Re: [Declude.JunkMail] ORDB RBL operations

2008-03-27 Thread Matt
This is without a doubt a very important thing to check out.  It stung 
our system, and I'm sure there are others around here that have yet to 
check theirs for any ORDB tests.  The hits for all IP's began yesterday 
morning for us.


Thanks,

Matt





Michael Hardrick wrote:


Everyone here should already know about this so it’s just a FYI.

In December of ’06 ORDB ceased operations, but now they are replying 
to RBL requests.


 

“As of yesterday, owners of the domain have begun sending replies that 
will cause the MailFoundry and other anti-spam appliances to believe 
all requests sent to it are returned as existing causing the 
MailFoundry to act in whatever manner it is configured to act in the 
case of a positive response such as delete, quarantine, etc.


“

It’s probably a good idea to remove them from your config if you 
haven’t already.


 


Regards,

Michael Hardrick

TNWEB LLC

931-359-7960

[EMAIL PROTECTED]

 



This electronic message transmission contains information from TNWEB 
LLC which may be confidential or privileged. Recipients should not 
file copies of this e-mail with publicly accessible records. The 
information is intended to be for the use of the individual(s) named 
above. If you are not the intended recipient, please be aware that any 
disclosure, copying, distribution or use of the contents of this 
message is prohibited.


If you have received this electronic transmission in error, please 
notify us by electronic mail immediately, before we get in really big 
trouble. If you fail to be intimidated by this notice, we will get 
angry, stamp our feet, and hold our breath until we turn blue.


Thank you.

(Official-Copied Notice V1.7fc3)

 



No virus found in this outgoing message.
Checked by AVG.
Version: 7.5.519 / Virus Database: 269.22.0/1342 - Release Date: 
3/25/2008 10:26 AM



---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] 4.4.00 Released

2008-03-27 Thread David Barker
4.4.00 Released we will be sending a notification to all customers.

EVA ADD Updated AVG (avgsdk.dll 1.3.511)
EVA ADD BANEXT EZIP for encrypted files .RAR can encrypt at the file
name level requiring a password.
EVA ADD ALLOWVULNERABILITIESFROM example.com can be used with just
domain
EVA FIX BANEZIPEXT ON blocking any encrypted file names
EVA FIX ALLOWVULNERABILITIESFROM error when non sender
EVA FIX Fix Header Vulnerability to accommodate Opera mail Client
header format
JM  ADD Updated PCRE (pcre3.dll 7.0)
JM  ADD Updated CommTouch ZEROHOUR (asapskd.dll 5.05.8)
JM  ADD Check the SmarterMail Domain Level for Trusted Sender in the
domainconfig.xml
JM  FIX PCRE on a match was writing additional information not
pertaining to the match in the LOG
JM  FIX PCRE found a match and the size of the match was  tan the
buffer size.
JM  FIX Declude produced an error when reading the envelope file (SM
and IM), the HELO line can only be 512 according to RFC-821 we now truncate
after 512 characters.
JM  FIX HELO information was reported incorrectly when IPBYPASS is
set
JM  FIX Incoming and Outgoing messages being reported incorrectly
DEC ADD Can use  for 4 digit year on log file names in the
format ddmmyyy
DEC ADD Added date, Time, Email, Spool name, Weight and Tests failed
to the BLKLST log
DEC FIX SmarterMail CMDSPACE test. This test was not triggered in
the SmarterMail envelope as token was changed from cmdspc instead of
cmdspace we check for both.

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 x 7007 office
978.988.1311 fax
[EMAIL PROTECTED]

 




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.Virus] 4.4.00 Released

2008-03-27 Thread David Barker
4.4.00 Released we will be sending a notification to all customers.

EVA ADD Updated AVG (avgsdk.dll 1.3.511)
EVA ADD BANEXT EZIP for encrypted files .RAR can encrypt at the file
name level requiring a password.
EVA ADD ALLOWVULNERABILITIESFROM example.com can be used with just
domain
EVA FIX BANEZIPEXT ON blocking any encrypted file names
EVA FIX ALLOWVULNERABILITIESFROM error when non sender
EVA FIX Fix Header Vulnerability to accommodate Opera mail Client
header format
JM  ADD Updated PCRE (pcre3.dll 7.0)
JM  ADD Updated CommTouch ZEROHOUR (asapskd.dll 5.05.8)
JM  ADD Check the SmarterMail Domain Level for Trusted Sender in the
domainconfig.xml
JM  FIX PCRE on a match was writing additional information not
pertaining to the match in the LOG
JM  FIX PCRE found a match and the size of the match was  tan the
buffer size.
JM  FIX Declude produced an error when reading the envelope file (SM
and IM), the HELO line can only be 512 according to RFC-821 we now truncate
after 512 characters.
JM  FIX HELO information was reported incorrectly when IPBYPASS is
set
JM  FIX Incoming and Outgoing messages being reported incorrectly
DEC ADD Can use  for 4 digit year on log file names in the
format ddmmyyy
DEC ADD Added date, Time, Email, Spool name, Weight and Tests failed
to the BLKLST log
DEC FIX SmarterMail CMDSPACE test. This test was not triggered in
the SmarterMail envelope as token was changed from cmdspc instead of
cmdspace we check for both.

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 x 7007 office
978.988.1311 fax
[EMAIL PROTECTED]

 




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] SORBS

2008-03-27 Thread David Barker
Any increase on False Positives with SORBS being experienced ?

