[Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and other free account blacklisted servers
We have been seeing a dramatic increase of free webmail server IP's being blacklisted and causing false positives from the usual Hotmail, msn, yahoo, aol, gmail, and other free email servers listed on RBL', spamcop, spamhaus, etc. This has caused a tendency to for customers to want to whitelist these domains which we do have on per domain/per user settings however still must be explained and applied. I can provide hundreds of these blacklisted IP's in the logs however I was hoping a number of you have developed a list of reverse DNS IP or hostname entry files to subtract from sniffer and/or UR-IBL scoring that will allow the good emails through from blacklisted IPs or some ruleset that has the same effect. This has become a very annoying issue for us, any help/ideas would be appreciated. Chris Patterson, CCNA Special Projects and Advanced Engineering Manager Rapid Systems http://www.rapidsys.com KB: http://support.rapidsys.com --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude/Sniffer Issues
I am running 2 versions of Smartermail Declude both running Sniffer and InvURIBL. One is Smartermail4/Declude4.3.3 Other is Smartermail2/Declude3. These servers can run perfectly for weeks but for the past few weeks we have been sporadically seeing Declude back up files in the Proc directory. At this time all Declude threads are being used with no processing power being used. It appears Sniffer is not finishing and hogging up all the threads after reviewing the logs. Anyone else experiencing this? Thanks, Chris Patterson, CCNA Network Engineer/Support Manager Rapid Systems --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude/Sniffer Issues
I get this in logs: 02/19/2007 05:16:12.213 23859386 ERROR: External program SNIFFER didn't finish quick enough; terminating. 02/19/2007 05:16:12.213 23859386 Couldn't get external program exit code At this point I see thousands of .xxx and .fin files built up in the sniffer directory. Usually forcing a sniffer update (normally done every hour automatically). From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 9:32 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues What are you seeing the logs that indicates this? Declude will terminate long running external processes and log that it terminated it. Are you seeing those entries? Also, during these times when you look at task manager do you see a bunch of idle sniffer processes? Typically from my experience when you see all the threads being used with very little to no CPU usage it tends to be a DNS issue (i.e slow or not responding DNS server). Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, February 19, 2007 8:47 AM Subject: [Declude.JunkMail] Declude/Sniffer Issues I am running 2 versions of Smartermail Declude both running Sniffer and InvURIBL. One is Smartermail4/Declude4.3.3 Other is Smartermail2/Declude3. These servers can run perfectly for weeks but for the past few weeks we have been sporadically seeing Declude back up files in the Proc directory. At this time all Declude threads are being used with no processing power being used. It appears Sniffer is not finishing and hogging up all the threads after reviewing the logs. Anyone else experiencing this? Thanks, Chris Patterson, CCNA Network Engineer/Support Manager Rapid Systems --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude/Sniffer Issues
When this issue happens which seems more frequent, I do clear out the thousands of left behind files. I am more trying to find a way to prevent it or reason that is happening. And yes, Sniffer does have a hard time operating when it hoses up that bad. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 1:40 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues Chris, I am gathering that you are running Sniffer in persistant mode? I would stop your declude and Sniffer services. Than go into the sniffer directory and remove all of the *.fin, *.svr files. I am not sure what the .xxx files are. I have yet to see those. Than I would check your Sniffer log for any errors. After making sure there are no errors I would restart the Sniffer persistant service and Declude and see if the issue is resolved. It's possible Sniffer could be stepping on itself trying to weed through all those files. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, February 19, 2007 1:03 PM Subject: RE: [Declude.JunkMail] Declude/Sniffer Issues I get this in logs: 02/19/2007 05:16:12.213 23859386 ERROR: External program SNIFFER didn't finish quick enough; terminating. 02/19/2007 05:16:12.213 23859386 Couldn't get external program exit code At this point I see thousands of .xxx and .fin files built up in the sniffer directory. Usually forcing a sniffer update (normally done every hour automatically). From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 9:32 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues What are you seeing the logs that indicates this? Declude will terminate long running external processes and log that it terminated it. Are you seeing those entries? Also, during these times when you look at task manager do you see a bunch of idle sniffer processes? Typically from my experience when you see all the threads being used with very little to no CPU usage it tends to be a DNS issue (i.e slow or not responding DNS server). Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, February 19, 2007 8:47 AM Subject: [Declude.JunkMail] Declude/Sniffer Issues I am running 2 versions of Smartermail Declude both running Sniffer and InvURIBL. One is Smartermail4/Declude4.3.3 Other is Smartermail2/Declude3. These servers can run perfectly for weeks but for the past few weeks we have been sporadically seeing Declude back up files in the Proc directory. At this time all Declude threads are being used with no processing power being used. It appears Sniffer is not finishing and hogging up all the threads after reviewing the logs. Anyone else experiencing this? Thanks, Chris Patterson, CCNA Network Engineer/Support Manager Rapid Systems --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail
RE: [Declude.JunkMail] Declude/Sniffer Issues
Threads = 500 3 days (approx): 1420731 [Spam: 1392289Virus: 114] Relay High: 0 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 2:53 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues What is your mail volume and how many threads do you have declude configured for? Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, February 19, 2007 2:20 PM Subject: RE: [Declude.JunkMail] Declude/Sniffer Issues When this issue happens which seems more frequent, I do clear out the thousands of left behind files. I am more trying to find a way to prevent it or reason that is happening. And yes, Sniffer does have a hard time operating when it hoses up that bad. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 1:40 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues Chris, I am gathering that you are running Sniffer in persistant mode? I would stop your declude and Sniffer services. Than go into the sniffer directory and remove all of the *.fin, *.svr files. I am not sure what the .xxx files are. I have yet to see those. Than I would check your Sniffer log for any errors. After making sure there are no errors I would restart the Sniffer persistant service and Declude and see if the issue is resolved. It's possible Sniffer could be stepping on itself trying to weed through all those files. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, February 19, 2007 1:03 PM Subject: RE: [Declude.JunkMail] Declude/Sniffer Issues I get this in logs: 02/19/2007 05:16:12.213 23859386 ERROR: External program SNIFFER didn't finish quick enough; terminating. 02/19/2007 05:16:12.213 23859386 Couldn't get external program exit code At this point I see thousands of .xxx and .fin files built up in the sniffer directory. Usually forcing a sniffer update (normally done every hour automatically). From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 9:32 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues What are you seeing the logs that indicates this? Declude will terminate long running external processes and log that it terminated it. Are you seeing those entries? Also, during these times when you look at task manager do you see a bunch of idle sniffer processes? Typically from my experience when you see all the threads being used with very little to no CPU usage it tends to be a DNS issue (i.e slow or not responding DNS server). Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, February 19, 2007 8:47 AM Subject: [Declude.JunkMail] Declude/Sniffer Issues I am running 2 versions of Smartermail Declude both running Sniffer and InvURIBL. One is Smartermail4/Declude4.3.3 Other is Smartermail2/Declude3
