Re: [Declude.JunkMail] Declude subscription valid but IS EXPIRED KEY in diags.txt
Steve, were you able to get ahold of anyone at Declude? I need to reach them as well and am running into similar issues as you. The odd thing is, is that I Dave Barker a couple of weeks ago. On Mon, Jan 28, 2013 at 5:22 PM, Steve Cirivello scirive...@compuserve.comwrote: ** Thank you Ben for your suggestions. The CODE/key as shown in our account on declude.com is identical to the value that's been in our declude.cfg file for some time. Our account page shows valid through Jan 2014, but, there's a red circle (not the usual greeen circle) in the upper left corner of the product/subscription status display box. John (a new voice) fixed the subscription date last Wednesday morning. After the call, I bounced decludeproc, and, IS EXPIRED KEY is still in diags.txt. Since that call with John last Wednesday morning, email messages to the usual addresses (including supp...@declude.com) are unanswered. Phone calls to Declude are not answered (except the auto-attendant) - 1 for sales now rolls to a Skype authentication, and 2 for support rolls to voice mail. I've bounced decludeproc several times a day since last Wednesday morning - no change. Daily emails and voice messages remain unanswered. This is very unusual. Maybe it's just this customer? Steve - Original Message - *From:* SM Admin imailad...@bcwebhost.net *To:* Declude.JunkMail@declude.com *Sent:* Monday, January 28, 2013 10:29 AM *Subject:* Re: [Declude.JunkMail] Declude subscription valid but IS EXPIRED KEY in diags.txt Is it possible that they issued you a new key when you renewed? And what emails did you write to? Ben *From:* Steve Cirivello scirive...@compuserve.com *Sent:* Monday, January 28, 2013 7:18 AM *To:* Declude.JunkMail@declude.com *Subject:* SPAM-LOW: [Declude.JunkMail] Declude subscription valid but IS EXPIRED KEY in diags.txt Hello, We've been a Declude customer for many years. We renewed the annual subscription last Monday, and, on Tuesday, Declude (for IMail) stopped working with IS EXPIRED KEY in diags.txt We've been unable to reach anyone at Declude by phone or email since last Wednesday morning. Has anyone contacted Declude recently and received a reply? Also, any suggestions for temporarily working around the IS EXPIRED KEY error. Our customer/partner login on declude.com shows our subscription is valid until Jan 2014. (We've considered purchasing a new subscription to get a new CODE/key, but if the purchase and CODE delivery process isn't completely automated we'd still be stuck.) Thanks. Steve --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- --- Dean M. Lawrence INTERNET DATA TECHNOLOGY p // 888.438.4381 ext. 701 w // www.idatatech.com f // www.facebook.com/idatatech t // www.twitter.com/idatatech Social Marketing | SEO | Design | Internet Development --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude subscription valid but IS EXPIRED KEY in diags.txt
Wow, that comes as a bit of a shock! Like I said, I just worked with David a couple of weeks ago. Thanks for the information Steve. On Wed, Jan 30, 2013 at 6:14 PM, Steve Cirivello scirive...@compuserve.comwrote: ** I did hear from Declude yesterday afternoon and again this morning. John reports our IS EXPIRED KEY problem is finally repaired (on the 9th day after the initial voice/email inquiries.) He also wrote: David and Linda have both left our company and I will be your primary contact. We are experiencing overload on our virtual call machine for receiving calls and are in the process of correcting all calls forwarding. You might email jprovost at the declude.com domain. 603 479 7640 was also contained in his message. It's not clear if support@ is being monitored, or, David's and Linda's addresses. David/Linda - thank you for many years of excellent customer service. Steve - Original Message - *From:* Dean Lawrence dean...@gmail.com *To:* Declude.JunkMail@declude.com *Sent:* Wednesday, January 30, 2013 9:52 AM *Subject:* Re: [Declude.JunkMail] Declude subscription valid but IS EXPIRED KEY in diags.txt Steve, were you able to get ahold of anyone at Declude? I need to reach them as well and am running into similar issues as you. The odd thing is, is that I Dave Barker a couple of weeks ago. On Mon, Jan 28, 2013 at 5:22 PM, Steve Cirivello scirive...@compuserve.com wrote: ** Thank you Ben for your suggestions. The CODE/key as shown in our account on declude.com is identical to the value that's been in our declude.cfg file for some time. Our account page shows valid through Jan 2014, but, there's a red circle (not the usual greeen circle) in the upper left corner of the product/subscription status display box. John (a new voice) fixed the subscription date last Wednesday morning. After the call, I bounced decludeproc, and, IS EXPIRED KEY is still in diags.txt. Since that call with John last Wednesday morning, email messages to the usual addresses (including supp...@declude.com) are unanswered. Phone calls to Declude are not answered (except the auto-attendant) - 1 for sales now rolls to a Skype authentication, and 2 for support rolls to voice mail. I've bounced decludeproc several times a day since last Wednesday morning - no change. Daily emails and voice messages remain unanswered. This is very unusual. Maybe it's just this customer? Steve - Original Message - *From:* SM Admin imailad...@bcwebhost.net *To:* Declude.JunkMail@declude.com *Sent:* Monday, January 28, 2013 10:29 AM *Subject:* Re: [Declude.JunkMail] Declude subscription valid but IS EXPIRED KEY in diags.txt Is it possible that they issued you a new key when you renewed? And what emails did you write to? Ben *From:* Steve Cirivello scirive...@compuserve.com *Sent:* Monday, January 28, 2013 7:18 AM *To:* Declude.JunkMail@declude.com *Subject:* SPAM-LOW: [Declude.JunkMail] Declude subscription valid but IS EXPIRED KEY in diags.txt Hello, We've been a Declude customer for many years. We renewed the annual subscription last Monday, and, on Tuesday, Declude (for IMail) stopped working with IS EXPIRED KEY in diags.txt We've been unable to reach anyone at Declude by phone or email since last Wednesday morning. Has anyone contacted Declude recently and received a reply? Also, any suggestions for temporarily working around the IS EXPIRED KEY error. Our customer/partner login on declude.com shows our subscription is valid until Jan 2014. (We've considered purchasing a new subscription to get a new CODE/key, but if the purchase and CODE delivery process isn't completely automated we'd still be stuck.) Thanks. Steve --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- --- Dean M. Lawrence INTERNET DATA TECHNOLOGY p // 888.438.4381 ext. 701 w // www.idatatech.com f // www.facebook.com/idatatech t // www.twitter.com/idatatech Social Marketing | SEO | Design | Internet Development --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from
[Declude.JunkMail] Declude stopped logging, high CPU usage, slow processing
The subject says it all. This morning, declude stated to have high cpu usage, the log file is 0k and messages are backing up in the proc directory. I looked in the diags.txt and I see this message: ERROR: Failed Initialize AVG 183Daisy Chain smtp32.exe I was running 4.11 and upgraded to 4.11.09 and still have the same results. Any thoughts? -- --- Dean M. Lawrence INTERNET DATA TECHNOLOGY p // 888.438.4381 ext. 701 w // www.idatatech.com f // www.facebook.com/idatatech t // www.twitter.com/idatatech Social Marketing | SEO | Design | Internet Development --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude stopped logging, high CPU usage, slow processing
Thanks Dave, will do. On Fri, Jan 11, 2013 at 10:25 AM, David Barker dbar...@declude.com wrote: Dean, ** ** There is currently an issue with the AVG that we are currently working on. As far as backup in the \proc directory and the 0 Kb log that seems like a different issue. Can you please contact supp...@declude.com for assistance. David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax dbar...@declude.com ** ** [image: Description: Description: -declude] ** ** ** ** ** ** *From:* Dean Lawrence [mailto:dean...@gmail.com] *Sent:* Friday, January 11, 2013 10:18 AM *To:* Declude.JunkMail@declude.com *Subject:* [Declude.JunkMail] Declude stopped logging, high CPU usage, slow processing ** ** The subject says it all. This morning, declude stated to have high cpu usage, the log file is 0k and messages are backing up in the proc directory. I looked in the diags.txt and I see this message: ** ** ERROR: Failed Initialize AVG 183Daisy Chain smtp32.exe ** ** I was running 4.11 and upgraded to 4.11.09 and still have the same results. Any thoughts? ** ** -- --- Dean M. Lawrence INTERNET DATA TECHNOLOGY p // 888.438.4381 ext. 701 w // www.idatatech.com f // www.facebook.com/idatatech t // www.twitter.com/idatatech Social Marketing | SEO | Design | Internet Development --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- --- Dean M. Lawrence INTERNET DATA TECHNOLOGY p // 888.438.4381 ext. 701 w // www.idatatech.com f // www.facebook.com/idatatech t // www.twitter.com/idatatech Social Marketing | SEO | Design | Internet Development --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. image001.png
[Declude.JunkMail] Single Domain Filter
I have a client that has requested that all emails from China be deleted. I am not currently weighting any emails based on country. What is the best way to create a filter that will only affect this one client's emails and cause any issues for my other clients? -- --- Dean M. Lawrence INTERNET DATA TECHNOLOGY p // 888.438.4381 ext. 701 w // www.idatatech.com f // www.facebook.com/idatatech t // www.twitter.com/idatatech Social Marketing | SEO | Design | Internet Development --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] weird processing of lists
Ben, Maybe you could right a rule that evaluates the sender and originating IP. So that if the email is from listn...@domain.com and the IP matches the server's IP (since it is being generated from your server), that it assigns a negative weight to the message? Dean P.S. This is off the top of my head without looking at the docs, so I may be off base. On Wed, Dec 29, 2010 at 3:07 PM, IMail Admin imailad...@bcwebhost.net wrote: But you're the man who knows everything about Declude. Surely you know the answer to my original question? Ben -Original Message- From: David Barker Sent: Wednesday, December 29, 2010 5:21 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] weird processing of lists Most likely ;) -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of IMail Admin Sent: Tuesday, December 28, 2010 3:24 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] weird processing of lists Everyone gone on vacation? -Original Message- From: IMail Admin Sent: Friday, December 24, 2010 11:23 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] weird processing of lists Hi, I've run into a small problem between Declude and lists. I have a domain with a list on it such as listn...@domain.com. You have to be on the posters' list to send messages to that list. One of the posters sends messages to the list and is authorized for the list, but gets this error message: Invalid final delivery userid: listname-spam...@domain.com. SpamLow is the folder into which messages are normally dropped when their score is between 5 and 10. It appears that Declude is assigning this message a score between 5 and 10 and then trying to put the message into the SpamLow folder for this user. Except that it's not a user, it's a list. So why does this happen and how do I handle it? Thanks, Ben P.S. We've been using Declude JM/AV with Imail for a long time. The current versions are Imail 2006.23 and Declude 1.63. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- --- Dean M. Lawrence INTERNET DATA TECHNOLOGY p // 888.438.4381 ext. 701 w // www.idatatech.com f // www.facebook.com/idatatech t // www.twitter.com/idatatech Social Marketing | SEO | Design | Internet Development --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Conditional Whitelist - Good Use of SPF!
