Re: [Declude.JunkMail] Not scanning per domain.
- Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] Bill, you do not want to do that, as if a e-mail is to multiple recipients, and one is in that domain, the message gets white listed to all, correct? Yes, that's correct. However, you get the opposite effect with the per-user configuration. Messages will be held or deleted for all recipients, even when a per-user configuration is setup to ignore and deliver the message. I guess one has to weigh which outcome is best for them and their users. Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Filter multiple CCs?
Hello, is it possible to filter multiple CCs / BCCs? I'd like to filter mails with one To and some hundred CCs / BCCs. Alex --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Spamdomains and ebay
I'm pretty sure that you can have multiple listings for either column also, so the filter looks for either no failures or no passes when considering whether or not the test was failed as a whole (Scott, please correct me if I'm wrong). No. Each line is treated separately If you have a line example.com example.net, that says that if the return address contains example.com, then the reverse DNS entry must contain example.com or example.net. If you have a second line example.com example.us, it says that if the return address contains example.com, then the reverse DNS entry must contain example.com or example.us. With both those lines, an E-mail with a reverse DNS entry that does not contain example.com would fail at least one of those two lines, causing the test to fail. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter multiple CCs?
Hello, There is a bcc test that you could use. If you add a line: BCC bcc 5 x 2 0 will this add 20 points for 50 Bccs? or can I use BCC1bcc 5 x2 0 BCC10 bcc 10 x 20 0 Alex --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter multiple CCs?
There is a bcc test that you could use. If you add a line: BCC bcc 5 x 2 0 will this add 20 points for 50 Bccs? No. It will add 2 points for any E-mail that has 5 or more Bcc:'s. or can I use BCC1bcc 5 x 2 0 BCC10 bcc 10 x 20 0 That would work fine. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter multiple CCs?
There is a bcc test that you could use. If you add a line: BCC bcc 5 x 2 0 to your \IMail\Declude\global.cfg file, it will add 2 points to the weight of the E-mail if it has 5 or more Bcc:'s (recipients that do not appear in the headers of the E-mail). Wow, when was that test added? I must've missed that. nice test to add I think. On that note, what do people consider 'too many' in BCC? Paul --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Spamdomains and ebay
Shoot. Thanks for the clarification. Instead of making another feature suggestion, could you maybe give us a little insight into what you have planned if anything for filtering in general. No need to go too far out and nothing at all in the short-term would be fully understood. Thanks, Matt R. Scott Perry wrote: I'm pretty sure that you can have multiple listings for either column also, so the filter looks for either no failures or no passes when considering whether or not the test was failed as a whole (Scott, please correct me if I'm wrong). No. Each line is treated separately If you have a line example.com example.net, that says that if the return address contains example.com, then the reverse DNS entry must contain example.com or example.net. If you have a second line example.com example.us, it says that if the return address contains example.com, then the reverse DNS entry must contain example.com or example.us. With both those lines, an E-mail with a reverse DNS entry that does not contain example.com would fail at least one of those two lines, causing the test to fail. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Spamdomains and ebay
Instead of making another feature suggestion, could you maybe give us a little insight into what you have planned if anything for filtering in general. No need to go too far out and nothing at all in the short-term would be fully understood. Most of what appears in the suggestion database right now about filters are minor things (such as a filter that checks both the subject and the body, which is just a timesaver, as the functionality can already be accomplished). So there are no major changes to filtering in the works. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT: WinME not resolving DNS
I have a customer that has a home computer running WinME. Worked fine connected to his cable modem. He moved the computer to another room and I installed a Linksys Router/AP on the cable modem and a USB wireless Ethernet on his computer. I can get connectivity and the DNS is listed in WinIPCfg, but his machine will not resolve DNS. If I go to a web server that I know the address of, I can browse that site just fine. Does anyone know why it won't resolve DNS queries? Are there any specific configs I should check. Todd Holt Xidix Technologies, Inc Las Vegas, NV USA www.xidix.com 702.319.4349 --- [This E-mail scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter multiple CCs?
