Re: [Declude.JunkMail] Odd log problem commenting an IP block
But the comment I'm trying to add never matches up; I get a partial line at some random part of the comment and then a carriage return/line feed and then some more characters, like: 11/25/2002 19:28:19 Qea51019c009eaf11 Msg failed BENTALLIPBL (24 ). Action=HOLD. It turns out this is a glitch with the logging -- this will be fixed in the next release. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OWA and BASE64
Is any one else seeing that messages created/formatted in OWA are being caught with BASE64? John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OWA and BASE64
If some one has access to an account on OWA, can you please send a test message to me via OWA? John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff Sent: Tuesday, November 26, 2002 6:59 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OWA and BASE64 Is any one else seeing that messages created/formatted in OWA are being caught with BASE64? John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OWA and BASE64
Sure thing, John. An OWA message is coming right up, from OWA for Exchange 5.5 SP4. -Original Message- From: John Tolmachoff [mailto:[EMAIL PROTECTED]] Sent: Tuesday, November 26, 2002 7:30 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] OWA and BASE64 If some one has access to an account on OWA, can you please send a test message to me via OWA? John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff Sent: Tuesday, November 26, 2002 6:59 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OWA and BASE64 Is any one else seeing that messages created/formatted in OWA are being caught with BASE64? John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OWA and BASE64
Thanks to those that have sent me test messages so far. (If you have not sent one, please do so indicating what version on Exchange on what OS.) So far, from the test messages I have seen, this only affects messages created using OWA on Exchange 2000. Exchange 5.5 appears to be OK. Here is what I have done as a work around: (JunkMail PRO) Create a filter test something like this: WHITEFILTER1 filter D:\imail\declude\whitefilter1.txt x 0 0 Use these two lines in the whitefilter1.txt file: HEADERS -15 CONTAINS V6.0.5762.3 HEADERS -15 CONTAINS V6.0.6249.0 For the weight, use what ever you are adding weight for the BASE64 test but negative. The 2 different version numbers are for Exchange 2000 Standard and Enterprise. I will be following up on this as to why OWA on Exchange 2000 is using BASE64. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Deleting Mail Inbound Mail
That is exactly what I am doing and it works great. The thread was titled Is this possible with the filter function or blacklist? on 11/11/02. Also the thread allrecips function in ver 1.63 from yesterday It uses the filter function and a .txt file. You must have the version 1.63 and it must be the pro version for the filtering to work. Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Darrell L. Sent: Tuesday, November 26, 2002 12:14 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Deleting Mail Inbound Mail I seen a thread very similar to what I need to do awhile back, but I was unable to key on it searching the archives. We use the nobody alias and have had several users leave and their mailboxes have been removed. Is there an easy way to bounce the mail that is incoming from them with declude? Thanks Darrell --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail]
winmail.dat
[Declude.JunkMail] H;H.E Card [Was on Declude.Virus]
Yeah I will at some point. I just want them stopped for now. I am trying to read the archive to figure out how to use the filters better. I will be moving any other questions to the Junkmail list. anyone have a list of good e - c a r d companies??? How can you tell the good bad and ugly apart. I would hate to look at spamviwer all day. As I just implemented this, I will help you. However, I am very tight on time. First, the companies that these are coming from are legit (albeit with practices), as are other providers of e - c a r d s. So, we have to be careful not to deny legit and wanted e - c a r d s from being delivered. The approach I have taken, which I gathered from others, is two fold. First, create the appropriate filter file to catch the messages. Second, create one test to catch and copy to a user account set up for the purpose of reviewing suspect messages. Third, create another test to catch and hold the message. When a suspect message is received by the review account and I review it, I then simply delete it. I then go to the server (by whatever means) and move the Q and D file from the hold directory back to the spool, and then Imail delivers on the next Que run. Attached is the filter file, reviewer.txt. Here is the tests as I have them in the Global.cfg: REVEIWER1 filter D:\imail\declude\reviewer.txt x 0 0 REVEIWER2 filter D:\imail\declude\reviewer.txt x 0 0 Then here is how I have the tests configured in the $default$.junkmail: REVIEWER1 COPYTO [EMAIL PROTECTED] REVIEWER2 HOLD Hope that helps. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Help
