Re: Re[4]: [Declude.JunkMail] Using Footer32 in per domain configuration

[Darin Cox]

Excellent practice.  I should have thought to look.

Appreciate it, Sandy!

Darin.


- Original Message - 
From: "Sanford Whiteman" <[EMAIL PROTECTED]>
To: "Darin Cox" 
Sent: Wednesday, June 27, 2007 4:29 PM
Subject: Re[4]: [Declude.JunkMail] Using Footer32 in per domain 
configuration


> I  never thought to check that since it was a Declude external test,
> but thanks for that info. I was referring to your announcement notes
> that detailed the switches.

Gotcha.

I  always  implement  command-line  help  switches for my command-line
apps, FTR, even if they are meant to be forked "silently" from another
process.

--Sandy



Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
  http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/

Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail 
Aliases!
  
http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/
  
http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




_
Test footer


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re[4]: [Declude.JunkMail] Using Footer32 in per domain configuration

[Sanford Whiteman]

> I  never thought to check that since it was a Declude external test,
> but thanks for that info. I was referring to your announcement notes
> that detailed the switches.

Gotcha.

I  always  implement  command-line  help  switches for my command-line
apps, FTR, even if they are meant to be forked "silently" from another
process.

--Sandy



Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
  http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/

Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases!
  
http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/
  
http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] New PDF worm?

[Markus Gufler]

Or maybe even better:
 
create a text filter file containing all of your reliablest ip-blacklists.
 
RELIABLE-IP4R
~~
TESTSFAILED 0 CONTAINS CBL
TESTSFAILED 0 CONTAINS DSBL
TESTSFAILED 0 CONTAINS DSN
~~
 
and then use END statements like
 
TESTSFAILED END CONTAINS RELIABLE-IP4R
 
whereever you need/want.
 
Markus
 
 
 



  _  

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Wednesday, June 27, 2007 6:46 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] New PDF worm?



Great idea.

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck,
Andrew
Sent: Wednesday, June 27, 2007 12:40 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] New PDF worm?

 

I'll suggest an alternative to this.

 

If you're using the CB-ATTACH filter and you want to keep it without giving
spammers too much entry, use an END filter with your blacklist tests.  If
the sender's IP address is in the blacklist, the CB-ATTACH test will stop.

 

This will still counterweight PDF spammers who are not in a blacklist yet,
but perhaps that is an acceptable balance to you.

 

TESTSFAILED END CONTAINS XBL

 

TESTSFAILED END CONTAINS SPAMCOP

 

BODY -10   PCRE  (?i:Content-Type: application/pdf;)

 

 

etc. ...

 

 

Andrew.

 

 

 

  _  

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Wednesday, June 27, 2007 8:24 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] New PDF worm?

Yes I am seeing the same thing although when I run the pdf through a virus
check it comes up clean. I opened one of the files and it was just stock
spam. If anyone is running the

CB-ATTACH.txt filter I would suggest commenting out this line for now.

 

#BODY  -10  PCRE  (?i:Content-Type:
application/pdf;)

 

Or if you are using an the older filters

 

#BODY  -10  CONTAINS  Content-Type:
application/pdf;

 

See also http://blogs.zdnet.com/security/?p=325

 

David Barker
Director of Product Management
Your Email security is our business
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]

 

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
SJ.Stanaitis
Sent: Wednesday, June 27, 2007 11:17 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] New PDF worm?

 

I'm getting gobs of PDF's snagged in my antispam filter, they're not
triggering any AV yet, anyone else seeing this?

 

SJ.Stanaitis - Network Administrator

Decorative Product Source, Inc.


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] New PDF worm?

[David Barker]

Great idea.

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck,
Andrew
Sent: Wednesday, June 27, 2007 12:40 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] New PDF worm?

 

I'll suggest an alternative to this.

