RE: Re[2]: [Declude.JunkMail] [BUMP] Files locked but not processed
Scott, I checked both the C:\Declude.log and the JM logs, and on the ones I sent to you, they could not be found in either log. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, December 29, 2003 6:22 PM To: [EMAIL PROTECTED] Subject: Re[2]: [Declude.JunkMail] [BUMP] Files locked but not processed Does this still seem to be happening to E-mails with large numbers of recipients? These messages had 89 and 60 recipients each. Are there any Declude log file entries for these E-mails? If so, what are they? Do you know if there are any Declude.exe processes in memory when this happens, that are not going away (which could indicate that Declude hung)? Do you know if the SMTP service was stopped/restarted at around the time this happened? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[3]: [Declude.JunkMail] [BUMP] Files locked but not processed
Given the information, it looks like the most likely culprit here is IMail. I tested one of the D*.SMD/Q*.SMD combinations here, and there were no problems. With nothing suggesting that Declude either hung or crashed, it sounds like this is a case related to the other IMail issues (not calling Declude, or calling Declude multiple times). -Scott At 11:37 PM 12/29/2003, Sanford Whiteman wrote: Are there any Declude log file entries for these E-mails? None at all. Do you know if there are any Declude.exe processes in memory when this happens, that are not going away (which could indicate that Declude hung)? There are no hung Declude processes. Do you know if the SMTP service was stopped/restarted at around the time this happened? It has not been restarted since the 8.05 upgrade on 12/23. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] route to folder
Is there a way to route certain tests that fail to a specific folder. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Bonded Sender
Here's the answer from our Senderbase engineer: **There's no way that I know of to make the current JunkMail use senderbase. **It could be done if the program were modified to support the senderbase **DNS interface (http://www.senderbase.org/dnsresponses.html), which **provides much of the data on the senderbase web site. **BTW, feel free to point people my way for implementation issues, if the **Declude folks decide that it's worthwhile. Contact me off list if you would like his e-mail address. -Cyan -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Cyan Callihan Sent: Tuesday, December 23, 2003 2:07 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Bonded Sender Welcome to the list. Cyan! I have been using the bondedsender IP4R database with good success. Awesome! However, I was just looking at you senderbase site today and was wondering how I might be able to us it with Declude JunkMail. Thoughts? The person who could best answer this question is out on vacation until after the New Year. I've forwarded your query on to an engineer and I'll contact you when I have an answer. Cyan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] route to folder
Is there a way to route certain tests that fail to a specific folder. Yes, you can use the MAILBOX action to do that. For example, TESTNAME MAILBOX spam would route E-mail that failed the TESTNAME test into the user's spam mailbox. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Sorting log
I need to sort a debug log to find all lines for a message. Problem is, some lines include just seconds of time, some include thousands of seconds. This is making it difficult to import into Excel. Can't use space as the delimiter. Can't use fixed width. Can't use tab. Any ideas on the fastest way to do this? 12/30/2003 09:03:39.823 Qafdf020302588aad Test #78: BASICFILTER [filter] - may skip 12/30/2003 09:03:39.823 Qafcc023b02523f9a Test #54: SPMMGRSPAM2 [external] - may skip 12/30/2003 09:03:39.823 Qafe0021101d68bb7 Doing filter file C:\Imail\Declude\filters\keysubject.txt. 12/30/2003 09:03:39.980 Qafe0021001d68b3a Doing filter file C:\Imail\Declude\filters\_YDirected.txt. 12/30/2003 09:03:40.120 Qafdf020e01d68994 Doing filter file C:\Imail\Declude\filters\_YDirected.txt. 12/30/2003 09:03:40 Qafdf020202588a20 Filter: Set max weight to 10. 12/30/2003 09:03:40.120 Qafdf020f01d68a4f Finished Final Test #49: LONGSUBJECT2 [subjectchars] 12/30/2003 09:03:40.120 Qafdf020302588aad Test #79: GRAYFILTER4 [filter] - may skip 12/30/2003 09:03:40.120 Qafcc023b02523f9a SPMMGRSPAM2: External test using cached exit code of 0 [from SPMMGRSPAM1]. 12/30/2003 09:03:40 Qafe0021101d68bb7 Triggered CONTAINS filter KEYSUBJECT on son [weight-5; SonicWALL [RelianceSoft, Main]]. 12/30/2003 09:03:40 Qafdf020e01d68994 Filter YDIRECTED: Not skipping E-mail due to current weight of 15. 12/30/2003 09:03:40.277 Qafdf020202588a20 Doing filter file C:\Imail\Declude\filters\_YDirected.txt. 12/30/2003 09:03:40.277 Qafdf020f01d68a4f Test #50: SPAMDOMAINS [spamdomains] - may skip John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Sorting log
text to columns using a space as the delimiter -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Tuesday, 30 December 2003 2:22 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Sorting log Importance: High Any ideas on the fastest way to do this? Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Sorting log
I need to sort a debug log to find all lines for a message. Problem is, some lines include just seconds of time, some include thousands of seconds. This is making it difficult to import into Excel. Can't use space as the delimiter. Can't use fixed width. Can't use tab. Any ideas on the fastest way to do this? You're using the debug mode, which isn't designed to be processed in any way (aside from combining all lines with the same spool file name). The debug mode log file entries include the milliseconds (for debugging purposes G). If you are just looking for all lines for a message, you can use: FIND afe0021101d68bb7 dec.log /i -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Sorting log