Imp about at the end of my rope. :) I have three gateways feeding my IMail server which is running at 95% of its CPU capacity. I am running dual Pentium 4 1.8 Ghz processes. I am currently hosting over 1500 domains with around 13000 accounts not including alias's. I am filtering as much content as I can with the gateways to take the load off of the server. I believe that the mail on the gateways is backing up because the mail server can not process the volume of email it receives fast enough. I am moving over 40,000 emails a day ranging in size of a few k to a few megs. Delays in receiving email are the theme of late and I am at an end on how to make it work any better, short of starting over with something else. I believe this to be the first of many emails trying desperately to tweak every last feature of IMail and Declude to get the performance that I need. Please let me know anything you might need from me. I deeply appreciate your assistance. Thank you in advance. Ben Ciraulo Email Administrator Ellie Mae --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Help
Imp about at the end of my rope. :) I have three gateways feeding my IMail server which is running at 95% of its CPU capacity. I am running dual Pentium 4 1.8 Ghz processes. I am currently hosting over 1500 domains with around 13000 accounts not including alias's. I am filtering as much content as I can with the gateways to take the load off of the server. I believe that the mail on the gateways is backing up because the mail server can not process the volume of email it receives fast enough. I am moving over 40,000 emails a day ranging in size of a few k to a few megs. A P500 should be able to handle 40,000 E-mails per day, complete with virus and spam scanning. You've got enough of a server that it should be able to process 100,000's of E-mails/day. The first thing to do is figure out where the bottleneck is. First, you should check to see if CPU usage is the issue -- to do that, you can use the Task Manager (if it is high, you can sort on the CPU column, to see the processes using the most CPU time). If that doesn't explain the problem, you can also use the Task Manager to check to see how many Declude.exe and SMTP32.exe processes are in memory. If you often have lots of them in memory, there may be DNS problems. What I would recommend is to get a debug log of a few E-mails. You can do this by changing the LOGLEVEL LOW line in the \IMail\Declude\global.cfg file to LOGLEVEL DEBUG until at least a few E-mails have gone through. Once that happens, you can switch back to LOGLEVEL LOW, and E-mail me the log file as an attachment. I can check to see if there are any major delays. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Help
First, we are here to help. :)) Have you made any performance tweaks, such as static page file and turning off index services? What is your partition setup on the server? Are there any very large .mbx files? I am sure you have no Anti-Virus scanning the mail boxes and Imail files, including the spool, correct? John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Ben Ciraulo Sent: Tuesday, November 26, 2002 2:41 PM To: '[EMAIL PROTECTED]' Subject: [Declude.JunkMail] Help Imp about at the end of my rope. :) I have three gateways feeding my IMail server which is running at 95% of its CPU capacity. I am running dual Pentium 4 1.8 Ghz processes. I am currently hosting over 1500 domains with around 13000 accounts not including alias's. I am filtering as much content as I can with the gateways to take the load off of the server. I believe that the mail on the gateways is backing up because the mail server can not process the volume of email it receives fast enough. I am moving over 40,000 emails a day ranging in size of a few k to a few megs. Delays in receiving email are the theme of late and I am at an end on how to make it work any better, short of starting over with something else. I believe this to be the first of many emails trying desperately to tweak every last feature of IMail and Declude to get the performance that I need. Please let me know anything you might need from me. I deeply appreciate your assistance. Thank you in advance. Ben Ciraulo Email Administrator Ellie Mae --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Deleting Mail Inbound Mail
