Re[2]: [Declude.JunkMail] Flooded with spam
If this year goes like last year then much worse is yet to come. See the bottom of this chart: http://reports.messagesniffer.com/Performance/FlowRatesByDay.jsp _M On Wednesday, August 30, 2006, 9:24:34 PM, gbirdsall wrote: gsc I've seen a 100-130% increase since Sunday. An average day used to be gsc around 500k-550k Spam messages, the past two days have been 950k and 1.2 gsc million, respectivly. gsc One thing we implemented was session based blocking in our firewall, we gsc were getting between 200 and 4000 (not a typo) simultanious sessions from gsc IP addresses. We now grab that and block IPs based on this information. gsc It has helped already today. gsc - greg Just checking with the list if they have seen an increase in the amount of spam messages caught. Last monday and tuesday my mail servers are flooded with spam. My smartermail server that usually process 30 to 40 K per day, processed on monday 120K and 94K of them where caught as spam. On tuesday processed aprox 110K, and 85K where spam. My spool and forward server processed over 140K yesterday. Reviewing the spool I would say that almost all spam, a lot of them trying to relay on my backup server Do you guys saw this spam increase?. btw. message sniffer, INVURIBL and declude worked fine.. I am happy I have them. regards Luis Arango --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. gsc --- gsc This E-mail came from the Declude.JunkMail mailing list. To gsc unsubscribe, just send an E-mail to [EMAIL PROTECTED], and gsc type unsubscribe Declude.JunkMail. The archives can be found gsc at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Flooded with spam
Louis enable the abuse detection settings in SM. That should allow you to cut off the connection and not have to process that extra mail. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Panda Consulting S.A. Luis Alberto Arango Sent: Wednesday, August 30, 2006 6:52 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Flooded with spam Just checking with the list if they have seen an increase in the amount of spam messages caught. Last monday and tuesday my mail servers are flooded with spam. My smartermail server that usually process 30 to 40 K per day, processed on monday 120K and 94K of them where caught as spam. On tuesday processed aprox 110K, and 85K where spam. My spool and forward server processed over 140K yesterday. Reviewing the spool I would say that almost all spam, a lot of them trying to relayon my backup server Do you guys saw this spam increase?. btw. message sniffer, INVURIBL and declude worked fine.. I am happy I have them. regards Luis Arango ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
Re: Re[2]: [Declude.JunkMail] Flooded with spam
Ugh...Ok, lets all cross our fingers, turn around three times, and throw a pinch of salt over our left shoulders so it doesn't happen... Darin. - Original Message - From: Pete McNeil [EMAIL PROTECTED] To: [EMAIL PROTECTED] declude.junkmail@declude.com Sent: Thursday, August 31, 2006 9:32 AM Subject: Re[2]: [Declude.JunkMail] Flooded with spam If this year goes like last year then much worse is yet to come. See the bottom of this chart: http://reports.messagesniffer.com/Performance/FlowRatesByDay.jsp _M On Wednesday, August 30, 2006, 9:24:34 PM, gbirdsall wrote: gsc I've seen a 100-130% increase since Sunday. An average day used to be gsc around 500k-550k Spam messages, the past two days have been 950k and 1.2 gsc million, respectivly. gsc One thing we implemented was session based blocking in our firewall, we gsc were getting between 200 and 4000 (not a typo) simultanious sessions from gsc IP addresses. We now grab that and block IPs based on this information. gsc It has helped already today. gsc - greg Just checking with the list if they have seen an increase in the amount of spam messages caught. Last monday and tuesday my mail servers are flooded with spam. My smartermail server that usually process 30 to 40 K per day, processed on monday 120K and 94K of them where caught as spam. On tuesday processed aprox 110K, and 85K where spam. My spool and forward server processed over 140K yesterday. Reviewing the spool I would say that almost all spam, a lot of them trying to relay on my backup server Do you guys saw this spam increase?. btw. message sniffer, INVURIBL and declude worked fine.. I am happy I have them. regards Luis Arango --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. gsc --- gsc This E-mail came from the Declude.JunkMail mailing list. To gsc unsubscribe, just send an E-mail to [EMAIL PROTECTED], and gsc type unsubscribe Declude.JunkMail. The archives can be found gsc at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Crashes
