Re: [Declude.JunkMail] Imail spool clean utility
Does anyone know if running the Imail isplcln utility will bugger up Declude JM/Virus log files and the directories and stuff associated with slsoft's spam review software? I haven't tested it, but most likely it will treat the log files as other files and delete them. My guess would be that the program only treats the IMail log files as log files (based on the SYS*.TXT, W*.TXT and other similar filenames). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Imail spool clean utility
Hi; Please be careful. I know we are not alone since I posted this before and others also stated that they have seen this happen to them. In our case: We had set it up so it runs everyday. All used to work and the program does what it is supposed to do. But when a month changes (1st of the month) it deletes are Imail log files (sysx) prior to the new month. So if you have in your spool directory-- Jan 2002 - December 2002, and you do that on Jan 1 2003 it will delete all 2002 log files. It does not do anything with any other log file but only the sys files. Our system is on NT but I can't imagine this has anything to do with the OS. That has been our experience and we stopped using it. Regards, Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Frederick P. Squib, Jr. Sent: Wednesday, January 01, 2003 8:12 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Imail spool clean utility Does anyone know if running the Imail isplcln utility will bugger up Declude JM/Virus log files and the directories and stuff associated with slsoft's spam review software? I'd like to do a little housekeeping but, From the Imail manual... Isplcln.exe deletes all files in the spool directory that are older than a specified number of days isplcln -n x -l y where x is the number of days old a non-log file has to be before it is deleted, and y is the number of days old a log file has to be before it is deleted. Note that isplcln.exe deletes all files in the spool directory based on the paramaters supplied without regard to whether a file is locked or not. Fritz Frederick P. Squib, Jr. Network Administrator Citizens Internet Services http://www.wpa.net --- [This E-mail scanned for viruses by Citizens Internet Services with Declude Virus v 1.65i10] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] ReadID and Delog
Title: ReadID and Delog I am wanting an easier way to review the Junkmail log files and noticed these programs seem to do the trick (ReadID and Delog). Are these pretty straight forward to setup? Do I need to obtain a license key for these products? Any setup things I need to be aware of? Thanks for the aid.. ___ Keith Johnson Network Engineer Network Advocates, Inc. Tel: 502.412.1050 Fax: 502.412.1058 Email: [EMAIL PROTECTED] Good pings come in small packets
Re: [Declude.JunkMail] I can't believe this would even work.
This people been discussed about on the isp-ceo list provided by isp-planet.com. I gotten that one as well. One guy at the isp-ceo list sent the guy a quote for about $1mill per month up front payment ;P / Eje Thursday, January 2, 2003, 10:01:28 AM, you wrote: CF Some spammer is soliciting for dedicated hosting of spam servers. CF The received header - CF Received: from onemails2608.com [66.118.148.209] by argolink.net CF (SMTPD32-6.06) id A638128C0132; Mon, 30 Dec 2002 08:20:40 -0600 CF It was only caught by spamheaders. It just goes to show, someone CF somewhere is willing to support spammers if money can be made. CF Thanks, CF Chuck Frolick CF ArgoNet, Inc. CF -Original Message- CF From: W2K Servers Needed [mailto:[EMAIL PROTECTED]] CF Sent: Monday, December 30, 2002 8:24 AM CF To: [EMAIL PROTECTED] CF Subject: I need 2 win2k dedicated servers CF Importance: High CF If you've already received this email, please disregard it. CF I need 2 dedicated servers running Windows 2000, with FTP and Terminal CF Services access. I will be increasing servers if your service meets our CF demands. You will get occasional spam complaints (at most 5 per month). CF I won't be spamming or port scanning directly from the servers. I will CF be mailing through proxies, so you will get very few complaints, if any CF at all. If you can provide this service, please reply back and let me CF know. CF The headers - CF Received: from host01.corp.argolink.net [209.144.1.13] by argolink.net CF with ESMTP CF (SMTPD32-6.06) id AF4C3D490142; Thu, 02 Jan 2003 09:48:28 -0600 CF Return-Path: [EMAIL PROTECTED] CF Delivered-To: [EMAIL PROTECTED] CF Received: from onemails2608.com [66.118.148.209] by argolink.net CF (SMTPD32-6.06) id A638128C0132; Mon, 30 Dec 2002 08:20:40 -0600 CF Reply-To: [EMAIL PROTECTED] CF Date: Mon, 30 Dec 2002 09:24:01 -0500 CF X-Priority: 1 CF MIME-Version: 1.0 CF X-Mailer: Microsoft Outlook Express 6.00.2600. CF X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600. CF Content-Type: text/plain; charset=us-ascii CF Content-Transfer-Encoding: 7bit CF Message-Id: [EMAIL PROTECTED] CF X-Declude-Warning: [SPAMHEADERS] CF http://www.declude.com/tools/header.php?code=420e ::W5 CF X-SPAM-Level: SPAM-VLOW CF X-Declude-Warning: [SPAMHEADERS] This message may be SPAM. This E-mail CF has headers consistent with spam [420e]. CF X-Declude-Sender: [EMAIL PROTECTED] [66.118.148.209] CF X-Declude-Spoolname: D5638132.SMD CF X-Note: This E-mail was scanned for SPAM by ArgoLink.net with Declude CF JunkMail. More info at http://help.argolink.net/spam.asp CF X-Declude-Failed: SPAMHEADERS, SPAM-VLOW CF X-Declude-Total-Weight: 5 CF X-RCPT-TO: [EMAIL PROTECTED] CF Status: U CF X-SpamReview-Deliver: Mesage redelivered by SpamReview. New headers CF below. CF X-SpamReview-Note: Original CC List:[EMAIL PROTECTED] CF To: [EMAIL PROTECTED] CF From: W2K Servers Needed [EMAIL PROTECTED] CF Subject: I need 2 win2k dedicated servers CF X-SPAM-Level: SPAM-NONE CF X-Declude-Sender: [EMAIL PROTECTED] [209.144.1.13] CF X-Declude-Spoolname: D5f4c142.SMD CF X-Note: This E-mail was scanned for SPAM by ArgoLink.net with Declude CF JunkMail. More info at http://help.argolink.net/spam.asp CF X-Declude-Failed: SPAM-NONE CF X-Declude-Total-Weight: 0 CF X-UIDL: 340151554 CF --- CF [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] CF --- CF This E-mail came from the Declude.JunkMail mailing list. To CF unsubscribe, just send an E-mail to [EMAIL PROTECTED], and CF type unsubscribe Declude.JunkMail. The archives can be found CF at http://www.mail-archive.com. CF --- CF [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 eBay UserID : macahan - Your Full Time Professionals - --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Imail spool clean utility
