[Declude.JunkMail] Blacklist effectiveness
Anyone else noticing over the past few months that DNSBLs and RHSBLs have almost completely lost their effectiveness? We're seeing only a few (e.g. SBL, MXGATE, MAILPOLICE) that catchmore than 5%of incoming spam, and they top out at less than 6%. If it weren't for Sniffer and the specialized tests in Declude we'd be buried. Just curious as to what others are seeing... Darin.
RE: [Declude.JunkMail] Blacklist effectiveness
Title: Message Anyone else noticing over the past few months that DNSBLs and RHSBLs have almost completely lost their effectiveness? Hmmm I just finally bit the bullet the other day and upgraded to2.0.6 from 1.82. I used my old cfg file but copied over all the newest tests including the DNSBLs and the RHSBLs. Today, when I launched Outlook I had ZERO spam emails. ZERO! I thought my mail serverwas broken, except I received legit mail from the outside. I am waiting to hear from my users telling me that 1/2 their stuff had been put in thespam folder, but so far I haven't had1 call and I've been here 3 hours. These are the best results I've ever gotten from Declude, ever. Sharyn
[Declude.JunkMail] This always confuses me..sorry
Title: This always confuses me..sorry I have a default.junkmail file for my domain. I have a user.junkmail file for a certain user in the domain. I add a new test to my config file and the WARN action to my default.junkmail file for the domain. I add nothing to the user.junkmail file. What is the result for the user? Does the user get the WARN action from the default.junkmail file or the IGNORE action because there is no reference to it in their user.junkmail file? Thanks, Sharyn
RE: [Declude.JunkMail] This always confuses me..sorry
Title: This always confuses me..sorry If the user has a junkmail file, the settings from that file will be used regardless of any other junkmail files. In this case the action would be IGNORE. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharyn SchmidtSent: Friday, June 03, 2005 11:29 AMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] This always confuses me..sorry I have a default.junkmail file for my domain. I have a user.junkmail file for a certain user in the domain. I add a new test to my config file and the WARN action to my default.junkmail file for the domain. I add nothing to the user.junkmail file. What is the result for the user? Does the user get the WARN action from the default.junkmail file or the IGNORE action because there is no reference to it in their user.junkmail file? Thanks, Sharyn
RE: [Declude.JunkMail] This always confuses me..sorry
Title: Message If the user has a junkmail file, the settings from that file will be used regardless of any other junkmail files. In this case the action would be IGNORE. Thanks. I work on Declude upgrades and config changes about once ayear and I'm lucky ifI can remember what I did yesterday. Sharyn
RE: [Declude.JunkMail] Insufficient system resources error
Update: Since installing Imail 8.20 HF2 last Saturday, the problem so far has not reoccurred. Any one else still having this problem? John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] IMail version upgrade
Without hijacking John's thread, I'd also be interested in whether consensus is that IMail 8.20 is cooked yet with the addition of HF2. I'm back at IMail 8.14 HF1 and have been reasonably content. However, I only use IMail as a gateway, so fixes to webmail or POP don't interest me. The introduction of a multithreaded SMTPD however, that is interesting to me. Andrew 8) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Insufficient system resources error
Yes! We have an existing case open with Ipswitch. They were supposed to call this past Tuesday with a resolution but we haven't heard anything as of today (6/3). Their developers were aware of the problem and have been trying to resolve it for us since May 30. JR Tatum -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, June 03, 2005 2:13 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Insufficient system resources error Update: Since installing Imail 8.20 HF2 last Saturday, the problem so far has not reoccurred. Any one else still having this problem? John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Insufficient system resources error
I had the same problem with SMTP not being able to restart due to virtual memory according to the event log. I had to reboot to gain SMTP services. I have had another instance since applying HF2, but the SMTP portion of the issue was not the same. The event log did not indicate SMTP failures. I opened a ticket with Ipswitch but they blamed it on Declude, as usual. Thanks, Chris Patterson, CCNA Network Engineer/Support Manager -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, June 03, 2005 2:13 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Insufficient system resources error Update: Since installing Imail 8.20 HF2 last Saturday, the problem so far has not reoccurred. Any one else still having this problem? John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Insufficient system resources error
On 8.15HF2 - The problem has been occuring here (slightly more frequently on weekends, leading me to believe hack/DOS) through last weekend. Then no problem since then. - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, June 03, 2005 2:13 PM Subject: RE: [Declude.JunkMail] Insufficient system resources error Update: Since installing Imail 8.20 HF2 last Saturday, the problem so far has not reoccurred. Any one else still having this problem? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Insufficient system resources error