RE: [Declude.JunkMail] Declude/Sniffer Issues
This really is a front end gateway to a front end also running declude. Even thought the thread count sounds high even at 500 threads being used in Task Manager, we never hit 100% CPU. 2 - dual-core opterons. 3 - 15K SCSI's in Raid 5, 3 gigs Ram on a DL385. When this happens all 500 threads are being used and the CPU is doing nothing, like 2%. Get a new sniffer update, clean up the directory and it will not give a problem for days and days. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Monday, February 19, 2007 4:08 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues Chris, Reduce your threads setting to a more reasonable number and you should be fine. A number around 50 should suffice, but you can set it, restart Declude and then see if you are redlining. Once you get to redlining when there is a backup, that is pretty much where threads should be set. By going to 500 you are definitely overdoing it and causing other issues. Matt Chris Patterson wrote: Threads = 500 3 days (approx): 1420731 [Spam: 1392289Virus: 114] Relay High: 0 From: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 2:53 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues What is your mail volume and how many threads do you have declude configured for? Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, February 19, 2007 2:20 PM Subject: RE: [Declude.JunkMail] Declude/Sniffer Issues When this issue happens which seems more frequent, I do clear out the thousands of left behind files. I am more trying to find a way to prevent it or reason that is happening. And yes, Sniffer does have a hard time operating when it hoses up that bad. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 1:40 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues Chris, I am gathering that you are running Sniffer in persistant mode? I would stop your declude and Sniffer services. Than go into the sniffer directory and remove all of the *.fin, *.svr files. I am not sure what the .xxx files are. I have yet to see those. Than I would check your Sniffer log for any errors. After making sure there are no errors I would restart the Sniffer persistant service and Declude and see if the issue is resolved. It's possible Sniffer could be stepping on itself trying to weed through all those files. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, February 19, 2007 1:03 PM Subject: RE: [Declude.JunkMail] Declude/Sniffer Issues I get this in logs: 02/19/2007 05:16:12.213 23859386 ERROR: External program SNIFFER didn't finish quick enough; terminating. 02/19/2007 05:16:12.213 23859386 Couldn't get external program exit code At this point I see thousands of .xxx and .fin files built up in the sniffer directory. Usually forcing a sniffer update (normally done every hour automatically). From: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 9:32 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues What are you seeing the logs that indicates this? Declude will terminate long running external processes and log that it terminated it. Are you seeing those entries? Also, during these times when you look at task
[Declude.JunkMail] Way to delete spam over a certain weight?
I am running Smartermail2.6 with Declude 3.11. We are slaying some serious spam, (Total: 4129440 [Spam: 4029758 Virus: 626]), so much we can no longer complete searches for customers who want their spam zipped and sent to them each evening in less than 4 hours. I don't want to delete for individual tests but would rather delete spam with an absurd weight on it. Any ideas for this? Thanks, Chris Patterson, CCNA Network Engineer/Support Manager Rapid Systems --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Way to delete spam over a certain weight?
Seems to be working like a charm, thanks for the advice. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Green dfn Systems Sent: Friday, December 01, 2006 12:56 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Way to delete spam over a certain weight? Chris, I have found that anything more than double my hold / spam mailbox weight is safe to delete. Your results may vary, so you might start at 3 or 4 times hold weight at first, then over a period of days or weeks, use weightrange to move the top few points before delete to a review acct for a while. If it seems all spam, then lower your Delete score, and review the next few points. When you start seeing legit mail in your review range, double check the next one up. Bill Green dfn Systems - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Friday, December 01, 2006 10:03 AM Subject: [Declude.JunkMail] Way to delete spam over a certain weight? I am running Smartermail2.6 with Declude 3.11. We are slaying some serious spam, (Total: 4129440 [Spam: 4029758 Virus: 626]), so much we can no longer complete searches for customers who want their spam zipped and sent to them each evening in less than 4 hours. I don't want to delete for individual tests but would rather delete spam with an absurd weight on it. Any ideas for this? Thanks, Chris Patterson, CCNA Network Engineer/Support Manager Rapid Systems --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Ping
Reply from [EMAIL PROTECTED]: bytes=32 time=8ms TTL=127 Reply from [EMAIL PROTECTED]: bytes=32 time=9ms TTL=127 Reply from [EMAIL PROTECTED]: bytes=32 time=9ms TTL=127 Reply from [EMAIL PROTECTED]: bytes=32 time=14ms TTL=127 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Friday, August 11, 2006 12:56 PM To: David Barker Subject: Re: [Declude.JunkMail] Ping Polo On Friday, August 11, 2006, 11:30:36 AM, David wrote: DB Ping DB --- DB This E-mail came from the Declude.JunkMail mailing list. To DB unsubscribe, just send an E-mail to [EMAIL PROTECTED], and DB type unsubscribe Declude.JunkMail. The archives can be found DB at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 8001 error
I saw that one before, try creating a declude folder within c:/Imail and run the install again. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jonas Fornander Sent: Monday, July 10, 2006 1:50 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] 8001 error I re-installed Imail 8.22 but when I tried to reinstall Declude 3.0.25 it failed with an 8001 (Cant write to the target). Imail was intalled to C:\Imail as usual but users mail is stored on a different drive. Havent had this problem before. The new server is an AMD 64. Could that be the problem? Jonas Fornander System Administrator Netwood Communications,LLC Tel: 310-442-1530 Fax: 310-820-3125 Find Out Why We're Better * Now offering Fiber Optic Internet service throughout the continental USA. Speeds start at 5Mbps/2Mbps. Go to www.netwood.net and fill in a prequal request. * Home is where my computer is ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Insufficient system resources error
