIL PROTECTED]
to file
D:\Imail\declude\junkmailfiles\standardabrasives.com.junkmail.07/24/2005
19:57:36 Q551E097C0333 Msg failed NOABUSE ("Not supporting [EMAIL PROTECTED]"). Action="">07/24/2005
19:57:36 Q551E097C0333 Msg failed BASE64 (A binary encoded text or HTML
section was found in this E-mail.). Action="">07/24/2005 19:57:36
Q551E097C0333 L2 Message OK07/24/2005 19:57:36 Q551E097C0333
Subject: Stocks in Play07/24/2005 19:57:36 Q551E097C0333 From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
[EMAIL PROTECTED]
IP: 200.182.78.150 ID: M2005072419564304108
07/24/2005 19:57:36 Q551E097C0333 Tests
failed [weight=2]: NOABUSE=WARN BASE64=WARN IPNOTINMX=IGNORE 07/24/2005
19:57:36 Q551E097C0333 Action(s) taken for
[EMAIL PROTECTED] = IGNORE WARN [LAST
RE: [Declude.JunkMail] Filter not triggering
Kevin, After reviewing your files you had sent me this is the problem you are having: 1. The email you received was encoded in BASE64 (Msg failed BASE64) 2. In your global.cfg you have the following directive: DECODE OFF Therefore your STOCKFILTER did not trigger - as nowhere in the encoded text of the email is the following phrase (OTC: In order for your filters to work on encoded messages I would suggest commenting out #DECODE OFF David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Monday, July 25, 2005 10:10 AM To: JunkMail Declude Subject: [Declude.JunkMail] Filter not triggering The attached email is not getting trapped by my STOCKFILTER??? Here are the log lines. They do not indicate any issues with the STOCKFILTER. In the STOCKFILTER this line should be hitting BODY 10 CONTAINS (OTC: Any idea why this email is not triggering this line and assigning 10 points Could declude not be decoding the BASE64 This also seems to be an intermittent issue! 07/24/2005 19:57:36 Q551E097C0333 Filter HELOFILTER: Not skipping E-mail due to current weight of 2. 07/24/2005 19:57:36 Q551E097C0333 Filter VIRUSTRAP: Not skipping E-mail due to current weight of 2. 07/24/2005 19:57:36 Q551E097C0333 Filter REVDNSFILTER: Not skipping E-mail due to current weight of 2. 07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to 19. 07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to 13. 07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to 14. 07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to 5. 07/24/2005 19:57:36 Q551E097C0333 Filter STOCKFILTER: Not skipping E-mail due to current weight of 2. 07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to 15. 07/24/2005 19:57:36 Q551E097C0333 Filter BODYFILTER: Not skipping E-mail due to current weight of 2. 07/24/2005 19:57:36 Q551E097C0333 NOABUSE:2 . Total weight = 2. 07/24/2005 19:57:36 Q551E097C0333 Using [incoming] CFG file D:\IMAIL\Declude\$default$.junkmail. 07/24/2005 19:57:36 Q551E097C0333 Redirecting [EMAIL PROTECTED] to file D:\Imail\declude\junkmailfiles\standardabrasives.com.junkmail. 07/24/2005 19:57:36 Q551E097C0333 Msg failed NOABUSE (Not supporting [EMAIL PROTECTED]). Action=WARN. 07/24/2005 19:57:36 Q551E097C0333 Msg failed BASE64 (A binary encoded text or HTML section was found in this E-mail.). Action=WARN. 07/24/2005 19:57:36 Q551E097C0333 L1 Message OK 07/24/2005 19:57:36 Q551E097C0333 Subject: Stocks in Play 07/24/2005 19:57:36 Q551E097C0333 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 200.182.78.150 ID: M2005072419564304108 07/24/2005 19:57:36 Q551E097C0333 Tests failed [weight=2]: NOABUSE=WARN BASE64=WARN IPNOTINMX=IGNORE 07/24/2005 19:57:36 Q551E097C0333 Action(s) taken for [copyall_account] = IGNORE WARN [LAST ACTION=WARN] 07/24/2005 19:57:36 Q551E097C0333 Using [incoming] CFG file D:\IMAIL\Declude\$default$.junkmail. 07/24/2005 19:57:36 Q551E097C0333 Redirecting [EMAIL PROTECTED] to file D:\Imail\declude\junkmailfiles\standardabrasives.com.junkmail. 07/24/2005 19:57:36 Q551E097C0333 Msg failed NOABUSE (Not supporting [EMAIL PROTECTED]). Action=WARN. 07/24/2005 19:57:36 Q551E097C0333 Msg failed BASE64 (A binary encoded text or HTML section was found in this E-mail.). Action=WARN. 07/24/2005 19:57:36 Q551E097C0333 L2 Message OK 07/24/2005 19:57:36 Q551E097C0333 Subject: Stocks in Play 07/24/2005 19:57:36 Q551E097C0333 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [EMAIL PROTECTED] IP: 200.182.78.150 ID: M2005072419564304108 07/24/2005 19:57:36 Q551E097C0333 Tests failed [weight=2]: NOABUSE=WARN BASE64=WARN IPNOTINMX=IGNORE 07/24/2005 19:57:36 Q551E097C0333 Action(s) taken for [EMAIL PROTECTED] = IGNORE WARN [LAST ACTION=WARN] 07/24/2005 19:57:36 Q551E097C0333 Cumulative action(s) taken on this email = IGNORE WARN [LAST ACTION=WARN] Kevin Bilbee --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter not triggering
Nick, I am not aware of any bugs with the CONTAINS filter statement. However there are some items on our wish list, currently CONTAINS searches for a string eg. ABC So this will trigger XXXABCXXX Currently there is not a way to use CONTAINS with SPACEABC as the config file does not see the space as in BODY10 CONTAINSSPACEABC Because we allow for spaces between CONTAINS and the text. We are looking into providing a way where you can include spaces such as: BODY10 CONTAINS ABC *Please note SPACE is not syntax it is just there so you can see the space I am talking about :) David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Tuesday, July 26, 2005 1:19 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Filter not triggering Hi David, Are you aware of any bugs with the CONTAINS filter statement? Thanks! -Nick David Barker wrote: Kevin, After reviewing your files you had sent me this is the problem you are having: 1. The email you received was encoded in BASE64 (Msg failed BASE64) 2. In your global.cfg you have the following directive: DECODE OFF Therefore your STOCKFILTER did not trigger - as nowhere in the encoded text of the email is the following phrase (OTC: In order for your filters to work on encoded messages I would suggest commenting out #DECODE OFF David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Monday, July 25, 2005 10:10 AM To: JunkMail Declude Subject: [Declude.JunkMail] Filter not triggering The attached email is not getting trapped by my STOCKFILTER??? Here are the log lines. They do not indicate any issues with the STOCKFILTER. In the STOCKFILTER this line should be hitting BODY 10 CONTAINS (OTC: Any idea why this email is not triggering this line and assigning 10 points Could declude not be decoding the BASE64 This also seems to be an intermittent issue! 07/24/2005 19:57:36 Q551E097C0333 Filter HELOFILTER: Not skipping E-mail due to current weight of 2. 07/24/2005 19:57:36 Q551E097C0333 Filter VIRUSTRAP: Not skipping E-mail due to current weight of 2. 07/24/2005 19:57:36 Q551E097C0333 Filter REVDNSFILTER: Not skipping E-mail due to current weight of 2. 07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to 19. 07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to 13. 07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to 14. 07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to 5. 07/24/2005 19:57:36 Q551E097C0333 Filter STOCKFILTER: Not skipping E-mail due to current weight of 2. 07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to 15. 07/24/2005 19:57:36 Q551E097C0333 Filter BODYFILTER: Not skipping E-mail due to current weight of 2. 07/24/2005 19:57:36 Q551E097C0333 NOABUSE:2 . Total weight = 2. 07/24/2005 19:57:36 Q551E097C0333 Using [incoming] CFG file D:\IMAIL\Declude\$default$.junkmail. 07/24/2005 19:57:36 Q551E097C0333 Redirecting [EMAIL PROTECTED] to file D:\Imail\declude\junkmailfiles\standardabrasives.com.junkmail. 07/24/2005 19:57:36 Q551E097C0333 Msg failed NOABUSE (Not supporting [EMAIL PROTECTED]). Action=WARN. 07/24/2005 19:57:36 Q551E097C0333 Msg failed BASE64 (A binary encoded text or HTML section was found in this E-mail.). Action=WARN. 07/24/2005 19:57:36 Q551E097C0333 L1 Message OK 07/24/2005 19:57:36 Q551E097C0333 Subject: Stocks in Play 07/24/2005 19:57:36 Q551E097C0333 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 200.182.78.150 ID: M2005072419564304108 07/24/2005 19:57:36 Q551E097C0333 Tests failed [weight=2]: NOABUSE=WARN BASE64=WARN IPNOTINMX=IGNORE 07/24/2005 19:57:36 Q551E097C0333 Action(s) taken for [copyall_account] = IGNORE WARN [LAST ACTION=WARN] 07/24/2005 19:57:36 Q551E097C0333 Using [incoming] CFG file D:\IMAIL\Declude\$default$.junkmail. 07/24/2005 19:57:36 Q551E097C0333 Redirecting [EMAIL PROTECTED] to file D:\Imail\declude\junkmailfiles\standardabrasives.com.junkmail. 07/24/2005 19:57:36 Q551E097C0333 Msg failed NOABUSE (Not supporting [EMAIL PROTECTED]). Action=WARN. 07/24/2005 19:57:36 Q551E097C0333 Msg failed BASE64 (A binary encoded text or HTML section was found in this E-mail.). Action=WARN. 07/24/2005 19:57:36 Q551E097C0333 L2 Message OK 07/24/2005 19:57:36 Q551E097C0333 Subject: Stocks in Play 07/24/2005 19:57:36 Q551E097C0333 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [EMAIL PROTECTED] IP: 200.182.78.150 ID: M2005072419564304108 07/24/2005 19:57:36 Q551E097C0333 Tests failed [weight=2]: NOABUSE=WARN BASE64=WARN IPNOTINMX=IGNORE 07/24/2005 19:57:36 Q551E097C0333 Action(s) taken for [EMAIL PROTECTED] = IGNORE WARN [LAST ACTION=WARN] 07/24/2005 19:57:36 Q551E097C0333 Cumulative action(s
RE: [Declude.JunkMail] RBL's becoming worthless...
Chuck, Send me your global.cfg and $default$.junkmail that I can have a look to see if there are additional tests that we can use, to help increase scoring on spam. David B dbarker @ declude.com www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick Sent: Tuesday, July 26, 2005 1:57 PM To: Declude. JunkMail Subject: [Declude.JunkMail] RBL's becoming worthless... In the last several months we have seen large quantity of spam coming from IP blocks that never seem to get listed on any RBL. Spamcop is about the only one that picks some of them up and once in awhile spamhaus. There was a block last night that sent several hundred and sendbase.org showed they had detected no email from that block. The reason I bring this up is because when we first started blocking spam I would say the blacklists would catch almost 90% so we relied heavily on the blacklist. With the blacklists not being as effective we need to rely on other tests like sniffer but that misses alot also. Chuck Schick Warp 8, Inc. (303)-421-5140 www.warp8.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Fix/Update Above 2.0.6 ?
We have identified compatibility issues with Imail version 8.20 and all versions of Declude. A new release of Declude is in the works and we are currently entering into volume testing. This release is our highest priority. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Avolve Support Sent: Tuesday, July 26, 2005 10:51 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Declude Fix/Update Above 2.0.6 ? Any word on the fix to stop the errors that have been cropping up with 2.0.6 and beta .16 with the latest Imail versions ? Sent via the WebMail system at avolve.net --- [This E-mail scanned for viruses by Declude Virus By Avolve.net] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[2]: [Declude.JunkMail] RBL's becoming worthless...
Hi David, If possible you should use the IPBYPASS rather than the HOP David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, July 27, 2005 12:27 PM To: Declude.JunkMail@declude.com Subject: Re: Re[2]: [Declude.JunkMail] RBL's becoming worthless... That's a question for Declude. Throw the test in with no weight and a WARN action and see what happens is what I would do. - Original Message - From: David Sullivan [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, July 27, 2005 9:09 AM Subject: Re[2]: [Declude.JunkMail] RBL's becoming worthless... SF The new Declude test SF HELO-DYNAMIC dynhelo x x 50 0 Any issues with this test if Declude is behind a Postfix gateway with HOP set to 1? -- Best regards, Davidmailto:[EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[4]: [Declude.JunkMail] RBL's becoming worthless...