I currently score it as follows (on a fail weight of 10) BCC-3 bcc 3 x 1 0 BCC-5 bcc 5 x 1 0 I used to have a line in there for just one BCC, but I removed that because adding points with that was just too common and indiscriminate. Obviously I score this very low, but the scoring is also incremental, so 5 BCC's will fail both tests. Honestly, I haven't looked too carefully at what is optimal with this, but it might be a good idea to set up a filter for 3 or more BCC's and see what spam doesn't fail, and also what sort of problems the legit messages that fail this test might have in addition (could they pretty much all handle having the extra points for instance). Matt paul wrote: There is a "bcc" test that you could use. If you add a line: BCC bcc 5 x 2 0 to your \IMail\Declude\global.cfg file, it will add 2 points to the weight of the E-mail if it has 5 or more Bcc:'s (recipients that do not appear in the headers of the E-mail). Wow, when was that test added? I must've missed that. nice test to add I think. On that note, what do people consider 'too many' in BCC? Paul --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: WinME not resolving DNS
So basically you can ping via ip, but not dhcp. Is this correct? 1) I do not believe WinMe has ipconfig /flushdns, but I could be wrong, so it is worth a try. 2) Check to make sure there is not host file with crap in it. 3) Uninstall all networking and reboot, then install them again. 4) Uninstall all networking again, then go into regedit and delete the following keys, in Hkey local machine/system/(all of the control sets)/services (Winsock and Winsock2). Then reboot and install your networking again and you should be good. Nathan Fouarge Amberwave Communications 114 N Dodge Algona, IA 50511 515-295-6900 x33 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Holt Sent: Wednesday, October 29, 2003 10:43 AM To: [EMAIL PROTECTED] I have a customer that has a home computer running WinME. Worked fine connected to his cable modem. He moved the computer to another room and I installed a Linksys Router/AP on the cable modem and a USB wireless Ethernet on his computer. I can get connectivity and the DNS is listed in WinIPCfg, but his machine will not resolve DNS. If I go to a web server that I know the address of, I can browse that site just fine. Does anyone know why it won't resolve DNS queries? Are there any specific configs I should check. Todd Holt Xidix Technologies, Inc Las Vegas, NV USA www.xidix.com 702.319.4349 --- [This E-mail scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: WinME not resolving DNS
have you tried from the command line ipconfig /flushdns Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Todd Holt Sent: Wednesday, October 29, 2003 10:43 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OT: WinME not resolving DNS I have a customer that has a home computer running WinME. Worked fine connected to his cable modem. He moved the computer to another room and I installed a Linksys Router/AP on the cable modem and a USB wireless Ethernet on his computer. I can get connectivity and the DNS is listed in WinIPCfg, but his machine will not resolve DNS. If I go to a web server that I know the address of, I can browse that site just fine. Does anyone know why it won't resolve DNS queries? Are there any specific configs I should check. Todd Holt Xidix Technologies, Inc Las Vegas, NV USA www.xidix.com 702.319.4349 --- [This E-mail scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter multiple CCs?
Title: Message If an e-mail is sent to me, BCC'd to 5 other people in my domain, and BCC'd to 100 other people not in my domain, what number does BCC see? 5 or 100? Thanks. Rob
RE: [Declude.JunkMail] OT: WinME not resolving DNS
Believe me, that is my first instinct also!! But I'm trying to do a favor for a good client and I don't want to insult him by telling him that his computer sucks! Even though it's the truth! Todd Holt Xidix Technologies, Inc Las Vegas, NV USA www.xidix.com 702.319.4349 -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Wednesday, October 29, 2003 9:29 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] OT: WinME not resolving DNS Best way to deal with this problem: Dump Windows ME. Run, don't walk. And this comes from a MCSE. (Sorry, could not resist.) John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Whiteliste Bypass?
Hello, can I Whitelist a Host and IPBypass the same host? What will happen? I'd like to have mail whitelisted from them (using f***-Headers, listed on many Spam DBs), but if they forward a mail to me, I'd like to test it as usual. Will this work? Alex --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Whiteliste Bypass?
can I Whitelist a Host and IPBypass the same host? What will happen? In this case, the IPBYPASS option will cause Declude JunkMail to see the IP of the server that connected to the one you are bypassing, so the whitelisting wouldn't work. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Not scanning per domain.