Andy, Since there is already an SPF Pass, Fail, and Neutral result, couldn't you just create a rule that if the sender passes SPF that you apply a large negative point value? Then you could apply that rule to only the domains that you want to whitelist. Dean On Wed, Jan 20, 2010 at 8:47 AM, Andy Schmidt andy_schm...@hm-software.com wrote: Hi, Despite all the shortcomings of SPF, there may be one GOOD use: Every once in a while I receive requests to whitelist certain sender email addresses or domains – then I explain that we don’t like to do that because it would allow any spam that PRETENDS to come from that domain to pass. What WOULD be a good feature, would be an SPF based domain whitelist! It would be a conditional whitelist of senders that will ONLY be applied, if SPF for that domain PASSES. Best Regards, Andy --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] CommTouch ZeroHour
Thanks David. I'm still a little confused though. I do not provide Internet access for my clients, nor do I offer a clean and forward option. I simply host mailboxes for some of my development clients' domains. With this description, would CommTouch classify me as an ISP? Thanks, Dean On Fri, Jun 5, 2009 at 11:35 AM, David Barkerdbar...@declude.com wrote: Yes Internet access provider is a better description of ISP and how it is understood by Commtouch. David -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy Schmidt Sent: Friday, June 05, 2009 11:30 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] CommTouch ZeroHour Uh - okay, that was the reason, why I wasn't able to purchase CommTouch back when. As a hosting provider (which includes providing mailboxes for the clients' domains), that would fall under the umbrella primary function is to provide Internet service. If they would define ISP as Internet ACCESS provider - then this would be a different story. Because we don't provide Internet access and our primary function is not clean-and-forward MX services. -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David Barker Sent: Friday, June 05, 2009 10:49 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] CommTouch ZeroHour Commtouch does have a restriction. The condition is: a. ISP shall mean an internet service provider or managed solution provider. What this means - if you are an ISP as defined by Commtouch, your primary function is to provide Internet service to your customers (like Comcast) or your business provides managed services (Like MXlogic) clean-and-forward of emails. Secondly, if your business is part of the ISP category you can use Commtouch with the added cost of $3.60 per user per year. And finally, the yearly cost and payments to Commtouch for NON-ISP perpetual license Declude customers is being absorbed by Declude. David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax dbar...@declude.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] CommTouch ZeroHour
Excellent. Thanks David On Fri, Jun 5, 2009 at 11:54 AM, David Barkerdbar...@declude.com wrote: I simply host mailboxes for some of my development clients' domains. This is classified as a non-ISP and you can use Commtouch David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax dbar...@declude.com -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Dean Lawrence Sent: Friday, June 05, 2009 11:50 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] CommTouch ZeroHour Thanks David. I'm still a little confused though. I do not provide Internet access for my clients, nor do I offer a clean and forward option. I simply host mailboxes for some of my development clients' domains. With this description, would CommTouch classify me as an ISP? Thanks, Dean On Fri, Jun 5, 2009 at 11:35 AM, David Barkerdbar...@declude.com wrote: Yes Internet access provider is a better description of ISP and how it is understood by Commtouch. David -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy Schmidt Sent: Friday, June 05, 2009 11:30 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] CommTouch ZeroHour Uh - okay, that was the reason, why I wasn't able to purchase CommTouch back when. As a hosting provider (which includes providing mailboxes for the clients' domains), that would fall under the umbrella primary function is to provide Internet service. If they would define ISP as Internet ACCESS provider - then this would be a different story. Because we don't provide Internet access and our primary function is not clean-and-forward MX services. -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David Barker Sent: Friday, June 05, 2009 10:49 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] CommTouch ZeroHour Commtouch does have a restriction. The condition is: a. ISP shall mean an internet service provider or managed solution provider. What this means - if you are an ISP as defined by Commtouch, your primary function is to provide Internet service to your customers (like Comcast) or your business provides managed services (Like MXlogic) clean-and-forward of emails. Secondly, if your business is part of the ISP category you can use Commtouch with the added cost of $3.60 per user per year. And finally, the yearly cost and payments to Commtouch for NON-ISP perpetual license Declude customers is being absorbed by Declude. David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax dbar...@declude.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] CommTouch ZeroHour
Hi David, If my memory serves me correctly, there were some licensing limitations for using the CommTouch tests which is why I have not activated it in the past. Has this changed? I was trying to find it on my account page but could not. I host mail for my clients (we are not an ISP though), so can you clarify if I am able to use the CommTouch feature? Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email
Dave, Is there a way to specify a range of IPs in the backscatter filter? My server has about 50 IPs and it would be nice not to have to enter all of them. 8- ) Thanks, Dean On Tue, Apr 22, 2008 at 1:06 PM, David Barker [EMAIL PROTECTED] wrote: FILTER-NOSENDER is used to see if it is an automated message/response from a server. If the message triggers FILTER-NOSENDER we then go onto use FILTER-BACKSCATTER to score on phrases within the content. Also in the FILTER-BACKSCATTER there is a condition that if your server IP is found in the body of the bounced message we can assume the original message was from your server and therefore the FILTER-BACKSCATTER should not be run this is to help reduce false positives. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Per-User Blacklist
Thanks Darrell, That was what I was afraid of. How are others dealing with per user black lists? Are they using IMail rules to accomplish this? Right now I manage all domain configurations for my clients and typically do not allow per user options. However, I would like to build-out a web based user admin area for them to choose between preset spam levels and to administer their own white/black lists. I don't mind building it myself, but I would be interested in knowing how others deal with this. Thanks again, Dean On Jan 1, 2008 9:21 PM, Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] wrote: Dean, What you read in the manual is correct. The only way to do this would be to setup junkmail via per user and have a test for each user as their own blacklist. For a *small* group of users this could be done, but on any level of scale it would be impractical not only from a management aspect but from the resources it would require to run. Darrell -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Dean Lawrence wrote: Is it possible to create a per-user blacklist? From what I have seen in the manual and in the knowledge base, I have to define a test in the global config file. I could do this for a per domain basis, but to do it for every single user would be excruciating. Thanks -- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Per-User Blacklist
Thanks Darrell and Darin, This is pretty much my belief as well, but I was just trying to see if it was a feasable option to offer it on a per user basis. I agree that it would be a nightmare to try and manage all those tests. Dean On Jan 2, 2008 11:50 AM, Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] wrote: Personally, I do not do per user blacklists. However, as one off requests we have done this. In general if we are blacklisting something its typically a global blacklist. Which may not be ideal in all cases in an ISP type environment. Darrell Dean Lawrence wrote: Thanks Darrell, That was what I was afraid of. How are others dealing with per user black lists? Are they using IMail rules to accomplish this? Right now I manage all domain configurations for my clients and typically do not allow per user options. However, I would like to build-out a web based user admin area for them to choose between preset spam levels and to administer their own white/black lists. I don't mind building it myself, but I would be interested in knowing how others deal with this. Thanks again, Dean On Jan 1, 2008 9:21 PM, Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] wrote: Dean, What you read in the manual is correct. The only way to do this would be to setup junkmail via per user and have a test for each user as their own blacklist. For a *small* group of users this could be done, but on any level of scale it would be impractical not only from a management aspect but from the resources it would require to run. Darrell -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Dean Lawrence wrote: Is it possible to create a per-user blacklist? From what I have seen in the manual and in the knowledge base, I have to define a test in the global config file. I could do this for a per domain basis, but to do it for every single user would be excruciating. Thanks -- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Per-User Blacklist
Is it possible to create a per-user blacklist? From what I have seen in the manual and in the knowledge base, I have to define a test in the global config file. I could do this for a per domain basis, but to do it for every single user would be excruciating. Thanks -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Outlook 'Blank Folding' Vulnerability
Wouldn't you want to send the support request to the developers of incredimail? They are the ones who are generating the invalid header. Declude is only warning you about it. Dean On Dec 3, 2007 7:47 AM, Mon Mariola - Rubén [EMAIL PROTECTED] wrote: The program incredimail generates subjects, in certain cases, ended with 0D 0A 09 0D 0A. These messages are captured by Declude virus like Outlook 'Blank Folding' Vulnerability. I want to send a letter requesting to technical support solve this problem, but I really do not see the point 3.2.3 in RFC 822 indicating that this is not allowed. Thank you. Ruben Marti. Mon Mariola, S.L. From Declude manual: Outlook 'Blank Folding' Vulnerability: This vulnerability occurs when there is a line in the headers with just a single space or a single tab character. Outlook can treat this as the end of the headers, allowing it to see a virus that is embedded in the headers. RFC822 3.2.3 says that it is not valid to have such lines, nor is there any legitimate reason for an E-mail to contain a blank line in the headers with a single space or tab (note that it is OK to have a line with a single space or tab in the E-mail body, just not the headers). --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Why is this failing FROMNOMATCH
Why does junkmail see the From address as being empty? I'm using Postfix to send this message, is it a Postfix issue? Thanks, Received: from mailer.idatatech.com [64.237.105.85] by pop.idatatech.com with ESMTP (SMTPD-8.22) id A18105D8; Tue, 11 Sep 2007 10:09:05 -0400 Received: from srv638 (unknown [64.237.99.100]) by mailer.idatatech.com (Postfix) with ESMTP id 1FBE885415F for [EMAIL PROTECTED]; Tue, 11 Sep 2007 09:46:36 -0400 (EDT) Date: Tue, 11 Sep 2007 10:09:05 -0400 (EDT) From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Message-ID: [EMAIL PROTECTED] Subject: RT-Image Newsletter MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Mailer: ColdFusion 8 Application Server X-RBL-Warning: FROMNOMATCH: Env sender ([EMAIL PROTECTED]) From: () mismatch. X-Declude-Sender: [EMAIL PROTECTED] [64.237.105.85] X-Declude-Spoolname: Da18102ac330a.smd X-Declude-RefID: X-Declude-Note: Scanned by Declude 4.3.46 for spam. http://www.declude.com/x-note.htm; X-Declude-Scan: Incoming Score [2] at 10:11:05 on 11 Sep 2007 X-Declude-Tests: FROMNOMATCH [2] X-RCPT-TO: [EMAIL PROTECTED] Status: U X-UIDL: 463213396 X-IMail-ThreadID: a18102ac330a -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Process Flow
Hi All, I have a couple of questions regarding the process flow for junkmail. 1. If I have a test defined in the global config file, but do not add it to the $default$.junkmail file, how is test handled? Is the test used and then given a WARN action by default? 2. If I have a test defined in the global config, but commented in the $default$.junkmail file, will this test be ignored? I guess the answer to question 1 may answer this one as well. 3. If I have a test defined in the global config and also in the $default$.junkmail file, but not in a per domain $default$.junkmail file, will the action in the main $default$.junkmail file be used for that domain or will the test not be used for that domain? Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Process Flow