David, Either configuration in your case should work. However from Scott's Perry comments regarding the HOP and IPBYPASS. Normally, you will leave the HOP setting at HOP 0, and use an IPBYPASS line for each gateway or backup mail server. 6.2 Skipping your backup mail server or gateways Just thought I would mention it. As it was suggested to test HELO-DYNAMIC using the WARN action. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Sullivan Sent: Wednesday, July 27, 2005 1:45 PM To: David Barker Subject: Re[4]: [Declude.JunkMail] RBL's becoming worthless... DB If possible you should use the IPBYPASS rather than the HOP Any particular reason? ALL mail passes through the PF gateways first. Imail/Declude can't be touched from any outside network. The only port 25 allowed into their LAN segment is from the segment that the PF gateways are on. -- Best regards, Davidmailto:[EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail]
Ping. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] D3: Service stopped on its own, files backed up
Thanks for the feedback. I have posted decludeproc.exe 3.0.12 which should take care of the issue of decludeproc stopping on its own. Also remember you can increase the number of THREADS in your declude.cfg, the default is 5 you should be able to move this up to 25 quite easily or even double it to 50 if you have a dual CPU etc. Remember you will need to stop/start the decludeproc.exe service if you make a change to your declude.cfg David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Tuesday, August 30, 2005 10:23 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] D3: Service stopped on its own, files backed up OK, I sent a message to the list this morning, went into an hourlong meeting and came back out to find that the message hadn't posted to the list yet. Also people were complaining about their email not working. I found that the Decludeproc service had stopped on its own. The event log shows event 7031: The Decludeproc service terminated unexpectedly. It has done this 1 time(s). I restarted the service and took a look in the proc folder. There were 4500 objects in the folder. I kept watch for about 15 minutes on those objects, but Declude couldn't make headway on it with the new mail coming in. It would go down by 1 or 2 then back up by 1 or 2 but always stayed around the same number of messages. I have currently reverted back to 1.82, and have left the Decludeproc service running so that it can clear out those messages. It is going VERY slowly, though. I mean like 25 messages per minute slow, if that. Declude 1.82 goes through messages much faster, in my experience monitoring (for instance) the overflow directory. Dan Horne --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] D3: Service stopped on its own, files backed up
The version number is derived from the decludeproc.exe All functionality that existed in 2.0.6.16 should be in Declude 3.0 the main diffence is that fact that we have a decludeproc.exe which now runs as a service. I am not sure exactly what you are asking, could you be more specific as to your question regarding 2.0.6.16 ? David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Tuesday, August 30, 2005 10:48 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] D3: Service stopped on its own, files backed up David - Would you kindly confirm exactly what version of Declude this 3.0 beta is derived from? Is it 2.0.6.16 ? Thanks -Nick David Barker wrote: Thanks for the feedback. I have posted decludeproc.exe 3.0.12 which should take care of the issue of decludeproc stopping on its own. Also remember you can increase the number of THREADS in your declude.cfg, the default is 5 you should be able to move this up to 25 quite easily or even double it to 50 if you have a dual CPU etc. Remember you will need to stop/start the decludeproc.exe service if you make a change to your declude.cfg David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Tuesday, August 30, 2005 10:23 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] D3: Service stopped on its own, files backed up OK, I sent a message to the list this morning, went into an hourlong meeting and came back out to find that the message hadn't posted to the list yet. Also people were complaining about their email not working. I found that the Decludeproc service had stopped on its own. The event log shows event 7031: The Decludeproc service terminated unexpectedly. It has done this 1 time(s). I restarted the service and took a look in the proc folder. There were 4500 objects in the folder. I kept watch for about 15 minutes on those objects, but Declude couldn't make headway on it with the new mail coming in. It would go down by 1 or 2 then back up by 1 or 2 but always stayed around the same number of messages. I have currently reverted back to 1.82, and have left the Decludeproc service running so that it can clear out those messages. It is going VERY slowly, though. I mean like 25 messages per minute slow, if that. Declude 1.82 goes through messages much faster, in my experience monitoring (for instance) the overflow directory. Dan Horne --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] D3: Service stopped on its own, files backed up
Just as a note, sometimes the decludeproc.exe can take a while to shut down as it has to clear out all the threads and wait on messages it is still processing - perhaps waiting for a virus scan to finish etc. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Tuesday, August 30, 2005 11:13 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] D3: Service stopped on its own, files backed up David Barker wrote on Tuesday, August 30, 2005 10:42 AM: Thanks for the feedback. I have posted decludeproc.exe 3.0.12 which should take care of the issue of decludeproc stopping on its own. Also remember you can increase the number of THREADS in your declude.cfg, the default is 5 you should be able to move this up to 25 quite easily or even double it to 50 if you have a dual CPU etc. Remember you will need to stop/start the decludeproc.exe service if you make a change to your declude.cfg It has now been an hour and the decludeproc service has only processed around 1000 objects, which I believe corresponds to 500 messages. I created the declude.cfg and put in THREADS 25. I also dl'ed the newer decludeproc.exe, but when I went to stop the service so I could replace it, the service would not stop. I had to set it to manual startup and reboot the server (@#$#%* Windows). We'll see if this improves the speed any. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] D3: Service stopped on its own, files backed up
Nick, 1. I am not aware of any functionality that is in 2.0.6.16 that does not work in Declude Beta 3.0 2. All the functionality that was in 2.0.6.16 is included in Declude 3.0 Beta 3. All the functionality that was in 2.0.6.16 should work in Declude 3.0 Beta, but this is the reason for a Beta - to identify any possible issues that may come up because of different operating environments. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Tuesday, August 30, 2005 11:41 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] D3: Service stopped on its own, files backed up should is my question. I was just looking for a confirmation as to what I would be changing to. -Nick David Barker wrote: All functionality that existed in 2.0.6.16 should be in Declude 3.0 Beta the main difference is that fact that we have a decludeproc.exe which now runs as a service. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Tuesday, August 30, 2005 11:31 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] D3: Service stopped on its own, files backed up Hi David - David Barker wrote: I am not sure exactly what you are asking, could you be more specific as to your question regarding 2.0.6.16 ? well the release ver is I believe 2.0.6 and the interim is 2.0.6.16. My question was does the 3.0 beta have the 2.0.6.16 interim features included. Thanks - -Nick David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Tuesday, August 30, 2005 10:48 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] D3: Service stopped on its own, files backed up David - Would you kindly confirm exactly what version of Declude this 3.0 beta is derived from? Is it 2.0.6.16 ? Thanks -Nick David Barker wrote: Thanks for the feedback. I have posted decludeproc.exe 3.0.12 which should take care of the issue of decludeproc stopping on its own. Also remember you can increase the number of THREADS in your declude.cfg, the default is 5 you should be able to move this up to 25 quite easily or even double it to 50 if you have a dual CPU etc. Remember you will need to stop/start the decludeproc.exe service if you make a change to your declude.cfg David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Tuesday, August 30, 2005 10:23 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] D3: Service stopped on its own, files backed up OK, I sent a message to the list this morning, went into an hourlong meeting and came back out to find that the message hadn't posted to the list yet. Also people were complaining about their email not working. I found that the Decludeproc service had stopped on its own. The event log shows event 7031: The Decludeproc service terminated unexpectedly. It has done this 1 time(s). I restarted the service and took a look in the proc folder. There were 4500 objects in the folder. I kept watch for about 15 minutes on those objects, but Declude couldn't make headway on it with the new mail coming in. It would go down by 1 or 2 then back up by 1 or 2 but always stayed around the same number of messages. I have currently reverted back to 1.82, and have left the Decludeproc service running so that it can clear out those messages. It is going VERY slowly, though. I mean like 25 messages per minute slow, if that. Declude 1.82 goes through messages much faster, in my experience monitoring (for instance) the overflow directory. Dan Horne --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail
RE: [Declude.JunkMail] D3: Service stopped on its own, files backed up
I will be posting a new decludeproc.exe Beta 3.0.21 before the end of today. The new one should: * take care of the orphaned files in the proc directory * improve on performance * deal with the sm$ files David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Tuesday, August 30, 2005 1:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] D3: Service stopped on its own, files backed up Nick Hayer wrote on Tuesday, August 30, 2005 10:57 AM: Dan, Do you believe the slowness you are experiencing is for sure related to this decludeproc.exe [will this work on any declude ver?] or maybe other causes unrelated like dns issue or a traffic spike? -Nick No definitely not dns or traffic spike. I just actually went through my config last week and cleaned it up by disabling a bunch of tests that weren't catching anything. I also made sure that all the dnsbl's were responding. I just checked again and they are all doing fine. My DNS server is responding well. I was having some problems with sniffer a couple weeks ago but that is taken care of. No as of last Tuesday I was extremely happy with the speed of my Declude config. My tests today don't show anything abnormal like dns failures or abnormal traffic levels. Anyway I went away to lunch and came back and found that it is pretty much cleared up. However there are now 27 orphaned D files in the proc directory. 5 of them have extension sm$ and the rest are smd. What can I do about these? Also on another issue, Hijack caught around 40 something messages to Declude all saying something like Installed on mail.taisweb.net. They were all from IP address 127.0.0.1. I did an allowip for that in order to let them go, but what is up with the massive amount of emails, Declude guys? And why is your own software blocking it? Dan Horne --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] General Filter
You could try adding the following or something similar at the beginning of your filter BODYEND CONTAINSContent-Transfer-Encoding: base64 Or instead of END a -10 depending n the values in your filter. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Orin Wells Sent: Wednesday, August 31, 2005 3:11 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] General Filter I am having a problem with a client whose email to other members of her domain is getting trapped by the GeneralFilter (words or phrases we have added because they seem to mostly appear in spam). In this particular case the triggering word seems to be P*O*R*N* without the stars. I suspect what is happening is that the encoded attached word document just happens to have this set of letters in sequence in the encrypted data that is attached to the email file in imail. It does not appear in the word document itself. But when I look at the raw file on the server I can see this. I take it from this that Declude when it scans the body of the message also scans any attachment that is sitting there in the encrypted mode. If so is there a way around this? Can I tell it not to scan the encrypted attachments or to expand them first? If this sort of thing is in the latest Declude Junkmail manual, someone just tell me to read TFM. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Why did this fail reverse DNS
Sharyn, 1. What is the test you have defined for 10-REVDNS ? 2. Do you have WHITELIST AUTH enabled in your global.cfg ? David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharyn Schmidt Sent: Wednesday, September 07, 2005 12:28 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Why did this fail reverse DNS Good afternoon, Something really odd is going on here. All of a sudden, my own users are failing tests that they were passing last month. Here is the spam attachment that Declude adds to our emails, if the weight is 10. You **MAY** have spam! Subject:RE: Shakka Applebees -- Beverage Optimization Initiative -District Test **URGENT MESSAGE** From: [EMAIL PROTECTED] Tests Failed: 10-REVDNS, CMDSPACE, SUBJECTSPACES, SUBJECTCHARS, WEIGHT10-D02010098024AB4E6.SMD [EMAIL PROTECTED] is one of MY users. Why in the world did this fail revdns? According to DNS report: Your 1 MX record is: 10 mail.cruzaninc.com. [TTL=3600] IP=24.73.160.163 [TTL=3600] [US] 163.160.73.24.in-addr.arpa mail.cruzaninc.com. http://www.dnsstuff.com/tools/ptr.ch?ip=24.73.160.163 Thanks, Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Is there any hope running Declude with imail 8.21???
Declude Beta 3.0 is available which works with Imail 8.20+ if you have a valid service agreement this can be downloaded from our website from the My Account Home Page when you log in. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Timothy Bohen Sent: Wednesday, September 07, 2005 2:36 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Is there any hope running Declude with imail 8.21??? I really don't want to downgrade imail, but spam and viruses are getting through. Any hope for having declude working with imail 8.21 any time soon? Thanks __ __ __ __ Sent via the CMS Internet Webmail system at mail1.cmsinter.net --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Server Running at 100%
In your virus.cfg file: AVAFTERJM ON Also ensure that you have the directive: PRESCANON David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Farris Sent: Thursday, September 08, 2005 11:56 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Server Running at 100% Importance: High I was told to see if using AVAFTERJM would help on resources on my server...right now I almost dead in the water..my server is cralling to send mailhow do I use this command...exactly how does it go into the config.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Richard Farris mailto:[EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, August 04, 2005 11:21 AM Subject: [Declude.JunkMail] Spam box Is there a box I can put in front of my Imail server that will help take some of the load off of the spam filtering that Declude is doing Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21???
Dan, What version for Declude Beta were you running? As we have not seen the behavior you are referring to. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan HorneSent: Thursday, September 08, 2005 1:58 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21??? Yes, we justtoday reverted back to 1.82 because our single-processor machine backed up. At the worst there was an hour delay in delivery. I specifically denoted it was a single-processor machine just to indicate that our problems would not be related to the multi-processor sleep problems. It just doesn't seem able to handle the load that 1.82 does. And yes, we have increased our THREADS to 25. Also, they claim to have fixed a problem with leftover files, but after swapping out the Declude executable with 1.82 and leaving the Decludeproc service running, 24 files are still stranded in the "spool\proc\work" directory and there are 9 *.vir directories still in there (they are truly stranded, even the 24 files comprise 12 paired q and d files they are not being delivered for several hours with the Decludeproc service still running. I am going to have to move them back into the spool directory manually). The Decludeproc service has NOT stopped running at all in theseveral days it has been running, so I don't know why the files are stranded. I just tried restarting it to see if I could "wake it up", but it didn't give me any love. Looking at the dates, I see one q/d pair from Sep 2, several from Sep 7 and the2 pairfrom today. Each one of these represents a "lost" email. I opened afew and didn't find any of them to be spam. The one thing I can't abide is "lost" email, so I had to stop our beta test. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Thursday, September 08, 2005 12:11 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Is there any hope running Declude with imail8.21??? IMail 8.20+ is only compatible with Declude 3+, but that software is still in early beta and I wouldn't recommend it. This combination can work, but it appears that the higher the volume you have, the more likely you are to experience serious issues with E-mail backing up. I have been using IMail 8.15 HF2 for many months without any new issues, and it works very well with Declude 2.0.6.16 (the most recent interim release) which also doesn't have any new issues. The newer Declude 3.0 that is in beta is basically the same in terms of functionality, but it is changed to act as a service in order to resolve issues with the changes in IMail 8.20+ and also increase performance slightly. This is a big change for Declude, and building a service to handle E-mail reliably isn't a small feat so I would suggest being patient in the mean time.MattTimothy Bohen wrote: Oh ouch, thats embarrising, you could have sent this off list!!! :) I KNOW I didnt change that path, is there any chance upgrading to 8.21 somehow changed it? So anyway, now that I downgraded already, should I go to 8.21 again or are there problems with declude? I'm not crazy about running a beta version of declude. Thanks -- Original Message -- From: "R. Scott Perry" [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Wed, 07 Sep 2005 19:28:41 -0400 I gave up and downgraded to 8.15 now I'm getting: 09:07 15:08 SMTPD(CP) error 3 executing "c:\imail\Declude.exe" "D:\IMAIL\spool\Q3ab90041008c0e76.SMD" It looks like you set up Declude to run in C:\IMail, but you run IMail on D:\IMail. :) -Scott --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. __ __ __ __ Sent via the CMS Internet Webmail system at mail1.cmsinter.net --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21???