If you want you can download a tool that we've developed to keep clean our web hosting servers log directories. http://www.zcom.it/decludeupdater/ictcleaner.zip The zip-file contains 2 files. Simply unpack them in a folder of you choice. Ictcleaner.exe is the executable In the ini-file you can configure which folders the cleaner should search for and delete files with certain extensions For example 60, d:\web\log, *.log will search in the folder (and all subfolders!) for .log-files older then 60 days and delete them. All actions are listed in a ictcleaner-logfiles but this is overwritten each time the cleaner starts. We call the ictcleaner from an scheduled task once per day to clean up our entire servers. Markus -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Frederick P. Squib, Jr. Sent: Thursday, January 02, 2003 2:12 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Imail spool clean utility Does anyone know if running the Imail isplcln utility will bugger up Declude JM/Virus log files and the directories and stuff associated with slsoft's spam review software? I'd like to do a little housekeeping but, From the Imail manual... Isplcln.exe deletes all files in the spool directory that are older than a specified number of days isplcln -n x -l y where x is the number of days old a non-log file has to be before it is deleted, and y is the number of days old a log file has to be before it is deleted. Note that isplcln.exe deletes all files in the spool directory based on the paramaters supplied without regard to whether a file is locked or not. Fritz Frederick P. Squib, Jr. Network Administrator Citizens Internet Services http://www.wpa.net --- [This E-mail scanned for viruses by Citizens Internet Services with Declude Virus v 1.65i10] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] I can't believe this would even work.
Some spammer is soliciting for dedicated hosting of spam servers. I received the same message, it was placed on hold by Declude. I thought it was pretty funny, I also thought of sending them a very outrageous proposal, however, I figured it was probably a scam to capture a legitimate address, so I did not send them anything. Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Some tests just started
We've been using JunkMail for months, and I assumed that I didn't seem results from a few tests because they were inherently low yield, or because we run the minimal version. Tests I usually see are BADHEADERS, REVDNS, HELOBOGUS, ROUTING, SPAMHEADERS, IPNOTINMX, WEIGHT10, GRAYLIST, etc. Then about mid-morning last Tuesday, I started seeing other tests run for the first time ever: OSSOFT, OSSRC, SPAMCOP, NOPOSTMASTER, NOABUSE. That's nice but now my whole weighting system is out of whack. I used to delete spam automatically after reaching a max value of 30 or 31, now I'm seeing total weights of up to 60. What might cause this? The only changes we made on our system were moving our secondary DNS server to a different outgoing line. I did some work on the JunkMail files, but that was just the usual process of adding a few offenders to our IP list and so on. Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Some tests just started
We've been using JunkMail for months, and I assumed that I didn't seem results from a few tests because they were inherently low yield, or because we run the minimal version. Tests I usually see are BADHEADERS, REVDNS, HELOBOGUS, ROUTING, SPAMHEADERS, IPNOTINMX, WEIGHT10, GRAYLIST, etc. Then about mid-morning last Tuesday, I started seeing other tests run for the first time ever: OSSOFT, OSSRC, SPAMCOP, NOPOSTMASTER, NOABUSE. That's nice but now my whole weighting system is out of whack. I used to delete spam automatically after reaching a max value of 30 or 31, now I'm seeing total weights of up to 60. What might cause this? The only changes we made on our system were moving our secondary DNS server to a different outgoing line. I did some work on the JunkMail files, but that was just the usual process of adding a few offenders to our IP list and so on. It sounds like the old DNS server allowed some DNS lookups (such as PTR and MX lookups) but not others (the A record lookups that most spam databases use). That would have prevented some of the DNS-based spam tests from running in the past, but with the new mailserver they will run. In this case, you could either disable these tests that hadn't been working before (by adding # before all lines that start with the test name in all the config files), or you could change the weighting as needed. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SPAManager IWEBMSG add-in demo available
All, We've been doing a lot of work on SPAManager, an application we're custom-building for users who have a large number of clients/partners sending from questionable servers and who want to tune their anti-spam settings accordingly. SPAManager offers an unprecedented level of control, including not only simple personal whitelists, but fine-tuning of spam alert and message delivery settings. And, MOST IMPORTANT, SPAManager runs WITHIN the IMail web server without any other HTTP daemon necessary. We're smartening up the logic and prettying up the pages, but I thought you might like to take a look: http://209.227.3.6, user demo, pw blue (yes, I'm steering you to a production server). Check out the SPAManager Whitelist and SPAManager settings screens and let me know your thoughts. -Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