Hey Rick, What version of IMAIL and Declude are you running? Thanks, Chris Patterson, CCNA Network Engineer/Support Manager -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Thursday, June 09, 2005 10:16 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Insufficient system resources error That is the same symptom or lack of symptom I see, however I completely disabled declude and restored SMTPD as the delivery app and still had the same problem. I only run declude virus on the box in question, I still have smtp logging disabled and still have not had a failure since Rick Davidson National Systems Manager North American Title Group 440-639-0607 - Office 440-487-7344 - Mobile [EMAIL PROTECTED] - - Original Message - From: Chris Patterson [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, June 09, 2005 9:50 AM Subject: RE: [Declude.JunkMail] Insufficient system resources error I have been having the same issue or incidents would be better phrasing. I have a busy server, 4000 + boxes plus many off-site scrubbing services. I have had three incidents in the past month, the first two were directly related to smtp crashing and not restarting. I have not had the smtp issue since installing HF2 for 8.2 . Since that point I have had one incident that was very different than the first two. There have been no SMTP warnings in event log, no SMTP error 1455 (out of memory) in logs since the HF2. The only thing I could trace this one to is in the Declude logs. The logs indicated it could not move spam to hold directory. This incident required a hard boot of the server, external access was cut off. Declude support has indicated they are seeing this as a possible issue. Normally, I would not quote tech support on a list and I am not blaming Declude for this issue. But this may be very helpful towards resolution of this issue: Chris, We are currently looking into an issue where the HOLD directive does not work properly. My first suspicion, since you have mentioned HOLD, is that it is related to this same issue. It is possible that the hold directory is not being created correctly or that the name being passed to that routine is invalid. David Franco-Rocha Declude Technical Support Thanks, Chris Patterson, CCNA Network Engineer/Support Manager -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Nice Sent: Wednesday, June 08, 2005 2:16 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Insufficient system resources error This is very interesting - Can you verify in the task manager that when it hangs that the memory in use by SMTPd is 'normal'? (7 to 20 Megabytes) I wouldn't be surprised by some type of logging problem. I occasionally see truncated/incomplete log lines in the file. This would certainly seem to be some sort of bug related to logging. - Original Message - From: Rick Davidson [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, June 08, 2005 1:36 PM Subject: Re: [Declude.JunkMail] Insufficient system resources error I have been watching this thread and have been the victim of the SMTP service failures (hangs really) but I do not get a Insufficient system resources error. I believe I have the problem traced to the SMTP logging, if I turn the SMTP logging off (yea I know... :) I no longer have SMTP failures. I installed Kiwi syslogger and still had the same SMTP service failures until I disabled the SMTP logging so it seems to be the SMTPD itself and not the built in logging services. would be interested to see if others could verify this, in the mean time I am opening a ticket with Ipswitch this definately is not a declude issue Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Chris Patterson [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, June 03, 2005 3:13 PM Subject: RE: [Declude.JunkMail] Insufficient system resources error I had the same problem with SMTP not being able to restart due to virtual memory according to the event log. I had to reboot to gain SMTP services. I have had another instance since applying HF2, but the SMTP portion of the issue was not the same. The event log did not indicate SMTP failures. I opened a ticket with Ipswitch but they blamed it on Declude, as usual. Thanks, Chris Patterson, CCNA Network Engineer/Support Manager -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, June 03, 2005 2:13 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Insufficient system resources error Update: Since installing Imail 8.20 HF2 last Saturday, the problem so far has not reoccurred. Any one else still having this problem? John T eServices
RE: [Declude.JunkMail] Insufficient system resources error
I have been having the same issue or incidents would be better phrasing. I have a busy server, 4000 + boxes plus many off-site scrubbing services. I have had three incidents in the past month, the first two were directly related to smtp crashing and not restarting. I have not had the smtp issue since installing HF2 for 8.2 . Since that point I have had one incident that was very different than the first two. There have been no SMTP warnings in event log, no SMTP error 1455 (out of memory) in logs since the HF2. The only thing I could trace this one to is in the Declude logs. The logs indicated it could not move spam to hold directory. This incident required a hard boot of the server, external access was cut off. Declude support has indicated they are seeing this as a possible issue. Normally, I would not quote tech support on a list and I am not blaming Declude for this issue. But this may be very helpful towards resolution of this issue: Chris, We are currently looking into an issue where the HOLD directive does not work properly. My first suspicion, since you have mentioned HOLD, is that it is related to this same issue. It is possible that the hold directory is not being created correctly or that the name being passed to that routine is invalid. David Franco-Rocha Declude Technical Support Thanks, Chris Patterson, CCNA Network Engineer/Support Manager -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Nice Sent: Wednesday, June 08, 2005 2:16 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Insufficient system resources error This is very interesting - Can you verify in the task manager that when it hangs that the memory in use by SMTPd is 'normal'? (7 to 20 Megabytes) I wouldn't be surprised by some type of logging problem. I occasionally see truncated/incomplete log lines in the file. This would certainly seem to be some sort of bug related to logging. - Original Message - From: Rick Davidson [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, June 08, 2005 1:36 PM Subject: Re: [Declude.JunkMail] Insufficient system resources error I have been watching this thread and have been the victim of the SMTP service failures (hangs really) but I do not get a Insufficient system resources error. I believe I have the problem traced to the SMTP logging, if I turn the SMTP logging off (yea I know... :) I no longer have SMTP failures. I installed Kiwi syslogger and still had the same SMTP service failures until I disabled the SMTP logging so it seems to be the SMTPD itself and not the built in logging services. would be interested to see if others could verify this, in the mean time I am opening a ticket with Ipswitch this definately is not a declude issue Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Chris Patterson [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, June 03, 2005 3:13 PM Subject: RE: [Declude.JunkMail] Insufficient system resources error I had the same problem with SMTP not being able to restart due to virtual memory according to the event log. I had to reboot to gain SMTP services. I have had another instance since applying HF2, but the SMTP portion of the issue was not the same. The event log did not indicate SMTP failures. I opened a ticket with Ipswitch but they blamed it on Declude, as usual. Thanks, Chris Patterson, CCNA Network Engineer/Support Manager -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, June 03, 2005 2:13 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Insufficient system resources error Update: Since installing Imail 8.20 HF2 last Saturday, the problem so far has not reoccurred. Any one else still having this problem? John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E
RE: [Declude.JunkMail] X-RBL-Warning??