Hi David, Thanks for the quick reply. So basically, unless an action is specified; either on a global, per domain, or per user basis; a test will be run and whatever weight it has will be applied to the overall weight of the email. Then, the only way that this test will have any bearing is if I have a weight trigger defined, correct? Thanks, Dean On 8/27/07, David Barker [EMAIL PROTECTED] wrote: 1. The test in the global.cfg are ALWAYS run. The $default$.junkmail is just the ACTION. WARN means to write additional information to the headers. 2. No. 3. The test will run but no specific action will take place as it will use the per domain $default$.junkmail if the email recipient is of that domain. David Barker VP Operations Declude Your Email security is our business 978.499.2933 x 7007 office 978.988.1311 fax [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Monday, August 27, 2007 10:35 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Process Flow Hi All, I have a couple of questions regarding the process flow for junkmail. 1. If I have a test defined in the global config file, but do not add it to the $default$.junkmail file, how is test handled? Is the test used and then given a WARN action by default? 2. If I have a test defined in the global config, but commented in the $default$.junkmail file, will this test be ignored? I guess the answer to question 1 may answer this one as well. 3. If I have a test defined in the global config and also in the $default$.junkmail file, but not in a per domain $default$.junkmail file, will the action in the main $default$.junkmail file be used for that domain or will the test not be used for that domain? Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Process Flow
That's great. Thanks again David. Dean On 8/27/07, David Barker [EMAIL PROTECTED] wrote: Correct. If you want to exclude specific tests you can negate the weights by using a filter eg. In your global.cfg -- SPAMCOP ip4rbl.spamcop.net 127.0.0.2 8 0 In your filter -- This specifies the condition that it only work for @example.com ALLRECIPS END NOTCONTAINS @example.com This is the counter weight TESTSFAILED -8 CONTAINS SPAMCOP This enables you to exclude certain unwanted scoring. David Barker VP Operations Declude Your Email security is our business 978.499.2933 x 7007 office 978.988.1311 fax [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Monday, August 27, 2007 11:01 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Process Flow Hi David, Thanks for the quick reply. So basically, unless an action is specified; either on a global, per domain, or per user basis; a test will be run and whatever weight it has will be applied to the overall weight of the email. Then, the only way that this test will have any bearing is if I have a weight trigger defined, correct? Thanks, Dean On 8/27/07, David Barker [EMAIL PROTECTED] wrote: 1. The test in the global.cfg are ALWAYS run. The $default$.junkmail is just the ACTION. WARN means to write additional information to the headers. 2. No. 3. The test will run but no specific action will take place as it will use the per domain $default$.junkmail if the email recipient is of that domain. David Barker VP Operations Declude Your Email security is our business 978.499.2933 x 7007 office 978.988.1311 fax [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Monday, August 27, 2007 10:35 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Process Flow Hi All, I have a couple of questions regarding the process flow for junkmail. 1. If I have a test defined in the global config file, but do not add it to the $default$.junkmail file, how is test handled? Is the test used and then given a WARN action by default? 2. If I have a test defined in the global config, but commented in the $default$.junkmail file, will this test be ignored? I guess the answer to question 1 may answer this one as well. 3. If I have a test defined in the global config and also in the $default$.junkmail file, but not in a per domain $default$.junkmail file, will the action in the main $default$.junkmail file be used for that domain or will the test not be used for that domain? Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Process Flow
Hi Dave, One last question regarding this; if no action is specified and an email fails that particular test, will it be logged? I know it will not be added to the header, but will I be able to see that it failed in the log? Also, if so, do I need to have a specific log level set before it shows up? Dean On 8/27/07, David Barker [EMAIL PROTECTED] wrote: Correct. If you want to exclude specific tests you can negate the weights by using a filter eg. In your global.cfg -- SPAMCOP ip4rbl.spamcop.net 127.0.0.2 8 0 In your filter -- This specifies the condition that it only work for @example.com ALLRECIPS END NOTCONTAINS @example.com This is the counter weight TESTSFAILED -8 CONTAINS SPAMCOP This enables you to exclude certain unwanted scoring. David Barker VP Operations Declude Your Email security is our business 978.499.2933 x 7007 office 978.988.1311 fax [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Monday, August 27, 2007 11:01 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Process Flow Hi David, Thanks for the quick reply. So basically, unless an action is specified; either on a global, per domain, or per user basis; a test will be run and whatever weight it has will be applied to the overall weight of the email. Then, the only way that this test will have any bearing is if I have a weight trigger defined, correct? Thanks, Dean On 8/27/07, David Barker [EMAIL PROTECTED] wrote: 1. The test in the global.cfg are ALWAYS run. The $default$.junkmail is just the ACTION. WARN means to write additional information to the headers. 2. No. 3. The test will run but no specific action will take place as it will use the per domain $default$.junkmail if the email recipient is of that domain. David Barker VP Operations Declude Your Email security is our business 978.499.2933 x 7007 office 978.988.1311 fax [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Monday, August 27, 2007 10:35 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Process Flow Hi All, I have a couple of questions regarding the process flow for junkmail. 1. If I have a test defined in the global config file, but do not add it to the $default$.junkmail file, how is test handled? Is the test used and then given a WARN action by default? 2. If I have a test defined in the global config, but commented in the $default$.junkmail file, will this test be ignored? I guess the answer to question 1 may answer this one as well. 3. If I have a test defined in the global config and also in the $default$.junkmail file, but not in a per domain $default$.junkmail file, will the action in the main $default$.junkmail file be used for that domain or will the test not be used for that domain? Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Process Flow
Thanks again. I've been using your product for a number of years and could not be happier with it. Keep up the great work. Dean On 8/27/07, David Barker [EMAIL PROTECTED] wrote: Yes it would be logged the minimum setting for the logging would be LOW. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Monday, August 27, 2007 12:43 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Process Flow Hi Dave, One last question regarding this; if no action is specified and an email fails that particular test, will it be logged? I know it will not be added to the header, but will I be able to see that it failed in the log? Also, if so, do I need to have a specific log level set before it shows up? Dean On 8/27/07, David Barker [EMAIL PROTECTED] wrote: Correct. If you want to exclude specific tests you can negate the weights by using a filter eg. In your global.cfg -- SPAMCOP ip4rbl.spamcop.net 127.0.0.2 8 0 In your filter -- This specifies the condition that it only work for @example.com ALLRECIPS END NOTCONTAINS @example.com This is the counter weight TESTSFAILED -8 CONTAINS SPAMCOP This enables you to exclude certain unwanted scoring. David Barker VP Operations Declude Your Email security is our business 978.499.2933 x 7007 office 978.988.1311 fax [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Monday, August 27, 2007 11:01 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Process Flow Hi David, Thanks for the quick reply. So basically, unless an action is specified; either on a global, per domain, or per user basis; a test will be run and whatever weight it has will be applied to the overall weight of the email. Then, the only way that this test will have any bearing is if I have a weight trigger defined, correct? Thanks, Dean On 8/27/07, David Barker [EMAIL PROTECTED] wrote: 1. The test in the global.cfg are ALWAYS run. The $default$.junkmail is just the ACTION. WARN means to write additional information to the headers. 2. No. 3. The test will run but no specific action will take place as it will use the per domain $default$.junkmail if the email recipient is of that domain. David Barker VP Operations Declude Your Email security is our business 978.499.2933 x 7007 office 978.988.1311 fax [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Monday, August 27, 2007 10:35 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Process Flow Hi All, I have a couple of questions regarding the process flow for junkmail. 1. If I have a test defined in the global config file, but do not add it to the $default$.junkmail file, how is test handled? Is the test used and then given a WARN action by default? 2. If I have a test defined in the global config, but commented in the $default$.junkmail file, will this test be ignored? I guess the answer to question 1 may answer this one as well. 3. If I have a test defined in the global config and also in the $default$.junkmail file, but not in a per domain $default$.junkmail file, will the action in the main $default$.junkmail file be used for that domain or will the test not be used for that domain? Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing
Re: [Declude.JunkMail] OT - Outlook Junk Mail Folder
Thanks Andrew, I really appreciate the link. We do put notifications on all the emails stating to address to add to their safe sender lists, but the client doesn't want to budge. Dean On 6/20/07, Colbeck, Andrew [EMAIL PROTECTED] wrote: Dean, I did some Googling for you and found some likely hits, including this from Microsoft: http://office.microsoft.com/en-us/help/HA010450051033.aspx You may find a nugget of advice there for how your campaigns can avoid the filter. Typically, the advice by senders such as yourself is to plea for recipients to add your MAILFROM to their Address Book. For what it's worth, like Kevin, I turn off the Junk E-Mail feature in the corporate Outlook for my 1,000+ users. I do it via Group Policy in our Active Directory; the policies come with the Office Resource Kits. Andrew. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT - Outlook Junk Mail Folder
Thank Kevin. If only I could do that. They are a very large corporation with over 1,000 users. 8-p On 6/20/07, Kevin Bilbee [EMAIL PROTECTED] wrote: We have our users turn off the outlook junkmail filtering. It is more of a headache than it is worth. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Tuesday, June 19, 2007 6:11 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT - Outlook Junk Mail Folder Hi All, I have a client that we generate mailings for and one of their messages is for some reason being placed in the Outlook Junkmail Folder. There is very little to the email and there aren't any Buy nows or anything like that in the message. Declude and Sniffer have no problem with it either. However, Outlook keeps flagging it as junk mail. Does anyone have any ideas as to finding out why Outlook is doing this or how to get around it? Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT - Outlook Junk Mail Folder
Hi All, I have a client that we generate mailings for and one of their messages is for some reason being placed in the Outlook Junkmail Folder. There is very little to the email and there aren't any Buy nows or anything like that in the message. Declude and Sniffer have no problem with it either. However, Outlook keeps flagging it as junk mail. Does anyone have any ideas as to finding out why Outlook is doing this or how to get around it? Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Manuals
Does anyone know where the manuals went? If you click on the manuals link on the Declude support page, you download a PDF for Interceptor administration, but not Junkmail, Virus, or Hijack. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Manuals
Thanks Chris, the link works again now. Dean On 2/9/07, Chris Asaro [EMAIL PROTECTED] wrote: Dean, give me a couple of minutes I will get that squared away Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Friday, February 09, 2007 9:25 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Manuals Does anyone know where the manuals went? If you click on the manuals link on the Declude support page, you download a PDF for Interceptor administration, but not Junkmail, Virus, or Hijack. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Whitelist IP for one domain
I have a client who needs to have mail that is being sent from a particular IP to be whitelisted. I don't want to whitelist this IP for all of my other domains though. How might I go about this? I looked at the whitelistfile option, but that doesn't accept an IP. Any thoughts? Thanks, -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Whitelist IP for one domain
Hi Gary,
Thanks for the suggestion. This is actually what I ended-up doing. I
was hoping to not have to define a rule in my global config file
though for this one domain.
Oh well, hopefully this client will take my suggestions to fix their
server configuration so it doesn't fail the revdns and helobogus
tests.
Dean
On 12/20/06, Gary Steiner [EMAIL PROTECTED] wrote:
It's better to weight your whitelist rather than have an IP be fully
whitelisted. You would have an entry like this
WHITELIST-IPipfile C:\{MAILSERVER}\Declude\Filters\WHITELIST-IP.txt
x -20 0
In the file WHITELIST-IP.txt you would have something like this
123.456.78.90 Identifier or reason for whitelisting
Then create a custom $default$.junkmail file for that particular domain. In
your Declude directory create a directory with the name of the domain, and put
the custom $default$.junkmail file in that directory with the entry for the new
ipfile included.
WHITELIST-IP WARN
That should do it. You can read more about using a custom $default$.junkmail
file for a domain at
http://manuals.declude.com/ProcOnlineHelp/JunkMail_4.0.8_Per-Domain_Configuration.htm
Gary
Original Message
From: Dean Lawrence [EMAIL PROTECTED]
Sent: Wednesday, December 20, 2006 12:52 PM
To: declude.junkmail@declude.com declude.junkmail@declude.com
Subject: [Declude.JunkMail] Whitelist IP for one domain
I have a client who needs to have mail that is being sent from a
particular IP to be whitelisted. I don't want to whitelist this IP for
all of my other domains though. How might I go about this? I looked at
the whitelistfile option, but that doesn't accept an IP. Any thoughts?