I opened a ticket with Ipswitch but they blamed it on Declude, as usual. I'll bet it was not Eric that said that. John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] System resources
Hello Everyone, I would like to introduce myself and say hello to everyone. Im new to Declude, having just joined last week. Im very excited about working for Declude and looking forward to working with you all. We have uncovered an intermittent issue with Declude and IMail 8.2. Basically, system resources are consumed until the system will no longer run. I want you to know that we are aware of the situation. We are working on a solution to this problem now and hope to have it solved in the near future. When ready we will conduct a limited beta program. If all goes well we will provide the solution in an interim release. I apologize for any inconvenience this may have caused and thank you for your patience. This is my first post here but assure you that it will not be my last. All the best, Bill Bill Billman Director of Engineering Declude - internet security software 978.499.2933 office 603.930.4886 mobile 978.477.8930 fax [EMAIL PROTECTED] www.declude.com -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.5.2 - Release Date: 6/3/2005
[Declude.JunkMail] Admin Web for Declude
Hello, Quite some time ago, there was mention about an Admin Web for Declude, is this available or does anyone have something to share? Thank You. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Admin Web for Declude
In case Declude is not able to respond right now, the 2-3 projects that were either in development or ready to go to development in the last couple of years did not get very far AFAIK. At this time, Declude is not working on one AFAIK. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Jeff Kratka Sent: Friday, June 03, 2005 2:06 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Admin Web for Declude Hello, Quite some time ago, there was mention about an Admin Web for Declude, is this available or does anyone have something to share? Thank You. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] IMail version upgrade
According to Bill Billman at Declude, you probably want to wait on 8.2 if you're using Declude with it. From the Virus list: We have uncovered an intermittent issue with Declude and IMail 8.2. Basically, system resources are consumed until the system will no longer run. I want you to know that we are aware of the situation. We are working on a solution to this problem now and hope to have it solved in the near future. When ready we will conduct a limited beta program. If all goes well we will provide the solution in an interim release. I apologize for any inconvenience this may have caused and thank you for your patience. And then: The problem seems to be with IMail 8.2 and any version of Declude. We haven't seen this problem using any version of Declude and older versions of IMail. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Friday, June 03, 2005 2:43 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] IMail version upgrade Without hijacking John's thread, I'd also be interested in whether consensus is that IMail 8.20 is cooked yet with the addition of HF2. I'm back at IMail 8.14 HF1 and have been reasonably content. However, I only use IMail as a gateway, so fixes to webmail or POP don't interest me. The introduction of a multithreaded SMTPD however, that is interesting to me. Andrew 8) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Admin Web for Declude
Quite some time ago, there was mention about an Admin Web for Declude, is this available or does anyone have something to share? Declude is so flexible and can do so much different things that it would be nearly impossible to write a clickplay-frontend. There was already a discussion. The question is: Do you want as much a possible functions to manage your email traffic with the drawback that you must know exactly what you need and what you're doing or do you want some less functions but this as easy as installing windows? Also what do you mean by admin web? Something that will write your configuration file and prevent wrong settings from your side (what's wrong?) or do you need something to let end-users choose different settings for their own mailbox? Markus --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Admin Web for Declude
Mostly what I remember from some time ago was something to let the end user modify their settings. Sorry Admin Web was the incorrect wording. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Markus Gufler Sent: Friday, June 03, 2005 2:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Admin Web for Declude Quite some time ago, there was mention about an Admin Web for Declude, is this available or does anyone have something to share? Declude is so flexible and can do so much different things that it would be nearly impossible to write a clickplay-frontend. There was already a discussion. The question is: Do you want as much a possible functions to manage your email traffic with the drawback that you must know exactly what you need and what you're doing or do you want some less functions but this as easy as installing windows? Also what do you mean by admin web? Something that will write your configuration file and prevent wrong settings from your side (what's wrong?) or do you need something to let end-users choose different settings for their own mailbox? Markus --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] IMail version upgrade