Doesn't work, as it ends up spreading the data column into shreds. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of John Shacklett Sent: Tuesday, December 30, 2003 11:28 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Sorting log text to columns using a space as the delimiter -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Tuesday, 30 December 2003 2:22 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Sorting log Importance: High Any ideas on the fastest way to do this? Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Sorting log
That got it, thanks. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, December 30, 2003 11:32 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Sorting log I need to sort a debug log to find all lines for a message. Problem is, some lines include just seconds of time, some include thousands of seconds. This is making it difficult to import into Excel. Can't use space as the delimiter. Can't use fixed width. Can't use tab. Any ideas on the fastest way to do this? You're using the debug mode, which isn't designed to be processed in any way (aside from combining all lines with the same spool file name). The debug mode log file entries include the milliseconds (for debugging purposes G). If you are just looking for all lines for a message, you can use: FIND afe0021101d68bb7 dec.log /i -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] FYI - National Anti-Spam Registry
The National Anti-Spam Registry, or a Pretender? Don't be fooled by all the flag waving and mentions of thenew federal law. Be warned: this so-called "National AntiSpam Registry" is not official, and worse, it could be awolf in sheep's clothing. The site's privacy policy actuallyopens you up to widespread spamming.http://eletters.eweek.com/zd1/cts?d=79-394-5-8-194775-46657-1
RE: [Declude.JunkMail] Sorting log
John, If you need to do more that group by e-mail, what I do is to import the log into SQL2000 as a single column and then parse it with a T-SQL script using keywords, key phrases, unique characters and spaces in specific locations. Works really well and very fast. George -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, December 30, 2003 2:56 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Sorting log That got it, thanks. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, December 30, 2003 11:32 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Sorting log I need to sort a debug log to find all lines for a message. Problem is, some lines include just seconds of time, some include thousands of seconds. This is making it difficult to import into Excel. Can't use space as the delimiter. Can't use fixed width. Can't use tab. Any ideas on the fastest way to do this? You're using the debug mode, which isn't designed to be processed in any way (aside from combining all lines with the same spool file name). The debug mode log file entries include the milliseconds (for debugging purposes G). If you are just looking for all lines for a message, you can use: FIND afe0021101d68bb7 dec.log /i -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Sorting log another question
Scott - Do you have a handy dandy way of finding all the messages that were delivered Message OK *and* failed a certain test? Like all the messages that were successfully delivered that failed SPAMDOMAINS. Even a count would be nice - Thanks -Nick Hayer If you are just looking for all lines for a message, you can use: FIND afe0021101d68bb7 dec.log /i -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Sorting log another question
Do you have a handy dandy way of finding all the messages that were delivered Message OK *and* failed a certain test? Unfortunately, we do not have a tool to do that. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Sorting log another question
- Original Message - From: Nick Hayer [EMAIL PROTECTED] Do you have a handy dandy way of finding all the messages that were delivered Message OK *and* failed a certain test? Like all the messages that were successfully delivered that failed SPAMDOMAINS. Even a count would be nice - Nick, all of this is quite easy to accomplish using the UNIX tools for Win32 that can be found at http://unxutils.sourceforge.net I have put together a draft reference guide for these tools, so if your interested, I can send it to you off-list. Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Sorting log another question
Nick, FYI - You can do this with DLAnalyzer. On one of our last discussions we talked about having a weight range that spanned from zero. This way you could see the messages that were delivered. If you specify spamdomains and that weight range as a test in the advanced report and set the filter method to AND you will get the desired results you are looking for. Darrell Nick Hayer writes: Scott - Do you have a handy dandy way of finding all the messages that were delivered Message OK *and* failed a certain test? Like all the messages that were successfully delivered that failed SPAMDOMAINS. Even a count would be nice - Thanks -Nick Hayer If you are just looking for all lines for a message, you can use: FIND afe0021101d68bb7 dec.log /i -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Check Out DLAnalyzer a comprehensive reporting tool for Declude Junkmail Logs - http://www.dlanalyzer.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