Scott, What's your take on this ? Is John correct or do I just need to comment out/remove any tests that I don't want to run for a particular domain ? I have a $default$.junkmail under \Imail\Declude\ and again a $default$.junkmail under \Imail\Declude\domain.tld. If a per domain $default$.junkmail is blank or if tests are missing, will it ignore the tests or revert to the ones under \Imail\Declude\ ? Fritz -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, October 28, 2003 11:13 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Not scanning per domain. Create a folder for that domain. In the folder, have a $default$.junkmail file, but leave it blank. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Fritz Squib Sent: Tuesday, October 28, 2003 7:55 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Not scanning per domain. We have a client who wants NO junkmail scanning for his domain. Is there a way to shut off all scanning in the per domain settings other than WARN or IGNORE (i.e. remove the default.junkmail file from his per domain folder). The other reason I ask this is because our server resources are pretty heavily taxed already (new server in 2004 budget), his is a high volume domain, and it would be nice to disable all tests from actually running on that domain like in Declude Virus foolish.tld OFF Yes I am running the pro version of Declude, yes I know about IM Gate, and no there aren't enough hours in a day to finish all of the projects that I already have started. Fritz Frederick P. Squib, Jr. Network Operations/Mail Administrator Citizens Telephone Company of Kecksburg http://www.wpa.net --- [This E-mail scanned by Citizens Internet Services with Declude Virus.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned by Citizens Internet Services with Declude Virus.] --- [This E-mail scanned by Citizens Internet Services with Declude Virus.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Not scanning per domain.
What's your take on this ? Is John correct or do I just need to comment out/remove any tests that I don't want to run for a particular domain ? You can use per-user settings or WHITELIST TO/TODOMAIN in order to prevent spam from being caught for a specific user/domain. However, this may not prevent the tests from being run. I have a $default$.junkmail under \Imail\Declude\ and again a $default$.junkmail under \Imail\Declude\domain.tld. If a per domain $default$.junkmail is blank or if tests are missing, will it ignore the tests or revert to the ones under \Imail\Declude\ ? If the per-user/per-domain config file exists, Declude JunkMail will use it. If it is blank, Declude JunkMail will use the IGNORE action for all spam tests. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] ROUTETO S/F
We store forward a client's e-mail for them, and they have asked for spams to be sent to them if the message is above 25 and below 45. I have created a folder (C:\IMail\declude\domain.com) for their domain and put a modified copy of $default$.junkmail in there. snip of domain.com\$default$.junkmail WEIGHT10HOLD WEIGHT15HOLD WEIGHT20HOLD WEIGHT25ROUTETO [EMAIL PROTECTED] WEIGHT30ROUTETO [EMAIL PROTECTED] WEIGHT35ROUTETO [EMAIL PROTECTED] WEIGHT40ROUTETO [EMAIL PROTECTED] WEIGHT45DELETE WEIGHT50DELETE /snip snip of global.cfg WEIGHT10HOLD WEIGHT15HOLD WEIGHT20HOLD WEIGHT25DELETE WEIGHT30DELETE WEIGHT35DELETE WEIGHT40DELETE WEIGHT45DELETE WEIGHT50DELETE /snip However, now the messages that fall between 25 and 45 they are not automatically being resent. If I open Spam Review (or look C:\IMail\spool\spam) I will see a message with 31 points. Any ideas why? Thanks in advance! __ Aaron Moreau-Cook Acumen Associates, Inc. Network Architect e-mail [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] ROUTETO S/F
