[Declude.JunkMail] BANEXT
We are using Declude Standard on IMAIL 7.X. Using BANEXT but it doesn't stop any of the banned extensions from being received. Any ideas? Thanks, Dan --- This E-mail was scanned for viruses by WebHouse, Inc. http://www.webhse.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] BANEXT
We are using Declude Standard on IMAIL 7.X. Using BANEXT but it doesn't stop any of the banned extensions from being received. BANEXT is not a Declude Junkmail feature, it is a Declude Virus feature. Do you have Declude Virus? -Patrick --- [This E-mail scanned for viruses by Declude/McAfee] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] filter question
Can Junkmail pro filters (for msg body) use wildcards? Is there a reference? I want to create a filter (to hold) msgs that have embedded urls with IP addresses in them. I can do this is my IMGate machine but want to see what I catch first. Mike --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] BANEXT
We are using Declude Standard on IMAIL 7.X. Using BANEXT but it doesn't stop any of the banned extensions from being received. Note that the BANEXT option is only in Declude Virus, and will only work with Declude Virus Standard or Declude Virus Pro (you can type \IMail\Declude -diag from a command prompt to see which version you are running). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] filter question
Can Junkmail pro filters (for msg body) use wildcards? No. Is there a reference? The Filtering section of the manual covers the filtering. We do plan to add a reference section to the manual like for the whitelisting/blacklisting. I want to create a filter (to hold) msgs that have embedded urls with IP addresses in them. The best you could do with Declude JunkMail would be to search for http://%;. However, with IMail's filters, you should be able to be more accurate. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude Antivirus Question
I noticed on the declude website that the antivirus solution doesn't carry a virus scanner with it, the user is to provide the scanner and the declude engine attaches to it. Are you aware that this works with Computer Assoc. InoculateIT 6.0? I do know that you can make a scanning boot disk (i.e. command line usuage) But was unsure how it works from there. Thanks for the info. (Pardon if this is the wrong forum for this post) The Declude Virus forum would be better, but I'll still answer the question. :) InoculateIT should include either inocumd.exe or inocmd32.exe, which are command line scanners that can work with Declude Virus. You may have to do a Full Install and search the hard drive for those files (they may not install into the directory you expect them to). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] BlackList Limit ?
Is there a limit on the number of addresses that I can blacklist within a FROMFILE? Thanks. b --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] BlackList Limit ?
Is there a limit on the number of addresses that I can blacklist within a FROMFILE? No, there is not. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] whitelisting
I have been using Declude for almost a year now and I thinks its the best software ever made... I have tweak the settings and weights but I have run into problem with the whitelisting for existing customers. With WHITELISTING, I know there is a limit of 200 domains. Will this limit ever be increased? Or maybe be made into a separate test like the FROMFILE where ALL domains listed in that would be allowed??? The only other option I can think of is once you hit the whitelist limit of 200, you create a test using the FROMFILE and use a negative weight of like 100. This would kind of do the same thing of the whitelisting, just a little hokey Thoughts??? Thanks, Adam Adam Hobach CyberLynk Sales/Support [EMAIL PROTECTED] or [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] whitelisting
Adam, Thursday, November 21, 2002 you wrote: AH With WHITELISTING, I know there is a limit of 200 domains. Will AH this limit ever be increased? Or maybe be made into a separate AH test like the FROMFILE where ALL domains listed in that would be AH allowed??? AH The only other option I can think of is once you hit the whitelist AH limit of 200, you create a test using the FROMFILE and use a AH negative weight of like 100. This would kind of do the same thing AH of the whitelisting, just a little hokey AH Thoughts??? I have dropped all of my whitelists and blacklists in favor of weighted filter rules. I put them all into a single Sql2000 database table and maintain them there to avoid duplicates and program expansion. Then I generate DECLUDE's filter file from the database. Anything that was whitelisted is now a negative weight. The database and programmed maintenance has stopped all typing errors, duplicates, and so on. And I think it is faster, too, just have one rule set. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] whitelisting