That is a good question. In my initial testing it looks as if the email is deleted and not delivered to either user. This is not a real good situation, but I don't think there is any way around it. If I understand correctly, a single email sent to multiple recipients on the same domain is not copied to each recipient until it actually hits the mail server. Scott, any way to approach this issue? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Darrell L. Sent: Tuesday, November 26, 2002 12:49 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Deleting Mail Inbound Mail Dan, Thanks I got it up and running with your direction to those threads. One question I do have is if mail to more then one recipient and we are deleting on the allrecips test will the other recipients receive the mail? Darrell -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Dan Spangenberg Sent: Tuesday, November 26, 2002 2:26 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Deleting Mail Inbound Mail That is exactly what I am doing and it works great. The thread was titled Is this possible with the filter function or blacklist? on 11/11/02. Also the thread allrecips function in ver 1.63 from yesterday It uses the filter function and a .txt file. You must have the version 1.63 and it must be the pro version for the filtering to work. Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Darrell L. Sent: Tuesday, November 26, 2002 12:14 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Deleting Mail Inbound Mail I seen a thread very similar to what I need to do awhile back, but I was unable to key on it searching the archives. We use the nobody alias and have had several users leave and their mailboxes have been removed. Is there an easy way to bounce the mail that is incoming from them with declude? Thanks Darrell --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Optonline to fight spam/viri
I just thought this might be of interest to the group: Dear Optimum Online Subscriber, In just a few days you'll notice something very different about your Optimum Online Inbox - where's the spam? That's right. The annoying clutter of unsolicited e-mail will just about vanish from your inbox, thanks to Optimum Online's new feature, SpamAway. And it's yours at no extra charge. SpamAway automatically identifies incoming spam and diverts it to a separate folder known as a Bulk Mail folder, available through Optimum Online Webmail. You'll have seven (7) days to look through your Bulk Mail folder and choose whichever e-mail you want to read or keep. After seven (7) days, e-mails in the Bulk Mail folder will automatically be deleted. For more information about SpamAway and Webmail, visit http://www.optonline.net/security. If you do not want your e-mails filtered for spam, you can opt out of SpamAway at any time by going to https://memberservices.optonline.net/acctms/index.html. Additionally, Optimum Online has been evaluating system-wide solutions to provide protection against e-mail-borne viruses. On Nov. 26th, we'll begin providing e-mail virus protection service at no additional cost or effort to you. You'll be notified if someone sends you an e-mail message or attachment that contains a virus. To protect the Optimum Online network and your computer, any messages containing viruses that cannot be disinfected will be deleted. When possible, messages containing viruses will be disinfected and delivered. We'll notify you via e-mail of either event. While this added feature does protect against viruses sent via e-mail, it does not protect you from viruses you may download from the Internet. For more information about how the e-mail virus protection feature works, visit http://www.optonline.net, click on Online Security, and scroll down to the question How does Optimum Online E-mail Virus Protection work? We're constantly working to make PC Magazine's #1 rated* high-speed Internet service even better - so look forward to Optimum Online with SpamAway starting Nov. 26th, 2002! Sincerely, Your friends at Optimum Online A service of Cablevision --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Deleting Mail Inbound Mail
That is a good question. In my initial testing it looks as if the email is deleted and not delivered to either user. This is not a real good situation, but I don't think there is any way around it. If I understand correctly, a single email sent to multiple recipients on the same domain is not copied to each recipient until it actually hits the mail server. Scott, any way to approach this issue? I believe this is the first time it has come up, but we are planning to change this behavior so that if there are multiple recipients, it will only get deleted for the one(s) that have their action set to DELETE. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Help
I believe this to be the first of many emails trying desperately to tweak every last feature of IMail and Declude to get the performance that I need. Please let me know anything you might need from me. Performance Monitor will help you figure out whether only the CPU is being pegged, or whether other resources are being taxed first (like storage). Further to Scott and John, you need to provide info about your file I/O path: post your hard drive partitions, allocation unit sizes, distribution of storage-intensive functions (logs, spool, swapfile, mailboxes, system, IMail exes), RAID levels, block allocation unit sizes, controller cache, swapfile sizes, et al. As is said over and over, CPU is not the main bottleneck in an otherwise stable mail server. If you are a heavy user of IWEBMSG, I'd point you right away to multiple swapfiles and dedicating spindles to the SPOOL\WEB directory separate from the main SPOOL directory. I posted a HOWTO on the latter that's in the IMail Forum archives. -Sandy --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