 

If you're using the CB-ATTACH filter and you want to keep it without giving
spammers too much entry, use an END filter with your blacklist tests.  If
the sender's IP address is in the blacklist, the CB-ATTACH test will stop.

 

This will still counterweight PDF spammers who are not in a blacklist yet,
but perhaps that is an acceptable balance to you.

 

TESTSFAILED END CONTAINS XBL

 

TESTSFAILED END CONTAINS SPAMCOP

 

BODY -10   PCRE  (?i:Content-Type: application/pdf;)

 

 

etc. ...

 

 

Andrew.

 

 

 

  _  

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Wednesday, June 27, 2007 8:24 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] New PDF worm?

Yes I am seeing the same thing although when I run the pdf through a virus
check it comes up clean. I opened one of the files and it was just stock
spam. If anyone is running the

CB-ATTACH.txt filter I would suggest commenting out this line for now.

 

#BODY  -10  PCRE  (?i:Content-Type:
application/pdf;)

 

Or if you are using an the older filters

 

#BODY  -10  CONTAINS  Content-Type:
application/pdf;

 

See also http://blogs.zdnet.com/security/?p=325

 

David Barker
Director of Product Management
Your Email security is our business
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]

 

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
SJ.Stanaitis
Sent: Wednesday, June 27, 2007 11:17 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] New PDF worm?

 

I'm getting gobs of PDF's snagged in my antispam filter, they're not
triggering any AV yet, anyone else seeing this?

 

SJ.Stanaitis - Network Administrator

Decorative Product Source, Inc.


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] New PDF worm?

[Colbeck, Andrew]

I'll suggest an alternative to this.
 
If you're using the CB-ATTACH filter and you want to keep it without
giving spammers too much entry, use an END filter with your blacklist
tests.  If the sender's IP address is in the blacklist, the CB-ATTACH
test will stop.
 
This will still counterweight PDF spammers who are not in a blacklist
yet, but perhaps that is an acceptable balance to you.
 
TESTSFAILED END CONTAINS XBL
 
TESTSFAILED END CONTAINS SPAMCOP
 
BODY -10   PCRE  (?i:Content-Type: application/pdf;)
 
 
etc. ...
 
 
Andrew.
 
 




From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of David Barker
Sent: Wednesday, June 27, 2007 8:24 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] New PDF worm?



Yes I am seeing the same thing although when I run the pdf
through a virus check it comes up clean. I opened one of the files and
it was just stock spam. If anyone is running the

CB-ATTACH.txt filter I would suggest commenting out this line
for now.

 

#BODY  -10  PCRE  (?i:Content-Type:
application/pdf;)

 

Or if you are using an the older filters

 

#BODY  -10  CONTAINS
Content-Type: application/pdf;

 

See also http://blogs.zdnet.com/security/?p=325

 

David Barker
Director of Product Management
Your Email security is our business
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]

 

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of SJ.Stanaitis
Sent: Wednesday, June 27, 2007 11:17 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] New PDF worm?

 

I'm getting gobs of PDF's snagged in my antispam filter, they're
not triggering any AV yet, anyone else seeing this?

 

SJ.Stanaitis - Network Administrator

Decorative Product Source, Inc.


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] New PDF worm?

[David Barker]

It is a filter I use to reduce the weights on attachments not likely to be
spam, you can log into your account at Declude and download the sample
filters.


David

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin
Cox
Sent: Wednesday, June 27, 2007 12:20 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] New PDF worm?

 

Hi David,

 

What's the CB-ATTACH.txt filter?


Darin.

 

 

- Original Message - 

From: David Barker   

To: declude.junkmail@declude.com 

Sent: Wednesday, June 27, 2007 11:24 AM

Subject: RE: [Declude.JunkMail] New PDF worm?

 

Yes I am seeing the same thing although when I run the pdf through a virus
check it comes up clean. I opened one of the files and it was just stock
spam. If anyone is running the

CB-ATTACH.txt filter I would suggest commenting out this line for now.