Thanks,
--
__
Dean Lawrence, CIO/Partner
Internet Data Technology
888.GET.IDT1 ext. 701 * fax: 888.438.4381
http://www.idatatech.com/
Corporate Internet Development and Marketing Specialists
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
--
__
Dean Lawrence, CIO/Partner
Internet Data Technology
888.GET.IDT1 ext. 701 * fax: 888.438.4381
http://www.idatatech.com/
Corporate Internet Development and Marketing Specialists
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
Re: [Declude.JunkMail] Per User Filtering
Kim, You could just set the action to IGNORE. You cannot fully turn of scanning, but by setting the IGNORE action, all mail will pass through the system. Dean On 12/15/06, Kim Premuda [EMAIL PROTECTED] wrote: Can someone tell me what to put in the per user 'user.junkmail' file that would cause all messages to effectively be whitelisted for that user (user does not want anything tested by JunkMail)? Currently, all tests are set to 'WARN', but that's not producing the desired results. Thanks! Kim W. Premuda -- Kim W. Premuda FastWave Internet Services San Diego, CA -- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] delete mails before processing / 100% CPU / per domain config
Unfortunately not. Any test that is defined in your global.cfg file will be run against all message recieved. Your $default.junkmail file simply tells Declude what to do with the message based upon the results of those tests. Dean On 11/14/06, netsolution webmaster [EMAIL PROTECTED] wrote: Hello Thanks for your answer. So I understand it can not be done to reject invalid senders simply by using Declude/Imail? I really need another product? Also another question: I use per domain configuration for Junkmail - can it be configured so that it only performs the tests on mails that go to a domain that has been set up with a configuration folder? It seems like declude is doing the tests on all mails which uses more ressources than doing the tests only when required (as defined in per domain config) Thanks Andy Schmidt schrieb: Hi, Basically, you should put a mail gateway in front of your mail server that can integrate your list of valid email recipients and that can refuse most of your messages based on your anti-spam and anti-virus policies. One option would be to run Declude's own gateway product. However, to me a crucial element of a gateway is that it MUST reject messages DURING the SMTP envelope (e.g., after the data is received but before the receipt is confirmed with a 2xx.). This way, the gateway can refuse unwanted messages with a 5xx (or 4xx) return code and the SENDING SMTP server will inform its user. It is an absolute must in case of the occasional false positive. At least a good sender will be notified that there's a problem with their email. If a gateway first accepts messages and THEN scans them, it would need to generate bounce messages AFTER the fact. The result is a very high likelihood that your system will be spamming innocent email users whose address had been faked. I simply can't consider any gateway product that doesn't do spam/virus rejection DURING the SMTP envelope! One alternative could be to set up IIS SMTP on one of your machines, point your MX there, purchase ORF and then integrate it with Sniffer so that it can reject the vast majority of your spam. If you also bring your list of valid email recipients over to that IIS/ORF/Sniffer gateway, then you can reject invalid recipients (e.g., dictionary attacks) at that machine, instead of tying up Imail with that. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of netsolution webmaster Sent: Tuesday, November 14, 2006 09:59 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] delete mails before processing / 100% CPU With the massive amount of spam mail our server has difficulties to process everything in time, since two days we are on 100% CPU and customers have difficulties with pop/imap speed (before everything was ok). What ways are there to - refuse mails that have no valid recipient on the mailserver (not bounce, just refuse/drop) so they need no more processing? - refuse/drop mails that don't pass certain tests (eg. spamcop or sniffer)? OR what other methods could speed up things? We have older versions of declude /imail server (8.15) Thanks --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Per Domain Blacklists
Thanks Gary, I was trying to stay away from cluttering-up the global.cfg with test definitions that were not truelly global. I currently use the per-domain set-up for all of my domains and the whitelist file feature works very well there, I would just like to be able to do the same thing with a blacklist feature. Dean On 11/13/06, Gary Steiner [EMAIL PROTECTED] wrote: Well, you can have a separate $default$.junkmail file for each domain, so whatever unique tests you wanted for a domain you would just define it in your global.cfg and then list it in the $default$.junkmail for that domain. Gary Original Message From: Dean Lawrence [EMAIL PROTECTED] Sent: Sunday, November 12, 2006 6:43 PM To: declude.junkmail@declude.com declude.junkmail@declude.com Subject: [Declude.JunkMail] Per Domain Blacklists Is there a way to have per domain blacklists? I looked in the manual and saw that you can whitelist addresses like this, but not blacklist. The only references that I found for blacklisting was to put a test in the global.cfg file, but this would be for all domains and I need to try and set-up separate blacklist for each domain. Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Per Domain Blacklists
Is there a way to have per domain blacklists? I looked in the manual and saw that you can whitelist addresses like this, but not blacklist. The only references that I found for blacklisting was to put a test in the global.cfg file, but this would be for all domains and I need to try and set-up separate blacklist for each domain. Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] 2001 Virus got past declude
Kevin, Since messages that are being held are not going to be immediately moved out of that folder (like actively being processed messages), why don't you have your on-access virus scanner monitor the hold directory. This way the messages will be scanned and deleted if infected. Dean On 11/9/06, Kevin Bilbee [EMAIL PROTECTED] wrote: I was afraid of that. It would be great to be able to re-queue and only virus scan or better yet virus can all message that do not get deleted by junkmail including held messages. Then if HELD and VIRUS the hold as virus not as spam. Kevin Bilbee From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Thursday, November 09, 2006 12:57 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] 2001 Virus got past declude Kevin, It's my understanding that newer versions of Smartermail do not require the file to have the X prepended. When the user requeues the message do you drop it into the smartermail spool or the declude proc directory? In order for it to be rescanned by Declude you need to drop it into the proc folder. Also, there is no way to the best of my knowledge to say just virus process this requeued message. Maybe you can (on the requeue process) append somethign to the message that Declude Junkmail will force it to be whitelisted. THis way it wont be held again but will get processed by declude virus. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Kevin Bilbee To: JunkMail Declude Sent: Thursday, November 09, 2006 2:42 PM Subject: [Declude.JunkMail] 2001 Virus got past declude I know why the virus got past Declude but I would like to know how to stop it in the future. We have the AFTERJUNKMAIL directive on. So the message was trapped as spam and then when the user re-queued the message it was delivered to the users mailbox. Is there a way to get Declude to virus scan messages that have been re-queued and not do the spam checks? What I am unclear on is how Declude interacts with SmarterMail This is what I think happens. 1. SmarterMail 3.x receives a message and places it into the proc folder for Declude to process it 2. On HOLD action Declude moves the message to the hold folder 3. A message is re-queued into the SmarterMail spool folder with an X pre-prepended to the file name. 4. SmarterMail then delivers the message to the mailbox Does Declude ever see a message that has been placed back into the SmarterMail spool? Should I be placing these messages back into the proc folder for Declude to move them to the spool folder I would like to see Declude virus scan all message that are not deleted by JunkMail even if they are held. Kevin Bilbee --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT - Re-Deliver IMail D file
I have a message that failed to be delivered due to a server issue on the receiving end. I am now left with a D file orphaned in my spool directory, is there any way that I can re-send this after the receiving server issue is resolved? Can I make my own cooresponding Q file? Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT - Re-Deliver IMail D file
Thanks Scott, that's good to know. Dean On 9/18/06, Scott Fisher [EMAIL PROTECTED] wrote: I've forged my own Q files before to force a delivery. - Original Message - From: Dean Lawrence [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, September 18, 2006 2:32 PM Subject: [Declude.JunkMail] OT - Re-Deliver IMail D file I have a message that failed to be delivered due to a server issue on the receiving end. I am now left with a D file orphaned in my spool directory, is there any way that I can re-send this after the receiving server issue is resolved? Can I make my own cooresponding Q file? Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT - Re-Deliver IMail D file
John, From what I have read, since the sender address points back to the same server that is having the configuration file, the original message could not be returned and the D file was orphaned. Is this correct? This file was part of a larger mailing that was generated from my web server so the sender was not a true authenticated user, but is a valid account on the clients mail server. The whole mailing went out fine except the ones intended for recipients inside my clients company (go figure). Dean On 9/18/06, John T (Lists) [EMAIL PROTECTED] wrote: First, check your logs for that message. It is extremely unlikely that the message was not delivered correctly and the Q file was deleted. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Monday, September 18, 2006 12:33 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT - Re-Deliver IMail D file I have a message that failed to be delivered due to a server issue on the receiving end. I am now left with a D file orphaned in my spool directory, is there any way that I can re-send this after the receiving server issue is resolved? Can I make my own cooresponding Q file? Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Spam folder cleaning script.
That's great Matt, Thanks! On 8/24/06, Matt [EMAIL PROTECTED] wrote: Skip that last reply, I'm a terrible reader. immsgexp will traverse a directory tree without a problem: C:\IMail\immsgexp.exe -tE:\ -d7 -mSpam.mbx This will search the entire E: drive for any file called Spam.mbx and then clean it out. to 7 days worth of messages. I've been doing this for several years without issue. Matt Colbeck, Andrew wrote: Dean, I'm not sure if this is close to what you're looking for, but in addition to the forfiles command, the for command that is built into the command shell can be very handy, particularly if you're only going one directory deep. Check it out: for /? For example, you can do this to loop through the directories: For /D %i in (c:\*.*) do @echo %i Which will print out all of the directories in your c:\ drive's root. The /D part of that can change to various other letters depending on what you want to loop through. Another example; if you want to just loop through the files in a given folder you don't use any parameter there: for %i in (c:\imail\spool\d*.smd) do @echo %i Which will print out all of the files that look like messages in your IMail spool folder. You mentioned that you wanted just file or folder names or some variation, and that can be done as well. I should explain that the %i in my examples is just an arbitrary letter I used for the counting and I used it to match the output of the for /? command. You can use any letter you like, and if you use the for command in a batch file, you need to escape the % by repeating it, i.e. use %%i instead of %i, or %%X instead of %X. With the for command you can use expand that %i variable in a path/file name to the fully qualified path, the filename, the extension, or a combination of them. Use the for /? for the full examples, but here's a real-world example. In one folder, I wanted to replace all of the web log files for last month with one zip file per log file (e.g. zip up the log file into the appropriately named zip file). This was very easy for the for command: for %i in (w30607??.log) do wzzip -mex %~ni.zip %i The ~n modified the %i so that although %i became w3060701.log the parameters passed to wzzip looked like: wzzip -mex w3060701.zip w3060701.log ... And so on for all the log files found. I know that doesn't help with the spam removal part of your task, but I hope it helps you with the ability to run a script against the folders and files you want. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Thursday, August 24, 2006 1:43 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: Spam folder cleaning script. Hi All, I was wondering if anyone had a spam mailbox cleaning script that they would like to share. I am already using immsgexp.exe to clean-up all user mailboxes that have messages over 60 days old. I have just implemented moving mail to a Spam mailbox under each users account and would like to clean out any mail over 15 days old. I can run forfiles.exe to get a list of all users with Spam mailboxes, but the @path variable is including the file name not just the directory path. With immsgexp.exe you need to specify the folder path as one switch and then the mailbox with a second switch. So I need to be able to retrieve just the folder path. Which brings me back to my original question, anyone want to share? Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Spam folder cleaning script.
Andrew, Thank you for the explanation of FOR. I don't do a lot of scripting, so it is much appreciated. Dean On 8/24/06, Colbeck, Andrew [EMAIL PROTECTED] wrote: Dean, I'm not sure if this is close to what you're looking for, but in addition to the forfiles command, the for command that is built into the command shell can be very handy, particularly if you're only going one directory deep. Check it out: for /? For example, you can do this to loop through the directories: For /D %i in (c:\*.*) do @echo %i Which will print out all of the directories in your c:\ drive's root. The /D part of that can change to various other letters depending on what you want to loop through. Another example; if you want to just loop through the files in a given folder you don't use any parameter there: for %i in (c:\imail\spool\d*.smd) do @echo %i Which will print out all of the files that look like messages in your IMail spool folder. You mentioned that you wanted just file or folder names or some variation, and that can be done as well. I should explain that the %i in my examples is just an arbitrary letter I used for the counting and I used it to match the output of the for /? command. You can use any letter you like, and if you use the for command in a batch file, you need to escape the % by repeating it, i.e. use %%i instead of %i, or %%X instead of %X. With the for command you can use expand that %i variable in a path/file name to the fully qualified path, the filename, the extension, or a combination of them. Use the for /? for the full examples, but here's a real-world example. In one folder, I wanted to replace all of the web log files for last month with one zip file per log file (e.g. zip up the log file into the appropriately named zip file). This was very easy for the for command: for %i in (w30607??.log) do wzzip -mex %~ni.zip %i The ~n modified the %i so that although %i became w3060701.log the parameters passed to wzzip looked like: wzzip -mex w3060701.zip w3060701.log ... And so on for all the log files found. I know that doesn't help with the spam removal part of your task, but I hope it helps you with the ability to run a script against the folders and files you want. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Thursday, August 24, 2006 1:43 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: Spam folder cleaning script. Hi All, I was wondering if anyone had a spam mailbox cleaning script that they would like to share. I am already using immsgexp.exe to clean-up all user mailboxes that have messages over 60 days old. I have just implemented moving mail to a Spam mailbox under each users account and would like to clean out any mail over 15 days old. I can run forfiles.exe to get a list of all users with Spam mailboxes, but the @path variable is including the file name not just the directory path. With immsgexp.exe you need to specify the folder path as one switch and then the mailbox with a second switch. So I need to be able to retrieve just the folder path. Which brings me back to my original question, anyone want to share? Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Warning -- August Security Hotfix KB920958 is suspect
Andy, Have you heard anything about Windows 2003 Server or is it limited to 2000 Server and Pro? Thanks, Dean On 8/24/06, Andy Schmidt [EMAIL PROTECTED] wrote: Hi, There are now reports from at least 8 customers in the US and UK that after Hotfix KB920958 numerous Windows 2000 Server and Pro systems are garbling certain new files. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT: Spam folder cleaning script.