Thanks, Dan. Timing is everything. I got Bill's post a few minutes after yours! Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Friday, June 03, 2005 2:12 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] IMail version upgrade According to Bill Billman at Declude, you probably want to wait on 8.2 if you're using Declude with it. From the Virus list: We have uncovered an intermittent issue with Declude and IMail 8.2. Basically, system resources are consumed until the system will no longer run. I want you to know that we are aware of the situation. We are working on a solution to this problem now and hope to have it solved in the near future. When ready we will conduct a limited beta program. If all goes well we will provide the solution in an interim release. I apologize for any inconvenience this may have caused and thank you for your patience. And then: The problem seems to be with IMail 8.2 and any version of Declude. We haven't seen this problem using any version of Declude and older versions of IMail. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Friday, June 03, 2005 2:43 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] IMail version upgrade Without hijacking John's thread, I'd also be interested in whether consensus is that IMail 8.20 is cooked yet with the addition of HF2. I'm back at IMail 8.14 HF1 and have been reasonably content. However, I only use IMail as a gateway, so fixes to webmail or POP don't interest me. The introduction of a multithreaded SMTPD however, that is interesting to me. Andrew 8) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Admin Web for Declude
AH, User configurable actions is different. I know at one time at least Sandy had either a Demo or production running for a client. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Jeff Kratka Sent: Friday, June 03, 2005 2:38 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Admin Web for Declude Mostly what I remember from some time ago was something to let the end user modify their settings. Sorry Admin Web was the incorrect wording. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Markus Gufler Sent: Friday, June 03, 2005 2:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Admin Web for Declude Quite some time ago, there was mention about an Admin Web for Declude, is this available or does anyone have something to share? Declude is so flexible and can do so much different things that it would be nearly impossible to write a clickplay-frontend. There was already a discussion. The question is: Do you want as much a possible functions to manage your email traffic with the drawback that you must know exactly what you need and what you're doing or do you want some less functions but this as easy as installing windows? Also what do you mean by admin web? Something that will write your configuration file and prevent wrong settings from your side (what's wrong?) or do you need something to let end-users choose different settings for their own mailbox? Markus --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Admin Web for Declude
That's what I thought. Sandy, are you still here? Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Friday, June 03, 2005 2:58 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Admin Web for Declude AH, User configurable actions is different. I know at one time at least Sandy had either a Demo or production running for a client. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Jeff Kratka Sent: Friday, June 03, 2005 2:38 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Admin Web for Declude Mostly what I remember from some time ago was something to let the end user modify their settings. Sorry Admin Web was the incorrect wording. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Markus Gufler Sent: Friday, June 03, 2005 2:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Admin Web for Declude Quite some time ago, there was mention about an Admin Web for Declude, is this available or does anyone have something to share? Declude is so flexible and can do so much different things that it would be nearly impossible to write a clickplay-frontend. There was already a discussion. The question is: Do you want as much a possible functions to manage your email traffic with the drawback that you must know exactly what you need and what you're doing or do you want some less functions but this as easy as installing windows? Also what do you mean by admin web? Something that will write your configuration file and prevent wrong settings from your side (what's wrong?) or do you need something to let end-users choose different settings for their own mailbox? Markus --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] Admin Web for Declude
That's what I thought. Sandy, are you still here? Geez, ya take a couple hours off. . . well, I guess you guys don't watch the IMail list as much these days! Yes, I'm still here. Yes, we've built client self-management admin webs using the IMail web interface. But everything Markus said is true; every solution must be so customized that there was no way we could create a prepackaged app. You've got different options to offer users, different numbers of dropdowns, different test names on the back end, different on-line help, and different presentation styles (KWM, CWM, etc.). --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Admin Web for Declude
