Re: [Declude.JunkMail] [sniffer] OT - exchange 5.5 help
Title: Re: [sniffer] OT - exchange 5.5 help Configure the IMS (internet mail service/connector in echange manager) You have to disable the microsoft smtp server (iis5 smtp) exchange 55 has its own smtp -Original Message- From: [EMAIL PROTECTED] [EMAIL PROTECTED] To: 'declude.junkmail@declude.com' declude.junkmail@declude.com CC: 'sniffer@SortMonster.com' sniffer@SortMonster.com Sent: Fri Jan 07 07:13:01 2005 Subject: [sniffer] OT - exchange 5.5 help I know this is off topic, but I need a little Exchange 5.5 help. Recently upgraded a client from NT4 with Exchange to Windows 2000 Server SP4 with Exchange 5.5. I am having one problem though. The local server name is server.example.com, which is fine and dandy for the internal network. I need to add a domain suffix for the server for the outside world for sending email. I need the domain suffix to be something like example1.com, where example1.com is a real registered domain. Any help is appreciated and you can email me off list. Daniel === Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax: 434 - 572 - 1981 [EMAIL PROTECTED] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
[Declude.JunkMail] Declude SmarterMail - Postfix
Anyone have an automated system to interface between SmartMail and Postfix using Postfix only as a gateway to SmarterMail/Declude/Sniffer??? Thanks, Michael Jaworski Puget Sound Network, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude SmarterMail - Postfix
Len Conrad's IMGate at http://imgate.meiway.com works equally well with with SmarterMail and IMail. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Michael Jaworski Sent: Friday, January 07, 2005 10:54 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Declude SmarterMail - Postfix Anyone have an automated system to interface between SmartMail and Postfix using Postfix only as a gateway to SmarterMail/Declude/Sniffer??? Thanks, Michael Jaworski Puget Sound Network, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude SmarterMail - Postfix
Thanks Len. Looking at IMGate I suddenly realized it sits on top of Postix and is not stand alone. Duh! Windows shop here with one Postfix machine to handle the dictionary and harvest attacks for our backup mail server. Mike --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HELO Filter not Working?
Hi, Remember, Declude JunkMail looks at the HELO/EHLO of the remote mailserver, based on IPBYPASS/HOP Uh - that's the answer. Thanks for clearing this up. So the HELO is not necessarily taken from the HELO, but from the HEADER. That certainly explains it. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, January 07, 2005 03:32 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] HELO Filter not Working? Here is the Imail 8 log: 01:07 13:13 SMTPD(d15f7804014ea63d) [63.107.174.14] connect 67.132.45.18 port 2525 01:07 13:13 SMTPD(d15f7804014ea63d) [67.132.45.18] EHLO mail.dollardays.com 01:07 13:13 SMTPD(d15f7804014ea63d) [67.132.45.18] MAIL FROM:... I set up a filter to simpify reporting on mail coming from a certain gateway: REMOTEIP -1 IS 67.132.45.18 HEADERS -2 CONTAINS X-Virus-Scanned: SpammerTrap HELO -4CONTAINS mail.dollardays.com Do you have %HELO% in the headers anywhere? If so, that should show you what Declude JunkMail is looking at. Remember, Declude JunkMail looks at the HELO/EHLO of the remote mailserver, based on IPBYPASS/HOP settings, so it may not be the same as what IMail sees (but should always be the same if IPBYPASS/HOP is not being used). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] 1.82 - Last Action no longer logged for IGNORE