Hi All, I was wondering if anyone had a spam mailbox cleaning script that they would like to share. I am already using immsgexp.exe to clean-up all user mailboxes that have messages over 60 days old. I have just implemented moving mail to a Spam mailbox under each users account and would like to clean out any mail over 15 days old. I can run forfiles.exe to get a list of all users with Spam mailboxes, but the @path variable is including the file name not just the directory path. With immsgexp.exe you need to specify the folder path as one switch and then the mailbox with a second switch. So I need to be able to retrieve just the folder path. Which brings me back to my original question, anyone want to share? Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Warning -- August Security Hotfix KB920958 is suspect
Thanks Andy, I appreciate the update. Dean On 8/24/06, Andy Schmidt [EMAIL PROTECTED] wrote: Hi Dean, So far I have neither experienced not heard from anyone else that Win 2003 is effected. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Thursday, August 24, 2006 04:33 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] OT: Warning -- August Security Hotfix KB920958 is suspect Andy, Have you heard anything about Windows 2003 Server or is it limited to 2000 Server and Pro? Thanks, Dean On 8/24/06, Andy Schmidt [EMAIL PROTECTED] wrote: Hi, There are now reports from at least 8 customers in the US and UK that after Hotfix KB920958 numerous Windows 2000 Server and Pro systems are garbling certain new files. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] SPF Hard vs Soft Fail
Darin, I don't believe that is correct. The SPFPASS will not be trigged on a soft fail, only if an email actually matches the SPF record, as the SPFFAIL will only be trigged if the email explicitly fails the SPF test. The UNKNOWN will be returned on a soft fail or no SPF record present. So you could use something like this in your global config. SPFFAIL spffailx 2 0 SPFPASS spfpassx -2 0 SPFUNKNOWN spf unknown x 0 0 Dean On 8/21/06, Darin Cox [EMAIL PROTECTED] wrote: Nope. Just Pass (Pass or Soft Fail), Fail (Hard Fail), or Unknown (no SPF record). Darin. - Original Message - From: David Dodell [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Sunday, August 20, 2006 11:01 PM Subject: [Declude.JunkMail] SPF Hard vs Soft Fail I couldn't find it in the Declude docs, but is there a test for SPF Hard vs Soft Fail? David --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Imail
Hi Mark, You could always modify the web templates so that they never see the link to the auto-responder page. I do this for other features that I don't want users to access. Hope this helps, Dean On 7/20/06, Mark Smith [EMAIL PROTECTED] wrote: I know this belongs on the IMAIL forum but I'm not subscribed there -- apologies in advance. Does anyone know of a way to globally disable the information manager so I can prevent users from setting up auto-responders? Thx --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Help with WinZip command line
Hi John, Actually, it came with the NT 4 and 2000 Server Resource kits. It only started to be include with the system in 2003. Here's site where you can get the files. http://www.dynawell.com/support/Reskit/win2k.asp Forfiles works great in that it transverses all my client folders, finds the unzipped logs based upon their date and then zips them using the original file name. The second command I use does the same thing, but deletes the unzipped copy of the files that were just zipped. Dean On 4/19/06, John T (Lists) [EMAIL PROTECTED] wrote: Only comes on Windows Server 2003 SP1 or above. Tried running it on Windows Server 2000 and it errored saying target system must be running Windows XP or above. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, April 19, 2006 4:28 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] OT: Help with WinZip command line To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] OT: Help with WinZip command line John, I would suggest taking a second look at Dean's reply. The forfiles command acts on the date of the file and not the time stamp, so therefore you won't be having issues with timestamps. It also has the ability to go through an entire directory tree and use wildcards to find the files, and then it passes the file names in to the chained app (WinZip command line) for execution. This is about as simple as it gets. You could do the entire task in one line of code. The only caveat is that I am not sure whether or not Windows 2000 comes with forfiles, but I'm sure that you could always copy the executable over from Windows 2003 if needed. Matt John T (Lists) wrote: What is defining %%f? John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Wednesday, April 19, 2006 3:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] OT: Help with WinZip command line Hi John, The FOR/DO will iterate through the directory listing using ex*.log and then perform a WINZIP for each item. The /R makes it recursive (meaning, including subfolders) - which is what you want. f is one item in the directory list (the path to one log file at a time). ~ modifies an item from the directory list, specifically: ~dpn takes only the drive, path and filename (leave out the extension) So: %%~dpnF.zip means, take the directory item %%F, put use only the drive:/Path/Filename and append .zip. In other words the Winzip command will look like that WINZIP -m -ex -Td01 c:\Path\exDDMMYY.log c:\Path\exDDMMYY.zip. for each of youu log files in all of your subfolders. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Wednesday, April 19, 2006 06:09 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] OT: Help with WinZip command line I just use the winzip command line tool every day to turn the 1 day old log file into a zip file by the SAME name in the SAME location. This way, you can simply move anything *.zip to a different drive, while *.log are current log files. Here is the content of my Compress2DayOldLogs.cmd file: C: CD C:\WINNT\system32\LogFiles\ FOR /R %%f in (ex*.log) do C:\Program Files\WinZip\WZzip.exe -m -ex -Td01 %%~dpnf.zip %%f OK, can some one please explain the logic of this line. This appears to be what I need to do. My understanding is that it is only calling the winzip command to a specific file name. John T eServices For You Seek, and ye shall find! --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail
Re: [Declude.JunkMail] OT: Help with WinZip command line
John, I run the following 2 commands on my daily IIS log files. forfiles /p c:\clients /s /d -3 /m ex*.log /c cmd /c wzzip @fname.zip @file forfiles /p c:\clients /s /d -3 /m ex*.log /c cmd /c del @file I keep each of my clients log files underneath their own client directory so I use forfiles to identify the log files and zips anything that is older than 3 day (so that I can review if something happened over the weekend). I then run the same command, but using delete instead of wzzip. Both of these commands are in a simple bat file that I call from windows scheduler. Hope it helps, Dean On 4/17/06, John T (Lists) [EMAIL PROTECTED] wrote: I am trying to create a batch file that will zip up a weeks worth of logsand then move that zip file. The problem I am having is that I want to zip the previous 7 days, butsometimes the last log is time stamped say 04/16/06 11:59 PM and sometimessay 04/17/06 12:00 AM. Because of that, if I run the batch file on 04/17/06, it may or may not include the log file for 04/16/06 depending on the finaltime stamp.Other than stopping services just before midnight and then restarting, whatis the best way to always ensure that I am processing the correct day's files?John TeServices For YouSeek, and ye shall find!---This E-mail came from the Declude.JunkMail mailing list.Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail.The archives can be foundat http://www.mail-archive.com. -- __Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists
Re: [Declude.JunkMail] SPAMHEADERS question - more confusion
, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list.To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.The archives can be found at http://www.mail-archive.com.---This E-mail came from the Declude.JunkMail mailing list.Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.The archives can be foundat http://www.mail-archive.com.-- __ Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381http://www.idatatech.com/Corporate Internet Development and Marketing Specialists
[Declude.JunkMail] Hijack Question
Hi All, I've run Junkmail and EVA Pro products for the past couple of years, but not Hijack. I'm a little confused with the docs though and just want to make sure that I am reading them correctly. With Hijack, there is no per domain and per user configuration, correct? The only way to opt-out someone from being affected by it is by whitelisting their IP, right? If that is the case, I have 2 questions: First, what thresholds are most of you using, that causes minimal screaming phone calls from client? 8-) Secondly, how are you handling non-fixed IP users that may send large (over the thresholds), but not absorbent amounts of mail? Thanks, Dean-- __Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/Corporate Internet Development and Marketing Specialists
Re: [Declude.JunkMail] Hijack Question
Hi Nick, Thanks for your input. I didn't see anything related to ALLOWADDR in the manual, are there other commands available? Thanks, Dean On 4/5/06, Nick Hayer [EMAIL PROTECTED] wrote: Hi Dean -Dean Lawrence wrote: First, what thresholds are most of you using, that causes minimal screaming phone calls from client? 8-)RELAYTHRESHOLD11020RELAYTHRESHOLD23040 Secondly, how are you handling non-fixed IP users that may send large (over the thresholds), but not absorbent amounts of mail? ALLOWADDR[EMAIL PROTECTED]-Nick---This E-mail came from the Declude.JunkMail mailing list.Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail.The archives can be foundat http://www.mail-archive.com. -- __Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists
Re: [Declude.JunkMail] Hijack Question
Thanks Luis, I should know to check the release notes for these little tidbits that have not made it into the manual. Dean On 4/5/06, Panda Consulting S.A. Luis Alberto Arango [EMAIL PROTECTED] wrote: Release notes don't show any other commandsLuis Arango From: [EMAIL PROTECTED][mailto:[EMAIL PROTECTED]] On Behalf Of Panda Consulting S.A. Luis Alberto Arango Sent: Miércoles, 05 de Abril de 2006 04:48 p.m. To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Hijack Question Unfortunately it is not in the manual. Too bad.. but it is in therelease notes http://www.declude.com/Articles.asp?ID=122 1.69 [Beta, 16 Apr 2003] ADDED ALLOWADDR option, to allow up to 20 E-mail addresses to sendunlimited E-mail. Panda Consulting S.A. Luis Alberto Arango E. From: [EMAIL PROTECTED][mailto: [EMAIL PROTECTED]] On Behalf Of Dean Lawrence Sent: Miércoles, 05 de Abril de 2006 12:57 p.m. To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hijack Question Hi Nick, Thanks for your input. I didn't see anything related toALLOWADDR in the manual, are there other commands available? Thanks, Dean On 4/5/06, Nick Hayer [EMAIL PROTECTED] wrote: Hi Dean - Dean Lawrence wrote: First, what thresholds are most of you using, thatcauses minimal screaming phone calls from client? 8-) RELAYTHRESHOLD11020 RELAYTHRESHOLD23040 Secondly, how are you handling non-fixed IP users that may send large (over the thresholds), but not absorbent amountsof mail? ALLOWADDR[EMAIL PROTECTED] -Nick --- This E-mail came from the Declude.JunkMail mailinglist.To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.The archivescan be found at http://www.mail-archive.com . -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists__[Email scanned for viruses] [Email escaneado contra virus]---This E-mail came from the Declude.JunkMail mailing list.Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.The archives can be foundat http://www.mail-archive.com.-- __ Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381http://www.idatatech.com/Corporate Internet Development and Marketing Specialists
[Declude.JunkMail] OT - Looking for a file browser
Hi All, I just had a RAID go down and when I rebuilt it, some of the files are jumbled. Primarily some html files actually have portions of jibberish in them. Does anyone know of a file browser utility that would be something like Windows Explorer, that would have a directory tree down the left hand side and then in the right pane you would see a preview of the contents of the file when you select it from the tree. I'm not talking about rendering the content, just showing the raw contents. Thanks, and sorry for the OT post. Dean-- __Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/Corporate Internet Development and Marketing Specialists
Re: Re[2]: [Declude.JunkMail] spf breaks email forwarding -
Couldn't you get around this whole issue by just adding the forwarding server to the SPF record? Dean On 3/5/06, Sanford Whiteman [EMAIL PROTECTED] wrote: Perfectly legit email - my spf recs are perfect etc.No,it's*not*legit!Domainowners set SPF policies that dictate legitimacy.Thisistheirright.SMTPserverowners respect SPFpolicies. This is my obligation. If Adelphia sets a strict SPF policy,andSurfGlobal respects it, so what? Don't assume that just because a userthinkstheirmailshouldgothrough,thatthemail looksuncontroversial, that the user is right.Ifadomainownersetsa policy that says, Mail with an envelopesender of @ example.com must only come from these servers, sure, maybethatpolicywillprove unworkable later on. Maybe they didn't thinkenoughabout server-level redirection (unlikely, since Adelphia isn't exactlyatinycompany).Maybethey'll change their policies onceusersstartgettingtheirmail rejected (possible, with sufficientoutcry).Butthis all isn't your problem. If you're originating mail thatfails the domain owner's policy, what's the big surprise that itgets bounced? I sure as heck would hope that it got bounced, if I werethedomainowner!Myusersdon'thavetherighttohave this restrictioncompletelyignored,though they may rightly dispute theresultant rejections.YourMTAbreaks the policy with its built-in forwarding function, soifyoudon'twanttochangeyourforwardingfunctionality, put togetheranice helpfile on your forwarding page (just like the kindofthingyoumay have put together to inform people that they can'tforwardtoAOL)thatwarns them that the forwarded messages may be bouncedback to the senders if the senders have restrictive policies.It shouldn't be difficult to articulate in userspeak: If some of yourfriends or associates' ISPs allow them to send mail only _directly_ to otheraddresses,you won't be able to 'relay' or 'zig-zag' that mailthroughyourMadRiverAccessaccounttothe final destination.Restrictionslikethisare placed by your friend's ISP or employer, notbyMRA! We'd be very happy to forward the mail, but your friendsaren't allowed to use this service.Recommendthatthey keep a copy on your server as a fallback againstsuchsituations(agingtheseout,ofcourse, if it's otherwise a globalforward).*Let* the SPF failures keep getting bounced back tothesenders.That's the only way anyone is going to be made aware ofthe possible problem with their SPF policy.But if you do want to change your forwarding policy, it wouldn't be as difficultasimplementing SRS or any of that. You could write a veryeasyscript to change the envelope sender to the local user. It wouldactlikeaclient-side FW: in that respect. The bounces may stay on yourserver,whichisn'tfull service. But it gets the job done.Well-documented,thiswouldbeaperfectlyreasonable option forusers.I have never, not once, ever, had any issues rejecting on SPF. I catch thousandsofmessagesaday.Thereare no false positives. Therecannot be, unless your SPF library has bugs.--SandySanford Whiteman, Chief Technologist Broadleaf Systems, a division ofCypress Integrated Systems, Inc.e-mail: [EMAIL PROTECTED]SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ ---This E-mail came from the Declude.JunkMail mailing list.Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail .The archives can be foundat http://www.mail-archive.com.-- __Dean Lawrence, CIO/Partner Internet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381http://www.idatatech.com/Corporate Internet Development and Marketing Specialists