With WHITELISTING, I know there is a limit of 200 domains. Will this limit ever be increased? Or maybe be made into a separate test like the FROMFILE where ALL domains listed in that would be allowed??? That's something that quite a few people have requested, and we do plan to handle soon. Most likely, we will add it as a file (hopefully possible on a per-user and per-domain basis as well as global). The only other option I can think of is once you hit the whitelist limit of 200, you create a test using the FROMFILE and use a negative weight of like 100. This would kind of do the same thing of the whitelisting, just a little hokey In the meantime, that would work (although it would only apply to the weighting system, so it would prevent an E-mail from being held if you had SPAMCOP HOLD, for example). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] whitelisting
The only other option I can think of is once you hit the whitelist limit of 200, you create a test using the FROMFILE and use a negative weight of like 100. This would kind of do the same thing of the whitelisting, just a little hokey That is kind of the way I do it. I use the WHITELIST FROM in the global.cfg for domains (@example.com). For individual users ([EMAIL PROTECTED]), I have set up a whitelist fromfile with a huge negative weight. -Patrick --- [This E-mail scanned for viruses by Declude/McAfee] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] whitelisting
In the meantime, that would work (although it would only apply to the weighting system, so it would prevent an E-mail from being held if you had SPAMCOP HOLD, for example). I think you mean it will not prevent a mail from being held with that rule, correct? John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] whitelisting
In the meantime, that would work (although it would only apply to the weighting system, so it would prevent an E-mail from being held if you had SPAMCOP HOLD, for example). I think you mean it will not prevent a mail from being held with that rule, correct? You are correct. I think I'm coming down with that darned keyboard virus that keeps spreading... -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] rfc-ignorant vs UUNET
A day or so ago I happened to discover that my class C was listed in rfc-ignorant IPWHOIS. Further investigation showed that all of UUNET was listed and since I was on UUNET I was included. The reason for the listing has to do with the OrgTech handle (not Tech hangel but OrgTech handle). rfc-ignorant requires that this handle respond to e-mail because it is accessible from a whois report. UUNET however only responds to mail from ARIN on that handle. Apparently the handle was not always visible via whois. At any rate I sent both UUNET and rfc-ignorant a message complaining about the listing. I have to say that both of these organizations have responded to me very rapidly and very professionally. It is very encouraging really to experience that on the Internet when the contrary is normally expected. UUNET says that new rules are being adopted at ARIN shortly which should correct this. They also report that the whole thing occurred because of ARIN rule changes that exposed the OrgTech hanlde in the first place. rfc-ignorant has the range on hold right now but not listed. It is probably not very important to anyone but thought I'd share since I've been involved in the discussion. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] rfc-ignorant vs UUNET
At 01:05 PM 11/21/2002 -0600, you wrote: A day or so ago I happened to discover that my class C was listed in rfc-ignorant IPWHOIS. Further investigation showed that all of UUNET was listed and since I was on UUNET I was included. I found since RFC-Ignorant began implementing these rules using that service generates way to many false positives, so I've removed it from Declude. -- Rich Griebel [EMAIL PROTECTED] http://www.kendra.com Scanned for Viruses using Declude and F-Prot --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Error Message