We store forward a client's e-mail for them, and they have asked for spams to be sent to them if the message is above 25 and below 45. I have created a folder (C:\IMail\declude\domain.com) for their domain and put a modified copy of $default$.junkmail in there. Store and forward E-mail is treated as outgoing E-mail (since it isn't stored locally), and therefore the actions from the \IMail\Declude\global.cfg file are used. So: snip of global.cfg WEIGHT10HOLD WEIGHT15HOLD WEIGHT20HOLD WEIGHT25DELETE WEIGHT30DELETE WEIGHT35DELETE WEIGHT40DELETE WEIGHT45DELETE WEIGHT50DELETE /snip Their E-mails will either be held if the weight is between 10 and 24, or deleted if the weight is higher than 24. What you would want is something like this: WEIGHT26_44 weightrange x x 26 44 Then, you would want to set up a per-domain config file for them (\IMail\Declude\example.com\$default$.JunkMail) with a line WEIGHT26_44 ROUTETO [EMAIL PROTECTED]. Note that 26 and 44 are used instead of 25 and 45, since the request was for E-mails with a weight of greater than 25 and less than 45 (rather than greater than or equal to 25 and less than or equal to 45). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Still having mail backup and processer running at or near 100%
Hello List, I just spent the night install an additional hard drive into the mail server. I how have over 20 Gig free space on both drives.The server was turned on at 8:00 am and the spool dir. was cleaned of any files. The computer is a dual P3 866 with 1 gig of memory. Task manager is showing the computer running at or near 100% all day. The spool dir is overflowing. I have seen up to 16 NTVDM listed in the task manger. I am lost at this time what to do. I am running Version 7.07 with the lasted hotfix from both Imail and Microsoft. I am running version 1.75 of Duclude Lenny Bauman LRBCG.COM, Inc. Phone 419-621-5770 Toll Free 1-800-NET-ACCESS (638-2223) E-mail [EMAIL PROTECTED] - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, October 24, 2003 3:11 PM Subject: [Declude.JunkMail] Please check the SBL test in your global.cfg (may cause mail to back up!) Back in August, the Osirusoft tests died. Unfortunately, they also were used by SBL. As a result, many people have an SBL line in their \IMail\Declude\global.cfg file referring to osirusoft.com. This is causing major delays, and causing mail to back up on some busy servers. Please check your \IMail\Declude\global.cfg file. If it has any entries with osirusoft in them, they should be removed (or changed). For SBL, you can change the line to: SBL ip4rsbl.spamhaus.org127.0.0.6 7 0 -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by LRBCG.COM, Inc.] --- [This E-mail scanned for viruses by LRBCG.COM, Inc.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] ROUTETO S/F
Thanks Scott, did the trick! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Wednesday, October 29, 2003 12:40 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] ROUTETO S/F We store forward a client's e-mail for them, and they have asked for spams to be sent to them if the message is above 25 and below 45. I have created a folder (C:\IMail\declude\domain.com) for their domain and put a modified copy of $default$.junkmail in there. Store and forward E-mail is treated as outgoing E-mail (since it isn't stored locally), and therefore the actions from the \IMail\Declude\global.cfg file are used. So: snip of global.cfg WEIGHT10HOLD WEIGHT15HOLD WEIGHT20HOLD WEIGHT25DELETE WEIGHT30DELETE WEIGHT35DELETE WEIGHT40DELETE WEIGHT45DELETE WEIGHT50DELETE /snip Their E-mails will either be held if the weight is between 10 and 24, or deleted if the weight is higher than 24. What you would want is something like this: WEIGHT26_44 weightrange x x 26 44 Then, you would want to set up a per-domain config file for them (\IMail\Declude\example.com\$default$.JunkMail) with a line WEIGHT26_44 ROUTETO [EMAIL PROTECTED]. Note that 26 and 44 are used instead of 25 and 45, since the request was for E-mails with a weight of greater than 25 and less than 45 (rather than greater than or equal to 25 and less than or equal to 45). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Still having mail backup and processer running at or near 100% running at or near 100%
I just spent the night install an additional hard drive into the mail server. I how have over 20 Gig free space on both drives.The server was turned on at 8:00 am and the spool dir. was cleaned of any files. The computer is a dual P3 866 with 1 gig of memory. Task manager is showing the computer running at or near 100% all day. If you go to Task Manager, look at the Processes tab, and click on the CPU button, which process(es) are at the top (the ones using the most CPU time)? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Still having mail backup and processer running at or near 100%