Re: [Declude.JunkMail] Sniffer in Persistent Mode using Windows Resource Kit Tools
Markus, You still point to the executable in your global config file, but since sniffer is running in persistant mode, it doesn't automatically launch a new instance. Dean On 1/18/06, Markus Gufler [EMAIL PROTECTED] wrote: So for no problem, but how we tell Declude or DecludeProc that he shouldconnect to the service instead of executing the exe? Markus -Original Message- From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Panda Consulting S.A. Luis Alberto Arango Sent: Wednesday, January 18, 2006 1:15 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Sniffer in Persistent Mode using Windows Resource Kit Tools Here is another method to install sniffer in persistent mode. I just want to share it with you and others out there. I hope it is useful. I am not sure if there is information about how to install persistent mode using the windows resource kit tools in this list. So I decided to post it just in case. I have tested for a week and it works fine for me under Windows 2003 I switched to it, since RunSvcExe started to show some errors in my event viewer ==Sniffer in Persistent Mode Using Windows Resource Kit Tools== 1. Create a directory in C: called for example reskit c:\reskit 2. Place the following windows NT/2000/2003 windows resource kit files (they are free). Download the kit from microsoft.com instsrv.exe srvany.exe 3. Run the following command line c:\reskit\instsrv.exe Declude Sniffer c:\reskit\Srvany.exe that will set a service under the nameDeclude Sniffer 4. Open your registry and look for the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Declude Sniffer 5. Then add a key and name it Parameters 6. Next Add a Value and type this information Value Name:Application Data Type: REG_SZ (String) String: [full path of your sniffer installation]\snfrv2r3.exe xnk05x5vmipeaof7 persistent Note for licensed users: replace snfrv2re.exe with your licenced sniffer application name and xnk05x5vmipeaof7 with the licenced code. 7. In your Services Manager locate the service named Declude Sniffer and start it. 8. Set the Startup Type to Automatic. You are set to go. TO REMOVE THE SERVICE--- if you want to remove the service just type the following command line c:\reskit\instsrv.exe Declude Sniffer REMOVE -Luis Arango __ [Email scanned for viruses] [Email escaneado contra virus] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list.To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.The archives can be found at http://www.mail-archive.com.---[This E-mail was scanned for viruses by Declude EVA www.declude.com]---This E-mail came from the Declude.JunkMail mailing list.Tounsubscribe, just send an E-mail to [EMAIL PROTECTED] , andtype unsubscribe Declude.JunkMail.The archives can be foundat http://www.mail-archive.com.-- __ Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381http://www.idatatech.com/Corporate Internet Development and Marketing Specialists
Re: [Declude.JunkMail] Whitelisting email address
Hi Brian, Yes, this can be done with the Pro version. You can have per-user configurations. You can't not have Declude scan the mail, but you can set this individual's configuration to ignore all test results and deliver the mail. As far as I know, this shouldn't have any affect on other recipients of the email. Dean On 1/17/06, Brian [EMAIL PROTECTED] wrote: I have a customer who wants to receive all emails without having decludecheck them for spam.My question, is can this be done? And then can it be done so that if a message comes in and it is a messagethat contains their email address and several other email address on ourdomain, that it can only be sent to their address prior to the spam checks? I hope this makes sense.Thanks in advance,Brian T.---[This E-mail was scanned for viruses by Declude EVA www.declude.com]---This E-mail came from the Declude.JunkMail mailing list.Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail.The archives can be found at http://www.mail-archive.com.-- __Dean Lawrence, CIO/PartnerInternet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381http://www.idatatech.com/Corporate Internet Development and Marketing Specialists
Re: [Declude.JunkMail] WAY OT: COVAD VOIP
Dave, My partner and I are using a similar setup, I'm in PA and he's in FL. We use www.gotvmail.com. You get an toll free number with multiple mailboxes which will forward to any phone. It has automated attendent and has the option of attaching the voice message to an email as an audio clip. Our fax goes through it as well and comes to us attached to an email as a pdf. We have been very happy with it. Dean On 12/13/05, Dave Beckstrom [EMAIL PROTECTED] wrote: Hi Guys,I have a T-1 in my house and I work from a home office in Minnesota.I havea sales person in New Mexico. Ideally, I'd like a VOIP service where when someone called me they would geta message like press 1 for sales, press 2 for Dave. The idea being that itwould route the call either to her or to me.We would need voicemail and caller ID too.Does Vonage provide these kinds of services and if not does anyone haveanother service they might recommend?I want to give callers the impressionthat we are a much larger company then we are. Thanks! -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED]] On Behalf Of Evans Martin Sent: Monday, December 12, 2005 5:57 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] WAY OT: COVAD VOIP I have been using Vonage at home and love it.I had tried Lingo before Vonage and HATED it, although I think most of the problems were due to the D-Link hardware that they supplied. I have had some experience with Linux based PBX systems and have found them to be much more cost effective than hardware PBXs.This along with VoIP really has the possibility of cutting quite a bit of cost around the office. Evans Martin --- EVANS MARTIN[EMAIL PROTECTED] HOSTING:http://www.martek.net PROGRAMMING:http://www.martekware.com iPlus Info Browser - IPB's IMail Migration Tool, password browser, reporting suite make IPlus Info Browser something no IMail administrator should be without.http://www.martek.net/Default.aspx?tabid=96 -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED]] On Behalf Of Marc Catuogno Sent: Monday, December 12, 2005 11:35 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] WAY OT: COVAD VOIP I have been considering switching many of our office from POTS lines to COVAD voice over IP.Since this is such a diverse and well informed group, I was wonder if anyone has any experience with them or suggestions as to alternate VOIP providers. Off list replies are welcomed. Thanks - Marc --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list.To unsubscribe, just send an E-mail to [EMAIL PROTECTED] , and type unsubscribe Declude.JunkMail.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list.To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] ---[This E-mail scanned for viruses by Declude Virus]---[This E-mail was scanned for viruses by Declude EVA www.declude.com]---This E-mail came from the Declude.JunkMail mailing list.Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail.The archives can be found at http://www.mail-archive.com.-- __Dean Lawrence, CIO/PartnerInternet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381http://www.idatatech.com/Corporate Internet Development and Marketing Specialists
Re: [Declude.JunkMail] is it ready?
Darin, are you sure? In their documentation they explicitly state Windows only. Firefox 1.0.6 for Microsoft Windows Also, from what I read, you are going to have to use a singe ip for all webmail vs. the currentwebmail sharing the ip of each domain. Boy, this is going to be a juggling act to get all my domain users to change where they access their mail from. Dean On 11/29/05, Darin Cox [EMAIL PROTECTED] wrote: Regarding Mac, Ipswitch does have support for Firefox on Mac.Darin.- Original Message - From: Matt [EMAIL PROTECTED]To: Declude.JunkMail@declude.comSent: Tuesday, November 29, 2005 1:31 PM Subject: Re: [Declude.JunkMail] is it ready?Regardless of any word, anyone that jumps on board a totally new releaseright after it is made available is asking for trouble.I have seenseveral instances over the years where Declude had issues with minor changes made in IMail.Some of these things didn't rear their headsuntil weeks or even months after the release as not everyone payssufficient enough attention to catch some of the issues that occurred.It is always best to wait. Another note on IMail 2006.While they are making huge strides with thenew Web mail client, they reportedly currently lack sufficient supportfor almost all Mac Web clients and therefore anyone with Mac users will probably want to wait until patches are made before even attempting theupgrade.While many of us already realize this will be the case, I canalmost certainly assure you that there will be an outcry on the IMail list after some time passes where admins are complaining about the lackof full Mac support.IMail knows about the deficiency, but it appearsthat their plans are to release with it being Mac deficient and then subsequently go back and fix the incompatibilities.Maybe they havechanged their minds?I still wouldn't touch it for at least a month.MattRobert Shubert wrote:So now I guess the big question is if Declude 3.0.5.20 is compatible withand ready for Imail 2006. Is there any official word on support? Robert---[This E-mail was scanned for viruses by Declude EVA www.declude.com]---This E-mail came from the Declude.JunkMail mailing list.Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.The archives can be foundat http://www.mail-archive.com.---[This E-mail was scanned for viruses by Declude EVA www.declude.com]---This E-mail came from the Declude.JunkMail mailing list.Tounsubscribe, just send an E-mail to [EMAIL PROTECTED] , andtype unsubscribe Declude.JunkMail.The archives can be foundat http://www.mail-archive.com.---[This E-mail was scanned for viruses by Declude EVA www.declude.com]---This E-mail came from the Declude.JunkMail mailing list.Tounsubscribe, just send an E-mail to [EMAIL PROTECTED] , andtype unsubscribe Declude.JunkMail.The archives can be foundat http://www.mail-archive.com.-- __ Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381http://www.idatatech.com/Corporate Internet Development and Marketing Specialists
Re: [Declude.JunkMail] Global.cfg lines for SPF
Kevin, The SPFFAIL test states in the manual. This test will be triggered if an E-mail fails SPFNote that it will not be triggered for E-mail that has other problems (no SPF record, unknown results from the SPF record, etc.).So any E-mail failing the SPFFAIL test is E-mail that is not authorized per the administrator of the domain the E-mail is being sent from. So if you do neither SPFFAIL or SPFPASS are triggered, you have essentially received an SPFUNKNOWN response. Dean On 11/21/05, Kevin Bilbee [EMAIL PROTECTED] wrote: As far as I know declude only supports SPFFAIL and SPFPASS.Please direct me to the release notes/documentation if I am wrong. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]]On Behalf Of David Barker Sent: Monday, November 21, 2005 1:26 PM To: Declude.JunkMail@declude.com Subject: RE: [ Declude.JunkMail] Global.cfg lines for SPF This is the correct syntax. SPFFAIL spf failx 0 0 SPFPASS spf passx 0 0 SPFUNKNOWNspf unknown x 0 0 David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Brad Morgan Sent: Monday, November 21, 2005 4:00 PM To: Declude.JunkMail@declude.com Cc: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Global.cfg lines for SPF I use: SPFPASS spfpass x 0 0 SPFUNKNOWN spfunknown x 0 0 SPFFAIL spffail x 50 0Set 1: SPFFAIL spf fail x 9 0 SPFPASS spf pass x 0 0 Thanks for the quick responses. I did have the correct pair of lines in my global.cfg file but I have received messages over the weekend which Imail's SPF check marked as SPFFAIL but Declude did not. The messages were what F-Prot is now calling W32/[EMAIL PROTECTED] and appear to be from my own domain. Since I have an SPF record, they should have failed the Declude check but they did not. As a result the first few that arrived before F-Prot updated their databases and were delivered to my users. I'm aware of at least one user who attempted to open the zip file. Is this a bug in 2.0.6.16? Is it fixed in 3.0.5.20? Brad Morgan IT Manager Horizon Interactive Inc. --- This E-mail came from the Declude.JunkMail mailing list.To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail .The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list.To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.The archives can be found at http://www.mail-archive.com . --- [This E-mail scanned for viruses by Declude Virus]---[This E-mail scanned for viruses by Declude Virus]---This E-mail came from the Declude.JunkMail mailing list.Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail.The archives can be foundat http://www.mail-archive.com.-- __Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/Corporate Internet Development and Marketing Specialists
[Declude.JunkMail] Excluding domains form tests