It looks like it should have passed, http://www.dnsstuff.com/tools/lookup.ch?name=ute-sei.orgtype=MX. I would turn the declude log level to High and send another test, this will give you more information on how it is checking. Thanks,Chris Patterson, CCNANetwork Engineer/Support Manager From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan DuncanSent: Monday, June 06, 2005 1:49 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] X-RBL-Warning?? Im resending this as I didnt get any replies. Anyone?? -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan DuncanSent: May 31, 2005 9:35 AMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] X-RBL-Warning?? Our own domain is getting caught with an X-RBL-Warning: X-RBL-Warning: MAILFROM: Domain ute-sei.org has no MX or A records [0001]. I checked the documentation for this and found: Each line determines the action to take for a specific test; for example, "ORBZ WARN" lets Declude JunkMail know to add a standard "X-RBL-Warning:" header for E-mail that fails the ORBZ test. I cant find how to check the ORBZ test. Everything I look up tells me that this domain doesnt exist anymore. Any other checks I make on our domain points to the MX record being defined properly. What should I be checking or changing? Susan Duncan Web/Communications Officer / Agent des Communications/webUnion of Taxation Employees / Syndicat des employées de l'ImpôtTel: 613-235-6704 ext 240Fax: 613-234-7290e-mail: [EMAIL PROTECTED]http://www.ute-sei.org/
RE: [Declude.JunkMail] Insufficient system resources error
I had the same problem with SMTP not being able to restart due to virtual memory according to the event log. I had to reboot to gain SMTP services. I have had another instance since applying HF2, but the SMTP portion of the issue was not the same. The event log did not indicate SMTP failures. I opened a ticket with Ipswitch but they blamed it on Declude, as usual. Thanks, Chris Patterson, CCNA Network Engineer/Support Manager -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, June 03, 2005 2:13 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Insufficient system resources error Update: Since installing Imail 8.20 HF2 last Saturday, the problem so far has not reoccurred. Any one else still having this problem? John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] [01E-0A25BF81-BB66] Declude/SMTP crashing
Responses to [EMAIL PROTECTED]'s questions. What version of Windows are you using? Win 2K Server What SP's are installed? SP4 What version of Declude are you using? C:\IMaildeclude -diagDeclude 1.81 (C) Copyright 2000-2004 Computerized Horizons. What version of IMail are you using? Imail 8.2 What hot fixes have you applied to IMail? hf1 **Did apply hf2 after yesterday's SMTP crash How long before you see this resource problem? Undetermined, has only happened twice in 2 weeks. Does your scanner software automatically update itself (not definitions but the software itself) When did this start happening? Did ANY kind upgrade happen? Win, Declude, IMail, Scanner? F-Prot using Declude Virus, updates each hour. No upgrades or updates immediately prior to smtp crash. Your name and phone number Chris Patterson, 813-232-4887 Any else you suspect or find odd. Box: 2 gigs RAM with 4 gigs Virtual, dual Zeon 3.06 on a Compaq DL380 with 6 SCSI's. Issue begins with spool backing up, q*.smd files dumping into overflow directory. SMTP stops and will not restart until reboot. Up to 6000 in spool and overflow, files are delivered after reboot and all is normal. SMTP Log files at the time: 05:24 09:48 SMTPD (30850906b185) (CP) error 1455 executing "C:\IMail\Declude.exe" "G:\Imail\spool\Q30850906b185.SMD" 05:24 09:48 SMTPD (308518b9b187) (CP) error 1455 executing "C:\IMail\Declude.exe" "G:\Imail\spool\Q308518b9b187.SMD" 05:24 09:48 SMTPD (308a1cfab1ef) (CP) error 1455 executing "C:\IMail\Declude.exe" "G:\Imail\spool\Q308a1cfab1ef.SMD" 05:24 09:48 SMTPD (30861675b18b) Format Message Failed, Message ID: (11534) 05:24 09:48 SMTPD (3086047db18d) Format Message Failed, Message ID: (11534) 05:24 09:48 SMTPD (3086111eb191) Format Message Failed, Message ID: (11534) 05:24 09:48 SMTPD (307f0d74b09c) Format Message Failed, Message ID: (11534) 05:24 09:48 SMTPD (3086190fb196) Format Message Failed, Message ID: (11534) 05:24 09:48 SMTPD (308514ebb188) (CP) error 1455 executing "C:\IMail\Declude.exe" "G:\Imail\spool\Q308514ebb188.SMD" 05:24 09:48 SMTPD (306a0f55ad31) (CP) error 1455 executing "C:\IMail\Declude.exe" "G:\Imail\spool\Q306a0f55ad31.SMD" 05:24 09:48 SMTPD (308518b4b189) (CP) error 1455 executing "C:\IMail\Declude.exe" "G:\Imail\spool\Q308518b4b189.SMD" 05:24 09:48 SMTPD (308203a3b113) (CP) error 1455 executing "C:\IMail\Declude.exe" "G:\Imail\spool\Q308203a3b113.SMD" 05:24 09:48 SMTPD (308601c3b190) (CP) error 1455 executing "C:\IMail\Declude.exe" Thanks,Chris Patterson, CCNANetwork Engineer From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 25, 2005 12:30 PMTo: Chris PattersonSubject: [01E-0A25BF81-BB66] Declude/SMTP crashing Some of our other customers have seen 8.2 issues. I posted this on the forum. So I can add your info to the other so we can take corrective action, please answer the following. What version of Windows are you using? What SP's are installed? What version of Declude are you using? What version of IMail are you using? What hot fixes have you applied to IMail? How long before you see this resource problem? Does your scanner software automatically update itself (not definitions but the software itself) When did this start happening? Did ANY kind upgrade happen? Win, Declude, IMail, Scanner? Your name and phone number Any else you suspect or find odd.Please contact me if you have any other questions.Thank you,Ralph Krausse(978)-499-2933 From: "Chris Patterson" [EMAIL PROTECTED]Sent: Wed, 25 May 2005 10:01:56 -0500To: [EMAIL PROTECTED]Subject: RE: [01E-0A25BF81-BB66] Declude/SMTP crashingIt has happened twice in two weeks. It is not predictable. We are alsorunning Declude Virus with f-prot.What version of Declude would you recommend for 8.2, understanding youhave thoroughly tested.As you can see from the logs, we have alot of e-mail traffic on a verypowerful box. We have been runing Imail/Declude for years on thisconfig with the same DNS server. This all began after the 8.2 upgradeit was really stable before the upgrade. I am sure this is some type ofcompatibility issue and I would really like your assistance solvingthis.Can I send you any of the virus logs on debug to possibly assist.Thanks,Chris Patterson, CCNANetwork Engineer/Support ManagerFrom: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 25, 2005 8:18 AMTo: Chris PattersonSubject: [01E-0A25BF81-BB66] Declude/SMTP crashingChris,We are looking into this issue with the new version of IMail but someinformation if you can. Does this happen right away or if you rebootyour MTA, does it take a few hours/days for this to occur. Are you justusing Junkmail or als
[Declude.JunkMail] Declude/SMTP crashing
I upgraded to Imail 8.2 (hf1)2 weeks ago, running declude (Declude v1.81). I have had SMTP crash twice with these errors before going into overflow directory. SMTP would not start and had to be rebooted. Any suggestions? 05:24 09:48 SMTPD (30850906b185) (CP) error 1455 executing C:\IMail\Declude.exe G:\Imail\spool\Q30850906b185.SMD 05:24 09:48 SMTPD (308518b9b187) (CP) error 1455 executing C:\IMail\Declude.exe G:\Imail\spool\Q308518b9b187.SMD 05:24 09:48 SMTPD (308a1cfab1ef) (CP) error 1455 executing C:\IMail\Declude.exe G:\Imail\spool\Q308a1cfab1ef.SMD 05:24 09:48 SMTPD (30861675b18b) Format Message Failed, Message ID: (11534) 05:24 09:48 SMTPD (3086047db18d) Format Message Failed, Message ID: (11534) 05:24 09:48 SMTPD (3086111eb191) Format Message Failed, Message ID: (11534) 05:24 09:48 SMTPD (307f0d74b09c) Format Message Failed, Message ID: (11534) 05:24 09:48 SMTPD (3086190fb196) Format Message Failed, Message ID: (11534) 05:24 09:48 SMTPD (308514ebb188) (CP) error 1455 executing C:\IMail\Declude.exe G:\Imail\spool\Q308514ebb188.SMD 05:24 09:48 SMTPD (306a0f55ad31) (CP) error 1455 executing C:\IMail\Declude.exe G:\Imail\spool\Q306a0f55ad31.SMD 05:24 09:48 SMTPD (308518b4b189) (CP) error 1455 executing C:\IMail\Declude.exe G:\Imail\spool\Q308518b4b189.SMD 05:24 09:48 SMTPD (308203a3b113) (CP) error 1455 executing C:\IMail\Declude.exe G:\Imail\spool\Q308203a3b113.SMD 05:24 09:48 SMTPD (308601c3b190) (CP) error 1455 executing C:\IMail\Declude.exe Thanks, Chris Patterson, CCNA Network Engineer/Support Manager --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude/SMTP crashing
