[Declude.JunkMail] HOLD action using Imail/Junkmail as a multiple domain gateway
Hi Everyone, We are currently using our email server as a primary email/virus/junkmail server for [ourdomain.edu]. I want to service another external domain [aaa.edu] with virus/junkmail, using Imail as a smarthost/gateway for the other domain. Here is my question. If I setup virus and junkmail as a per-domain config, where does the junkmail hold files get stored for [aaa.edu] domain? The default is \IMail\spool\spam for a single domain like ourdomain.edu[default], would aaa.edu get stored in \IMail\spool\aaa.edu\spam ?? I would like to separate our holds from the other site's hold files. Is this possible? Many thanks, Eddie :) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Sawmill and Declude logs
Title: Message I received this from Greg at Sawmill. ;-) Dan Horne -Original Message-From: Greg Ferrar [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 29, 2002 9:18 PMTo: Dan HorneSubject: Re: Declude SPAM logs Hi, Wow, someone sure jumped the gun on that announcement.We added support for Declude SPAM format *today*, to the beta version. We haven't shipped that version yet, so it's not supported "out of the box" in any shipping version yet. I've attached the plug-in, which you can use to analyze this log file. To use this log format plug-in, put it in the LogFormats folder of the LogAnalysisInfo folder in your Sawmill installation folder. Then create a new configuration using your log data. Sawmill should automatically recognize the format, and set up the configuration appropriately. Please let me know if you have any problem with this plug-in. I would appreciate it if you could send this information to the mailing list, so we don't get deluged with messages from people wondering how to analyze Declude SPAM logs with Sawmill. Thanks, -Greg FerrarSawmill Product Manager, Flowerfire Email: [EMAIL PROTECTED]Voice: (831) 426-7602Fax: (650) 745-2939Web: http://www.sawmill.net/ ===Find out who's visiting your web site, where they're coming from, andwhat they're doing! Sawmill is a powerful, hierarchical log analysistool featuring an attractive HTML interface, advanced data slicingfeatures, and much more. FREE TRIAL! http://www.sawmill.net/=== - Original Message - From: Dan Horne To: [EMAIL PROTECTED] Sent: Tuesday, October 29, 2002 9:00 AM Hello, I am evaluating your Sawmill product. We have several different file types to parse. One of the most important for us is the Declude file format. However, when setting it up, Sawmill doesn't seem to recognize the format, even though it is supported. Attached is a sample declude log and the output I get when I try to analyze it. Thank you, Dan Horne DecludeSPAM.dat Description: Binary data
Re: [Declude.JunkMail] HOLD action using Imail/Junkmail as amultiple domain gateway
I want to service another external domain [aaa.edu] with virus/junkmail, using Imail as a smarthost/gateway for the other domain. Here is my question. If I setup virus and junkmail as a per-domain config, where does the junkmail hold files get stored for [aaa.edu] domain? The default is \IMail\spool\spam for a single domain like ourdomain.edu[default], would aaa.edu get stored in \IMail\spool\aaa.edu\spam ?? No -- the HOLD action always will quarantine the E-mail to the \IMail\spool\spam directory. However, we have had a number of requests for a way to have the directory configurable on a per-domain basis, so this will likely get added at some point. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Sawmill and Declude logs
Hi, guys. Sorry for the HTML in the previous post. I have installed the Declude plug-in and tested it out. It works well. The only problem I can see is that it only shows message counts, no data on what is included in the messages. But I just downloaded Sawmill and I am not very familiar with it. Maybe there is a way to filter the results in such a way as to get more information. Anyone know if this can be done? Dan --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Filter File
Hi Scott, Is it possible to change the filter file so that a comment can be at the end of each line? This would allow a process similar to Tom's DeLog/KillListGen, to purge old inactive entries. Our filter file is getting rather large. Thanks, Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net PGP Key ID: 04C99A55 (972) 788-2364 Fax: (972) 788-5049 Providing Internet Solutions Worldwide - An eDataWeb Affiliate --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter File
Is it possible to change the filter file so that a comment can be at the end of each line? The problem is that Declude JunkMail will allow spaces/tabs in the filter text (remove me, for example), so it won't know where the filter text ends and the comment begins. We are planning on adding a method of allowing spaces/tabs at the beginning of the filter text, which would likely also allow for comments (most likely, the text would be quoted). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter File
Couldn't you use a stop character, such as # or something to indicate where the line ends and the comment begins? Wednesday, October 30, 2002, 10:07:45 AM, R. Scott Perry [EMAIL PROTECTED] wrote: Is it possible to change the filter file so that a comment can be at the end of each line? RSP The problem is that Declude JunkMail will allow spaces/tabs in the filter RSP text (remove me, for example), so it won't know where the filter text RSP ends and the comment begins. RSP We are planning on adding a method of allowing spaces/tabs at the beginning RSP of the filter text, which would likely also allow for comments (most RSP likely, the text would be quoted). RSP -Scott RSP --- RSP [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] RSP --- RSP This E-mail came from the Declude.JunkMail mailing list. To RSP unsubscribe, just send an E-mail to [EMAIL PROTECTED], and RSP type unsubscribe Declude.JunkMail. The archives can be found RSP at http://www.mail-archive.com. Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net PGP Key ID: 04C99A55 (972) 788-2364 Fax: (972) 788-5049 Providing Internet Solutions Worldwide - An eDataWeb Affiliate --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Blacklist