 

#BODY  -10  PCRE  (?i:Content-Type:
application/pdf;)

 

Or if you are using an the older filters

 

#BODY  -10  CONTAINS  Content-Type:
application/pdf;

 

See also http://blogs.zdnet.com/security/?p=325

 

David Barker
Director of Product Management
Your Email security is our business
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]

 

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
SJ.Stanaitis
Sent: Wednesday, June 27, 2007 11:17 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] New PDF worm?

 

I'm getting gobs of PDF's snagged in my antispam filter, they're not
triggering any AV yet, anyone else seeing this?

 

SJ.Stanaitis - Network Administrator

Decorative Product Source, Inc.


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


_
Test footer


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] New PDF worm?

[Darin Cox]

Hi David,

What's the CB-ATTACH.txt filter?

Darin.


- Original Message - 
From: David Barker 
To: declude.junkmail@declude.com 
Sent: Wednesday, June 27, 2007 11:24 AM
Subject: RE: [Declude.JunkMail] New PDF worm?


Yes I am seeing the same thing although when I run the pdf through a virus 
check it comes up clean. I opened one of the files and it was just stock spam. 
If anyone is running the

CB-ATTACH.txt filter I would suggest commenting out this line for now.

 

#BODY  -10  PCRE  (?i:Content-Type: 
application/pdf;)

 

Or if you are using an the older filters

 

#BODY  -10  CONTAINS  Content-Type: 
application/pdf;

 

See also http://blogs.zdnet.com/security/?p=325

 

David Barker
Director of Product Management
Your Email security is our business
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]

 

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of SJ.Stanaitis
Sent: Wednesday, June 27, 2007 11:17 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] New PDF worm?

 

I'm getting gobs of PDF's snagged in my antispam filter, they're not triggering 
any AV yet, anyone else seeing this?

 

SJ.Stanaitis - Network Administrator

Decorative Product Source, Inc.


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 

_
Test footer


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] New PDF worm?

[Darrell ([EMAIL PROTECTED])]

SJ,

Andrew posted a blurb from SANS a couple of days ago.

Pump and dump scams now in PDF
Published: 2007-06-20,
Last Updated: 2007-06-20 21:33:39 UTC
by Maarten Van Horenbeeck (Version: 1)

Apparently the groups behind what we know as pump and dump spam have 
found a new way to bypass spam filters. As of yesterday, we’ve been 
observing e-mails with bogus text, often in german, each with a PDF in 
attachment.


These PDFs purport to be stock information, and are usually titled 
‘German Stock Insider’. They contain much more detail on stock than 
we’re used to from previous dump and pump scams and include images for 
added realism. They even contain the following disclaimer:


“This is not an offer to buy or sell any security. German Stock Insider 
discloses that they were paid ten thousand Euros for distribution of 
this report.”


The messages are usually sent to [EMAIL PROTECTED] with an attachment name of 
name_report.pdf. Apparently they are distributed most to .com and .org 
domains, though most of the reports we’ve received were from Europe. 
Each of the reports so far has had an MD5 hash of 
2e4b2158909f276942dadf6a0b621b1a. Thanks to Günter for reporting his 
findings.


-
Check out http://www.invariantsystems.com for utilities for Declude, 
Imail, mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, 
SURBL/URI integration, MRTG Integration, and Log Parsers.



SJ.Stanaitis wrote:
I’m getting gobs of PDF’s snagged in my antispam filter, they’re not 
triggering any AV yet, anyone else seeing this?


 


SJ.Stanaitis - //Network Administrator//

Decorative Product Source, Inc.


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.


--



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] New PDF worm?

[Colbeck, Andrew]

SJ, they're not viruses, they're spam sent from zombies.
 