Try increasingthe number of SMTP processes until you find a value that keeps the spool caught up. I raised mine to 100. My Declude logs show that 250,000+ messages pass through my server each day.The Declude log from yesterday, at loglevel= high, is 1,017,555 KB. DLAnalyzer reports 279,886 messages processed -- that's 11,661 per hour. I delete on weight20, which zapped 243,205 messages. :-) Glenn Z. - Original Message - From: Lenny Bauman To: [EMAIL PROTECTED] Sent: Wednesday, October 29, 2003 4:27 PM Subject: [Declude.JunkMail] Still having mail backup and processer running at or near 100% Hello List, I just spent the night install an additional hard drive into the mailserver. I how have over 20 Gig free space on both drives. The server wasturned on at 8:00 am and the spool dir. was cleaned of any files. Thecomputer is a dual P3 866 with 1 gig of memory. Task manager is showing thecomputer running at or near 100% all day. The spool dir is overflowing.I have seen up to 16 NTVDM listed in the task manger. I am lost at thistime what to do. I am running Version 7.07 with the lasted hotfix fromboth Imail and Microsoft. I am running version 1.75 of DucludeLenny BaumanLRBCG.COM, Inc.Phone 419-621-5770Toll Free 1-800-NET-ACCESS (638-2223)E-mail [EMAIL PROTECTED]- Original Message -From: "R. Scott Perry" [EMAIL PROTECTED]To: [EMAIL PROTECTED]Sent: Friday, October 24, 2003 3:11 PMSubject: [Declude.JunkMail] Please check the SBL test in your global.cfg(may cause mail to back up!) Back in August, the Osirusoft tests died. Unfortunately, they also were used by SBL. As a result, many people have an SBL line in their \IMail\Declude\global.cfg file referring to osirusoft.com. This iscausing major delays, and causing mail to back up on some busy servers. Please check your \IMail\Declude\global.cfg file. If it has any entries with "osirusoft" in them, they should be removed (or changed). For SBL, you can change the line to: SBL ip4r sbl.spamhaus.org 127.0.0.6 7 0 -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus(http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by LRBCG.COM, Inc.]---[This E-mail scanned for viruses by LRBCG.COM, Inc.]---[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
Re: [Declude.JunkMail] Still having mail backup and processer running at or near 100% running at or near 100%
Scott, if you are talking about the CPU Tab then the answers is that is bounces around no one item is at the top for over a sec. I see system idle, NTVDM Declude, smpt32, POP32, iwebmeg, iwebcal. If you are talking about the CPU Time tab I have System Idle 13 Hours, Iwebmsg 2 Hours, System 32 mins., POP3d32 11 mins., CSRSS 11 mins., SMTPd32 10 mins. Lenny Bauman LRBCG.COM, Inc. Phone 419-621-5770 Toll Free 1-800-NET-ACCESS (638-2223) E-mail [EMAIL PROTECTED] - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 29, 2003 6:41 PM Subject: Re: [Declude.JunkMail] Still having mail backup and processer running at or near 100% running at or near 100% I just spent the night install an additional hard drive into the mail server. I how have over 20 Gig free space on both drives.The server was turned on at 8:00 am and the spool dir. was cleaned of any files. The computer is a dual P3 866 with 1 gig of memory. Task manager is showing the computer running at or near 100% all day. If you go to Task Manager, look at the Processes tab, and click on the CPU button, which process(es) are at the top (the ones using the most CPU time)? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by LRBCG.COM, Inc.] --- [This E-mail scanned for viruses by LRBCG.COM, Inc.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Still having mail backup and processer running at or near 100% running at or near 100%