Is this a declude error or a virus scanner error, I started seeing a bunch of these Couldn't move/copy data file [2]. Priority back to 32. in my logs today. 11/21/2002 09:12:48 Qe9dc000c014e5cc2 Msg failed KFROM ( ID-20021121-000773). Action=DELETE. 11/21/2002 09:12:48 Qe9dc000c014e5cc2 Msg failed OSSRC ([1] POSTMASTERGENERAL, see http://spews.org/ask.cgi?S809). Action=WARN. 11/21/2002 09:12:48 Qe9dc000c014e5cc2 Msg failed OSSRC2 (MINDSHARE-BLK-1 I thought mb00.net was supposed to be confirmed optin. http://groups.google.com/groups?q=mb00hl=enlr=ie=UTF-8scoring=d). Action=SUBJECT. 11/21/2002 09:12:48 Qe9dc000c014e5cc2 Msg failed WIREHUB-DNSBL (66.115.39.216.blackholes.wirehub.net.). Action=WARN. 11/21/2002 09:12:48 Qe9dc000c014e5cc2 Msg failed WIREHUB-DNSBL2 (66.115.39.216.blackholes.wirehub.net.). Action=SUBJECT. 11/21/2002 09:12:48 Qe9dc000c014e5cc2 Msg failed CYBERSITTER (Message failed CYBERSITTER: 203.). Action=WARN. 11/21/2002 09:12:48 Qe9dc000c014e5cc2 Msg failed WEIGHTRANGE14-22 (Total weight between 14 and 22.). Action=HOLD. 11/21/2002 09:12:48 Qe9dc000c014e5cc2 Couldn't move/copy data file [2]. Priority back to 32. Fritz Frederick P. Squib, Jr. Network Administrator Citizens Internet Services http://www.wpa.net --- [This E-mail scanned for viruses by Citizens Internet Services with Declude Virus v 1.62i9] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Error Message
Is this a declude error or a virus scanner error, I started seeing a bunch of these Couldn't move/copy data file [2]. Priority back to 32. in my logs today. That error message is from Declude JunkMail, and will occur if the D*.SMD file (the one that contains the E-mail contents) no longer exists. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] whitelisting
I share your pain! We've been live with Declude and HOLD actions for about a week, and I've been beavering away at building our whitelist for 2 weeks. In a nutshell, I'm building the whitelist because I want to keep my SPAMCOP HOLD action (and a few others). I've established with our team that going to a pure weighted system is probably in our future. I've added in 13 domain whitelists because SPAMCOP and OSS list DartMail.com; heck, I used to manually blacklist flow-whatever. I haven't checked yet whether we are getting actual spam or just mailing lists from DartMail.com, so I haven't whitelisted the HELO instead. Anybody else have a view to share on what they are getting from DartMail? The thing I really hate about whitelisting is that a piece of spam gets an express ride to our mailboxes if the spammer (or the next Hybris virus) fakes a from address on my whitelist. A nifty feature would be to have a whitelist count against a specific test; but I suspect that Scott would instead council going with a pure weighted system. A variation on that feature, to counteract the fake from address, would be to whitelist a combination of the current whitelist style plus a source, e.g. WHITELIST FROM hotmail.com WHEN REVDNS ENDSWITH hotmail.com OTOH, Scott's been keeping mum about the future of filtering; I suspect that my suggestions could be user driven if he implements regular expressions (hint, hint). Andrew Colbeck Technical Specialist IT Department --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] whitelisting
I would suggest using a weight system and create a negative weight for your whitelist so those on the whitelist will not be able to get away with too much. For example: if you have @123.com whitelisted and someone sends spam, it will not fail, however, if you gave them a -15 and the massage failed enough tests it would more than likely be held by Declude. I have not seen any legitimate mail (in my opinion) from DartMail.com Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] whitelisting
Andrew, Thursday, November 21, 2002 you wrote: CA I want to keep my SPAMCOP HOLD action (and a few others). I've CA established with our team that going to a pure weighted system is CA probably in our future. I have a rule that fires from a custom external filter program that uses routeto and I have a weighting system. I got around the weighting conflict because Scott suggested using a negative weight on the external filter results which then forces the rotueto. It is working wonderfully. CA WHITELIST FROM hotmail.com WHEN REVDNS ENDSWITH hotmail.com CA OTOH, Scott's been keeping mum about the future of filtering; I CA suspect that my suggestions could be user driven if he CA implements regular expressions (hint, hint). You can write your own external program and then you do things like that. I've done this and it works really well. Right now our external program only has one rule in it but we could easily add others. Another option that will be soon available is SNIFFER which will have user defined filtering rules. I don't know exactly how they will be managed but if flexible enough then we'll abandon ours. I'm doubtful declude will include a full regex engine but even if I think I'd certainly expect to pay a pretty good fee for it. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] whitelisting