Probably pump and dump stock spam, and if they're like what I've been
seeing, they have the same anti-OCR techniques that were previously sent
as jpg.
 
http://www.mail-archive.com/[EMAIL PROTECTED]/msg03447.html
 
and:
 
http://isc.sans.org/diary.html?storyid=3012
 
and:
 
http://www.heise-security.co.uk/news/91523
 
 
Andrew.
 




From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of SJ.Stanaitis
Sent: Wednesday, June 27, 2007 8:17 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] New PDF worm?



I'm getting gobs of PDF's snagged in my antispam filter, they're
not triggering any AV yet, anyone else seeing this?

 

SJ.Stanaitis - Network Administrator

Decorative Product Source, Inc.


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] New PDF worm?

[David Barker]

Yes I am seeing the same thing although when I run the pdf through a virus
check it comes up clean. I opened one of the files and it was just stock
spam. If anyone is running the

CB-ATTACH.txt filter I would suggest commenting out this line for now.

 

#BODY  -10  PCRE  (?i:Content-Type:
application/pdf;)

 

Or if you are using an the older filters

 

#BODY  -10  CONTAINS  Content-Type:
application/pdf;

 

See also http://blogs.zdnet.com/security/?p=325

 

David Barker
Director of Product Management
Your Email security is our business
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]

 

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
SJ.Stanaitis
Sent: Wednesday, June 27, 2007 11:17 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] New PDF worm?

 

I'm getting gobs of PDF's snagged in my antispam filter, they're not
triggering any AV yet, anyone else seeing this?

 

SJ.Stanaitis - Network Administrator

Decorative Product Source, Inc.


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] New PDF worm?

[Darin Cox]

Yep.

Darin.


- Original Message - 
From: SJ.Stanaitis 
To: declude.junkmail@declude.com 
Sent: Wednesday, June 27, 2007 11:17 AM
Subject: [Declude.JunkMail] New PDF worm?


I'm getting gobs of PDF's snagged in my antispam filter, they're not triggering 
any AV yet, anyone else seeing this?

 

SJ.Stanaitis - Network Administrator

Decorative Product Source, Inc.


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 

_
Test footer


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] New PDF worm?

[SJ.Stanaitis]

I'm getting gobs of PDF's snagged in my antispam filter, they're not
triggering any AV yet, anyone else seeing this?

 

SJ.Stanaitis - Network Administrator

Decorative Product Source, Inc.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

AW: [Declude.JunkMail] OT - Can you reach my site?

[Hirthe, Alexander]

I can reach it

Greetings from Heilbronn, Germany J

Alex


Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von SJ.Stanaitis
Gesendet: Mittwoch, 27. Juni 2007 14:41
An: declude.junkmail@declude.com
Betreff: [Declude.JunkMail] OT - Can you reach my site?

Had a spiffy little DNS problem the other day, everything should be OK at this 
point, but...

Can anyone not reach http://www.faucet.com/ ?

Thanks,
Sam

SJ.Stanaitis - Network Administrator
Decorative Product Source, Inc.
845-294-4373 x160


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.



Siller AG, Wannenaeckerstrasse 43, 74078 Heilbronn
Vorstand: Prof. H.-F. Siller (Vorsitzender), Joern Buelow, Ralf Michi
Aufsichtsratsvorsitzender: Armin Sohler
Reg. Gericht Stuttgart, HRB 107707, Ust-Id Nr. DE145782955


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: Re[2]: [Declude.JunkMail] Using Footer32 in per domain configuration

[Darin Cox]

Hi Sandy,

I never thought to check that since it was a Declude external test, but 
thanks for that info.  I was referring to your announcement notes that 
detailed the switches.

I was hoping you'd chime in 

Darin.


- Original Message - 
From: "Sanford Whiteman" <[EMAIL PROTECTED]>
To: "Darin Cox" 
Sent: Tuesday, June 26, 2007 11:03 PM
Subject: Re[2]: [Declude.JunkMail] Using Footer32 in per domain 
configuration


> I  found  the  problem. It seems there is an additional undocumented
> command  line  switch  that needs to be added to the end of the line
> for it to work.