Dan, 1. 3.0.3 in our testing has been considerably quicker than that of earlier versions of Declude. 2. We have never seen an long delay in the processing of email and no one else has reported this. 3. As mentioned on the Beta page there are still issues with orphan files due to Hijack, but this is because the hijack is moving the email to the HOLD2 folder and leaving files behind, these email should not be legitimate. 4. The only other reasons we are aware of for orphan files is - if the files already exist in the location (eg Spam folder) then the files cannot be moved from the \work directory to that location. 5. In order to find the cause please send us your log files / copy of an orphaned email / config files for us to look at the situation ? 6. In addition to the lists, in future it would be a good idea to email us at [EMAIL PROTECTED] with issues you are experiencing so we can deal with them promptly. Thanks David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Thursday, September 08, 2005 2:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21??? 3.0.3. Mail has backed up repeatedly since installing this version. We originally installed 3.0 when it was released, but quickly backed off that when the service stopped on its own, leaving multiple files in the proc directory. After waiting a while, we got an email about 3.0.3 being released which seemed to specifically target the problems we had, so we again immediately installed that version (on Sep 2). The results were OK until the weekend when mail piled up for an unknown reason. We just waited that one out, and the next one which occurred Monday afternoon. The one from yesterday though caused an hour-long delay in email delivery. Today the decision was made to cease the beta test and revert back to 1.82. The change was made this morning at around 9:00 AM EST, and the files I noted are still in the work directory now, 5 hours later. I just want to note that the same server never backs up running 1.82. I notice that there is now a version 3.0.3.4, but we of course haven't tried that version. FWIW, we are using all three Declude products including Hijack. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, September 08, 2005 2:04 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21??? Dan, What version for Declude Beta were you running? As we have not seen the behavior you are referring to. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Thursday, September 08, 2005 1:58 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21??? Yes, we just today reverted back to 1.82 because our single-processor machine backed up. At the worst there was an hour delay in delivery. I specifically denoted it was a single-processor machine just to indicate that our problems would not be related to the multi-processor sleep problems. It just doesn't seem able to handle the load that 1.82 does. And yes, we have increased our THREADS to 25. Also, they claim to have fixed a problem with leftover files, but after swapping out the Declude executable with 1.82 and leaving the Decludeproc service running, 24 files are still stranded in the spool\proc\work directory and there are 9 *.vir directories still in there (they are truly stranded, even the 24 files comprise 12 paired q and d files they are not being delivered for several hours with the Decludeproc service still running. I am going to have to move them back into the spool directory manually). The Decludeproc service has NOT stopped running at all in the several days it has been running, so I don't know why the files are stranded. I just tried restarting it to see if I could wake it up, but it didn't give me any love. Looking at the dates, I see one q/d pair from Sep 2, several from Sep 7 and the 2 pair from today. Each one of these represents a lost email. I opened a few and didn't find any of them to be spam. The one thing I can't abide is lost email, so I had to stop our beta test. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Thursday, September 08, 2005 12:11 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Is there any hope running Declude with imail8.21??? IMail 8.20+ is only compatible with Declude 3+, but that software is still in early beta and I wouldn't recommend it. This combination can work, but it appears that the higher the volume you have, the more likely you are to experience serious issues with E-mail backing up. I have been using IMail
RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21???
Andrew, Thanks for the suggestion. I have passed it on to our developers to look into. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Thursday, September 08, 2005 3:03 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21??? DB 1. 3.0.3 in our testing has been considerably quicker than that of earlier versions of Declude. Dave, at the top of my suggested list for new code in declude.exe has been to do robust MIME decoding so that Declude PRO text filters no longer grind the raw layer of attachments for spammy text. That alone would make Declude orders of magnitude faster, more accurate, and lighter on RAM. Meanwhile, Matt's SizeOf.vbs and Scott's compiled version have been a great stopgap for me. If anybody out there is wondering what the heck I'm talking about, check the archive for my posting of my SKIPATTACH test. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, September 08, 2005 11:54 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21??? Dan, 1. 3.0.3 in our testing has been considerably quicker than that of earlier versions of Declude. 2. We have never seen an long delay in the processing of email and no one else has reported this. 3. As mentioned on the Beta page there are still issues with orphan files due to Hijack, but this is because the hijack is moving the email to the HOLD2 folder and leaving files behind, these email should not be legitimate. 4. The only other reasons we are aware of for orphan files is - if the files already exist in the location (eg Spam folder) then the files cannot be moved from the \work directory to that location. 5. In order to find the cause please send us your log files / copy of an orphaned email / config files for us to look at the situation ? 6. In addition to the lists, in future it would be a good idea to email us at [EMAIL PROTECTED] with issues you are experiencing so we can deal with them promptly. Thanks David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Thursday, September 08, 2005 2:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21??? 3.0.3. Mail has backed up repeatedly since installing this version. We originally installed 3.0 when it was released, but quickly backed off that when the service stopped on its own, leaving multiple files in the proc directory. After waiting a while, we got an email about 3.0.3 being released which seemed to specifically target the problems we had, so we again immediately installed that version (on Sep 2). The results were OK until the weekend when mail piled up for an unknown reason. We just waited that one out, and the next one which occurred Monday afternoon. The one from yesterday though caused an hour-long delay in email delivery. Today the decision was made to cease the beta test and revert back to 1.82. The change was made this morning at around 9:00 AM EST, and the files I noted are still in the work directory now, 5 hours later. I just want to note that the same server never backs up running 1.82. I notice that there is now a version 3.0.3.4, but we of course haven't tried that version. FWIW, we are using all three Declude products including Hijack. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, September 08, 2005 2:04 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21??? Dan, What version for Declude Beta were you running? As we have not seen the behavior you are referring to. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Thursday, September 08, 2005 1:58 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21??? Yes, we just today reverted back to 1.82 because our single-processor machine backed up. At the worst there was an hour delay in delivery. I specifically denoted it was a single-processor machine just to indicate that our problems would not be related to the multi-processor sleep problems. It just doesn't seem able to handle the load that 1.82 does. And yes, we have increased our THREADS to 25. Also, they claim to have fixed a problem with leftover files, but after swapping out the Declude executable with 1.82 and leaving the Decludeproc service running, 24 files are still
RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21???
Scott, We are very happy with the suggestions Declude users have made regarding tests and improvements of Declude, as soon as we are done with the Declude 3.0 release the focus will be on these additions wrt to functionality. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Thursday, September 08, 2005 3:20 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Is there any hope running Declude with imail8.21??? Yeah, throw us Pro users a couple of bones! - Original Message - From: Colbeck, Andrew [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, September 08, 2005 2:02 PM Subject: RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21??? DB 1. 3.0.3 in our testing has been considerably quicker than that of earlier versions of Declude. Dave, at the top of my suggested list for new code in declude.exe has been to do robust MIME decoding so that Declude PRO text filters no longer grind the raw layer of attachments for spammy text. That alone would make Declude orders of magnitude faster, more accurate, and lighter on RAM. Meanwhile, Matt's SizeOf.vbs and Scott's compiled version have been a great stopgap for me. If anybody out there is wondering what the heck I'm talking about, check the archive for my posting of my SKIPATTACH test. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, September 08, 2005 11:54 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21??? Dan, 1. 3.0.3 in our testing has been considerably quicker than that of earlier versions of Declude. 2. We have never seen an long delay in the processing of email and no one else has reported this. 3. As mentioned on the Beta page there are still issues with orphan files due to Hijack, but this is because the hijack is moving the email to the HOLD2 folder and leaving files behind, these email should not be legitimate. 4. The only other reasons we are aware of for orphan files is - if the files already exist in the location (eg Spam folder) then the files cannot be moved from the \work directory to that location. 5. In order to find the cause please send us your log files / copy of an orphaned email / config files for us to look at the situation ? 6. In addition to the lists, in future it would be a good idea to email us at [EMAIL PROTECTED] with issues you are experiencing so we can deal with them promptly. Thanks David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Thursday, September 08, 2005 2:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21??? 3.0.3. Mail has backed up repeatedly since installing this version. We originally installed 3.0 when it was released, but quickly backed off that when the service stopped on its own, leaving multiple files in the proc directory. After waiting a while, we got an email about 3.0.3 being released which seemed to specifically target the problems we had, so we again immediately installed that version (on Sep 2). The results were OK until the weekend when mail piled up for an unknown reason. We just waited that one out, and the next one which occurred Monday afternoon. The one from yesterday though caused an hour-long delay in email delivery. Today the decision was made to cease the beta test and revert back to 1.82. The change was made this morning at around 9:00 AM EST, and the files I noted are still in the work directory now, 5 hours later. I just want to note that the same server never backs up running 1.82. I notice that there is now a version 3.0.3.4, but we of course haven't tried that version. FWIW, we are using all three Declude products including Hijack. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, September 08, 2005 2:04 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21??? Dan, What version for Declude Beta were you running? As we have not seen the behavior you are referring to. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Thursday, September 08, 2005 1:58 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Is there any hope running Declude with imail8.21??? Yes, we just today reverted back to 1.82 because our single-processor machine backed up. At the worst there was an hour delay in delivery. I specifically denoted it was a single-processor machine just to indicate
RE: [Declude.JunkMail] Major problem with External tests and Beta 3.0.3.4
Hi John, 1. The only Beta that should currently be running is 3.0.3.7 you should not be reverting to a previous version of the Beta at this point. 2. If you have to revert the best options would be 1.82 for Imail and 2.0.6.16 For SmarterMail 3. We have fixed the issue reported to us by Darrell regarding the external test Message Sniffer incorrectly reporting the exit code as the weight when timing out. 4. Your concern of the external tests working incorrectly is currently being looked at and should have a response hopefully today. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Monday, September 12, 2005 9:07 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Major problem with External tests and Beta 3.0.3.4 Importance: High An update: There is a known problem with external tests and Declude 3.0.3.x. They are aware of it and are working on it. It is recommended if you are using an external program, you should revert to a pre 3.x version for now. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Monday, September 12, 2005 10:19 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Major problem with External tests and Beta 3.0.3.4 All tests finished within seconds. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, September 12, 2005 9:06 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Major problem with External tests and Beta 3.0.3.4 John, One of the other bugs I have seen is if a process takes more than 5 minutes to complete and is configured as a weight test and Declude terminates it they use the OS result code of 259 as the returned weight instead of defaulting to zero. Darrell John Tolmachoff (Lists) writes: FYI to all running the Beta, I have reviewed and verified a problem brought to my attention by Kami. It appears that some times, even though the external test is reporting an exit code of 0, DecludeJM is treating it as a fail and adding the configured weight. This goes for both positive weights like Sniffer and invURIBL and negative weights like AutoWhite for Declude. Declude support and beta have been notified. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude Beta 3.0.3.8 Available
If you are running the Declude Beta please upgrade to 3.0.3.8 and send feedback to [EMAIL PROTECTED] David B www.declude.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] ROUTING and COUNTRIES
If Declude is reading this... To help comfort those who think we are not paying attention. We read all posts and take notice of everything that is said. I will look at adding this to the Knowledge Base next week. David Barker www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Sunday, September 18, 2005 12:11 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] ROUTING and COUNTRIES If Declude is reading this, maybe they could add these values to their Knowledge Base. http://support.declude.com/Customer/KBArticle.aspx?articleid=6KBSearchID=10 12 I also found a country code list that included some of the codes Scott mentioned at the bottom of this page: http://it.farmprogress.com/declude/declude.htm Original Message From: Scott Fisher [EMAIL PROTECTED] Sent: Friday, September 16, 2005 4:15 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] ROUTING and COUNTRIES Yes COUNTRIES 0 CONTAINS *A is correct. The Asterick is a literal. codes I know of: *1 Multi-Regional *2 Europe *3 North America *4 Central/South America *5 Pacific Rim *A ARIN Unlisted (North America/South Africa) *B Public Data Network *E RIPE Unlisted (Europe, North Africa, Middle East) *I Private IP *L Loopback *M Multicast *P APNIC Unlisted (Asia Pacific) *R IANA Reserved *U Unknown - Original Message - From: Gary Steiner [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, September 16, 2005 2:06 PM Subject: re: [Declude.JunkMail] ROUTING and COUNTRIES I guess it depends on exactly what text it is searching for. In looking at my log files (set to Debug), I see that when it is checking the COUNTRIES filter I created, it displays a message like Checking countries: *A . Is it actually looking for an asterisk followed by an A? Here are some non-countries and the corresponding text displayed in the log file: [ARIN Unlisted] *A [RIPE Unlisted] *E [IANA Reserved] *R [Unknown] *U Does this mean we should be using a line like COUNTRIES0CONTAINS*A Is that asterisk a literal or will it act as a wildcard? Is anyone using this in a country filter? Original Message From: Nick Hayer [EMAIL PROTECTED] Sent: Friday, September 16, 2005 12:36 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] ROUTING and COUNTRIES Help from the guru's please... Wouldn't [shouldn't] this email fail the ROUTING test? X-Country-Chain: UNITED STATES-[IANA Reserved]-UNITED STATES-destination X-Note: SMTP Sender: [EMAIL PROTECTED] X-Note: Sent from: [Revdns: [No Reverse DNS]] [RemoteHostDomain: lgvsoft.at] [RemoteIP: 58.142.35.136] [SenderHost: lgvsoft.at] X-Note: Spam [v:2.0.6.16] tests: IP4R.SORBS.DYNAMIC [0], EXTERNAL.CIP.OnlyIp [2], TEST.DYNHELO [5], TEST.REVDNS [0], FILTER.DYNA [5], FILTER.COMBO.DYNHELO.CIP [3] Also - is there a way to determine that this email came from/through a foreign [to the US] source? This email did not trigger on a foreign filter file that contains: COUNTRIES0CONTAINSIANA Reserved Same file has these than never trigger it seems either COUNTRIES0CONTAINSARIN Unlisted COUNTRIES0CONTAINSRIPE Unlisted Thanks! -Nick --- --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Help in creating a Filter