I have 2 gigs RAM with 4 gigs Virtual, dual Zeon 3.06 on a Compaq DL380 with 6 SCSI's. Has been running rock solid on 8.05 until I upgraded to 8.2 2 weeks ago. What is the newest version of Declude that is stable with 8.2, anyone? Thanks, Chris Patterson, CCNA Network Engineer/Support Manager -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, May 24, 2005 11:46 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Declude/SMTP crashing I know there is a HF2 for 8.20 now. Also, looking up error 1455 it seems to indicate that you may have not had enough virtual memory. Could this be the case? I know there is some oddity with smtpd memory usage where it will balloon until the service is restarted - are you experiencing that? Darrell - DLAnalyzer - Comprehensive reporting for Declude Junkmail and Virus. Try it today http://www.invariantsystems.com Chris Patterson writes: I upgraded to Imail 8.2 (hf1)2 weeks ago, running declude (Declude v1.81). I have had SMTP crash twice with these errors before going into overflow directory. SMTP would not start and had to be rebooted. Any suggestions? 05:24 09:48 SMTPD (30850906b185) (CP) error 1455 executing C:\IMail\Declude.exe G:\Imail\spool\Q30850906b185.SMD 05:24 09:48 SMTPD (308518b9b187) (CP) error 1455 executing C:\IMail\Declude.exe G:\Imail\spool\Q308518b9b187.SMD 05:24 09:48 SMTPD (308a1cfab1ef) (CP) error 1455 executing C:\IMail\Declude.exe G:\Imail\spool\Q308a1cfab1ef.SMD 05:24 09:48 SMTPD (30861675b18b) Format Message Failed, Message ID: (11534) 05:24 09:48 SMTPD (3086047db18d) Format Message Failed, Message ID: (11534) 05:24 09:48 SMTPD (3086111eb191) Format Message Failed, Message ID: (11534) 05:24 09:48 SMTPD (307f0d74b09c) Format Message Failed, Message ID: (11534) 05:24 09:48 SMTPD (3086190fb196) Format Message Failed, Message ID: (11534) 05:24 09:48 SMTPD (308514ebb188) (CP) error 1455 executing C:\IMail\Declude.exe G:\Imail\spool\Q308514ebb188.SMD 05:24 09:48 SMTPD (306a0f55ad31) (CP) error 1455 executing C:\IMail\Declude.exe G:\Imail\spool\Q306a0f55ad31.SMD 05:24 09:48 SMTPD (308518b4b189) (CP) error 1455 executing C:\IMail\Declude.exe G:\Imail\spool\Q308518b4b189.SMD 05:24 09:48 SMTPD (308203a3b113) (CP) error 1455 executing C:\IMail\Declude.exe G:\Imail\spool\Q308203a3b113.SMD 05:24 09:48 SMTPD (308601c3b190) (CP) error 1455 executing C:\IMail\Declude.exe Thanks, Chris Patterson, CCNA Network Engineer/Support Manager --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] COPYALL setup
I cannot find an example for the global.cfg for a copyall setup. I need to copy all incoming and outgoing e-mail for an account. Thanks, Chris Patterson, CCNA Network Engineer/Support Manager --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup
I am having issues setting up a Log Server(Kiwi) and am receiving the error 2005-02-17 09:18:39 Unable to open UDP socket on port 514. I have shut down IMAIL's services, I believe the declude logging may be causing this error. Has someone else gone down this road that has some suggestions? I like where Declude is presently logging and need to stop the IMAIL logging to my spool directory. Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Thursday, February 17, 2005 9:38 AM To: IMail_Forum@list.ipswitch.com Subject: RE: [IMail Forum] Issue with Log Server Setup It is on UDP 514, and with IMAIL Syslog service shutdown it is still not working. I am using the Freeware Kiwi Syslog Daemon Ver 7.1.4. Any other suggestions? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Brumm Sent: Wednesday, February 16, 2005 6:25 PM To: IMail_Forum@list.ipswitch.com Subject: Re: [IMail Forum] Issue with Log Server Setup Did you shut down the IMail syslog service (port conflict)? At 02:24 PM 2/16/2005, you wrote: I am having trouble setting up Kiwi Log Server on the mail server. I have installed it and set SMTP to log to Log Server, but Kiwi isn't hearing a thing. It is defaulted to listen to TCP 1468, I can not find anything in archives or KB about this. Is there something very obvious I am missing? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ ComsecNet Dedicated Data Services Stockton, CA Phone:(209) 463-2809 Fax:(209) 938-0481 Email: [EMAIL PROTECTED] Web: www.comsec.net This message is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error please destroy this message and notify the sender by reply email. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup
The Syslogd is definetly stopped. No software firewall, we use SonicWall. Thanks, Chris Patterson, CCNA Network Engineer -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Thursday, February 17, 2005 12:17 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup Chris, Declude is not the culprit. Your IMail installation likely has syslog turned on. Check your IMail Administrator under localhost, Services, and see if Syslogd is running. Barring that, do you have a personal firewall installed that may need you to approve Kiwi to use network services? Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Thursday, February 17, 2005 7:09 AM To: Declude.JunkMail@declude.com Cc: IMail_Forum@list.ipswitch.com Subject: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup I am having issues setting up a Log Server(Kiwi) and am receiving the error 2005-02-17 09:18:39 Unable to open UDP socket on port 514. I have shut down IMAIL's services, I believe the declude logging may be causing this error. Has someone else gone down this road that has some suggestions? I like where Declude is presently logging and need to stop the IMAIL logging to my spool directory. Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Thursday, February 17, 2005 9:38 AM To: IMail_Forum@list.ipswitch.com Subject: RE: [IMail Forum] Issue with Log Server Setup It is on UDP 514, and with IMAIL Syslog service shutdown it is still not working. I am using the Freeware Kiwi Syslog Daemon Ver 7.1.4. Any other suggestions? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Brumm Sent: Wednesday, February 16, 2005 6:25 PM To: IMail_Forum@list.ipswitch.com Subject: Re: [IMail Forum] Issue with Log Server Setup Did you shut down the IMail syslog service (port conflict)? At 02:24 PM 2/16/2005, you wrote: I am having trouble setting up Kiwi Log Server on the mail server. I have installed it and set SMTP to log to Log Server, but Kiwi isn't hearing a thing. It is defaulted to listen to TCP 1468, I can not find anything in archives or KB about this. Is there something very obvious I am missing? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ ComsecNet Dedicated Data Services Stockton, CA Phone:(209) 463-2809 Fax:(209) 938-0481 Email: [EMAIL PROTECTED] Web: www.comsec.net This message is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error please destroy this message and notify the sender by reply email. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup
Actually, The netstat -an showed this: UDP0.0.0.0:514*:* Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems (813)232-4887 Ext. 112 [EMAIL PROTECTED] Managed Spam Filtering and Anti-Virus Protection for Your Internet Service - Available Today from Rapid Systems -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, February 17, 2005 1:53 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup Several people on the IMail forum have mentioned to you to try netstat -an to see what may be listening on 514. Have you done that yet? Darin. - Original Message - From: Chris Patterson [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, February 17, 2005 1:41 PM Subject: RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup The Syslogd is definetly stopped. No software firewall, we use SonicWall. Thanks, Chris Patterson, CCNA Network Engineer -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Thursday, February 17, 2005 12:17 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup Chris, Declude is not the culprit. Your IMail installation likely has syslog turned on. Check your IMail Administrator under localhost, Services, and see if Syslogd is running. Barring that, do you have a personal firewall installed that may need you to approve Kiwi to use network services? Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Thursday, February 17, 2005 7:09 AM To: Declude.JunkMail@declude.com Cc: IMail_Forum@list.ipswitch.com Subject: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup I am having issues setting up a Log Server(Kiwi) and am receiving the error 2005-02-17 09:18:39 Unable to open UDP socket on port 514. I have shut down IMAIL's services, I believe the declude logging may be causing this error. Has someone else gone down this road that has some suggestions? I like where Declude is presently logging and need to stop the IMAIL logging to my spool directory. Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Thursday, February 17, 2005 9:38 AM To: IMail_Forum@list.ipswitch.com Subject: RE: [IMail Forum] Issue with Log Server Setup It is on UDP 514, and with IMAIL Syslog service shutdown it is still not working. I am using the Freeware Kiwi Syslog Daemon Ver 7.1.4. Any other suggestions? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Brumm Sent: Wednesday, February 16, 2005 6:25 PM To: IMail_Forum@list.ipswitch.com Subject: Re: [IMail Forum] Issue with Log Server Setup Did you shut down the IMail syslog service (port conflict)? At 02:24 PM 2/16/2005, you wrote: I am having trouble setting up Kiwi Log Server on the mail server. I have installed it and set SMTP to log to Log Server, but Kiwi isn't hearing a thing. It is defaulted to listen to TCP 1468, I can not find anything in archives or KB about this. Is there something very obvious I am missing? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ ComsecNet Dedicated Data Services Stockton, CA Phone:(209) 463-2809 Fax:(209) 938-0481 Email: [EMAIL PROTECTED] Web: www.comsec.net This message is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error please destroy this message and notify the sender by reply email. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL
RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup
Thanks for all your help everyone. I will let you know what the results are. Thanks, Chris Patterson, CCNA Network Engineer -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Thursday, February 17, 2005 2:31 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup Ok, that clearly shows that some application or service is listening for inbound syslog. Download fport from http://www.foundstone.com and it will show the name and path of that executable. From there, you'll solve it. Let us know how that works out for you. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Thursday, February 17, 2005 11:13 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup Actually, The netstat -an showed this: UDP0.0.0.0:514*:* Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems (813)232-4887 Ext. 112 [EMAIL PROTECTED] Managed Spam Filtering and Anti-Virus Protection for Your Internet Service - Available Today from Rapid Systems -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, February 17, 2005 1:53 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup Several people on the IMail forum have mentioned to you to try netstat -an to see what may be listening on 514. Have you done that yet? Darin. - Original Message - From: Chris Patterson [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, February 17, 2005 1:41 PM Subject: RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup The Syslogd is definetly stopped. No software firewall, we use SonicWall. Thanks, Chris Patterson, CCNA Network Engineer -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Thursday, February 17, 2005 12:17 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup Chris, Declude is not the culprit. Your IMail installation likely has syslog turned on. Check your IMail Administrator under localhost, Services, and see if Syslogd is running. Barring that, do you have a personal firewall installed that may need you to approve Kiwi to use network services? Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Thursday, February 17, 2005 7:09 AM To: Declude.JunkMail@declude.com Cc: IMail_Forum@list.ipswitch.com Subject: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup I am having issues setting up a Log Server(Kiwi) and am receiving the error 2005-02-17 09:18:39 Unable to open UDP socket on port 514. I have shut down IMAIL's services, I believe the declude logging may be causing this error. Has someone else gone down this road that has some suggestions? I like where Declude is presently logging and need to stop the IMAIL logging to my spool directory. Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Thursday, February 17, 2005 9:38 AM To: IMail_Forum@list.ipswitch.com Subject: RE: [IMail Forum] Issue with Log Server Setup It is on UDP 514, and with IMAIL Syslog service shutdown it is still not working. I am using the Freeware Kiwi Syslog Daemon Ver 7.1.4. Any other suggestions? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Brumm Sent: Wednesday, February 16, 2005 6:25 PM To: IMail_Forum@list.ipswitch.com Subject: Re: [IMail Forum] Issue with Log Server Setup Did you shut down the IMail syslog service (port conflict)? At 02:24 PM 2/16/2005, you wrote: I am having trouble setting up Kiwi Log Server on the mail server. I have installed it and set SMTP to log to Log Server, but Kiwi isn't hearing a thing. It is defaulted to listen to TCP 1468, I can not find anything in archives or KB about this. Is there something very obvious I am missing? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ ComsecNet Dedicated Data Services Stockton, CA Phone:(209) 463-2809 Fax:(209) 938-0481 Email: [EMAIL PROTECTED] Web: www.comsec.net This message is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message
RE: [Declude.JunkMail] [IMail Forum] Issue with Log Server Setup