Title: Message Hi Scott: Here is my log file BEFORE I upgraded from 1.7x to 1.82: 01/01/2005 00:08:06 Q303506642d68 Tests failed [weight=10]: IPNOTINMX=IGNORE SPAMHEADERS=WARN SNIFFER=LOG WEIGHTFILTER=WARN WEIGHT10=LOG 01/01/2005 00:08:06 Q303506642d68 Last action = ""> If the Last Action was IGNORE, the "Tests failed" line still existed. However, in 1.82, my log file now looks like this: 01/07/2005 00:13:17 Q1a6074d401022233 BASE64:1 WEIGHTFILTER:3 . Total weight = 4.01/07/2005 00:13:17 Q1a6074d401022233 Subject: **Message you sent blocked by our bulk email filter** 01/07/2005 00:13:17 Q1a6074d401022233 From: To: [EMAIL PROTECTED] IP: 66.175.147.18 ID: 3FCD4D003A62 01/07/2005 00:13:17 Q1a6074d401022233 Last action = ""> The Tests Failed line is missing! That really wreak havoc on my statistics reports- and it breaks DLANALZYER! Best RegardsAndy SchmidtHM Systems Software, Inc.600 East Crescent Avenue, Suite 203Upper Saddle River, NJ 07458-1846Phone: +1 201 934-3414 x20 (Business)Fax: +1 201 934-9206http://www.HM-Software.com/
RE: [Declude.JunkMail] 1.82 - Last Action no longer logged for IGNORE
Title: Message Hi Scott: Hm - it seems to be tied to: LOG_OKNONE If I comment out that line, then 1.82 shows the "Tests failed" line again, if the Last action = ""> Can you remind me, what additional messages/log lines I will see if #LOG_OKNONE is commented out? Best RegardsAndy SchmidtHM Systems Software, Inc.600 East Crescent Avenue, Suite 203Upper Saddle River, NJ 07458-1846Phone: +1 201 934-3414 x20 (Business)Fax: +1 201 934-9206http://www.HM-Software.com/ -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy SchmidtSent: Friday, January 07, 2005 10:22 PMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] 1.82 - Last Action no longer logged for IGNOREImportance: High Hi Scott: Here is my log file BEFORE I upgraded from 1.7x to 1.82: 01/01/2005 00:08:06 Q303506642d68 Tests failed [weight=10]: IPNOTINMX=IGNORE SPAMHEADERS=WARN SNIFFER=LOG WEIGHTFILTER=WARN WEIGHT10=LOG 01/01/2005 00:08:06 Q303506642d68 Last action = ""> If the Last Action was IGNORE, the "Tests failed" line still existed. However, in 1.82, my log file now looks like this: 01/07/2005 00:13:17 Q1a6074d401022233 BASE64:1 WEIGHTFILTER:3 . Total weight = 4.01/07/2005 00:13:17 Q1a6074d401022233 Subject: **Message you sent blocked by our bulk email filter** 01/07/2005 00:13:17 Q1a6074d401022233 From: To: [EMAIL PROTECTED] IP: 66.175.147.18 ID: 3FCD4D003A62 01/07/2005 00:13:17 Q1a6074d401022233 Last action = ""> The Tests Failed line is missing! That really wreak havoc on my statistics reports- and it breaks DLANALZYER! Best RegardsAndy SchmidtHM Systems Software, Inc.600 East Crescent Avenue, Suite 203Upper Saddle River, NJ 07458-1846Phone: +1 201 934-3414 x20 (Business)Fax: +1 201 934-9206http://www.HM-Software.com/
[Declude.JunkMail] IMail export users/aliases - IMGate?
Hi - I'm looking for a wayto export IMail users and aliases to an IMGatecache server so theIMGate can throw 550 errors on bad addresses. All help appreciated... -Dave DohertyDataworld, Inc.Skywaves, Inc.301-652-8822 x209
Re: [Declude.JunkMail] IMail export users/aliases - IMGate?
I'm looking for a way to export IMail users and aliases to an IMGate cache server so the IMGate can throw 550 errors on bad addresses. All help appreciated... There's a utility to do so provided by an IMGate user. Poke around their site and mailing list and you'll turn it up. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] IMail export users/aliases - IMGate?
Thanks, Sandy. -d - Original Message - From: Sanford Whiteman [EMAIL PROTECTED] To: Dave Doherty Declude.JunkMail@declude.com Sent: Saturday, January 08, 2005 1:43 AM Subject: Re: [Declude.JunkMail] IMail export users/aliases - IMGate? I'm looking for a way to export IMail users and aliases to an IMGate cache server so the IMGate can throw 550 errors on bad addresses. All help appreciated... There's a utility to do so provided by an IMGate user. Poke around their site and mailing list and you'll turn it up. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