Scott, I agree, unfortunately I do not have that information at present, I have requested this information from the engineers and will post it a soon as this is available. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Friday, September 16, 2005 5:30 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Help in creating a Filter I don't have the order... But I believe filters are done last after External comments. If David's monitoring the list, I think a list of what order the tests run in would be a great addition to the Junkmail manual. - Original Message - From: Erik [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, September 16, 2005 3:44 PM Subject: RE: [Declude.JunkMail] Help in creating a Filter We've been monitoring the MN-COMBO test (multiple tests failed) for the past 2 months. Most are failing INV-URIBL and SNIFFER; but some only failing one of them (either SNIFFER or INV-URIBL) but will fail DSBL/CBL/ROUTING/MXRATE. We've noticed that all the emails that we've monitored with the MN-COMBO that are spam; have multiple country hops. This is what we want to catch. Deleting based just on MN-COMBO will delete some false positives. But detecting our MN-COMBO test and then filtering the country hops will eliminate the false positives as they all originate outside of USA and/or start in USA then bounce to another country, then back to USA. Does anyone know (Darrell); if the %COUNTRYCHAIN% can be passed to an external program? I've thought of developing an EXE that does this final scan after MN-COMBO is tested. TIA, Erik -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Friday, September 16, 2005 2:31 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Help in creating a Filter Just to second this - I have seen a large amount of customers also farm out filtering to companies like big fish which scan the mail in oversea's countries. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Scott Fisher writes: I think this would do it in two filters: filter 1: SKIPIFWEIGHT 100 TESTSFAILED END NOTCONTAINS MN-COMBO COUNTRIES 100 NOTCONTAINS US filter 2: SKIPIFWEIGHT 100 TESTSFAILED END NOTCONTAINS MN-COMBO TESTSFAILED END CONTAINS filter1 COUNTRIES END STARTSWITH US COUNTRIES 100 CONTAINS US I'd be careful. Lots of US subsidaries are owned by a foreign company and have their mail server overseas. Also watch out for these special country codes: (which can belong to valid servers): # # Special Codes # *1 Multi-Regional *2 Europe *3 North America *4 Central/South America *5 Pacific Rim *A ARIN Unlisted (North America/South Africa) *B Public Data Network *E RIPE Unlisted (Europe, North Africa, Middle East) *I Private IP *L Loopback *M Multicast *P APNIC Unlisted (Asia Pacific) *R IANA Reserved *U Unknown - Original Message - From: Erik [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, September 16, 2005 12:45 PM Subject: [Declude.JunkMail] Help in creating a Filter Could someone help me in creating a filter? I need something to this effect. Can this be done in one filter? If WEIGHT = 100 or Higher then END If TESTFAILED CONTAINS MN-COMBO Then If CountryChain NOTCONTAINS UNITED STATES Then Then DELETE (triggers the filter - return 100 as weight) End If If CountryChain CONTAINS UNITED STATES-destination Then 'Email is probably good (return zero) Else DELETE (triggers the filter - return 100 as weight) End If End If Thanks! Erik --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
RE: [Declude.JunkMail] Help in creating a Filter
Erik, I have also asked the engineers to look into this for us, ie. A directive to force tests to run in a specific order. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Erik Sent: Saturday, September 17, 2005 5:34 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Help in creating a Filter It would be nice if there was a directive that forced the tests to run as they are in the order of which the appear in the CONFIG file. I know this may/would be a performance decrease but it would give end users control of external tests. Erik -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Saturday, September 17, 2005 3:23 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Help in creating a Filter Erik wrote: If Declude could confirm the order of how/which tests are run, it would be nice to know. I agree. The archives may help but as I recall Scott [former of Declude] was nebulous in what the order is. The only thing for sure was filters ran last in the order listed in global.cfg listing - generally :) Running in debug mode does confirm this. -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Latest ALL_LIST.DAT
At this point the latest ALL_LIST.DAT (Monday, April 11, 2005) is currently located here: http://www.declude.com/version/release/all_list.dat There will be a new ALL_LIST.DAT with the release of Declude 3.0 David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of J Porter Sent: Monday, September 19, 2005 5:02 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Latest ALL_LIST.DAT I think the ALL_LIST.DAT file is some sort of compressed list and not accessible via an editor... right??? Anyway, I found have a link where I got it some time back. http://www.declude.com/release/178/all_list.dat I haven't updated our server with it yet, so I have no idea how recent it is. Does anyone know if it's been updated recently? ~Joe - Original Message - From: Gary Steiner [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, September 19, 2005 10:58 AM Subject: Re: [Declude.JunkMail] Latest ALL_LIST.DAT I guess this would be the best source for current country codes: http://www.iso.ch/iso/en/prods-services/iso3166ma/02iso-3166-code-lists/list -en1.html ARIN's list lets you break it down by region: http://www.arin.net/community/countries.html Original Message From: Darrell \([EMAIL PROTECTED]) [EMAIL PROTECTED] Sent: Monday, September 19, 2005 11:50 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Latest ALL_LIST.DAT Dan, This would make sense since ARIN just completed another round of assignment of the BOGON's. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Dan Geiser writes: Hello, All, I think it's possible that my ALL_LIST.DAT needs to be updated because I'm starting to receive legit e-mails from Yahoo IPs that come up as ARIN Unlisted. My current ALL_LIST.DAT is dated 4/08/2005. Is there a newer copy that we can download somewhere? Thanks, Much! Dan Geiser [EMAIL PROTECTED] --- E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses at HNB.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] declude / spamassassin
Travis not sure what you are asking with how to use a remove :) 1. To remove the external test just # comment out the test in your global.cfg 2. To use spamassassin I would suggest using this plugin SPAMC32 http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release / David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Travis Sullivan Sent: Tuesday, September 20, 2005 1:21 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] declude / spamassassin I can't find documentation with regards to how to use a remove spamassassin server as an external test in declude v 1.81. Any help will be much appreciated. Thanks! Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] UPGRADE REPEAT
John, I have tried the Beta on NT4 it seemed to run ok the service etc worked. I did not see any inherent problems, but then again this was not a detailed test but rather I just wanted to see if it would run and it did. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Shacklett Sent: Thursday, September 22, 2005 9:55 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] UPGRADE REPEAT The Declude staff let me know that v3 won't work on WinNT, so I think I can't delay the inevitable any longer. Just for fun, has anyone tried the v3 beta with IMail6 on WinNT? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Wednesday, 21 September 2005 11:48 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] UPGRADE REPEAT FYI, it appears the Beta may be wrapping up soon. So if you can, maybe wait a week or two for version 3.x. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Wednesday, September 21, 2005 6:20 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] UPGRADE REPEAT Kevin, The version that is compatible with 8.2x is going to be Declude version 3.0 which is still in beta testing. Although others have ran the 2.0.6 train with no issues under 8.2x - however others have not been so fortunate. Upgrading to the 2.0.6 install is fairly easy. Just run a manual install and copy over the new declude.exe to the imail directory. You might also want to go through the global.cfg for 2.0.6 and add any of the tests to your global.cfg that are missing. The installation for 3.0 is a little more involved. If you wanted to go that route you would need to sign up for the beta program. However, from reading your post it sounds like you might not be interested in the beta program. Let us know if you need anymore help, Darrell - DLAnalyzer - Comprehensive reporting for Declude Junkmail and Virus. http://www.invariantsystems.com Kevin Shimwell writes: Declude Teammates Well after several month of not wanting to upgrade. Here goes. Current Imail version 8.21. running 1 month inluding beta. Colaberation Suite IM running also. ( only the IM service portion) Currrent declude version Declude 1.79 (C) Copyright 2000-2004 Computerized Horizons. I also have Processor issues but have been manageable. I have a current service agreement with declude and want to upgrade to the most current declude.exe version. What should my procedure be? and what to look out for. Any helpful links or documentation including wise declude professional opinions welcome. I'm running window 2000 server latest patches and I wan to upgrade my declude. I'm running version: E:\IMaildeclude -diag Declude 1.79 (C) Copyright 2000-2004 Computerized Horizons. Diagnostics ON (Declude v1.79). Declude JunkMail: Config file found (E:\IMail\Declude\global.CFG). Declude Virus: Config file found (E:\IMail\Declude\Virus.CFG). Declude Hijack:Not installed (no E:\IMail\Declude\Hijack.CFG file). Declude Confirm: Not installed (no E:\IMail\Declude\Confirm.CFG file). 50 spam tests defined: AHBL BLITZEDALL CBL DSBL ORDB SBL SORBS-HTTP SORBS-SOCKS SORBS-MISC SORBS-SMTP SORBS-SPAM SORBS-WEB SORBS-BLOCK SORBS- ZOMBIE SORBS-DUHL S PAMCOP DSN NOABUSE NOPOSTMASTER BONDEDSENDER BADHEADERS BASE64 CMDSPACE COMMENTS HELOBOGUS IPNOTINMX MAILFROM NOLEGITCONTENT PERCENT REVDNS ROUTING SPAMHEADERS IPLINKED IPLINKED2 MYFILTER KILLFROM SUBJECTFILTER BODYFILTER GIBBERISH ANTI-GIB BERISH SNIFFER WEIGHT10 WEIGHT20 WEIGHT1-10 WEIGHT11-20 WEIGHT21-34 WEIGHT35-45 WEIGHT46-200 CATCHALLMAILS WHITLIST IMail reports Official Host Name as: scooby.linkbrokers.com. IMail's SendName registry seems OK: E:\IMail\declude.exe. DNS Server: 66.153.205.8 Declude JunkMail Status: PRO version registered. Declude Virus Status:Pro Version Registered. Declude Hijack Status: NOT REGISTERED: No activation code. Kevin Shimwell Link Brokers Group, LLC ( Support ) 1600 Hwy 17 South North Myrtle Beach, SC 29582 Phone: 843-663-1004 Fax: 843-663-1007 Email: [EMAIL PROTECTED] 24/7 Help : http://www.linkbrokers.com/help_ticket.cfm http://www.linkbrokers.com/help_ticket.cfm Support Forum: http://www.linkbrokers.com/chatboard/index.cfm?CFB=1 Support M-F 1-888-546-5631 This message is intended only for the use of the individual or entity towhich it is addressed and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient or
[Declude.JunkMail] Declude Beta 3.0.4.4 Posted
2 new Directives WAITFORTHREADS 1500 Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5 seconds this can be changed so that when the maximum threads are in use this time specifics the wait before checking to launch more threads. WAITBETWEENTHREADS 1 Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1 millisecond The time to wait between spawning one thread and starting to process another thread. David B www.declude.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted
WAITFORTHREADS 1500 WAITBETWEENTHREADS 1 Are the suggested defaults David B www.declude.com PS. Darrell, I will answer your question shortly, just waiting on some feedback from developers. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Grosshandler Sent: Thursday, September 22, 2005 11:59 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted Are these the suggested defaults? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, September 22, 2005 10:41 AM To: Declude.JunkMail@declude.com; Declude.Virus@declude.com Subject: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted 2 new Directives WAITFORTHREADS 1500 Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5 seconds this can be changed so that when the maximum threads are in use this time specifics the wait before checking to launch more threads. WAITBETWEENTHREADS 1 Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1 millisecond The time to wait between spawning one thread and starting to process another thread. David B www.declude.com --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted
Different systems / configuration respond differently to these settings. In particular they to fine tune through-put with CPU utilization. 1. SLOW server that is heavily loaded You may want to try to increase WAITBETWEENTHREADS and lower THREADS. 2. FAST server Use the THREADS and WAITFORTHREADS to adjust the CPU utilization. When decludeproc first starts up it will use a lot of the CPU but after that the %CPU used by decludeproc should come way down. The %CPU of all processes running may be high depending on external tests, other processes, etc. If the system is spiking but coming down quickly that's good. David B www.declude.com When decludeproc first starts up it will use a lot of the CPU but once it gets cooking the %CPU used by decludeproc should come way down. The %CPU of all processes running may be high depending on external tests, other processes, etc. It the system is spiking but coming down quickly that's good. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Thursday, September 22, 2005 11:51 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted David, Can you go over how you see them helping and what the positive benefit would be in tweaking those values? For example: by setting the WAITBETWEENTHREADS to 1 second it will help by . Darrell David Barker writes: 2 new Directives WAITFORTHREADS 1500 Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5 seconds this can be changed so that when the maximum threads are in use this time specifics the wait before checking to launch more threads. WAITBETWEENTHREADS 1 Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1 millisecond The time to wait between spawning one thread and starting to process another thread. David B www.declude.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted
John, It has always been THREADS From the Beta page: Performance 1. Create a file in your Declude folder called declude.cfg 2. Add the following directive THREADS 5 3. The default is 5 threads 4. This value can be adjusted to allow more threads to run David Barker www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Thursday, September 22, 2005 12:34 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted David, too clarify, is that THREAD or THREADS? Originally it was THREAD. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, September 22, 2005 9:00 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted WAITFORTHREADS 1500 WAITBETWEENTHREADS 1 Are the suggested defaults David B www.declude.com PS. Darrell, I will answer your question shortly, just waiting on some feedback from developers. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Grosshandler Sent: Thursday, September 22, 2005 11:59 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted Are these the suggested defaults? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, September 22, 2005 10:41 AM To: Declude.JunkMail@declude.com; Declude.Virus@declude.com Subject: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted 2 new Directives WAITFORTHREADS 1500 Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5 seconds this can be changed so that when the maximum threads are in use this time specifics the wait before checking to launch more threads. WAITBETWEENTHREADS 1 Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1 millisecond The time to wait between spawning one thread and starting to process another thread. David B www.declude.com --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted
Am I to assume that the identifiers SLOW server and FAST server are completely relative to the amount of CPU utilization? For instance, I have a very fast server, but it does a ton of work and can experience high CPU utilization, especially in spikes. So is the trick here really just the CPU load? Correct CPU Load is the key but one should also take into account the CPU speed. e.g.. A SLOW server could be 800 Mhz with 256 MB ram. In which case you do not want to be using a high thread count and you want to give the CPU sufficient time between threads to do other things. It would seem wise to then just leave the settings set for a heavily loaded server. If that is your preference yes. We have not yet discovered the optimal numbers as it does have to do a lot with the environment, server traffic, load etc. So by adding these directives gives those who would like to tweak the system the ability to do so. David Barker www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Thursday, September 22, 2005 1:01 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted David, Am I to assume that the identifiers SLOW server and FAST server are completely relative to the amount of CPU utilization? For instance, I have a very fast server, but it does a ton of work and can experience high CPU utilization, especially in spikes. So is the trick here really just the CPU load? Another question along these lines...High CPU utilization can happen on any server because of the burstiness of the traffic, and it is these high CPU utilization periods that really matter to people like myself as I could pretty much care less about a 1 second delay on normal E-mail in comparison to processing a huge backlog of messages. It would seem wise to then just leave the settings set for a heavily loaded server. One alternative to manually specifying settings that are tied to notoriously bursty traffic would be to let the program manage this for us. I believe that Sniffer does this for instance and maybe Pete will chime in, or maybe he has already in private. It would seem that Declude could adjust things based on it's own spool of messages to process as these would be indicative of the traffic and the ability of a machine to handle that traffic. Matt David Barker wrote: Different systems / configuration respond differently to these settings. In particular they to fine tune through-put with CPU utilization. 1. SLOW server that is heavily loaded You may want to try to increase WAITBETWEENTHREADS and lower THREADS. 2. FAST server Use the THREADS and WAITFORTHREADS to adjust the CPU utilization. When decludeproc first starts up it will use a lot of the CPU but after that the %CPU used by decludeproc should come way down. The %CPU of all processes running may be high depending on external tests, other processes, etc. If the system is spiking but coming down quickly that's good. David B www.declude.com When decludeproc first starts up it will use a lot of the CPU but once it gets cooking the %CPU used by decludeproc should come way down. The %CPU of all processes running may be high depending on external tests, other processes, etc. It the system is spiking but coming down quickly that's good. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Thursday, September 22, 2005 11:51 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted David, Can you go over how you see them helping and what the positive benefit would be in tweaking those values? For example: by setting the WAITBETWEENTHREADS to 1 second it will help by . Darrell David Barker writes: 2 new Directives WAITFORTHREADS 1500 Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5 seconds this can be changed so that when the maximum threads are in use this time specifics the wait before checking to launch more threads. WAITBETWEENTHREADS 1 Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1 millisecond The time to wait between spawning one thread and starting to process another thread. David B www.declude.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
RE: Re[10]: [Declude.JunkMail] declude / spamassassin
Thank you Randy, your post is very much appreciated. :) David Barker www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Friday, September 23, 2005 6:03 PM To: Declude.JunkMail@declude.com Subject: RE: Re[10]: [Declude.JunkMail] declude / spamassassin I just wanted to personally thank David Barker for all of his help last night with server queue issues we had... Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net Global Web Solutions is a registered trademark of Global Web Solutions, Inc., Glen Allen, VA --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] opening a ticket with Declude support
Hi Gary, Currently the we have the ticket response system temporarily disabled. As far as I am aware we have received all your messages. The way to open a ticket is to send an email to support @ declude.com you can also submit a ticket using http://support.declude.com/Customer/SubmitTicket.aspx Under general circumstances, support emails are answered within 24 hours on business days. Which are Mon - Fri. If you feel that support is taking too long to respond please feel free to email me directly dbarker @ declude.com As for your support tickets, 1. SmarterMail picking up on RBL's that Declude is not is currently under review and as soon as we have an answer to this I will let you know 2. The header in the body is badly formed emails due to broken mail clients. This is not a bug in declude but we are currently looking into a way to bette handle these exceptions. 3. AVAFTERJMON This is the way to have Declude EVA (Virus) run after Declude JunkMail,tthis directive is located in your virus.cfg file. What specific issues are you refering to with 2.x ? I will follow up on this and respond. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, September 27, 2005 12:01 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] opening a ticket with Declude support It used to be that when I sent an email to [EMAIL PROTECTED] I would get an automatic reply like the following: Thank you for submitting a ticket to support. Your ticket number is [xxx--]. Please keep this ticket number for your records and include it in the subject (including brackets) of all future emails regarding this issue. Thank You. Declude Technical Support That doesn't happen anymore. If I do get a reply from [EMAIL PROTECTED], it is usually from a specific support person like David Barker. Other messages I have sent to [EMAIL PROTECTED] received no response, and for all I know ended up in the bit bucket. How does one open a ticket with Declude support? Is the email method no longer viable? Should I be using the web site at http://support.declude.com/Customer/SubmitTicket.aspx ? I would love to download the 3.x upgrade, but I don't want to take on 3.x until I see resolution of the issues with 2.x. Or at least a statement from Declude saying that all the problems I've been having with 2.x are fixed in 3.x. --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] opening a ticket with Declude support
Gary, Are your timings in your SmarterMail (command line time out) and (command timeout) set to 300 or have you lowered the time? David Barker www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, September 27, 2005 5:30 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] opening a ticket with Declude support What made you think I was on IMail? I'm using SmarterMail 2.6. The Declude version I'm running is 2.0.6 (I purchased the product in July 2005). AUTOWHITELIST is definitely not ON. Here's a little snippet from the log file: 09/26/2005 01:25:17 39819112 Msg failed WEIGHT30 (Weight of 31 reaches or exceeds the limit of 30.). Action=HOLD. 09/26/2005 01:25:17.022 39819112 [2408] actionsdata[ i ] = [26 Sep 2005] 09/26/2005 01:25:17.022 39819112 [2408] ACTION_HOLD - holddir [C:\SMARTERMAIL\SPOOL\spam] 09/26/2005 01:25:17.022 39819112 [2408] ACTION_HOLD - datafile [C:\SMARTERMAIL\SPOOL\proc\39819112.EML] 09/26/2005 01:25:17.022 39819112 [2408] ACTION_HOLD - recipfile [C:\SMARTERMAIL\SPOOL\proc\39819112.HDR] 09/26/2005 01:25:17.022 39819112 [2408] ACTION_HOLD - datahold [C:\SMARTERMAIL\SPOOL\spam\26 Sep 2005\39819112.EML] 09/26/2005 01:25:17.022 39819112 [2408] ACTION_HOLD - reciphold [C:\SMARTERMAIL\SPOOL\spam\26 Sep 2005\39819112.HDR] 09/26/2005 01:25:17 39819112 Subject: [EMAIL PROTECTED] --- $1.56 per dose pmonkz qdvfg ouo 09/26/2005 01:25:17 39819112 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 219.13.84.45 ID: A3FF561BF4 09/26/2005 01:25:17 39819112 Tests failed [weight=31]: CATCHALLMAILS=IGNORE NOLEGITCONTENT=WARN IPNOTINMX=WARN CBL=WARN MXRATE-BLOCK=WARN SORBS-DUHL=WARN SPAMBAG=WARN FIVETENSRC=WARN ROUTING=WARN WEIGHT6=WARN WEIGHT10=HOLD WEIGHT14=HOLD WEIGHT20=HOLD WEIGHT30=HOLD 09/26/2005 01:25:17 39819112 Action(s) taken for [EMAIL PROTECTED] = IGNORE WARN HOLD [LAST ACTION=HOLD] 09/26/2005 01:25:17.022 39819112 [2408] Done Looping 09/26/2005 01:25:17.022 39819112 [2408] RecipFile( C:\SMARTERMAIL\SPOOL\proc\39819112.HDR ); 09/26/2005 01:25:17.022 39819112 [2408] QUEUEFILE_SAVEFILE = newhdrfile = [C:\SMARTERMAIL\SPOOL\proc\39819112.HDR] 09/26/2005 01:25:17.022 39819112 [2408] QUEUEFILE_SAVEFILE = newemlfile = [C:\SMARTERMAIL\SPOOL\proc\39819112.EML] 09/26/2005 01:25:17 39819112 Cumulative action(s) taken on this email = IGNORE WARN HOLD [LAST ACTION=HOLD] 09/26/2005 01:25:17.022 39819112 [2408] AlterMessage 09/26/2005 01:25:17.022 39819112 [2408] Subject = [] 09/26/2005 01:25:17.022 39819112 [2408] Warning = [X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected. X-RBL-Warning: IPNOTINMX: X-RBL-Warning: CBL: Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=219.13.84.45; X-RBL-Warning: MXRATE-BLOCK: http://www.mxrate.com/lookup/refused.asp?ipaddress=219.13.84.45; X-RBL-Warning: SORBS-DUHL: Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml?219.13.84.45; X-RBL-Warning: SPAMBAG: 45.84.13.219.blacklist.spambag.org. X-RBL-Warning: FIVETENSRC: 45.84.13.219.blackholes.five-ten-sg.com. X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner consistent with spam [210f]. X-RBL-Warning: WEIGHT6: Weight of 31 reaches or exceeds the limit of 6. X-Declude-Sender: [EMAIL PROTECTED] [219.13.84.45] X-Declude-Spoolname: 39819112.EML X-Declude-Note: Scanned by Declude 2.0.6 (http://www.declude.com/x-note.htm) for spam. X-Declude-Scan: Score [31] at 01:25:17 on 26 Sep 2005 X-Declude-Tests: NOLEGITCONTENT, IPNOTINMX, CBL, MXRATE-BLOCK, SORBS-DUHL, SPAMBAG, F 09/26/2005 01:25:17.022 39819112 [2408] Header = [] 09/26/2005 01:25:17.022 39819112 [2408] Footer = [--- [This E-mail scanned for viruses by Declude Virus] ] 09/26/2005 01:25:17.022 39819112 [2408] MoveFile in AlterMessage - datafile = [C:\SMARTERMAIL\SPOOL\proc\39819112.EML] TempFile = [C:\SMARTERMAIL\SPOOL\proc\39819112.EM$] 09/26/2005 01:25:17.022 39819112 [2408] CreateHoldFolder parameter [C:\SMARTERMAIL\SPOOL\spam\26 Sep 2005\39819112.EML] 09/26/2005 01:25:17.022 39819112 [2408] Hold directory is [C:\SMARTERMAIL\SPOOL\spam\26 Sep 2005] 09/26/2005 01:25:17.022 39819112 [2408] Moving file to spam hold directory [C:\SMARTERMAIL\SPOOL\proc\39819112.EML][C:\SMARTERMAIL\SPOOL\spam\26 Sep 2005\39819112.EML] 09/26/2005 01:25:17 39819112 ERROR: Could not move spam to hold! Code: [2] Error String: [The system cannot find the file specified.] [C:\SMARTERMAIL\SPOOL\proc\39819112.EML] [C:\SMARTERMAIL\SPOOL\spam\26 Sep 2005\39819112.EML] 09/26/2005 01:25:17.022 39819112 [2408] Moving file to spam hold directory [C:\SMARTERMAIL\SPOOL\proc\39819112.HDR][C:\SMARTERMAIL\SPOOL\spam\26 Sep 2005\39819112.HDR] 09/26/2005 01:25:17 39819112 ERROR: Could not move spam to hold! Code: [2] Error String: [The system cannot find the file specified.] [C:\SMARTERMAIL\SPOOL\proc\39819112.EML] [C:\SMARTERMAIL\SPOOL\spam\26 Sep 2005\39819112.EML] Original Message From: Matt [EMAIL PROTECTED] Sent: Tuesday
RE: [Declude.JunkMail] Country Test Very odd Results
Hey Guys, I just uploaded a new http://www.declude.com/version/release/all_list.dat see if this solves the problems that you have been seeing. David Barker www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, September 27, 2005 5:11 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Country Test Very odd Results Dave, I pulled that version down and compared the two (file sizes) and they were the same. I put that one in just in case. Darrell Dave Doherty writes: Hi Darrell-- This might have nothing at all to do with it, but maybe you need to update ALL_LIST.DAT... http://www.declude.com/version/release/all_list.dat There was a thread on this recently. Apparently, ARIN recently reassigned some blocks. -Dave Doherty Skywaves, Inc. - Original Message - From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, September 27, 2005 4:14 PM Subject: [Declude.JunkMail] Country Test Very odd Results Anyone want to take a stab at this one I would appreciate it. 216.55.166.147 - IPWHOIS Says its being used in San Diego CA Declude via Countries Test Reports 09/27/2005 14:58:39.015 q96320ffe0578da59.smd Msg failed COUNTRY (Message failed COUNTRY test (line 15, weight 5)). Action=WARN. Line 15: is the country AR The message was directly send from 216.55.166.147 so there were no other hops in the message in case it caught it in the country chain. It's just really weird as I am getting all kinds of messages that are legit seemingly get triggered on the country and mailfrom test.. Any thoughts? Darrell - --- Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] opening a ticket with Declude support
It looks like SmarterMail may be grabbing the message before Declude can move it or make the changes needed, which seems to be a lot of the type problems you are facing. I would suggest trying the 3.0 release, if this solves your problem great if not it is always easy to revert to 2.0.6.16 by stopping the decludeproc service and renaming the declude.exe. If you are going to do an upgrade be sure to read the instructions. David Barker www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, September 27, 2005 6:06 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] opening a ticket with Declude support David, As per our past off-the-list discussion, I had re-lowered the times to 120, but when this sudden increase of spam occurred yesterday, I raised them back up to 300. It doesn't seem to have had any effect. Gary Original Message From: David Barker [EMAIL PROTECTED] Sent: Tuesday, September 27, 2005 6:01 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] opening a ticket with Declude support Gary, Are your timings in your SmarterMail (command line time out) and (command timeout) set to 300 or have you lowered the time? David Barker www.declude.com --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] PROCESSES VS THREADS settings
PROCESSES is only relevant to Declude 2.0.6 ADJUSTFORLOAD is only relevant to Declude 2.0.6 THREADS is only relevant to Declude 3.0 David Barker www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith Sent: Wednesday, September 28, 2005 9:35 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] PROCESSES VS THREADS settings Does setting PROCESSES (in the 2.0.6 notes) contradict with THREADS (in the 3.0 notes)? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] decludeproc did not install
Fred, Goto you're the command prompt and to your \Imail directory and type the following: decludeproc -i This should install the service. David Barker www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frederick Samarelli Sent: Wednesday, September 28, 2005 1:27 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] decludeproc did not install It looks like Declude should have installed a Service called decludeproc service. It did not. What next. Fred --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] decludeproc did not install
decludeproc -vversion decludeproc -i install decludeproc -uuninstall David Barker www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Wednesday, September 28, 2005 3:55 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] decludeproc did not install How would you de-install the service if you wanted to? Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of David Barker Sent: Wednesday, September 28, 2005 3:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] decludeproc did not install Fred, Goto you're the command prompt and to your \Imail directory and type the following: decludeproc -i This should install the service. David Barker www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frederick Samarelli Sent: Wednesday, September 28, 2005 1:27 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] decludeproc did not install It looks like Declude should have installed a Service called decludeproc service. It did not. What next. Fred --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Country testing
We have received the ticket and are currently looking into the issues regarding MAILFROM and COUNTRY David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Monday, October 03, 2005 11:09 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Country testing No reply bad - Original Message - From: Darrell ([EMAIL PROTECTED]) mailto:[EMAIL PROTECTED]) To: Declude.JunkMail@declude.com Sent: Saturday, October 01, 2005 9:53 PM Subject: Re: [Declude.JunkMail] Country testing Scott, I posted about this earlier this week to the forum - it caused massive amounts of false positives on my system. I simply had to disable the test. Also, check out the MAILFROM test if you are using it. Something does not seem right on that one either.I submitted tickets on both of these issues this week and still have not received a reply. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail Queue Monitoring, Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Scott Fisher mailto:[EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, October 01, 2005 12:38 PM Subject: [Declude.JunkMail] Country testing I just installed 3.05.5 and the COUNTRY variable and the Coutnry chain are not working correctly: Before with 2.0.6.16: Received: from web32604.mail.mud.yahoo.com [68.142.207.231] by imail.Farmprogress.com (SMTPD-8.21) id A3C7032C; Sat, 01 Oct 2005 11:05:27 -0500 X-RBL-Warning: COUNTRY-0POINT: Message failed COUNTRY-0POINT test (line 13, weight 0) X-Country-Chain: UNITED STATES-destination Country-0point triggered on: COUNTRY 0 IS US This was processed correctly. == After with 3.0.5.5: Received: from web32604.mail.mud.yahoo.com [68.142.207.231] by imail.Farmprogress.com (SMTPD-8.21) id A70202F4; Sat, 01 Oct 2005 11:19:14 -0500 X-RBL-Warning: COUNTRY-ABLANK: Message failed COUNTRY-ABLANK test (line 8, weight 0) X-Country-Chain: -CHINA-destination Country-ablank triggered on: COUNTRY 0 ISBLANK So with Declude 3.05.5: The COUNTRY variable is not getting populated since it triggered as blank The country chain is incorrect. It lists China, it should be UNITED STATES-destination These were both run with the same all_list.dat file dated 9/27/05 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] How to requeue a message with Declude 3.x
Scott, I think what you have done is correct. Anything that is in the spool is up to IMail to deliver. David Barker www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott FisherSent: Monday, October 03, 2005 11:30 AMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] How to requeue a message with Declude 3.x Can anyone share how to requeue a held message with Declude 3.x? I've dropped it from \spool\spam to \spool and I haven't seen it come in yet.