This should be dealt with. Can't say I'm impressed that I have to rely on Windows to restart Declude after it crashes which now seems to be happening about 1/2 a dozen times each day. You would think that this would take priority to almost everything else. In fairness to Declude I haven't yet contacted them directly about this. Speaking of which, I should probably do so now. Mark Strother -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Brown Sent: Tuesday, August 29, 2006 11:26 AM To: Mark Strother Subject: Re: [Declude.JunkMail] Declude Crashes I see the dame thing from time to time - almost every day . . . . Monday, August 28, 2006, 6:47:51 PM, Mark Strother [EMAIL PROTECTED] wrote: MS MS MS MS Does anyone else have problems with Declude crashing? Several MS times each day I see the following in our application event logs: MS MS MS MS Reporting queued error: faulting application decludeproc.exe, MS version 0.0.0.0, faulting module ntdll.dll, version 5.2.3790.1830, fault address 0x00032335. MS MS MS MS Followed by this in the system logs: MS MS MS MS The Decludeproc service terminated unexpectedly. It has done MS this 1 time(s). The following corrective action will be taken in MS 1 milliseconds: Restart the service. MS MS MS MS It seems as though Declude restarts fine and we dont seem to MS suffer any ill effects but Id like to see it resolved. Were MS processing a fair volume of mail, 100,000+ messages per day. Were MS running Declude 4.3.7 with Sniffer but I can rule out Sniffer as MS being the issue as I disabled it temporarily and still saw these errors. MS MS MS Mark Strother MS Pacific Online MS Phone: 604-638-6010 ext. 222 MS Fax: 604-638-6020 MS Toll Free: 1-877-503-9870 MS http://www.pacificonline.com MS MS MS MS MS MS MS From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds MS Sent: Monday, August 28, 2006 2:41 PM MS To: declude.junkmail@declude.com MS Subject: RE: [Declude.JunkMail] some emails being marked with MS **spam** despite being authenticated MS Importance: High MS Sensitivity: Confidential MS MS MS MS MS Thanks John, MS MS MS MS I had the log mode set to high, debug seems to show a lot more detail. MS MS MS MS Anything in particular I should look out for? (in debug mode the MS log can chuck out more than 300 lines!!!) MS MS MS MS MS MS Kindest Regards MS Craig Edmonds MS 123 Marbella Internet MS W: www.123marbella.com MS E : [EMAIL PROTECTED] MS MS MS MS MS MS LEGAL DISCLAIMER - This message may contain confidential, MS proprietary or legally privileged information and is intended only MS for the use of the addressee named above. If you are not the MS intended recipient of this message you are hereby informed that MS you must not use, disseminate, copy it in any form or take any MS action in reliance on it. If you have received this message in MS error please delete it and any copies of it and notify it to the sender. MS MS MS MS MS MS AVISO LEGAL - Este mensaje puede contener informacion MS confidencial, en propiedad o legalmente protegida y esta dirigida MS unicamente para el uso de la persona destinataria. Si usted no es MS la persona destinataria de este mensaje, por la presente se le MS comunica que no debe usar, difundir, copiar de ninguna forma, ni MS emprender ninguna accion en relacion con ella. MS MS MS MS MS MS MS MS MS MS MS From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) MS Sent: Monday, August 28, 2006 7:25 PM MS To: declude.junkmail@declude.com MS Subject: RE: [Declude.JunkMail] some emails being marked with MS **spam** despite being authenticated MS Sensitivity: Confidential MS MS You need to review the log lines of a message that was marked, not one that shows Whitelisted. MS MS MS MS Preferably, the log should be in debug mode. MS MS MS MS MS John T MS MS eServices For You MS MS MS MS Seek, and ye shall find! MS MS MS MS MS MS -Original Message- MS From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds MS Sent: Monday, August 28, 2006 9:45 AM MS To: declude.junkmail@declude.com MS Subject: [Declude.JunkMail] some emails being marked with MS **spam** despite being authenticated MS Importance: High MS Sensitivity: Confidential MS MS MS MS MS Hi All, MS MS MS MS MS MS MS MS I have a strange problem with a client who has complained that MS **spam** is being put in the subject line of his outgoing emails. MS MS MS MS MS MS MS MS A quick check on the server logs (the declude logs) confirms that MS some of his emails are being passed through the spam tests and MS others are being whitelisted becasue he is an authenticated user.