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 x 7007 office
978.988.1311 fax
[EMAIL PROTECTED]

 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] SORBS

2008-03-27 Thread Matt

Increase from a lot of FP's to exactly how many more?

:)

Matt



David Barker wrote:

Any increase on False Positives with SORBS being experienced ?

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 x 7007 office
978.988.1311 fax
[EMAIL PROTECTED]

 






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


  




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] SORBS

2008-03-27 Thread David Barker
Was working with a customer who was claiming that SORBS was producing a lot
FP's over the last few days. I think it was ORDB but though I would just
check anyways.

David

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Thursday, March 27, 2008 11:08 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] SORBS

Increase from a lot of FP's to exactly how many more?

:)

Matt



David Barker wrote:
 Any increase on False Positives with SORBS being experienced ?

 David Barker
 VP Operations Declude
 Your Email security is our business
 978.499.2933 x 7007 office
 978.988.1311 fax
 [EMAIL PROTECTED]

  





 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.


   



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] SORBS

2008-03-27 Thread Rick Baranowski
We are getting A LOT

Rick

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
 Barker
 Sent: Thursday, March 27, 2008 8:13 AM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] SORBS
 
 Was working with a customer who was claiming that SORBS was producing a
 lot
 FP's over the last few days. I think it was ORDB but though I would just
 check anyways.
 
 David
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
 Sent: Thursday, March 27, 2008 11:08 AM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] SORBS
 
 Increase from a lot of FP's to exactly how many more?
 
 :)
 
 Matt
 
 
 
 David Barker wrote:
  Any increase on False Positives with SORBS being experienced ?
 
  David Barker
  VP Operations Declude
  Your Email security is our business
  978.499.2933 x 7007 office
  978.988.1311 fax
  [EMAIL PROTECTED]
 
 
 
 
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] SORBS

2008-03-27 Thread William Stillwell
Orbs was shutdown, and as of today, they are returning false positives on
everything.

At noon today (Eastern Standard Time), the long dead ORDB spam
identification system began returning false positives as a way to get
sleeping users to remove the ORDB query from their spam filters. The net
effect: all mail is blocked on servers still configured to use the ORDB
service, which was taken out of commission in December of 2006. So if you're
not getting any mail, check your spam filter configuration!


William Stillwell
Systems Architect
Professional Staffing-ABTS,Inc
d/b/a Able Body Labor
ph. 727.724.2610
fx. 727.724.2680
cl. 727.638.6208

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick
Baranowski
Sent: Thursday, March 27, 2008 1:02 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] SORBS

We are getting A LOT

Rick

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
 Barker
 Sent: Thursday, March 27, 2008 8:13 AM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] SORBS
 
 Was working with a customer who was claiming that SORBS was producing a
 lot
 FP's over the last few days. I think it was ORDB but though I would just
 check anyways.
 
 David
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
 Sent: Thursday, March 27, 2008 11:08 AM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] SORBS
 
 Increase from a lot of FP's to exactly how many more?
 
 :)
 
 Matt
 
 
 
 David Barker wrote:
  Any increase on False Positives with SORBS being experienced ?
 
  David Barker
  VP Operations Declude
  Your Email security is our business
  978.499.2933 x 7007 office
  978.988.1311 fax
  [EMAIL PROTECTED]
 
 
 
 
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] Out of the Office

2008-03-27 Thread lpagillo
I will be out of the office on vacation from March 21st through March 28th, 
returning on Monday, March 31st.

If you require immediate assistance with Declude, please send an email to 
[EMAIL PROTECTED] or contact David Barker at 1-866-332-5833 Ext.7007. You can 
also reach David Barker via email at [EMAIL PROTECTED]

If you are a customer of Eaton and Kirk Advertising and you need assistance, 
please contact John Kirkpatrick at [EMAIL PROTECTED] or by phone at 
760-775-3626. Thank you. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] SORBS

2008-03-27 Thread David Barker
Thanks I just want to be clear that SORBS is different to ORDB

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William
Stillwell
Sent: Thursday, March 27, 2008 3:35 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] SORBS

Orbs was shutdown, and as of today, they are returning false positives on
everything.

At noon today (Eastern Standard Time), the long dead ORDB spam
identification system began returning false positives as a way to get
sleeping users to remove the ORDB query from their spam filters. The net
effect: all mail is blocked on servers still configured to use the ORDB
service, which was taken out of commission in December of 2006. So if you're
not getting any mail, check your spam filter configuration!


William Stillwell
Systems Architect
Professional Staffing-ABTS,Inc
d/b/a Able Body Labor
ph. 727.724.2610
fx. 727.724.2680
cl. 727.638.6208

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick
Baranowski
Sent: Thursday, March 27, 2008 1:02 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] SORBS

We are getting A LOT

Rick

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
 Barker
 Sent: Thursday, March 27, 2008 8:13 AM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] SORBS
 
 Was working with a customer who was claiming that SORBS was producing a
 lot
 FP's over the last few days. I think it was ORDB but though I would just
 check anyways.
 
 David
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
 Sent: Thursday, March 27, 2008 11:08 AM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] SORBS
 
 Increase from a lot of FP's to exactly how many more?
 
 :)
 
 Matt
 
 
 
 David Barker wrote:
  Any increase on False Positives with SORBS being experienced ?
 
  David Barker
  VP Operations Declude
  Your Email security is our business
  978.499.2933 x 7007 office
  978.988.1311 fax
  [EMAIL PROTECTED]
 
 
 
 
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.