RE: [Declude.JunkMail] Country testing
Thanks Nick. Also know that you can always email me directly too. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Monday, October 03, 2005 11:28 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Country testing David, I just want you to know I really appreciate your participation in this list. I find it very helpful and reassuring! Thanks!! -Nick David Barker wrote: We have received the ticket and are currently looking into the issues regarding MAILFROM and COUNTRY David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Monday, October 03, 2005 11:09 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Country testing No reply bad - Original Message - From: Darrell ([EMAIL PROTECTED]) mailto:[EMAIL PROTECTED]) To: Declude.JunkMail@declude.com Sent: Saturday, October 01, 2005 9:53 PM Subject: Re: [Declude.JunkMail] Country testing Scott, I posted about this earlier this week to the forum - it caused massive amounts of false positives on my system. I simply had to disable the test. Also, check out the MAILFROM test if you are using it. Something does not seem right on that one either.I submitted tickets on both of these issues this week and still have not received a reply. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail Queue Monitoring, Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Scott Fisher mailto:[EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, October 01, 2005 12:38 PM Subject: [Declude.JunkMail] Country testing I just installed 3.05.5 and the COUNTRY variable and the Coutnry chain are not working correctly: Before with 2.0.6.16: Received: from web32604.mail.mud.yahoo.com [68.142.207.231] by imail.Farmprogress.com (SMTPD-8.21) id A3C7032C; Sat, 01 Oct 2005 11:05:27 -0500 X-RBL-Warning: COUNTRY-0POINT: Message failed COUNTRY-0POINT test (line 13, weight 0) X-Country-Chain: UNITED STATES-destination Country-0point triggered on: COUNTRY 0 IS US This was processed correctly. === = == After with 3.0.5.5: Received: from web32604.mail.mud.yahoo.com [68.142.207.231] by imail.Farmprogress.com (SMTPD-8.21) id A70202F4; Sat, 01 Oct 2005 11:19:14 -0500 X-RBL-Warning: COUNTRY-ABLANK: Message failed COUNTRY-ABLANK test (line 8, weight 0) X-Country-Chain: -CHINA-destination Country-ablank triggered on: COUNTRY 0 ISBLANK So with Declude 3.05.5: The COUNTRY variable is not getting populated since it triggered as blank The country chain is incorrect. It lists China, it should be UNITED STATES-destination These were both run with the same all_list.dat file dated 9/27/05 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 3.05.5 issues
Harrymake sure you are running message Sniffer in persistent mode. David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry VanderzandSent: Tuesday, October 04, 2005 12:27 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] 3.05.5 issues thank you I was under the understanding given me by David from Declude that it was appropriate given the amount of power my hardware has. What would you recommend for my hardware? Thanks John, I always appreciate your active involvement in the list Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists)Sent: Tuesday, October 04, 2005 12:11 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] 3.05.5 issues Your threads is way too high, and I suspect that there are time outs occurring and not all scanning is being done. John T eServices For You -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry VanderzandSent: Tuesday, October 04, 2005 6:17 AMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] 3.05.5 issues I find that since being on the new version that more spam is slipping through. We have imail v8.05, declude and sniffer on win 2000 server dual xeon 3.4Ghz with 2Gb ram. Threads are set to 50 with no other setting in declude.cfg Any advice you can give me to tighten it to where we had it before? I have had several clients complaining Other than changing from V2.06.16 to 3.05 nothing else has changed on the server thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222
RE: [Declude.JunkMail] Country testing
Thank you Scott, I will pass this information onto the engineers. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, October 05, 2005 10:26 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Country testing I don't know if this will help. But here's an Excel spreadsheet showing the mailfrom test oddities. Mostly misfires on non-autheniticated email from my own domain. - Original Message - From: David Barker [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, October 03, 2005 10:13 AM Subject: RE: [Declude.JunkMail] Country testing We have received the ticket and are currently looking into the issues regarding MAILFROM and COUNTRY David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Monday, October 03, 2005 11:09 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Country testing No reply bad - Original Message - From: Darrell ([EMAIL PROTECTED]) mailto:[EMAIL PROTECTED]) To: Declude.JunkMail@declude.com Sent: Saturday, October 01, 2005 9:53 PM Subject: Re: [Declude.JunkMail] Country testing Scott, I posted about this earlier this week to the forum - it caused massive amounts of false positives on my system. I simply had to disable the test. Also, check out the MAILFROM test if you are using it. Something does not seem right on that one either.I submitted tickets on both of these issues this week and still have not received a reply. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail Queue Monitoring, Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Scott Fisher mailto:[EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, October 01, 2005 12:38 PM Subject: [Declude.JunkMail] Country testing I just installed 3.05.5 and the COUNTRY variable and the Coutnry chain are not working correctly: Before with 2.0.6.16: Received: from web32604.mail.mud.yahoo.com [68.142.207.231] by imail.Farmprogress.com (SMTPD-8.21) id A3C7032C; Sat, 01 Oct 2005 11:05:27 -0500 X-RBL-Warning: COUNTRY-0POINT: Message failed COUNTRY-0POINT test (line 13, weight 0) X-Country-Chain: UNITED STATES-destination Country-0point triggered on: COUNTRY 0 IS US This was processed correctly. == After with 3.0.5.5: Received: from web32604.mail.mud.yahoo.com [68.142.207.231] by imail.Farmprogress.com (SMTPD-8.21) id A70202F4; Sat, 01 Oct 2005 11:19:14 -0500 X-RBL-Warning: COUNTRY-ABLANK: Message failed COUNTRY-ABLANK test (line 8, weight 0) X-Country-Chain: -CHINA-destination Country-ablank triggered on: COUNTRY 0 ISBLANK So with Declude 3.05.5: The COUNTRY variable is not getting populated since it triggered as blank The country chain is incorrect. It lists China, it should be UNITED STATES-destination These were both run with the same all_list.dat file dated 9/27/05 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Orphan files in work directory
What is the content of the D file? Eg, is it spam, legit, list request ? David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lyndon Eaton Sent: Friday, October 07, 2005 10:48 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Orphan files in work directory Hi, just noticed I have orphan D files in the proc/work directory. Why would this be? Shouldn't they at least be moved back into \spool ? Regards, Lyndon Eaton E: [EMAIL PROTECTED] T: +44(0)8712360301 F: +44(0)8712360300 For all your consumable requirements www.premier-consumables.co.uk Email checked by UKsubnet anti-virus service To prevent email abuse block spam contact [EMAIL PROTECTED] Tel: +44(0)9063407727 (calls cost #1.50/minute) Fax: +44(0)8712360300 Web: www.uksubnet.net Powered by UKsubnet Internet Service Provider Business to Business Internet (ISP) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Ok, what did I do wrong?
Looks like you did not rename the old declude.exe before doing the upgrade. Look in the Imail folder if the declude.exe is not 32k in size you are running the old declude.exe Download the new declude.exe here (this is a temp link and for Imail only) http://www.declude.com/declude.exe Once this is done you should see messages being moved to your \proc directory. I would also suggest you start on about 20 threads. To check the version of declude, at your command prompt for Imail type Declude -v David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Friday, October 07, 2005 4:57 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Ok, what did I do wrong? Imail 8.21 Was/is Declude 2.0.6.16 I just attempted the upgrade to 3.0.5.5 by doing the following: Downloaded current 3.0.5.5 Stopped SMTP Stopped Queuemgr Created \proc under \spool Ran the 3.0.5.5 upgrade Created declude.cfg under c:\imail\declude\ and entered THREADS 5 Made sure decludeproc service was running - wasn't, but started it. Started SMTP Started Queuemgr Mail is flowing. Declude -diag shows I am still running 2.0.6.16 Seeing nothing happening in \proc folder (I guess because 2.0.6.16 is still there.) Is there a 3.0.5.5 version of declude.exe ?? Where do you get it? Thanks for any help John C --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Ok, what did I do wrong?
Thanks guys, yes you were right, just checking to see if you were taking note ;) you passed the test. David Barker www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Friday, October 07, 2005 5:41 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Ok, what did I do wrong? Yes you are right, I missed it. decludeproc -v. Maybe between David, you, and me, we'll get that part right. :-) John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Friday, October 07, 2005 4:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Ok, what did I do wrong? You di dnot remove the declude exe from the imail folder as per the instructions. You do not have the proper stub program running. Also to get the declude version you run decludeproc -diag. Althoug mine is not currently working. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Carter Sent: Friday, October 07, 2005 1:57 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Ok, what did I do wrong? Imail 8.21 Was/is Declude 2.0.6.16 I just attempted the upgrade to 3.0.5.5 by doing the following: Downloaded current 3.0.5.5 Stopped SMTP Stopped Queuemgr Created \proc under \spool Ran the 3.0.5.5 upgrade Created declude.cfg under c:\imail\declude\ and entered THREADS 5 Made sure decludeproc service was running - wasn't, but started it. Started SMTP Started Queuemgr Mail is flowing. Declude -diag shows I am still running 2.0.6.16 Seeing nothing happening in \proc folder (I guess because 2.0.6.16 is still there.) Is there a 3.0.5.5 version of declude.exe ?? Where do you get it? Thanks for any help John C --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 3.05.5 TempLog/Concatanate Log issues
Mark, I am following up with Bill and will post as soon as I have an answer. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark SmithSent: Monday, October 10, 2005 2:43 PMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] 3.05.5 TempLog/Concatanate Log issues Any word from Declude on the issue in 3.05.5 that fills up the /templogs folder? To recap, if Concatenate logs is turned on AND the decludeproc service crashes, declude "forgets" about the temp. logs. (Concatenate Log Threshold is reset to 0). This results in the /templog eventually growing and, when the folder reaches 10,000+ messages slows down declude. The problem snowballs until the server crashes.
RE: [Declude.JunkMail] Hijack question
Stop/restart the decludeproc service David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Wednesday, October 12, 2005 12:53 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hijack question Dave, You need to stop/start deccon.exe That wil reset the counter so to speak. Question to Declude support - How does this work with Declude 3x? Thanks! -Nick Dave Doherty wrote: Hi all, Running Declude version 1.82 with Hijack... One of my customers go caught by Hijack a couple of days ago as a result of some activity with mailing list software he was trying out. Needless to say, he now has a thorough understanding of our UCE policy. But ever since, everything he sends - even just a single message at a time - gets caught by Hijack and placed in Hold2. I recall that there was a second step after renaming the messages and putting them back into the queue, but it has been so long since I had an outgoing spam problem that I forget what that was. There doesn't seem to be a mention of it on the Declude website. Any help would be appreciated. DaveDoherty Skywaves, Inc. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Switched to SmarterMail
Evans, The feature should be available in SM. If you have in your global.cfg AUTOWHITELIST ON This will allow any address in your address book to be whitelisted. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Evans Martin Sent: Monday, October 17, 2005 11:54 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Switched to SmarterMail Well, we finally bit the bullet and switched to SmarterMail. Everything seems to be working great and my customers love the new interface. However, they are missing the auto whitelisting of their address books. Is this feature an IMail only feature? Is there any way to duplicate this functionality in SmarterMail? Thanks, Evans Martin
RE: [Declude.JunkMail] Wondering about Declude 3.x
Planning to post 3.0.5.9 tomorrow. Fixes include COUNTRY and MAILFROM, improved installer, autoreview directory option, error directory for files not able to be moved, smartermail forward issue resolved etc. In general we have been pleased with the results - of the outstanding issues these seem to be isolated to a specific customer environments, and we are currently working to try replicate these. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, October 19, 2005 3:25 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Wondering about Declude 3.x I appreciate the others sharing their experiences, but I was also hoping that someone from Declude could comment on the current state, any known issues, and what the plans are related to bugs and/or tweaks to the newly introduced code. Thanks, Matt Matt wrote: Since things have been quite for some time, I just wanted to check up on what is happening with 3.x. The last that I heard, there were several people having issues with multi-processor systems. The thread settings also concern me in the way that they are being implemented. It appears from reports that these can greatly affect the performance of a system (and therefore it's stability/ability), and knowing how variable E-mail can be, I'm not sure that this is something that I would want to have hard coded on my system. I would hope that there would be another way to go about this. Right now I'm on 2.0.6.16 and have been for some time, but as bugs arise, and bug fixes are released, I would like to have the peace of mind to upgrade to the latest code, but I'm not sure that I have that yet. I know that the folks at Declude have been working long and hard at this for sometime now, and I don't want to disrespect that hard work, but I would appreciate an update on where things are, and where they are going as far as the service issues go. Thanks, Matt --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Wondering about Declude 3.x
Yes the only change is the decludeproc.exe although in the full install now it has all the new configs and both SM and IM versions. I will put the links on the upgrade page for just the decludeproc.exe for SM and IM David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Thursday, October 20, 2005 12:30 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Wondering about Declude 3.x Will there be an update version or just a full install? The file looks to be 6 MB, and I bet the only change is the decludeproc.exe? - Original Message - From: David Barker [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, October 19, 2005 2:38 PM Subject: RE: [Declude.JunkMail] Wondering about Declude 3.x Planning to post 3.0.5.9 tomorrow. Fixes include COUNTRY and MAILFROM, improved installer, autoreview directory option, error directory for files not able to be moved, smartermail forward issue resolved etc. In general we have been pleased with the results - of the outstanding issues these seem to be isolated to a specific customer environments, and we are currently working to try replicate these. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, October 19, 2005 3:25 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Wondering about Declude 3.x I appreciate the others sharing their experiences, but I was also hoping that someone from Declude could comment on the current state, any known issues, and what the plans are related to bugs and/or tweaks to the newly introduced code. Thanks, Matt Matt wrote: Since things have been quite for some time, I just wanted to check up on what is happening with 3.x. The last that I heard, there were several people having issues with multi-processor systems. The thread settings also concern me in the way that they are being implemented. It appears from reports that these can greatly affect the performance of a system (and therefore it's stability/ability), and knowing how variable E-mail can be, I'm not sure that this is something that I would want to have hard coded on my system. I would hope that there would be another way to go about this. Right now I'm on 2.0.6.16 and have been for some time, but as bugs arise, and bug fixes are released, I would like to have the peace of mind to upgrade to the latest code, but I'm not sure that I have that yet. I know that the folks at Declude have been working long and hard at this for sometime now, and I don't want to disrespect that hard work, but I would appreciate an update on where things are, and where they are going as far as the service issues go. Thanks, Matt --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Decludeproc getting caught in Data Execution Prevention
Yes, I have seen this happen, make sure that you disable the DEP on declude.exe and decludeproc.exe you can do this by right clicking on the executable. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark SmithSent: Thursday, October 20, 2005 4:41 PMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] Decludeproc getting caught in Data Execution Prevention Has anyone seen this before?