Scott, Are blank lines okay in a blacklist file? I ask because it's makes it easier to distinguish different types of email/domains we want to block. Regards, David WiSS Limited --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Blacklist
Are blank lines okay in a blacklist file? I ask because it's makes it easier to distinguish different types of email/domains we want to block. Yes, Declude JunkMail will ignore any blank lines (or any lines that begin with a # character). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Update of SpamReview web app (not related to SpamReview hold manager)
Ok, I just uploaded a new revision to my Spambox App. The URL is http://spamreview.argolink.net email is [EMAIL PROTECTED] pass is demo Info at http://spamreview.argolink.net/doc It now has full capability to manage settings per user. A few more issues to resolve and I will look at packaging it for anyone interested. Let me know what you think. Thanks, Chuck Frolick ArgoNet, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Footer message like virus.cfg
I'd like a line at the footer to go with our virus.cfg line stating that this email was scanned by declude. Can I do this with global.cfg as you've got virus.cfg configured? Regards, Mitch --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Footer message like virus.cfg
I'd like a line at the footer to go with our virus.cfg line stating that this email was scanned by declude. Can I do this with global.cfg as you've got virus.cfg configured? The way to accomplish that with Declude JunkMail is to have a line CATCHALLMAILS FOOTER This mail was scanned... in the \IMail\Declude\$default$.JunkMail file. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HOLD action using Imail/Junkmail as a multiple domain gateway
Thanks Scott for the update.. Sincerely, Eddie :) = No -- the HOLD action always will quarantine the E-mail to the \IMail\spool\spam directory. However, we have had a number of requests for a way to have the directory configurable on a per-domain basis, so this will likely get added at some point. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Update of SpamReview web app (not related to SpamReview hold manager)
Chuck, looks pretty cool to me, and I can see how this could be a nice way for customers to manage their own spam rules. However, I wonder what the effective load would be on an IMail/Declude JunkMail server with a large customer base with all of the per-user files that would be required to make this work...? Bill -Original Message- From: Charles Frolick [mailto:cmfrolick;argolink.net] Sent: Wednesday, October 30, 2002 12:21 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Update of SpamReview web app (not related to SpamReview hold manager) I caught a little settings problem, I was pulling the mail from inxo to the spambox and not from the spam folder, so it was working backwards. OOPS! It is corrected now, so go have a look see. Thanks, Chuck Frolick -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner;declude.com]On Behalf Of Charles Frolick Sent: Wednesday, October 30, 2002 1:16 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Update of SpamReview web app (not related to SpamReview hold manager) Ok, I just uploaded a new revision to my Spambox App. The URL is http://spamreview.argolink.net email is [EMAIL PROTECTED] pass is demo Info at http://spamreview.argolink.net/doc It now has full capability to manage settings per user. A few more issues to resolve and I will look at packaging it for anyone interested. Let me know what you think. Thanks, Chuck Frolick ArgoNet, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This e-mail was scanned for viruses by Pointshare's Virus Scanning Service] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Update of SpamReview web app (notrelated to SpamReview hold manager)
... However, I wonder what the effective load would be on an IMail/Declude JunkMail server with a large customer base with all of the per-user files that would be required to make this work...? Actually, there would normally be very little (if any) extra overhead. The only extra overhead I could see would be if there were more than about 500 users on any given domain (as there would be over 500 files in one directory, which can cause a performance hit). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Update of SpamReview web app (not related to SpamReview hold manager)
So it wouldn't work for the 6085accounts on my default host. :-) Glenn Z. - Original Message - From: R. Scott Perry To: [EMAIL PROTECTED] Sent: Wednesday, October 30, 2002 5:32 PM Subject: RE: [Declude.JunkMail] Update of SpamReview web app (not related to SpamReview hold manager) ... However, I wonder what theeffective load would be on an IMail/Declude JunkMail server with a largecustomer base with all of the per-user files that would be required to makethis work...?Actually, there would normally be very little (if any) extra overhead. The only extra overhead I could see would be if there were more than about 500 users on any given domain (as there would be over 500 files in one directory, which can cause a performance hit). -Scott---[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