It's called Postini Message Center :-) Seriously, the lack of user self-service for adjusting settings and the lack of more automatic set-it and forget it system level options (along with wanting to be completely freed from Imail or any replacement MTA engine) has finally shifted the balance for us and we just completed migrating from Imail/Declude to Postini as our anti-virus and spam blocking system. Declude (especially Scott) has been great over the past few years, but I guess just as Scott outgrew running a one-man show, we have finally outgrown Declude. Obviously, everyone's experiences and needs are different, but I've grown tired of the repeated cycle of spam or virus outbreak, complaints from clients about too much stuff getting through, hours of tweaking/testing, then complaints from clients about important stuff being blocked. The control panel for dummies approach of Postini now lets us defer the tweaks back to the user. Too much spam getting through? Well, sir, please log in to your Message Center (Postini lingo for web control panel) and crank up your settings. Important email not getting through? Just log in and with an easy-to-use Web GUI adjust your allowed or disallowed lists. The downside? Postini has a cost-per-mailbox monthly service fee rather than an annual software license fee. However, for us, when took off my techie hat and put on my businessman's one, I looked at the 35,000 foot view and how we can had been scaling out with multiple mail servers to handle the incoming load; starting to deploy yet additional front-end servers to offload anti-virus scanning and spam filtering so the performance doesn't impact the pop/imap Imail engine; and all the license agreements/maintenance fees I realized we could immediately retire several servers along with the Declude and Imail annual licenses/maintenance agreements. Not to mention my own time, which I value highly, of many hours a week tweaking rules and adjusting the server functions or manually clearing thousands of spam or virus spool files on the server that got through in the early stages of a new attack. For us, because we do charge our clients a per-mailbox fee for spam blocking anyway, the pricing of Postini was not the big gulp it might be for some of you offering everything for free to your clients. Besides the lack of end-user gui and simplified rules tweaks (essentially now we let Postini adjust all the rules on their end based on their processing of over 6 billion emails a month from all their clients - they certainly get to see what is out there), the straw that broke the camel's back for us was the Rube Goldberg scripting we were starting to implement using Sandy's wonderfull stuff because as soon as one deploy's IMail in store and forward mode (to get the distributed scale-out, offloading, etc.) then you are exposed to dictionary attacks, nobody catch-all floods, etc. Sandy's scripts are great, but we stepped back and said do we really want all this complexity and spend so much of our operational focus just on keeping the mail flowing while relying on a few vb scripts to keep everything running? A great upside to Postini is that we automatically get multiple MX front-end redundancy and emergency spooling (optional add-on service) that will hold our mail should our servers be down briefly. With the simplified hub-and-spoke scaleout (multiple email servers being fed by Postini's own redundant clusters) our configuration is much simpler yet still distributed and expandable while some of our licensing fees are actually greatly reduced. Please understand this is not meant as a complaint or rant - I'd like to thank the Declude community and company for their great product and support over the past few years but we've had to move on. And the best part? Our customer service complaints about spam or email problems have gone down to almost zero - our clients like us again! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Kratka Sent: Friday, June 03, 2005 2:06 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Admin Web for Declude Hello, Quite some time ago, there was mention about an Admin Web for Declude, is this available or does anyone have something to share? Thank You. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Blacklist effectiveness
I've posted my spamtest effectiveness from Feb 2004 forward at http://it.farmprogress.com/declude/declude.htm - Original Message - From: Darin Cox To: Declude.JunkMail@declude.com Sent: Friday, June 03, 2005 8:33 AM Subject: [Declude.JunkMail] Blacklist effectiveness Anyone else noticing over the past few months that DNSBLs and RHSBLs have almost completely lost their effectiveness? We're seeing only a few (e.g. SBL, MXGATE, MAILPOLICE) that catchmore than 5%of incoming spam, and they top out at less than 6%. If it weren't for Sniffer and the specialized tests in Declude we'd be buried. Just curious as to what others are seeing... Darin.
Re: [Declude.JunkMail] Blacklist effectiveness
I post my spam test effectiveness's from Feb 2004 forward at: - Original Message - From: Darin Cox To: Declude.JunkMail@declude.com Sent: Friday, June 03, 2005 8:33 AM Subject: [Declude.JunkMail] Blacklist effectiveness Anyone else noticing over the past few months that DNSBLs and RHSBLs have almost completely lost their effectiveness? We're seeing only a few (e.g. SBL, MXGATE, MAILPOLICE) that catchmore than 5%of incoming spam, and they top out at less than 6%. If it weren't for Sniffer and the specialized tests in Declude we'd be buried. Just curious as to what others are seeing... Darin.