RE: [Declude.JunkMail] Declude as a service and global.cfg
No, the only time the decludeproc service needs to be restarted is with changes made to the declude.cfg. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith Sent: Friday, October 21, 2005 4:30 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Declude as a service and global.cfg Now that the declude engine runs as a service, do you need to restart the decludeproc service when making changes to global.cfg? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude as a service and global.cfg
We can certainly look at this .. What would you like to see ? I can then take this request to our development wishlist. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Doug Ford Sent: Monday, October 24, 2005 12:55 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude as a service and global.cfg Ugh. That's brutal. That means I potentially could have messages floating through my mail server unchecked for 30, 60, or even 90 seconds. Are there plans to make a change to that feature? Doug -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Monday, October 24, 2005 9:29 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude as a service and global.cfg Currently yes. To reset hijack stop/restart decludeproc David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Doug Ford Sent: Monday, October 24, 2005 12:21 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude as a service and global.cfg David, After installing Declude 3.0 the HiJack service appears to be wrapped into decludeproc so when a server is flagged for HOLD2 the only way to release that hold is to restart decludeproc. Is that true? Doug -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Monday, October 24, 2005 9:03 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude as a service and global.cfg No, the only time the decludeproc service needs to be restarted is with changes made to the declude.cfg. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith Sent: Friday, October 21, 2005 4:30 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Declude as a service and global.cfg Now that the declude engine runs as a service, do you need to restart the decludeproc service when making changes to global.cfg? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. [For your protection, this messages has been scanned for viruses.] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. [For your protection, this messages has been scanned for viruses.] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 30511 problem
Harry, try commenting out #waitforthreads 1500 #waitbetweenthreads 100 David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 1:52 PM To: Declude.JunkMail@declude.com Cc: 'Technical Support' Subject: RE: [Declude.JunkMail] 30511 problem Dual Xeon 3.4Ghz 2GB ram imail 8.05 declude, sniffer invurbl The issue is that without changing anything other than going to 3.05.11 this occurs It appears that processing has changed If I could get some idea from Declude about this. Maybe I have to change my declude.cfg? It currently is threads 20 waitformail 500 waitforthreads 1500 waitbetweenthreads 100 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Monday, October 24, 2005 1:30 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Interesting ... .11 is working for me better than any previous version -- proc and work are quickly cleared. What process is jumping the CPU up so high? Decludeproc or the anti-virus scanner(s) or something else? How about some more info (CPU, RAM, declude.cfg contents, do you run AVAFTERJM?, that kind of thing.) John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 12:10 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 30511 problem When I switch from 3.05.9 to 3.05.11 CPU usage goes up considerably and mail gets processed much slower and starts to backlog. I have had to switch back to 3.05.9 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 30511 problem
Yes, again the ideal is that the CPU usage bounces, So you could start at 150 then if it pegged at 100% CPU try 125 etc. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Monday, October 24, 2005 4:36 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Someone correct me, but with 3.4GHz couldn't you try THREADS 150 and back down from there if needed? Wouldn't that help some? From http://www.declude.com/Articles.asp?ID=167 Performance can vary due to server configuration, CPU load, available memory, email traffic, the suggested THREADS is 25 per 1 GHZ CPU. To find peak performance increase your threads so that your CPU usage bounces to the 100% mark and down again. If your CPU is pegged at 100% try reduce the threads by increments of 5 each time till you see the desired result. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 3:00 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem It works better but also changes the behaviour somewhat. The way I had it, it continuously kept the proc directory empty because once threads were available it brought mail into the work directory Now it does start more threads as they are available. I like the behaviour the way it was Can this be achieved again? Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Monday, October 24, 2005 1:55 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Harry, try commenting out #waitforthreads 1500 #waitbetweenthreads 100 David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 1:52 PM To: Declude.JunkMail@declude.com Cc: 'Technical Support' Subject: RE: [Declude.JunkMail] 30511 problem Dual Xeon 3.4Ghz 2GB ram imail 8.05 declude, sniffer invurbl The issue is that without changing anything other than going to 3.05.11 this occurs It appears that processing has changed If I could get some idea from Declude about this. Maybe I have to change my declude.cfg? It currently is threads 20 waitformail 500 waitforthreads 1500 waitbetweenthreads 100 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Monday, October 24, 2005 1:30 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Interesting ... .11 is working for me better than any previous version -- proc and work are quickly cleared. What process is jumping the CPU up so high? Decludeproc or the anti-virus scanner(s) or something else? How about some more info (CPU, RAM, declude.cfg contents, do you run AVAFTERJM?, that kind of thing.) John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 12:10 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 30511 problem When I switch from 3.05.9 to 3.05.11 CPU usage goes up considerably and mail gets processed much slower and starts to backlog. I have had to switch back to 3.05.9 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from
RE: [Declude.JunkMail] 30511 problem
Randy try changing WAITFORMAIL 1500 To WAITFORMAIL 500 See if that changes the delay. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Monday, October 24, 2005 7:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem We upgraded to 3.0.5.11 tonight - big difference in CPU in that it's way down from the 3.0.5.5 - but proc folder will accumulate approx 35-50 messages before it'll dump them to the work folder. Do not see any problems so far except for the second or two delay in this... We have in our declude.cfg: THREADS 50 WAITFORMAIL 1500 WAITFORTHREADS 1000 WAITBETWEENTHREADS 1 Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 1:52 PM To: Declude.JunkMail@declude.com Cc: 'Technical Support' Subject: RE: [Declude.JunkMail] 30511 problem Dual Xeon 3.4Ghz 2GB ram imail 8.05 declude, sniffer invurbl The issue is that without changing anything other than going to 3.05.11 this occurs It appears that processing has changed If I could get some idea from Declude about this. Maybe I have to change my declude.cfg? It currently is threads 20 waitformail 500 waitforthreads 1500 waitbetweenthreads 100 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Monday, October 24, 2005 1:30 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Interesting ... .11 is working for me better than any previous version -- proc and work are quickly cleared. What process is jumping the CPU up so high? Decludeproc or the anti-virus scanner(s) or something else? How about some more info (CPU, RAM, declude.cfg contents, do you run AVAFTERJM?, that kind of thing.) John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 12:10 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 30511 problem When I switch from 3.05.9 to 3.05.11 CPU usage goes up considerably and mail gets processed much slower and starts to backlog. I have had to switch back to 3.05.9 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Headers showing up in the body on 3.05.10
In every instance that we have observed so far the headers in the body are caused by broken mail clients. This is not only an issue for Declude but for mail servers as well. To illustrates the difficulty coming up with a single algorithm that will detect all instances of these broken emails to prevent headers from appearing at the end of a message or within the body of a message. RFC dictates all lines must end with a CR/LF sequence, with a double sequence CR/LF/CR/LF separating the headers from the body. Technically, that would be a 0D 0A 0D 0A sequence. In the byte sequence below, the sixth line contains: 22 0A 20 0D 0A 49 20 73-74 61 72 74 65 64 20 68 where a single 0A is followed by a space and then the required 0D 0A sequence. When this problem was first reported, changes were made in the source to detect a simple 0A as a line terminator, followed by another line terminator sequence. However, this example would not get detected because they inserted a space, which is invisible, between the two line termination sequences. They could have inserted a tab (09) also, so checking only for a space would not have caught all possibilities. In addition, checking only for spaces at the beginning of a line would not solve the problem because certain header lines can be continued on the next line, which requires spaces and then non-blank characters prior to the next line termination sequence. 30 38 3A 35 37 3A 31 33-20 2D 30 35 30 30 0D 0A 4D 49 4D 45 2D 56 65 72-73 69 6F 6E 3A 20 31 2E 30 0D 0A 43 6F 6E 74 65-6E 74 2D 54 79 70 65 3A 20 74 65 78 74 2F 70 6C-61 69 6E 3B 0D 0A 09 63 68 61 72 73 65 74 3D 22-75 73 2D 61 73 63 69 69 22 0A 20 0D 0A 49 20 73-74 61 72 74 65 64 20 68 61 76 69 6E 67 20 61 6E-20 61 66 66 61 69 72 20 77 69 74 68 20 61 20 79-6F 75 6E 67 65 72 2C 20 Often from the outset these issues look extremely simple. However, because all eventualities that have to be covered it becomes quite complex. I am providing this example because things are rarely as simple as they may at first appear. With all that said we are looking into providing a solution for this problem. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Monday, October 24, 2005 9:07 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Headers showing up in the body on 3.05.10 This looks like Declude was expecting to see an occurrence of Blank Folding, but it is making the mistake of detecting headers in the MIME segments or the body as a continuation of the real headers, either that or they changed the code that detects where to throw in the Declude generated headers in order to handle Blank Folding. IMO, Declude should just throw the headers just before the location of the first CRLFCRLF or possibly following a mistaken LFLF. I haven't seen any Declude headers in the body using 2.0.6.16 and earlier. Matt Robert Grosshandler wrote: This has been a problem for awhile (happened with the move to the new architecture, but Declude says it's not connected.) The headers are bad when they make it to Declude, and Declude doesn't handle them right. Fortunately, in our setup, they all still get treated as very heavily weighted spam, so they never make it to users. Rob -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith Sent: Monday, October 24, 2005 6:17 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Headers showing up in the body on 3.05.10 Ever since I went to 3.05.10 (now on 3.05.11) I've been receiving hundreds of complaints of spam making it to my users. After inspection, Declude is subject line marking the messages but it's moving the SMTP headers to the body of the email. This results in user's Outlook rules not firing on the subject line keywords. Here's an example of the ACTUAL MESSAGE BODY. Anyone else seeing this? -0- -Original Message- From: Jon Addison [mailto:[EMAIL PROTECTED] Sent: Monday, October 24, 2005 6:06 AM To: Smith, Mark E. Subject: Re: Hello. You've seen it on 60 Minutes and read the BBC News report -- now find out just what everyone is talking about. Message-Id: [EMAIL PROTECTED] Subject: [WARNING-SPAM]:[333]: X-RBL-Warning: CATCHALLMAILS: X-RBL-Warning: FIVETEN-SPAM: 225.72.226.221.blackholes.five-ten-sg.com. X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED] X-RBL-Warning: SORBS-DUL: Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml?221.226.72.225; X-RBL-Warning: IPNOTINMX: X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected. X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 221.226.72.225 with no reverse DNS entry. X-RBL-Warning: MS-SNAKEOIL: Message failed MS-SNAKEOIL: 52. X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 3. X-RBL-Warning: SPAMDOMAINS: Spamdomain '@yahoo.' found: Address of [EMAIL PROTECTED] sent from invalid [No Reverse DNS]. X-RBL-Warning:
RE: [Declude.JunkMail] 30511 problem
Randy, Can you confirm for me the processes that are increasing the CPU ? David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Tuesday, October 25, 2005 8:46 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Allow me to make a correction - under normal daytime loads, we are seeing an increase in CPU - steady at 80-90%. Under 3.0.5.5 we saw an average of 40% Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Monday, October 24, 2005 7:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem We upgraded to 3.0.5.11 tonight - big difference in CPU in that it's way down from the 3.0.5.5 - but proc folder will accumulate approx 35-50 messages before it'll dump them to the work folder. Do not see any problems so far except for the second or two delay in this... We have in our declude.cfg: THREADS 50 WAITFORMAIL 1500 WAITFORTHREADS 1000 WAITBETWEENTHREADS 1 Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 1:52 PM To: Declude.JunkMail@declude.com Cc: 'Technical Support' Subject: RE: [Declude.JunkMail] 30511 problem Dual Xeon 3.4Ghz 2GB ram imail 8.05 declude, sniffer invurbl The issue is that without changing anything other than going to 3.05.11 this occurs It appears that processing has changed If I could get some idea from Declude about this. Maybe I have to change my declude.cfg? It currently is threads 20 waitformail 500 waitforthreads 1500 waitbetweenthreads 100 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Monday, October 24, 2005 1:30 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Interesting ... .11 is working for me better than any previous version -- proc and work are quickly cleared. What process is jumping the CPU up so high? Decludeproc or the anti-virus scanner(s) or something else? How about some more info (CPU, RAM, declude.cfg contents, do you run AVAFTERJM?, that kind of thing.) John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 12:10 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 30511 problem When I switch from 3.05.9 to 3.05.11 CPU usage goes up considerably and mail gets processed much slower and starts to backlog. I have had to switch back to 3.05.9 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 30511 problem