Re: [Declude.JunkMail] Update of SpamReview web app (notrelated to SpamReview hold manager)
So it wouldn't work for the 6085 accounts on my default host. :-) It would work, there would just be a performance penalty -- but it wouldn't be any worse than the performance penalty of IMail having 6,085 user subdirectories off of the same directory. :) If it *was* a performance issue, though, you could get around it by using redirecting for most common configurations (a Don't block any E-mail setting and a Block as much spam as you can setting, that would probably cover about 95% of the users). Those would get taken care of each with a single REDIRECT line in the \IMail\Declude\$default$.JunkMail file. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Update of SpamReview web app (not related to SpamReview hold manager)
Really, 500 wouldn't be an abnormal number for a domain. -- Original Message -- From: Glenn \\ WCNet [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Wed, 30 Oct 2002 17:38:49 -0600 So it wouldn't work for the 6085 accounts on my default host. :-) Glenn Z. - Original Message - From: R. Scott Perry To: [EMAIL PROTECTED] Sent: Wednesday, October 30, 2002 5:32 PM Subject: RE: [Declude.JunkMail] Update of SpamReview web app (not related to SpamReview hold manager) ... However, I wonder what the effective load would be on an IMail/Declude JunkMail server with a large customer base with all of the per-user files that would be required to make this work...? Actually, there would normally be very little (if any) extra overhead. The only extra overhead I could see would be if there were more than about 500 users on any given domain (as there would be over 500 files in one directory, which can cause a performance hit). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- Avolve Support 740 467 3338 -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] FrontPage form to email SPAMHEADERS
Hello William, Imail automatically inserts missing Message-ID: headers. Since Declude scans the e-mail before Imail put in that header you will then get that positive but when you look at it Imail have fixed it. Unfortunately your only way to truely fix this is to edit all webforms to inject the Message-ID: in the headers or I guess you could whitelist the local machine that way it will not give this warning and if it sends to outside e-mail address then Imail will have fixed the header for you. If you fix it then when you fixed the Message-ID: you will have then you will more then likely have to fix missing Date: header (which Imail also fixes if it's missing but Declude will complain since it's happens before Imail fixes it) Best regards, Eje Gustafsson mailto:MacAhan;fament.com The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 - Your Full Time Professionals - eBay UserID : macahan -- WBc How do you get FrontPage form to email to add the Message-ID: header. WBc I have Windows 2000 SP3 IIS server. When a user fills out a guest book WBc the FrontPage form emails the results through Imail. All software is on WBc the same server. Declude fails the message on SPAMHEADERS. WBc The failed test indicates the Message-ID: is missing from the header. WBc When it arrives the email does have the Message-ID: but Declude says WBc Imail added it. WBc I hope it does not involve editing ever web page on my site that uses WBc form to email, because that a lot of them. WBc Sincerely, WBc WBc William J. Baumbach II [EMAIL PROTECTED] WBc 9975 Pennsylvania Ave. Manassas, Va. 20110-2028 WBc Ph: 703-273-4400 ext:1708 Fax: 703-691-0946 WBc - WBc --- WBc [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] WBc --- WBc This E-mail came from the Declude.JunkMail mailing list. To WBc unsubscribe, just send an E-mail to [EMAIL PROTECTED], and WBc type unsubscribe Declude.JunkMail. The archives can be found WBc at http://www.mail-archive.com. WBc --- WBc [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Spews News
The following article about Spews is from the Langa List. - Fred, I saw your article regarding SpamCop and wanted to let you and your readers know about a service that is even worse called Spews. Spews doesn't blacklist sites, it blacklists entire ip ranges as a way to force domain owners, most of whom are completely innocent but happen to be within the range of the IP block, to pressure their ISP or service provider to shutdown the supposed offending spammer. It is my opinion that Spews (which is completely unreachable if you wish to object to your being included in an IP range), is actually run by spammers - as their actions are so heavy handed that they cause most users to end up dropping the use of RBLs, and as a consequence more spam ends up getting through to people's inboxes. More information about my experience is available at http://www.allpm.com/article.php?sid=261mode=order=0thold=0 Regards, Michael Lines Thanks, Michael. SPEWS stands for SPAM Prevention Early Warning System. Like SpamCop, it's a well-intentioned, first-generation tool for combating spam. As such, it's a pretty blunt instrument, and (as Michael's case shows) it can do a lot of damage to perfectly innocent sites. I wish the folks who set up these early, simple blacklists would wake up to the harm they do; and apply their obvious talents to producing better tools. As it is now, they're using first-generation anti-spam tools to try to block third- and fourth-generation spamming techniques. Click to email this item to a friend http://www.langa.com/sendit2.htm --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