The problem was having the TCP also checked. Once that was unchecked, I set services to log server, shut off Imail syslog service, stopped and started SMTP and Queue Man., and closed and reopened Kiwi. However my Anti-Spam Log is not showing up, usually spam.txt. Nothing in error log. Anyone know the resolution to that? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems (813)232-4887 Ext. 112 [EMAIL PROTECTED] Managed Spam Filtering and Anti-Virus Protection for Your Internet Service - Available Today from Rapid Systems -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Thursday, February 17, 2005 2:50 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup Thanks for all your help everyone. I will let you know what the results are. Thanks, Chris Patterson, CCNA Network Engineer -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Thursday, February 17, 2005 2:31 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup Ok, that clearly shows that some application or service is listening for inbound syslog. Download fport from http://www.foundstone.com and it will show the name and path of that executable. From there, you'll solve it. Let us know how that works out for you. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Thursday, February 17, 2005 11:13 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup Actually, The netstat -an showed this: UDP0.0.0.0:514*:* Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems (813)232-4887 Ext. 112 [EMAIL PROTECTED] Managed Spam Filtering and Anti-Virus Protection for Your Internet Service - Available Today from Rapid Systems -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, February 17, 2005 1:53 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup Several people on the IMail forum have mentioned to you to try netstat -an to see what may be listening on 514. Have you done that yet? Darin. - Original Message - From: Chris Patterson [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, February 17, 2005 1:41 PM Subject: RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup The Syslogd is definetly stopped. No software firewall, we use SonicWall. Thanks, Chris Patterson, CCNA Network Engineer -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Thursday, February 17, 2005 12:17 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup Chris, Declude is not the culprit. Your IMail installation likely has syslog turned on. Check your IMail Administrator under localhost, Services, and see if Syslogd is running. Barring that, do you have a personal firewall installed that may need you to approve Kiwi to use network services? Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Thursday, February 17, 2005 7:09 AM To: Declude.JunkMail@declude.com Cc: IMail_Forum@list.ipswitch.com Subject: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup I am having issues setting up a Log Server(Kiwi) and am receiving the error 2005-02-17 09:18:39 Unable to open UDP socket on port 514. I have shut down IMAIL's services, I believe the declude logging may be causing this error. Has someone else gone down this road that has some suggestions? I like where Declude is presently logging and need to stop the IMAIL logging to my spool directory. Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Thursday, February 17, 2005 9:38 AM To: IMail_Forum@list.ipswitch.com Subject: RE: [IMail Forum] Issue with Log Server Setup It is on UDP 514, and with IMAIL Syslog service shutdown it is still not working. I am using the Freeware Kiwi Syslog Daemon Ver 7.1.4. Any other suggestions? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Brumm Sent: Wednesday, February 16, 2005 6:25 PM To: IMail_Forum@list.ipswitch.com Subject: Re: [IMail Forum] Issue with Log Server Setup Did you shut down the IMail syslog service (port conflict)? At 02:24 PM 2/16/2005, you wrote: I am having trouble setting up Kiwi Log Server on the mail server. I have installed it and set SMTP to log to Log Server, but Kiwi isn't
[Declude.JunkMail] Whitelisting Issue
Hi all, I am having trouble with an issue where spam is getting by showing whitelisted in the header. Neither the domain or e-mail address that it is coming from is whitelisted in the global config, nor are they showing as Auth-user. However, one of the recipients (local user) is Whitelisted; which you can't see because they are apparently in the BCC field . Apparently it is causing all recipients on this e-mail to receive it as Whitelisted. Has anyone else ran into this issue? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelisting Issue
Very Nice, Should I add anything to the default.junkmail file? EMERGENCYBYPASS WARN ?? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems -Original Message- From: Kami Razvan [mailto:[EMAIL PROTECTED] Sent: Monday, December 20, 2004 5:57 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Whitelisting Issue Chris: We were having a similar issue- Scott suggested the following: EMERGENCYBYPASS bypasswhitelist 40 2 0 0 So now if the weight passes 40 the whitelist will not work if 2 more people are in the list. You can adjust the settings per your environment. Regards, Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Monday, December 20, 2004 5:50 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Whitelisting Issue Hi all, I am having trouble with an issue where spam is getting by showing whitelisted in the header. Neither the domain or e-mail address that it is coming from is whitelisted in the global config, nor are they showing as Auth-user. However, one of the recipients (local user) is Whitelisted; which you can't see because they are apparently in the BCC field . Apparently it is causing all recipients on this e-mail to receive it as Whitelisted. Has anyone else ran into this issue? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelisting Issue
He likes his spam. I am wide open to better ideas, other than teaching spammers how to be better spammers. Thanks, Chris Patterson, CCNA Network Engineer -Original Message- From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] Sent: Monday, December 20, 2004 6:09 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Whitelisting Issue That is why whitelisting from or to an e-mail address is very touchy and dangerous. Why is anything for that user configured to be whitelisted? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Monday, December 20, 2004 2:50 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Whitelisting Issue Hi all, I am having trouble with an issue where spam is getting by showing whitelisted in the header. Neither the domain or e-mail address that it is coming from is whitelisted in the global config, nor are they showing as Auth-user. However, one of the recipients (local user) is Whitelisted; which you can't see because they are apparently in the BCC field . Apparently it is causing all recipients on this e-mail to receive it as Whitelisted. Has anyone else ran into this issue? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Any word on new SMTP Gateway??
I haven't seen any discussion on the new SMTP Gateway product that Declude will support, anybody know about it? A Beta release of Declude 2.0 will be available on or around December 16th that will include new functionality and also support for an additional windows based mail server as an affordable alternative to IMail. This opens up the options for a reasonably priced, fully functional gateway. Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems
[Declude.JunkMail] IPfile question
I am running several ipfiles which are growing quite large. Can you block the entire network with using IP x.x.x.0 instead of x.x.x.x with a single IP? Thanks, Chris Patterson, CCNA Network Engineer --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Types of Filters
I have a myfilter test that has been working quite well but is growing too large. I want to break these down into body, subject and header filters so it narrows down where to look (as opposed to logs). Any ideas which other filter tests are recognized by declude? I tried a HEADERCONTAINS but that didnt work, didnt think it would. Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems
RE: [Declude.JunkMail] Types of Filters
That did it, thanks for all of the replies!! Thanks, Chris Patterson, CCNA Network Engineer -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Monday, July 19, 2004 12:45 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Types of Filters I have a myfilter test that has been working quite well but is growing too large. I want to break these down into body, subject and header filters so it narrows down where to look (as opposed to logs). Any ideas which other filter tests are recognized by declude? I tried a HEADERCONTAINS but that didn t work, didn t think it would. You can use the ones that are listed in the manual. :) BODY CONTAINS, SUBJECT CONTAINS, and HEADERS CONTAINS will all work fine. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Latest Versions question.