Re: [Declude.JunkMail] Admin Web for Declude
Sort Monster is working on an auto-tuning progmram MDLP (Modular Declude Log Processor) that could be used to reweight tests. It's still in beta. - Original Message - From: Jeff Kratka [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, June 03, 2005 5:19 PM Subject: RE: [Declude.JunkMail] Admin Web for Declude That's what I thought. Sandy, are you still here? Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Friday, June 03, 2005 2:58 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Admin Web for Declude AH, User configurable actions is different. I know at one time at least Sandy had either a Demo or production running for a client. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Jeff Kratka Sent: Friday, June 03, 2005 2:38 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Admin Web for Declude Mostly what I remember from some time ago was something to let the end user modify their settings. Sorry Admin Web was the incorrect wording. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Markus Gufler Sent: Friday, June 03, 2005 2:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Admin Web for Declude Quite some time ago, there was mention about an Admin Web for Declude, is this available or does anyone have something to share? Declude is so flexible and can do so much different things that it would be nearly impossible to write a clickplay-frontend. There was already a discussion. The question is: Do you want as much a possible functions to manage your email traffic with the drawback that you must know exactly what you need and what you're doing or do you want some less functions but this as easy as installing windows? Also what do you mean by admin web? Something that will write your configuration file and prevent wrong settings from your side (what's wrong?) or do you need something to let end-users choose different settings for their own mailbox? Markus --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Blacklist effectiveness
Darin, If you have not yet, you might consider adding SURBL testing as well. Darrell (http://www.invariantsystems.com) has a product, invURIBL, that is competent at interfacing SURBL to Declude(which in reality should and may at some point in time do this natively) as an ext. test. SURBL looks at the target link of the spam, and compares it to numerous blacklists(including name server bl). Drawbacks: 1 Processor intensive(testing showed a 15% increase in proc usage) 2 Difficult to fine tune. 'Out of the box' this product returns a weight that is a factor of several configurable tests that run inside INV. You have to fine tune each, then observe the end result. There is likely an easier way to tune this but I have not yet delved too far in. Upside: 1 As effective as Sniffer, and utilizes a different mechanism for identification. Low false positives. 2 Cheap Sniffer is _amazing_. However, we were discouraged after it took 8 hours to get a Sniffer rulebase for the last wave of German spam. So, we started testing SURBL to give Sniffer some help. Side note: The very instant we initialized testing, we started seeing a significant increase in picture spam (just a gif file, nothing else, not even a link - therefore undetectable to SURBL) We attribute this to the fact that we did not sufficiently cloak the test name in the headers and body, and the mass mailers determined by way of 'mailbox full' bounces from the test domain, that we were utilizing SURBL. Dave -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Friday, June 03, 2005 7:11 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Blacklist effectiveness I've posted my spamtest effectiveness from Feb 2004 forward at http://it.farmprogress.com/declude/declude.htm - Original Message - From: Darin Cox To: Declude.JunkMail@declude.com Sent: Friday, June 03, 2005 8:33 AM Subject: [Declude.JunkMail] Blacklist effectiveness Anyone else noticing over the past few months that DNSBLs and RHSBLs have almost completely lost their effectiveness? We're seeing only a few (e.g. SBL, MXGATE, MAILPOLICE) that catch more than 5% of incoming spam, and they top out at less than 6%. If it weren't for Sniffer and the specialized tests in Declude we'd be buried. Just curious as to what others are seeing... Darin. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Blacklist effectiveness
Hi Dave, Yep... we use SURBL tests... We also have several types of in-house tests to quickly adjust to things like the German wave. Very little slips through (less than 0.1%), just curious if others have noticed that DNSBLs and RHSBLs have become next to useless... Darin. - Original Message - From: Dave Marchette [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, June 03, 2005 11:48 PM Subject: RE: [Declude.JunkMail] Blacklist effectiveness Darin, If you have not yet, you might consider adding SURBL testing as well. Darrell (http://www.invariantsystems.com) has a product, invURIBL, that is competent at interfacing SURBL to Declude(which in reality should and may at some point in time do this natively) as an ext. test. SURBL looks at the target link of the spam, and compares it to numerous blacklists(including name server bl). Drawbacks: 1 Processor intensive(testing showed a 15% increase in proc usage) 2 Difficult to fine tune. 'Out of the box' this product returns a weight that is a factor of several configurable tests that run inside INV. You have to fine tune each, then observe the end result. There is likely an easier way to tune this but I have not yet delved too far in. Upside: 1 As effective as Sniffer, and utilizes a different mechanism for identification. Low false positives. 2 Cheap Sniffer is _amazing_. However, we were discouraged after it took 8 hours to get a Sniffer rulebase for the last wave of German spam. So, we started testing SURBL to give Sniffer some help. Side note: The very instant we initialized testing, we started seeing a significant increase in picture spam (just a gif file, nothing else, not even a link - therefore undetectable to SURBL) We attribute this to the fact that we did not sufficiently cloak the test name in the headers and body, and the mass mailers determined by way of 'mailbox full' bounces from the test domain, that we were utilizing SURBL. Dave -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Friday, June 03, 2005 7:11 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Blacklist effectiveness I've posted my spamtest effectiveness from Feb 2004 forward at http://it.farmprogress.com/declude/declude.htm - Original Message - From: Darin Cox To: Declude.JunkMail@declude.com Sent: Friday, June 03, 2005 8:33 AM Subject: [Declude.JunkMail] Blacklist effectiveness Anyone else noticing over the past few months that DNSBLs and RHSBLs have almost completely lost their effectiveness? We're seeing only a few (e.g. SBL, MXGATE, MAILPOLICE) that catch more than 5% of incoming spam, and they top out at less than 6%. If it weren't for Sniffer and the specialized tests in Declude we'd be buried. Just curious as to what others are seeing... Darin. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