I thought that I had this working properly, but now I'm not too sure. My setup is to by default not to have mail scanned by Junkmail and to only scan domains that I have set-up per-domain rules. All of my tests are defined in my global.cfg file and all test actions in my master $default$.junkmail are commented out. Then in in each domain directory, I have a separate $default$.junkmail mail which defines the action for each individual domain. What I am seeing in my logs though, is that every message that hits my Imail server (8.21) is being tested. The only difference from the per-domain emails is that the action for all of the tests is IGNORE. Other than whitelisting all of my other domains, is there a way to save on processing by not having these message evaluated? I am running Junkmail 3.05.18. Thanks, Dean-- __Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/Corporate Internet Development and Marketing Specialists
Re: [Declude.JunkMail] Excluding domains form tests
Thanks David. That is what I figured was happening. On 11/8/05, David Franco-Rocha [ Declude ] [EMAIL PROTECTED] wrote: Dean, There is currently no way to exclude emails from being scanned by Declude. All emails are checked; only the actions taken can vary by domain. We may provide finer tuning of that as a future enhancement. David Franco-Rocha Declude Technical / Engineering - Original Message - From: Dean Lawrence To: declude.junkmail@declude.com Sent: Tuesday, November 08, 2005 9:04 AM Subject: [Declude.JunkMail] Excluding domains form tests I thought that I had this working properly, but now I'm not too sure. My setup is to by default not to have mail scanned by Junkmail and to only scan domains that I have set-up per-domain rules. All of my tests are defined in my global.cfg file and all test actions in my master $default$.junkmail are commented out. Then in in each domain directory, I have a separate $default$.junkmail mail which defines the action for each individual domain. What I am seeing in my logs though, is that every message that hits my Imail server (8.21) is being tested. The only difference from the per-domain emails is that the action for all of the tests is IGNORE. Other than whitelisting all of my other domains, is there a way to save on processing by not having these message evaluated? I am running Junkmail 3.05.18. Thanks, Dean-- __Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/Corporate Internet Development and Marketing Specialists -- __Dean Lawrence, CIO/Partner Internet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381http://www.idatatech.com/Corporate Internet Development and Marketing Specialists
[Declude.JunkMail] Odd X-Header Behaviour
Hi All, I just took the plunge and upgraded from 2.06 to 3.05.18 over the weekend. Everything is running fine, but I am seeing some odd behaviour with outgoing X-Headers. I am using pretty much the default header configuration. #--INCOMING--- XINHEADERX-Declude-Note: Scanned by Declude %VERSION% for spam. http://www.declude.com/x-note.htm XINHEADER X-Declude-Scan: Incoming Score [%WEIGHT%] at %TIME% on %DATE% XINHEADER X-Declude-Fail: %TESTSFAILEDWITHWEIGHTS%#XINHEADERX-Country-Chain: %COUNTRYCHAIN%#XINHEADERX-Declude-Code: %HEADERCODE% #XINHEADER X-Declude-Recipcount: %NRECIPS% #--OUTBOUND or GATEWAY--- XOUTHEADERX-Declude-Note: Scanned by Declude %VERSION% for spam. http://www.declude.com/x-note.htm XOUTHEADERX-Declude-Scan: Score [%WEIGHT%] at %TIME% on %DATE% XOUTHEADERX-Declude-Fail: %TESTSFAILEDWITHWEIGHTS%#XOUTHEADERX-Country-Chain: %COUNTRYCHAIN%#XOUTHEADERX-Declude-Code: %HEADERCODE% #XOUTHEADER X-Declude-Recipcount: %NRECIPS%#XOUTHEADEROrganization: Name of Organization Here XSENDERONXSPOOLNAMEON The incoming X-Headers are working fine. Here is a sample from one of my emails. X-Declude-Sender: [EMAIL PROTECTED] [64.237.107.65]X-Declude-Spoolname: Dbc4901af0620.smdX-Declude-Note: Scanned by Declude 3.0.5.18 for spam. http://www.declude.com/x-note.htmX-Declude-Scan: Incoming Score [-3] at 21:30:36 on 06 Nov 2005X-Declude-Fail: None However the outgoing X-Headers don't display like they should. Here is another example. X-Declude-Sender: [EMAIL PROTECTED] [64.237.107.91]X-Note: This E-mail was scanned by Declude JunkMail ( www.declude.com) for spam.X-Spam-Tests-Failed: None [-3]X-Note: Queue ID D83f601b70d30.smd.X-Note: This E-mail was sent from pop.medhealthjobs.com ([ 64.237.107.91]). What is odd is that the format of outgoing X-Headers is similar to what I had in my old global.cfg file. which is this: XINHEADERX-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.XINHEADERX-Spam-Tests-Failed: %TESTSFAILED% [%WEIGHT%]XOUTHEADERX-Spam-Tests-Failed: %TESTSFAILED% [%WEIGHT%] #XINHEADERX-Country-Chain: %COUNTRYCHAIN%XOUTHEADERX-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.XSENDERONXSPOOLNAMEOFFXINHEADERX-Note: Queue ID %QUEUENAME%. XINHEADERX-Note: This E-mail was sent from %REVDNS% ([%REMOTEIP%]).#XOUTHEADEROrganization: Your Name Here This file is still in my declude directory, but renamed to copy of global.cfg. I have rebooted the machine since I did the upgrade, so nothing can be left in memory. Any thoughts? I am running Imail 8.21 on a Windows 2003 system. Thanks, Dean-- __Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists
Re: [Declude.JunkMail] OT: Mailing software
Markus, I send a number of mailing lists for my clients using custom scripts, but I use BoogieBounce to deal with bad addressess http://www.boogietools.com/products/productBoogieBounce.asp . This allows me to clean their lists after every mailing. Dean On 10/21/05, Markus Gufler [EMAIL PROTECTED] wrote: Hi Spamfighters,This one I have a maybe little strange question. One of our customers (atouristic office) has collected over years email-adresses of all their customers. (I'v already checked: it was and is a clear opt-in checkbox onthe contact form)Hovewer the number of email-adresses is a little bit high and the customerhas asked us for something that can send out their newsletters and manage returning feedback and non-delivery reports in order to keep theiradresslist up-to-date.I know, it sounds like a new little bulk-mail sender, but as I can confirmthat's an opt-in list and I don't want that this customer sends out this messages over our mailserver without our knowledge, I want to ask if someoneknows some software (win32, or ASP-script-based) who can do this in a cleanway?Markus---This E-mail came from the Declude.JunkMail mailing list.Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail.The archives can be found at http://www.mail-archive.com.-- __Dean Lawrence, CIO/PartnerInternet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381http://www.idatatech.com/Corporate Internet Development and Marketing Specialists
[Declude.JunkMail] External rule not weighting properly
I added some new sniffer classification rules to my global config file, but my weighting does not seem to work for them. My config lines look like this: SNIFFER-GENERAL external060 C:\IMail\Declude\Sniffer\whmepypa.exe Authcode 5 0 SNIFFER-EXPERIMENTAL-ABSTRACT external061 C:\IMail\Declude\Sniffer\whmepypa.exe Authcode 5 0 SNIFFER-OBFUSCATION external062 C:\IMail\Declude\Sniffer\whmepypa.exe Authcode 5 0 SNIFFER-EXPERIMENTAL-RECEIVED-[IP] external063 C:\IMail\Declude\Sniffer\whmepypa.exe Authcode 5 0 SPFPASSspfpassx00 SPFFAILspffailx0 0 SPFUNKNOWNspfunknownx0 0 I'm testing the SPF features so that is why they have no weigh yet. Here is the header of an email that I received. Received: from melp-rto2.wanadoo.com [194.51.131.67] by pop.idatatech.com with ESMTP (SMTPD32-8.13) id AFD720C80116; Fri, 03 Dec 2004 00:55:35 -0500 Received: from melp-rtp4-back.wanadoo.com (melp-rtp4.wanadoo.com [192.168.226.230]) by melp-rto2.wanadoo.com (Postfix) with ESMTP id 671E1554A63 for [EMAIL PROTECTED]; Fri, 3 Dec 2004 06:53:58 +0100 (CET) Received: from melp-rtp4-front.wanadoo.com (localhost [127.0.0.1]) by melp-rtp4-back.wanadoo.com (Postfix) with ESMTP id 5CFD591871 for [EMAIL PROTECTED]; Fri, 3 Dec 2004 06:53:58 +0100 (CET) Received: by melp-rtp4-front.wanadoo.com (Postfix) id 4D02191C6F; Fri, 3 Dec 2004 06:53:58 +0100 (CET) Date: Fri, 3 Dec 2004 06:53:58 +0100 (CET) From: [EMAIL PROTECTED] (Mail Delivery System) Subject: Undelivered Mail Returned to Sender To: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary=2E2C99306E.1102053238/melp-rtp4-front.wanadoo.com Message-Id: [EMAIL PROTECTED] X-RBL-Warning: SNIFFER-EXPERIMENTAL-ABSTRACT: Message failed SNIFFER-EXPERIMENTAL-ABSTRACT: 61. X-Declude-Sender: [194.51.131.67] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SNIFFER-EXPERIMENTAL-ABSTRACT, SPFUNKNOWN [0] X-Note: This E-mail was sent from melp-rto2.wanadoo.com ([194.51.131.67]). X-RCPT-TO: [EMAIL PROTECTED] Status: U X-UIDL: 399021699 As you can see it failed these two tests, but the weight should be 5. Any thoughts on why this is not working properly? Are my rules defined incorrectly? Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] External rule not weighting properly
Scott, Thanks for you help. I was mis-reading the configuration. In the default configs the passing of NOLEGITCONTENT has a negative weight of 5 which was offsetting the results. Also, since it passed the test, it was not showing up in the headers either. Duh!! Dean __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT: Moving mail servers
I am in the process of moving my Imail server to a different machine at a different hosting facility, hence a new IP. Does anyone have any suggestions for making this a smooth transition? I have moved Imail many times before, so I am not worried about the setup. What I am looking for is suggestions as to how to handle the lag time of routers picking up the new IP. I host mail for a number of my clients, so there may be a period of time where they cannot get to their mail. I would like to minimize this. I had thought about just turning off the old server once the DNS changes have been made so that no mail would be lost in translation, but I had also thought about converting it to a store and forward server so that the mail will get delivered to the new server quicker. What do you guys think? Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Moving mail servers
Bud, The TTL is a great suggestion. Thanks, Dean On Thu, 11 Nov 2004 15:38:55 -0500, Bud Durland [EMAIL PROTECTED] wrote: Dean Lawrence wrote: I host mail for a number of my clients, so there may be a period of time where they cannot get to their mail. I would like to minimize this. I had thought about just turning off the old server once the DNS changes have been made so that no mail would be lost in translation, A few days before the move, change the TTL on the existing DNS records to something very short. That way, once you change the IP address, there's a better chance that the fresh data will go out. but I had also thought about converting it to a store and forward server so that the mail will get delivered to the new server quicker. Not a bad idea, either. -- For it's Tommy this, an' Tommy that, an' Chuck him out, the brute! But it's Saviour of 'is country when the guns begin to shoot; An' it's Tommy this, an' Tommy that, an' anything you please; An' Tommy ain't a bloomin' fool -- you bet that Tommy sees! -- Rudyard Kipling, tommy - Bud Durland, CNE Mold-Rite Plastics Network Administrator http://www.mrpcap.com - --- [This E-mail scanned for viruses by Declude Virus / Sophos AV] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Moving mail servers
Thanks Dave, That is what I was originally think of doing with the store and forward option. Dean On Thu, 11 Nov 2004 15:50:59 -0500, Dave Doherty [EMAIL PROTECTED] wrote: What Bud said, plus... You could set up a HOSTS file in C:\winnt\systrem32\drivers\etc\ with the IP address of your new server and the domain names that it services, one IP and domain name per line. Delete or rename all the customer domains from your current server. That should work as a temporary solution, which is just what you need. Sample HOSTS entries: 123.123.123.123myhost.com 123.123.123.123yourhost.org 123.123.123.123hisdomain.net etc... -Dave Doherty Skywaves, Inc. - Original Message - From: Dean Lawrence [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, November 11, 2004 2:26 PM Subject: [Declude.JunkMail] OT: Moving mail servers I am in the process of moving my Imail server to a different machine at a different hosting facility, hence a new IP. Does anyone have any suggestions for making this a smooth transition? I have moved Imail many times before, so I am not worried about the setup. What I am looking for is suggestions as to how to handle the lag time of routers picking up the new IP. I host mail for a number of my clients, so there may be a period of time where they cannot get to their mail. I would like to minimize this. I had thought about just turning off the old server once the DNS changes have been made so that no mail would be lost in translation, but I had also thought about converting it to a store and forward server so that the mail will get delivered to the new server quicker. What do you guys think? Thanks, Dean -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Moving mail servers
Great Guys!! I really appreciate all of your input. Dean --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SPF and virtual domains
Does anyone know if setting up SPF for a primary domain would affect virtual domains that shares it's IP in Imail? Will the virtual domains start to fail SPF tests because the IP that they are bound to in DNS lists only the primary domain's name in the SPF record. Will I be forced to setup SPF for all my client's virtual domains as well? I'm hoping to move into SPF gradually, not in one big shot. Thanks, Dean --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] SPF and virtual domains
Great! I figured that I would need to do it eventually, but I would rather do it in stages and not all at once. Dean On Thu, 16 Sep 2004 17:11:45 -0400, Sanford Whiteman [EMAIL PROTECTED] wrote: Does anyone know if setting up SPF for a primary domain would affect virtual domains that shares it's IP in Imail? It will not affect them--which is both good and bad. If a domain doesn't have an SPF record, it will be rejected or negatively weighted by remote servers that _require_ SPF records (don't worry about this for a while, of course). --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] email being caught and not delivered