Keith, WAITFORMAIL3 Defined in milliseconds eg. 3 = 30 seconds this can be changed to set the wait time that decludeproc will wait before checking the \proc directory once empty for new messages. WAITFORTHREADS 1500 Defined in milliseconds eg. 1500 = 1.5 seconds this can be changed so that when the maximum threads are in use this time specifics the wait before checking to launch more threads. WAITBETWEENTHREADS 1 Defined in milliseconds eg. 1 = 1 millisecond The time to wait between spawning one thread and starting to process another thread. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Tuesday, October 25, 2005 10:01 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem David, Do you have an exhaustive explanation of what exactly each of the new commands does? I have seen a tremendous amount of emails to alter this and alter that, however, what does it actually do and how does one affect the other? Thanks for the aid. Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, October 25, 2005 9:39 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Randy try changing WAITFORMAIL 1500 To WAITFORMAIL 500 See if that changes the delay. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Monday, October 24, 2005 7:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem We upgraded to 3.0.5.11 tonight - big difference in CPU in that it's way down from the 3.0.5.5 - but proc folder will accumulate approx 35-50 messages before it'll dump them to the work folder. Do not see any problems so far except for the second or two delay in this... We have in our declude.cfg: THREADS 50 WAITFORMAIL 1500 WAITFORTHREADS 1000 WAITBETWEENTHREADS 1 Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 1:52 PM To: Declude.JunkMail@declude.com Cc: 'Technical Support' Subject: RE: [Declude.JunkMail] 30511 problem Dual Xeon 3.4Ghz 2GB ram imail 8.05 declude, sniffer invurbl The issue is that without changing anything other than going to 3.05.11 this occurs It appears that processing has changed If I could get some idea from Declude about this. Maybe I have to change my declude.cfg? It currently is threads 20 waitformail 500 waitforthreads 1500 waitbetweenthreads 100 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Monday, October 24, 2005 1:30 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Interesting ... .11 is working for me better than any previous version -- proc and work are quickly cleared. What process is jumping the CPU up so high? Decludeproc or the anti-virus scanner(s) or something else? How about some more info (CPU, RAM, declude.cfg contents, do you run AVAFTERJM?, that kind of thing.) John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 12:10 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 30511 problem When I switch from 3.05.9 to 3.05.11 CPU usage goes up considerably and mail gets processed much slower and starts to backlog. I have had to switch back to 3.05.9 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send
RE: [Declude.JunkMail] Declude.cfg defaults
John, Default Values: (But my opinion is to use the WAITFORMAIL and change it to 5000 for single or 500 for dual proc) WAITFORMAIL3 WAITFORTHREADS 1500 WAITBETWEENTHREADS 1 David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Tuesday, October 25, 2005 10:05 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Declude.cfg defaults David If one doesn't have the following in the declude.cfg, what are the default values used by Declude? WAITFORMAIL WAITFORTHREADS WAITBETWEENTHREADS Thanks, John --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 30511 problem
This is correct behavior, remember once the \proc hits zero the WAITFORMAIL kicks in, sometimes because this often happens quicker than what we can see. You could even drop the WAITFORMAIL lower if you like. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Tuesday, October 25, 2005 11:12 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem I've changed WAITFORMAIL to 500 and this seemed to help a bit more. I am still seeing a collection of about 50 messages before proc engages and processes them to the work folder... Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Tuesday, October 25, 2005 10:13 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem I changed the THREADS to 75 and CPU wnet down to about avg 50%. I'll try WAITFORMAIL in just a bit. I also noticed in my spool folder I have a new folder called s that appeared with the time stamp of the new proc install. There is nothing in it; just a blank folder. I deleted it. Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, October 25, 2005 9:39 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Randy try changing WAITFORMAIL 1500 To WAITFORMAIL 500 See if that changes the delay. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Monday, October 24, 2005 7:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem We upgraded to 3.0.5.11 tonight - big difference in CPU in that it's way down from the 3.0.5.5 - but proc folder will accumulate approx 35-50 messages before it'll dump them to the work folder. Do not see any problems so far except for the second or two delay in this... We have in our declude.cfg: THREADS 50 WAITFORMAIL 1500 WAITFORTHREADS 1000 WAITBETWEENTHREADS 1 Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 1:52 PM To: Declude.JunkMail@declude.com Cc: 'Technical Support' Subject: RE: [Declude.JunkMail] 30511 problem Dual Xeon 3.4Ghz 2GB ram imail 8.05 declude, sniffer invurbl The issue is that without changing anything other than going to 3.05.11 this occurs It appears that processing has changed If I could get some idea from Declude about this. Maybe I have to change my declude.cfg? It currently is threads 20 waitformail 500 waitforthreads 1500 waitbetweenthreads 100 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Monday, October 24, 2005 1:30 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Interesting ... .11 is working for me better than any previous version -- proc and work are quickly cleared. What process is jumping the CPU up so high? Decludeproc or the anti-virus scanner(s) or something else? How about some more info (CPU, RAM, declude.cfg contents, do you run AVAFTERJM?, that kind of thing.) John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 12:10 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 30511 problem When I switch from 3.05.9 to 3.05.11 CPU usage goes up considerably and mail gets processed much slower and starts to backlog. I have had to switch back to 3.05.9 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail
RE: [Declude.JunkMail] 30511 problem
Andy, don't be scared I can hold you hand :) How do I explain the apparent inconsistency where users report that the CPU consumption is considerable higher than in the prior version? First we need to confirm that it is decludeproc that has increased in CPU usage. So far I have not seen any real statistics for this other than what has been posted on the boards. But I am certainly trying to validate this information. How can the various process settings make any difference - at worst it should spike quickly and then be idle? Why do you think it should spike and then become idle ? What is spending all this other CPU time on? Looping, looking for directory content? Perhaps an incorrect assumption, Declude actually uses less CPU, between 3% and 20% on average. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Tuesday, October 25, 2005 2:33 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Okay, I'm watching these discussions - as I'm still truly scared of upgrading Declude. I just can't figure out the logic behind all the CPU consumption and why certain process parameters are suspected to have detrimental effects. Please verify my thinking: A machine that needs to process a given amount of mail will require a certain number of instructions, which are reflected in the total CPU usage. If several messages come in almost simultaneously, then I can either process them right away using parallel processes, causing a short spike in CPU use - or I can process them one by one, using up the same CPU time over time and causing a few seconds delay in mail delivery. Either way, the overall CPU consumption should be the same - just distributed differently. So - if the above is true, how do I explain the apparent inconsistency where users report that the CPU consumption is considerable higher than in the prior version? How can the various process settings make any difference - at worst it should spike quickly and then be idle? If the old Declude handled the amount of mail with moderate CPU use and without causing noticeable delays in mail delivery to the users - then I can't see how the same outcome suddenly should require x times the CPU resources, no matter how inefficient the process settings are? What is spending all this other CPU time on? Looping, looking for directory content? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Tuesday, October 25, 2005 10:13 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem I changed the THREADS to 75 and CPU wnet down to about avg 50%. I'll try WAITFORMAIL in just a bit. I also noticed in my spool folder I have a new folder called s that appeared with the time stamp of the new proc install. There is nothing in it; just a blank folder. I deleted it. Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, October 25, 2005 9:39 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Randy try changing WAITFORMAIL 1500 To WAITFORMAIL 500 See if that changes the delay. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Monday, October 24, 2005 7:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem We upgraded to 3.0.5.11 tonight - big difference in CPU in that it's way down from the 3.0.5.5 - but proc folder will accumulate approx 35-50 messages before it'll dump them to the work folder. Do not see any problems so far except for the second or two delay in this... We have in our declude.cfg: THREADS 50 WAITFORMAIL 1500 WAITFORTHREADS 1000 WAITBETWEENTHREADS 1 Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 1:52 PM To: Declude.JunkMail@declude.com Cc: 'Technical Support' Subject: RE: [Declude.JunkMail] 30511 problem Dual Xeon 3.4Ghz 2GB ram imail 8.05 declude, sniffer invurbl The issue is that without changing anything other than going to 3.05.11 this occurs It appears that processing has changed If I could get some idea from Declude about this. Maybe I have to change my declude.cfg? It currently is threads 20 waitformail 500 waitforthreads 1500 waitbetweenthreads 100 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222
RE: [Declude.JunkMail] 30511 problem
Erik, 1. Because Imail 8.2x made changes to their product making Declude incompatible with Imail. 2. There's been more and more incremental releases are you asking for less incremental releases ? 3. Declude 3.0 has made many problems that were not noticble with prior versions of Declude visible. This means that certain elements that worked incorrectly before because of the single application process were not discovered, the new proccess has helped identify some of these and we are correcting them. All in all the move to the service application is better product. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Erik Sent: Tuesday, October 25, 2005 2:53 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem I'm surely with you about this Andy. Already enough time spent dealing with adjusting filters to control spam and it seems by this list; more time is spent being a directory monitor and a bug reporter. I'm not sure why Declude went to a service application when it was processing emails fine; or it should be an option of running as a service or not. The way I see this since the final release came out on 3.0x... There's been more and more incremental releases even on correcting things that were working before. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Tuesday, October 25, 2005 12:33 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Okay, I'm watching these discussions - as I'm still truly scared of upgrading Declude. I just can't figure out the logic behind all the CPU consumption and why certain process parameters are suspected to have detrimental effects. Please verify my thinking: A machine that needs to process a given amount of mail will require a certain number of instructions, which are reflected in the total CPU usage. If several messages come in almost simultaneously, then I can either process them right away using parallel processes, causing a short spike in CPU use - or I can process them one by one, using up the same CPU time over time and causing a few seconds delay in mail delivery. Either way, the overall CPU consumption should be the same - just distributed differently. So - if the above is true, how do I explain the apparent inconsistency where users report that the CPU consumption is considerable higher than in the prior version? How can the various process settings make any difference - at worst it should spike quickly and then be idle? If the old Declude handled the amount of mail with moderate CPU use and without causing noticeable delays in mail delivery to the users - then I can't see how the same outcome suddenly should require x times the CPU resources, no matter how inefficient the process settings are? What is spending all this other CPU time on? Looping, looking for directory content? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Tuesday, October 25, 2005 10:13 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem I changed the THREADS to 75 and CPU wnet down to about avg 50%. I'll try WAITFORMAIL in just a bit. I also noticed in my spool folder I have a new folder called s that appeared with the time stamp of the new proc install. There is nothing in it; just a blank folder. I deleted it. Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, October 25, 2005 9:39 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Randy try changing WAITFORMAIL 1500 To WAITFORMAIL 500 See if that changes the delay. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Monday, October 24, 2005 7:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem We upgraded to 3.0.5.11 tonight - big difference in CPU in that it's way down from the 3.0.5.5 - but proc folder will accumulate approx 35-50 messages before it'll dump them to the work folder. Do not see any problems so far except for the second or two delay in this... We have in our declude.cfg: THREADS 50 WAITFORMAIL 1500 WAITFORTHREADS 1000 WAITBETWEENTHREADS 1 Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 1:52 PM To: Declude.JunkMail@declude.com Cc: 'Technical
RE: [Declude.JunkMail] 30511 problem
Nothing except what I had posted earlier in the code has changed. And the changes should not have effected the CPU in anyway. Unless we can replicate the issue it becomes very difficult to resolve. If you can send me any data that shows what you are seeing, we can then try replicate the problem. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Tuesday, October 25, 2005 3:00 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem It seems to me that something changed in the code If all I do is change from V9 to V11 and I see a noticeable difference, then it has to be caused by a change in the code from V9 to V11. No other hardware or software was changed!!! I have gotten direction to change settings, however that in no way addresses the point I am making. I have not seen that addressed. Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Tuesday, October 25, 2005 2:33 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Okay, I'm watching these discussions - as I'm still truly scared of upgrading Declude. I just can't figure out the logic behind all the CPU consumption and why certain process parameters are suspected to have detrimental effects. Please verify my thinking: A machine that needs to process a given amount of mail will require a certain number of instructions, which are reflected in the total CPU usage. If several messages come in almost simultaneously, then I can either process them right away using parallel processes, causing a short spike in CPU use - or I can process them one by one, using up the same CPU time over time and causing a few seconds delay in mail delivery. Either way, the overall CPU consumption should be the same - just distributed differently. So - if the above is true, how do I explain the apparent inconsistency where users report that the CPU consumption is considerable higher than in the prior version? How can the various process settings make any difference - at worst it should spike quickly and then be idle? If the old Declude handled the amount of mail with moderate CPU use and without causing noticeable delays in mail delivery to the users - then I can't see how the same outcome suddenly should require x times the CPU resources, no matter how inefficient the process settings are? What is spending all this other CPU time on? Looping, looking for directory content? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Tuesday, October 25, 2005 10:13 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem I changed the THREADS to 75 and CPU wnet down to about avg 50%. I'll try WAITFORMAIL in just a bit. I also noticed in my spool folder I have a new folder called s that appeared with the time stamp of the new proc install. There is nothing in it; just a blank folder. I deleted it. Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, October 25, 2005 9:39 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Randy try changing WAITFORMAIL 1500 To WAITFORMAIL 500 See if that changes the delay. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Monday, October 24, 2005 7:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem We upgraded to 3.0.5.11 tonight - big difference in CPU in that it's way down from the 3.0.5.5 - but proc folder will accumulate approx 35-50 messages before it'll dump them to the work folder. Do not see any problems so far except for the second or two delay in this... We have in our declude.cfg: THREADS 50 WAITFORMAIL 1500 WAITFORTHREADS 1000 WAITBETWEENTHREADS1 Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 1:52 PM To: Declude.JunkMail@declude.com Cc: 'Technical Support' Subject: RE: [Declude.JunkMail] 30511 problem Dual Xeon 3.4Ghz 2GB ram imail 8.05 declude, sniffer invurbl The issue