One thing I am considering is using a greylist, where known solid domains that need it will go on a weighted whitelist of say -100 and the weighted greylist will get say -15, and I would put those domains they needed the help but not wanting to actually whitelist. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] whitelisting
One thing I am considering is using a greylist, where known solid domains that need it will go on a weighted whitelist of say -100 and the weighted greylist will get say -15, and I would put those domains they needed the help but not wanting to actually whitelist. I actually use multiple lists for Declude. If you want to take a look at our setup e-mail me off the list and I will send you all the filters and files in a zip file. Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] whitelisting
Reply to: John Tolmachoff Re: [Declude.JunkMail] whitelisting on Thursday 5:02:56 PM I'd like to do this. Will negative weights work for this list? -- Roger Heath [EMAIL PROTECTED] www.rleeheath.com - Copy of Original Message(s): - J One thing I am considering is using a greylist, where known solid domains J that need it will go on a weighted whitelist of say -100 and the weighted J greylist will get say -15, and I would put those domains they needed the J help but not wanting to actually whitelist. J John Tolmachoff MCSE, CSSA J IT Manager, Network Engineer J RelianceSoft, Inc. J Fullerton, CA 92835 J www.reliancesoft.com J --- J [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] J --- J This E-mail came from the Declude.JunkMail mailing list. To J unsubscribe, just send an E-mail to [EMAIL PROTECTED], and J type unsubscribe Declude.JunkMail. The archives can be found J at http://www.mail-archive.com. J -- J ActivatorMail(tm) ver.082302 Scanned for all viruses by J www.activatormail.com intelligent anti-virus anti-spam service -- ActivatorMail(tm) ver.082302 Scanned for all viruses by www.activatormail.com intelligent anti-virus anti-spam service --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] forum for fighting fake From: fingerprint
One particularly aggravating type of spam is where the from: is faked to be from the recipient or the recipient's own domain. I saw in the archive that this thread has been touched on before, but how about once more around the mulberry bush? I believe Scott mentioned that this behaviour counted as spammish behaviour in SPAMHEADERS, but I think a more pointed ruleset would be very effective against this kind of spam. My assumption is that the way to implement this is to use an external program to check a) the direction of the message, b) compare the from: (or envelope to:?) and to:, and then c) check for exceptions (e.g. the road warrior, the Blackberry pager). Or is it all moot, because you're finding that spam with this fingerprint is pretty well always caught because of other spammy characteristics? I've found that HELOBOGUS, REVDNS, BADHEADERS and MAILFROM are all really good indicators of spam, but that they are also indicators of a sloppy mail admin and are thus way too common with normal mail. I've lowered their weight, therefore, my HOLD weight is high enough to not hit on them in combination. OTOH, I've found that LOOSENSPAMHEADERS+SPAMHEADERS and ROUTING to be worth their weight in gold. Andrew 8) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[2]: [Declude.JunkMail] whitelisting
I'd like to do this. Will negative weights work for this list? I don't see why not, it's working for us. You would probably want to calculate out the total failed weight and use that for your negative weight. For example: Spamcop = 15 OSSCR = 15 OTHERS = 20 Hold weight is 30 Delete weight is 50 So it would be safe to use a -30, but you will need to play around with this more. Each system is different and each system may receive more spam from one address than another's. Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Variables?
Can variables be used in filter files? For example: SUBJECT 2 CONTAINSmembership for %variable% Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Variables?
Can variables be used in filter files? For example: SUBJECT 2 CONTAINSmembership for %variable% No, that isn't currently possible. The problem is that it wouldn't allow you to search for the % character, and which some people are using (for example, BODY 2 CONTAINS http:// % (minus that last space that I just added). Hopefully we can find a way around that -- I'm not sure what the code would do if we added the variables there, and a non-variable was found in a %. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude log file - HELP!!!