if you are talking about the CPU Tab then the answers is that is bounces around no one item is at the top for over a sec. That's normal for IMail (with other programs, you'd be looking for just 1 process at 100%) -- but what you want to do is look at the top entries in the CPU column, and see which ones are using processor time. For example, if the total CPU usage is at 100%, and there are 3 Declude.exe processes each using about 30%, then Declude would be the culprit. For a quick estimate, you can look at all processes that are using at least 1% of the CPU. I see system idle, NTVDM Declude, smpt32, POP32, iwebmeg, iwebcal. If you see system idle in there, you aren't at 100% CPU usage. :) If those processes are all pretty much sharing the CPU usage, then you're probably at maximum capacity for the server. If you are talking about the CPU Time tab ... No. For IMail, the CPU column is the important one (the processes that are important are usually ones that come and go quickly, so they will have very little CPU time associated with them). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT Outlook Express problem
We had this problem, fortunately the users that had this problem all had static IP addresses so we added them to the list of IP's allowed to send without authentication. Gene Head ACCRAM Inc. MCP,Net+,A+,CCNA,CCDA [EMAIL PROTECTED] [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of paul Sent: Wednesday, October 29, 2003 10:36 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OT Outlook Express problem I'm really sorry for this guys, but I'm really in a bind here. I posted the following to the imail list, but wanted to submit it here to try to get ANY response. Thanks for the time, and again, I apologize for this. - Paul This change to 'no relay' has been one major PITA! Those of you who changed, did you run into some OEs that just would NOT AUTH even tho the setting was 'my server requires'? We have a small handfull of people who are running OE6 that just will not AUTH. The logs just show ehlo lines, but no Authenticated user Session treated as local If I saw lines Failed Auth I'd understand, but I don't see these. We have 1 person who can create mail, and it works, but a reply to does not... others just won't work at all. Those that had these problems, how were they resolved? We don't want to lose customers because their software doesn't want to work. I've searched on MS's site/newsgroups, and don't see this. So any help from those that have been there is appreciated I don't want the setting to go back to relay for addresses but I'm afraid it will if I can't get this resolved. Paul --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT Outlook Express problem
Another thing to try, is delete the e-mail account on the client completely. Restart the computer. Recreate the e-mail account. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Gene Head Sent: Wednesday, October 29, 2003 5:56 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] OT Outlook Express problem We had this problem, fortunately the users that had this problem all had static IP addresses so we added them to the list of IP's allowed to send without authentication. Gene Head ACCRAM Inc. MCP,Net+,A+,CCNA,CCDA [EMAIL PROTECTED] [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of paul Sent: Wednesday, October 29, 2003 10:36 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OT Outlook Express problem I'm really sorry for this guys, but I'm really in a bind here. I posted the following to the imail list, but wanted to submit it here to try to get ANY response. Thanks for the time, and again, I apologize for this. - Paul This change to 'no relay' has been one major PITA! Those of you who changed, did you run into some OEs that just would NOT AUTH even tho the setting was 'my server requires'? We have a small handfull of people who are running OE6 that just will not AUTH. The logs just show ehlo lines, but no Authenticated user Session treated as local If I saw lines Failed Auth I'd understand, but I don't see these. We have 1 person who can create mail, and it works, but a reply to does not... others just won't work at all. Those that had these problems, how were they resolved? We don't want to lose customers because their software doesn't want to work. I've searched on MS's site/newsgroups, and don't see this. So any help from those that have been there is appreciated I don't want the setting to go back to relay for addresses but I'm afraid it will if I can't get this resolved. Paul --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] IMail server Memory Dump.