I  think  it's  documented  --  considering  that  the  /? is the only
documentation, and it's in there. :)

--Sandy



Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
  http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/

Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail 
Aliases!
  
http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/
  
http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] OT - Can you reach my site?

[David Barker]

Hi Sam I am able to get to the site. I am in Massachusetts US


David

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
SJ.Stanaitis
Sent: Wednesday, June 27, 2007 8:41 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] OT - Can you reach my site?

 

Had a spiffy little DNS problem the other day, everything should be OK at
this point, but.


Can anyone not reach http://www.faucet.com/ ?

 

Thanks,

Sam

 

SJ.Stanaitis - Network Administrator

Decorative Product Source, Inc.

845-294-4373 x160

 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] OT - Can you reach my site?

[SJ.Stanaitis]

Had a spiffy little DNS problem the other day, everything should be OK at
this point, but.


Can anyone not reach http://www.faucet.com/ ?

 

Thanks,

Sam

 

SJ.Stanaitis - Network Administrator

Decorative Product Source, Inc.

845-294-4373 x160

 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] OT: Software for copying files with permissions

[Sharyn Schmidt]

This looks like what I'm looking for. We are not interested in using the DFS
option, everything will be going on one server
 
I can buy something 3rd party, as well, if anyone has any suggestions for
something that might work better than this. In the past I have found that
the free MS tools are cryptic with their directions and not real easy to
use. Ah wait, I see your PS. I may check this out as well.
 
Thanks for everyone's help!
 
 



Sharyn, you might be interested in a more complete tool from Microsoft that
is free and was designed with your task in mind:
 
http://www.microsoft.com/downloads/details.aspx?FamilyID=d00e3eae-930a-42b0-
b595-66f462f5d87b
 &DisplayLang=en
 
It's called the File Server Migration Toolkit, and it takes care of creating
the shares, setting permissions and even removing the original shares.
There is an emphasis on using DFS, but that is completely optional.
 
Here's a snippet from the online help:
 
" 

Using the File Server Migration Wizard


The File Server Migration Wizard is a graphical user interface (GUI) tool
for copying files and folders from a source file server to a target file
server. The wizard walks you step by step through the copy process, which
includes creating a migration project where project-specific settings are
stored, monitoring the progress of the file copying, and viewing a final
report of the copying results. 

 
 Important

*   For information about security and server cluster considerations,
see   Security
considerations and  
Server cluster considerations. 

The File Server Migration Wizard provides a number of options for copying
data. For example, you can:

*   Copy permission, auditing, and ownership information that is
associated with files and folders. 

*   Resolve invalid security descriptors on the target files and
folders. 

*   Stop sharing the shared folders on the source file servers after the
copying is finalized. 

*   Prestage the target file server-for example, by restoring a backup
of the source file server-and then use the wizard to recopy changed files
and share the target folders. (To do this, follow the procedure described in
the Target Location link in
 Select servers, shared
folders, and settings.) 

*   Specify the DFS root server that hosts consolidation roots that are
created by the DFS Consolidation Root Wizard. When you select this setting,
the links that correspond to each copied folder are updated with the new
Universal Naming Convention (UNC) paths of the target folders. 

*   Specify an existing DFS namespace where you want to add DFS links
for each copied shared folder. You can select this setting even if you do
not use the DFS Consolidation Root Wizard. "

 
Note that how you get your users to map these shares and how to switch the
server is still up to you, e.g. with login scripts or changing the share for
their home drive in your Active Directory (or NT4 Domain Controller).
 
Andrew.
 
p.s. In the last migration I did, I was fortunate to use a product from
NetIQ.com called "Server Consolidator", part of their "NetIQ Migration
Suite", and that did the same functionality as the Microsoft FSMT and it was
both simple and accurate.  I've no idea what it cost.
 
 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.