I am currently running declude v1.76 and want to upgrade. I only see v1.75 and beta v1.79 available, anyone know if there is a better full blown version of declude available. I have updated my global.cfg $default$.junkmail to add some additional ip4r tests, cmdspace and WHITELIST AUTH, will v 1.76 support these? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems
RE: [Declude.JunkMail] Latest Versions question.
Thanks for the reply John, I guess I must have a beta version as well, anyone know if CMDSPACE and/or WHITELIST AUTH will work with 1.76? C:\IMaildeclude -diag Declude 1.76b (C) Copyright 2000-2003 Computerized Horizons. All Rights Reserve d. Diagnostics ON (Declude v1.76b). Thanks, Chris Patterson, CCNA Network Engineer -Original Message- From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 01, 2004 11:59 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Latest Versions question. The web site shows the correct versions available. To see what was added for each beta version, read the release notes linked at the bottom of the manual. Declude is trying hard to get a new release version out, hopefully soon. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Thursday, July 01, 2004 7:27 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Latest Versions question. I am currently running declude v1.76 and want to upgrade. I only see v1.75 and beta v1.79 available, anyone know if there is a better full blown version of declude available. I have updated my global.cfg $default$.junkmail to add some additional ip4r tests, cmdspace and WHITELIST AUTH, will v 1.76 support these? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems
RE: Re[2]: [Declude.JunkMail] Declude/SpamAssasin Question
Would it make a difference if the spool is g:/imail/spool ? Thanks, Chris Patterson, CCNA Network Engineer -Original Message- From: Sanford Whiteman [mailto:[EMAIL PROTECTED] Sent: Thursday, June 24, 2004 1:59 AM To: Chris Patterson Subject: Re[2]: [Declude.JunkMail] Declude/SpamAssasin Question I installed but can't see anything in the declude logs for it. Try running at log level debug for a little while to see verbose output. Also make sure you can run SPAMC32 from the command line against an existing D file (in your \spool\spam, for example) using the same syntax you have in GLOBAL.CFG. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/rel ease/ Defuse Dictionary Attacks: Turn Exchange Addresses into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/dow nload/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude/SpamAssasin Question
Can anyone with SpamAssasin plugged into declude give me their global.cfg excerpt? I hold on 15, I am unsure on the cw and sw weight. Also, how do you weigh this test compared to your hold weight? SPAMASSASSIN external nonzero c:\imail\declude\spamc32.exe -cw %WEIGHT% -sw 10 -f choose a weight 0 Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems
RE: [Declude.JunkMail] OT: IMAIL domains expanding slowly.
I have been dealing with an issue for a few weeks now moving IMAIL to a BIG server. The old server is running good on dual 1.0 GIG procs. This is the basic Specs on the new server: DL380 G3 Compaq Dual 3.06 Zeon 2 Gigs factory Ram 6 Scsi drives Windows 2000 server I have done this migration by the books with 8.05 IMAIL, duplicating everything exactly. But IMAIL Administrator expands domains incredibly slow. Everything else, webmail, delivery looks fine. I have been through IMAIL support, and been through the registry checks, they are unable so far to find an answer. Has anyone else seen this or have any ideas to check on? I have tons of info to provide. Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems (813)232-4887 Ext. 112 [EMAIL PROTECTED] Managed Spam Filtering and Anti-Virus Protection for Your Internet Service - Available Today from Rapid Systems --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: IMAIL domains expanding slowly.
The Symantec carrier scans cfg file has been duplicated and moved over. We are also running McAffe NetSheild, same as on old server, config settings duplicated identically. Disabling NetSheild does not help. The cslive update interface is not identical on both servers. I installed and updated with same disk originally installed on original server. Is there any way to upgrade Carrier Scan as opposed to update? Anyone else have any ideas to check? Has anyone put IMAIL on Zeon Procs? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems (813)232-4887 Ext. 112 [EMAIL PROTECTED] Managed Spam Filtering and Anti-Virus Protection for Your Internet Service - Available Today from Rapid Systems -Original Message- From: Don L. Might [mailto:[EMAIL PROTECTED] Sent: Monday, May 03, 2004 9:22 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] OT: IMAIL domains expanding slowly. On-access virus scanner on the mail directory? I seem to remember av causing this symptom. Don -Original Message- From: Chris Patterson [mailto:[EMAIL PROTECTED] Sent: Monday, May 03, 2004 9:10 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] OT: IMAIL domains expanding slowly. I have been dealing with an issue for a few weeks now moving IMAIL to a BIG server. The old server is running good on dual 1.0 GIG procs. This is the basic Specs on the new server: DL380 G3 Compaq Dual 3.06 Zeon 2 Gigs factory Ram 6 Scsi drives Windows 2000 server I have done this migration by the books with 8.05 IMAIL, duplicating everything exactly. But IMAIL Administrator expands domains incredibly slow. Everything else, webmail, delivery looks fine. I have been through IMAIL support, and been through the registry checks, they are unable so far to find an answer. Has anyone else seen this or have any ideas to check on? I have tons of info to provide. Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems (813)232-4887 Ext. 112 [EMAIL PROTECTED] Managed Spam Filtering and Anti-Virus Protection for Your Internet Service - Available Today from Rapid Systems --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Can you block this?
Date: %CURRENT_DATE_TIME I see this in tons of spam that gets blocked. Anyone try to block this? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems (813)232-4887 Ext. 112 [EMAIL PROTECTED] Managed Spam Filtering and Anti-Virus Protection for Your Internet Service - Available Today from Rapid Systems --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Is it possible to turn logging off?
I see many ways to adjust levels of logging, is there any way to temporarily turn it off to save processing power? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems (813)232-4887 Ext. 112 [EMAIL PROTECTED] Managed Spam Filtering and Anti-Virus Protection for Your Internet Service - AvailableToday from Rapid Systems
RE: [Declude.JunkMail] Virus Warning - Netsky.b@mm
I blocked it with declude Junkmail using this in a myfilter : BODY 15 CONTAINS TVqQAAME//8AAL BODY 15 CONTAINS UEsDBAoAAI2aUjBdbrA Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems (813)232-4887 Ext. 112 [EMAIL PROTECTED] Managed Spam Filtering and Anti-Virus Protection for Your Internet Service - Available Today from Rapid Systems -Original Message- From: Doug Anderson [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 18, 2004 3:20 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: [Declude.JunkMail] Virus Warning - [EMAIL PROTECTED] New ONE Moving fast! Virus Warning - [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