Is this what my Declude log file should look like I have probably almost 20-30 instances of the declude.exe process running and the only thing I can think of that I have changed is the loggin level from MED to LOW See snip from log file below: 11/21/2002 19:32:17 Q889d000300da3fbe Checking redvsuite@ for ENDSWITH .AE 11/21/2002 19:32:17 CFG: Whitelisting IP 207.112.138.250. 11/21/2002 19:32:17 Q88ae000301b48226 Checking virtual subhost wfmr.com. 11/21/2002 19:32:17 Q8892000101f213bd Checking offers@spo for ENDSWITH .KY 11/21/2002 19:32:17 Q88c9001302beed25 Checking virtual subhost cunat.com. 11/21/2002 19:32:17 Defining test 5 OSRELAY [ip4r] with weight 5 (antiweight 0) 11/21/2002 19:32:17 Q88da001901b82ced Checking virtual subhost design-partners.com. 11/21/2002 19:32:17 Q88be000502cac2aa Checking virtual subhost vogeltool.com. 11/21/2002 19:32:17 Q88c4001600f4d910 Checking virtual subhost konicek.com. 11/21/2002 19:32:17 Q88c7001101b8e2a5 Checking virtual subhost mtvac.com. 11/21/2002 19:32:17 Q88e0002202be4632 Checking virtual subhost woodlandfoods.com. 11/21/2002 19:32:17 Q88e6002200d45c1b Start 11/21/2002 19:32:17 Q88b2000900ec932e Checking virtual subhost eagleluggage.com. 11/21/2002 19:32:17 Q88af000102ca8533 Checking virtual subhost wjmr.com. 11/21/2002 19:32:17 Q88d102d205fc Checking virtual subhost amerigraphicsonline.net. 11/21/2002 19:32:17 Q88c1000302c2cbb2 Checking virtual subhost sussexlions.org. 11/21/2002 19:32:17 Q88c3001100ecd4ab Checking virtual subhost eng.nciaccess.com. 11/21/2002 19:32:17 CFG: Setting XOUTHEADER to X-Note: This E-mail was scanned by CyberLynk JunkMail (www.cyberlynk.net) for spam. X-Weight-Of-Failed-Tests: Total weight: %WEIGHT% X-Spam-Tests-Failed: %TESTSFAILED%. 11/21/2002 19:32:17 Q886f0001016c8dc4 Checking virtual subhost secondchanceprogram.org. 11/21/2002 19:32:17 Q88bd000401b4be74 Checking virtual subhost winnmug.com. 11/21/2002 19:32:17 Q88cb001200d4f514 Checking virtual subhost whvc.org. 11/21/2002 19:32:17 Q88d7000602ca22cb Checking virtual subhost mail.benzoil.com. 11/21/2002 19:32:17 Q88b4000f00d499d5 Checking virtual subhost advancemechanical.com. 11/21/2002 19:32:17 Q88ac000b00f47ca8 Checking virtual subhost valuecreators.com. 11/21/2002 19:32:17 Q88d4000501b417de Checking virtual subhost boxheaddesign.com. 11/21/2002 19:32:17 Q8893000200fa1870 Checking offerz@dpo for ENDSWITH .IQ 11/21/2002 19:32:17 Q8896000300dc26c8 Checking L255825897 for ENDSWITH .CK 11/21/2002 19:32:17 Q88a3000b00da599f Looking up MX/A record for abanet.it at 206.54.254.3. 11/21/2002 19:32:17 CFG: Whitelisting FROM verisign.com. 11/21/2002 19:32:17 Q8882000401e0d711 Testing whitelist #59 1 kopnet.com isting FROM galileo.com. 11/21/2002 19:32:17 Defining test 24 KFILE [fromfile] with weight 20 (antiweight 0) 11/21/2002 19:32:17 Q8898000200d82b1d Checking news@venda for ENDSWITH .BJ 11/21/2002 19:32:17 Q88a5000b00f45ec0 Testing IP 132.248.33.226 11/21/2002 19:32:17 Q8894000200ec1e6b Checking Hotwire.6f for ENDSWITH .FJ 11/21/2002 19:32:17 Q8893000200f81ae1 Checking Plains_Com for ENDSWITH .IN 11/21/2002 19:32:17 Q8895000200ea2149 Checking alice34@ya for ENDSWITH .EE 11/21/2002 19:32:17 Q8884000801eadced Testing whitelist #69 1 ademco.es . 11/21/2002 19:32:17 CFG: Whitelisting FROM Computerworld.com. 11/21/2002 19:32:17 CFG: Whitelisting FROM eaa.org. Does this make sense Thanks, Adam Adam Hobach CyberLynk Sales/Support [EMAIL PROTECTED] or [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude log file - HELP!!!
Is this what my Declude log file should look like I have probably almost 20-30 instances of the declude.exe process running and the only thing I can think of that I have changed is the loggin level from MED to LOW The problem is that you entered an incorrect value (MED) -- it should be MID (or MEDIUM is OK too). An incorrect value will default to the debug mode (in the next release, it will default to HIGH, as the debug mode should not normally be used unless there is a specific reason to). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log file - HELP!!!
yep... your good Thanks again, Adam -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Thursday, November 21, 2002 7:45 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude log file - HELP!!! Is this what my Declude log file should look like I have probably almost 20-30 instances of the declude.exe process running and the only thing I can think of that I have changed is the loggin level from MED to LOW The problem is that you entered an incorrect value (MED) -- it should be MID (or MEDIUM is OK too). An incorrect value will default to the debug mode (in the next release, it will default to HIGH, as the debug mode should not normally be used unless there is a specific reason to). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