Thank to the off topic group. Did reg bak and imail fo;der backup. Had a full imail server recovery in 20 minutes.on a new box. Alls fine now. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Tuesday, October 28, 2003 9:00 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] IMail server Memory Dump. I would definitely suspect the memory. Since you are saying the problem is happening with the old memory, disconnect everything but the CPU. (Maybe do that too.) Then reconnect all firmly. On the memory sticks, LIGHTLY wipe a CLEAN pencil eraser across the contact strips. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kevin Shimwell Sent: Tuesday, October 28, 2003 5:39 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] IMail server Memory Dump. Great questions. Yes: Reboots on its own. No HW upgrades until lately. What we did. Primary nic card was erroring intermitenly, With two cards in the server I went ahead and switch the IP on the cards. Next in a 24 hour period we atempted to add two 512 mem chips. On startup got a blue screen shut down and put back the old mem. Its within that time period I have been noticing this problem. Sever dumps and reboots about every 5 hours. I have replacements coming. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Chuck Schick Sent: Tuesday, October 28, 2003 5:59 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] IMail server Memory Dump. Kevin: Could you describe in what exactly you are seeing? Does the server lock up or does it reboot on its own? Has the hardware been in service for a long time or is this new hardware? Have you done any upgrades lately? Do your event logs show anything? Are you running Imail with a database backend? Did this problem just start? What sort of load are you running on the server - memory and CPU usage? Chuck Schick Warp 8, Inc. 303-421-5140 www.warp8.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Link Brokers Support Sent: Tuesday, October 28, 2003 10:46 AM To: Declude Virus; Declude Junk Mail Subject: [Declude.JunkMail] IMail server Memory Dump. Anyone knows of any known problems with Imail and declude causing it to just shutting down and restart. ( The server that is. ) I'm getting a problem every 6 -7 hours. I'm using the latest version of I mail on Windows server 2000 with all the latest MS patches. Declude version IM not sure. How do I find out. Kevin Shimwell Link Brokers Group, LLC ( Support ) 401 Ist Ave. North North Myrtle Beach, SC 29582 Phone: 843-663-1004 Fax: 843-663-1007 Email: [EMAIL PROTECTED] 24/7 Support http://www.linkbrokers.com/support_ticket.cfm Support M-F 1-888-546-5631 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. [This E-mail scanned for viruses by Link Brokers Group, Inc Virus Protection] [This E-mail scanned for viruses by Link Brokers Group, Inc Virus Protection] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. [This E-mail scanned for viruses by Link Brokers Group, Inc Virus Protection] [This E-mail scanned for viruses by Link Brokers Group, Inc Virus Protection] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SPAM from Ipswitch
Check this out: X-F: [EMAIL PROTECTED] Wed Oct 29 12:29:27 2003 Received: from cs.ipswitch.com [156.21.1.4] by MAIL1.NJACCESS.COM with ESMTP (SMTPD32-6.06) id A8F024BD0124; Wed, 29 Oct 2003 12:29:20 -0500 Received: from CAMPAIGN [156.21.1.4] by cs.ipswitch.com (SMTPD32-8.03) id A8638A7B0250; Wed, 29 Oct 2003 12:26:59 -0500 From: [EMAIL PROTECTED] To: xxx Message-Id: [EMAIL PROTECTED] Subject: Third Party Productivity Tools for IMail Server Date: WED, 29 OCT 2003 12:26:59 -0500 Reply-To: [EMAIL PROTECTED] Content-Type: text/plain; charset=ISO-8859-1 X-RBL-Warning: SPAMCOP: Blocked - see http://www.spamcop.net/bl.shtml?156.21.1.4 X-Warn: This message contains content that is likely spam Message failed SPAMCHK: 7. X-Declude-Sender: [EMAIL PROTECTED] [156.21.1.4] X-Declude-Spoolname: Df8f0124.SMD X-SpamWatch-Tests-Failed: SPAMCOP, EASYNET-DNSBL, IPNOTINMX, NOLEGITCONTENT, SPAMCHK, WEIGHT1, WEIGHT2 [19] X-SpamWatch-Country-Chain: UNITED STATES-destination X-SpamWatch-ReverseLookUp: cs.ipswitch.com ([156.21.1.4]). X-RCPT-TO: xxx X-UIDL: 364034998 Status: U Ipswitch is emailing a promotion out, and their own mail server (and/or CAMPAIGN bulkmail software server) is on 2 blacklists! Not too good on their part... -- Scot --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Deleting unwanted spam from spam.mbx
Greetings All, I'm sure some of you must have known this, but there's a program in IMail called immsgexp.exe. I've found this to be quite useful in deleting unwanted amounts of spam from the spam folders. It works all the way down your directory tree, and can be setup on a cron job to delete on a daily basis an amount of mail from spam.mbx depending on the number of days you set. You say... How is this useful? Do more then one action based on weight and let the users know about where they can view their spam and how long it will be available. Have the cron job run every day and allow only seven days worth of spam to build up in the spam.mbx files. I'm sure if a user is expecting mail and it hasn't shown up in seven days, they can look here. ie. D:\IMailimmsgexp -td:\domains\mydomain.com\users -d7 -mspam.mbx This will get rid of all mail in the mailbox spam.mbx for all users in the mydomain.com\users folder. Just an FYI... so flame away :P Mike --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