It looks like the connection to mail.icmoa.org is the problem. There isn't any Declude headers listed in the returned mail and there are no rejection information in the header, so it doesn't look like that is the issue. It could be that mail.icmoa.org is having some issues. __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Bryan Weaver Sent: Tuesday, August 31, 2004 3:53 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] email being caught and not delivered the person attempting to send the message got this back instead: At 11:40 AM 19/8/2004 +1000, you wrote: This is the Postfix program at host valkyrie.hinet.net.au. I'm sorry to have to inform you that the message returned below could not be delivered to one or more destinations. For further assistance, please send mail to postmaster If you do so, please include this problem report. You can delete your own text from the message returned below. The Postfix program [EMAIL PROTECTED]: connect to mail.icmoa.org[216.240.94.4]: server dropped connection Reporting-MTA: dns; valkyrie.hinet.net.au Arrival-Date: Sat, 14 Aug 2004 10:40:46 +1000 (EST) Final-Recipient: rfc822; [EMAIL PROTECTED] Action: failed Status: 4.0.0 Diagnostic-Code: X-Postfix; connect to mail.icmoa.org[216.240.94.4]: server dropped connection Received: from eok1.lotteryinsider.com.au (highla11.lnk.telstra.net [165.228.239.170]) by valkyrie.hinet.net.au (Postfix) with ESMTP id A635323D68 for [EMAIL PROTECTED]; Sat, 14 Aug 2004 10:40:46 +1000 (EST) Message-Id: [EMAIL PROTECTED] X-Sender: [EMAIL PROTECTED] X-Mailer: QUALCOMM Windows Eudora Version 5.2.0.9 Date: Sat, 14 Aug 2004 10:48:09 +1000 To: [EMAIL PROTECTED] From: Ernie O' Keefe [EMAIL PROTECTED] Subject: Subscription to Lottery Insider Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Hi Adonna, Thank you for renewing your subscription to Lottery Insider's Daily News Service. Your user name and password are now operational. Your User Name is: X Your Password is: X Subscription Type: Individual Payment Method: Visa (invoice 1107 PAID). Do read your user name and password closely, as a full stop, space, numeral, or other character may be used. This information is case sensitive and needs to be entered exactly as shown above. Please record your user name and password and keep it secure since you will need it each time you access the Daily News Service. To start accessing the Daily News Service, log on to: http://www.lotteryinsider.com.au/subs.htm or http://www.lotteryinsider.com/subs.htm If you have questions at any time, or need help in any way, please don't hesitate to contact our office on 612 4871 2911 (Office hours Australian EST 8:30am to 5:30pm) or email the Editor at [EMAIL PROTECTED] Meanwhile, enjoy the Daily News. Kind Regards Tracey O'Keefe Accounts Coordinator Interplay Multimedia Pty Ltd Phone Fax 612 4871 2911 www.interplay.com.au He is attempting to send to one of our clients ([EMAIL PROTECTED]) and she says she can't recieve and he admits he is getting these bounces. Is it bouncing from our server or enroute somewhere? --- [This E-mail scanned for viruses by Advertinet Inc. Declude Virus Software ] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] help with header information
Jeffrey, Here is a reference from the Ipswitch knowledge base which references that header. http://support.ipswitch.com/kb/IM-19990628-DM03.htm. It is apparently a Unique ID Listing that is generated by the mail server. Hope this helps, Dean __Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1ext. 701 * fax: 888.438.4381http://www.idatatech.com/Corporate Internet Development and Marketing Specialists -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Jeffrey Di GregorioSent: Tuesday, August 24, 2004 7:18 PMTo: '[EMAIL PROTECTED]'Subject: [Declude.JunkMail] help with header information Can anyone tell me what this line is in the headers? X-UIDL: ZV"!;)Q"!1,T"!`GN!! I searched the archives but could not find an explanation for the X-UIDL entry. Thanks, jeffrey Jeffrey Di Gregorio CCNP MCSE Systems Administrator Pacific School of Religion [EMAIL PROTECTED] 510-849-8283
[Declude.JunkMail] Wildcard filter
Is it possible to use a wildcard format for a filter? The reason that I ask, is that I am getting a lot of junkmail which all have similar From senders, but the maildomain is different. So the sender will be some variation of the same name like, [EMAIL PROTECTED], [EMAIL PROTECTED], etc.. So, I want to create a filter that would be something like [EMAIL PROTECTED] Is this possible? If not, any suggestions as to how to stop this type of spam? Thanks, __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Wildcard filter
Thanks Scott, I think that may work. Since I have not used these filters before, I just want to clarify that I am reading it correctly. All mail not sent from domain.com will be skipped because of the END NOTENDSWITH filter and if it does match, the second filter will be evaluated and the weight of 10 being added for a positive match, correct? Dean -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Monday, August 23, 2004 11:19 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Wildcard filter What about this? MAILFROM END NOTENDSWITH @domain.com MAILFROM 10 STARTSWITH BOB I'd probably be looking to see if the Sender Remote IP number were blocked together. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 08/23/04 10:05AM Is it possible to use a wildcard format for a filter? The reason that I ask, is that I am getting a lot of junkmail which all have similar From senders, but the maildomain is different. So the sender will be some variation of the same name like, [EMAIL PROTECTED], [EMAIL PROTECTED], etc.. So, I want to create a filter that would be something like [EMAIL PROTECTED] Is this possible? If not, any suggestions as to how to stop this type of spam? Thanks, __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Wildcard filter
Great! Thanks again. Dean -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Monday, August 23, 2004 11:48 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Wildcard filter You are reading it correctly. The NOTENDSWITH was added somewhere in version 1.78. Now if good mail also starts with [EMAIL PROTECTED], you'll be catching that too. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 08/23/04 10:37AM Thanks Scott, I think that may work. Since I have not used these filters before, I just want to clarify that I am reading it correctly. All mail not sent from domain.com will be skipped because of the END NOTENDSWITH filter and if it does match, the second filter will be evaluated and the weight of 10 being added for a positive match, correct? Dean -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Monday, August 23, 2004 11:19 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Wildcard filter What about this? MAILFROM END NOTENDSWITH @domain.com MAILFROM 10 STARTSWITH BOB I'd probably be looking to see if the Sender Remote IP number were blocked together. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 08/23/04 10:05AM Is it possible to use a wildcard format for a filter? The reason that I ask, is that I am getting a lot of junkmail which all have similar From senders, but the maildomain is different. So the sender will be some variation of the same name like, [EMAIL PROTECTED], [EMAIL PROTECTED], etc.. So, I want to create a filter that would be something like [EMAIL PROTECTED] Is this possible? If not, any suggestions as to how to stop this type of spam? Thanks, __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Interim Releases
There are a number of references on this list to interim releases to Declude. How do you get the interim releases? If I run declude.exe -diag, it shows version 1.79. I downloaded the beta again from the manual page and it says the same thing. Thanks, __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Interim Releases
Thanks Dermot! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dermot Keenan Sent: Monday, August 23, 2004 2:09 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Interim Releases http://www.declude.com/version/interim/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dean Lawrence Sent: Monday, August 23, 2004 1:16 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Interim Releases There are a number of references on this list to interim releases to Declude. How do you get the interim releases? If I run declude.exe -diag, it shows version 1.79. I downloaded the beta again from the manual page and it says the same thing. Thanks, __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Wildcard filter
Hi Pete, Thanks for the suggestion. I am running Message Sniffer, so I may concider going that route as well. Dean -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Pete McNeil Sent: Monday, August 23, 2004 2:07 PM To: Dean Lawrence Subject: Re: [Declude.JunkMail] Wildcard filter On Monday, August 23, 2004, 11:05:11 AM, Dean wrote: DL Is it possible to use a wildcard format for a filter? The reason that I ask, DL is that I am getting a lot of junkmail which all have similar From DL senders, but the maildomain is different. So the sender will be some DL variation of the same name like, [EMAIL PROTECTED], [EMAIL PROTECTED], etc.. DL So, I want to create a filter that would be something like [EMAIL PROTECTED] DL Is this possible? If not, any suggestions as to how to stop this type of DL spam? If you use Message Sniffer then you can request a local black rule like this. However, I warn that this kind of rule might be very broad and could lead to false positives if it is not crafted very carefully. _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Interim Releases
Hi Scott, Thanks for the reminder. I do currently have a service contract for Declude, so it shouldn't be a problem. The main reason that I was looking for the interim release was that I was trying to use the ALLRECIPS variable for another filter and had seen a post by you stating that it didn't really work properly until the 1.79i7 release. Dean -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Monday, August 23, 2004 2:21 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Interim Releases Scott Perry would also remind that you need a paid up maintenance contract to download new versions. I believe the latest interim is 1.79i16 from July 23rd. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 08/23/04 01:09PM http://www.declude.com/version/interim/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dean Lawrence Sent: Monday, August 23, 2004 1:16 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Interim Releases There are a number of references on this list to interim releases to Declude. How do you get the interim releases? If I run declude.exe -diag, it shows version 1.79. I downloaded the beta again from the manual page and it says the same thing. Thanks, __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Interim Releases
Thanks Scott. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Monday, August 23, 2004 2:21 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Interim Releases There are a number of references on this list to interim releases to Declude. How do you get the interim releases? I guess you haven't been reading my responses. :) If I run declude.exe -diag, it shows version 1.79. I downloaded the beta again from the manual page and it says the same thing. That's correct. The short answer is don't worry about interims. For the long answer, you can search the archives and/or the readme at www.declude.com/version/interim. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] spam review
Did anyone have any problem installing Spam Review? I'm trying to install it on a Windows 2000 Server and it tells me that it needs to update files first and the system needs to reboot before setup can run. I let it update the files, manually restart the system and try to run setup again. Setup then tells me the exact same thing, that it needs to update files first. Am I missing something? Is the fact that I did not let the program restart the system have an affect? Thanks, __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Pereira Sent: Wednesday, August 18, 2004 9:33 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] spam review What would be the best way to do the below : I've solved this be marking the subject line of all hold messages with [spam %weight%] Now you can sort in spamreview by sibject line and it will show all hold messages in weighted order. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] spam review
That would be great John. Thanks, Dean -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Wednesday, August 18, 2004 12:00 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] spam review Some what known issue. What you have to do is delete a number of lines in the install ini file, those related to vb and such. I do not remember exactly, but I can find out. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Wednesday, August 18, 2004 6:50 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] spam review Did anyone have any problem installing Spam Review? I'm trying to install it on a Windows 2000 Server and it tells me that it needs to update files first and the system needs to reboot before setup can run. I let it update the files, manually restart the system and try to run setup again. Setup then tells me the exact same thing, that it needs to update files first. Am I missing something? Is the fact that I did not let the program restart the system have an affect? Thanks, __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Pereira Sent: Wednesday, August 18, 2004 9:33 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] spam review What would be the best way to do the below : I've solved this be marking the subject line of all hold messages with [spam %weight%] Now you can sort in spamreview by sibject line and it will show all hold messages in weighted order. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] spam review
Thanks John, So basically for 2000 you just removed the Bootstrap settings? I'll try running this on a sample machine to make sure it doesn't cause any issues. Dean -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Wednesday, August 18, 2004 12:53 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] spam review USE AT YOUR OWN RISK! (And watch for line wraps) I think this is what the setup.lst file needs to be for Windows Server 2003: _ [Bootstrap] SetupTitle=Install SetupText=Copying Files, please stand by. CabFile=SpamReview.CAB Spawn=Setup1.exe Uninstal=st6unst.exe TmpDir=msftqws.pdw Cabs=1 [Bootstrap Files] [EMAIL PROTECTED],$(WinSysPathSysFile),,,3/26/99 1:00:00 AM,101888,6.0.84.50 [IconGroups] Group0=Spam Review PrivateGroup0=-1 Parent0=$(Programs) [Spam Review] Icon1=SpamReview.exe Title1=Spam Review StartIn1=$(AppPath) [Setup] Title=Spam Review DefaultDir=$(ProgramFiles)\Spam Review AppExe=SpamReview.exe AppToUninstall=SpamReview.exe [Setup1 Files] [EMAIL PROTECTED],$(AppPath),,,3/21/02 2:49:00 PM,94208,1.0.0.0 [EMAIL PROTECTED],$(AppPath),,,5/18/02 7:39:11 AM,380928,1.0.0.39 ___ I think this is what the setup.lst file should be for Windows 2000 server: ___ [Bootstrap] SetupTitle=Install SetupText=Copying Files, please stand by. CabFile=SpamReview.CAB Spawn=Setup1.exe Uninstal=st6unst.exe TmpDir=msftqws.pdw Cabs=1 [Bootstrap Files] [IconGroups] Group0=Spam Review PrivateGroup0=-1 Parent0=$(Programs) [Spam Review] Icon1=SpamReview.exe Title1=Spam Review StartIn1=$(AppPath) [Setup] Title=Spam Review DefaultDir=$(ProgramFiles)\Spam Review AppExe=SpamReview.exe AppToUninstall=SpamReview.exe [Setup1 Files] [EMAIL PROTECTED],$(AppPath),,,3/21/02 2:49:00 PM,94208,1.0.0.0 [EMAIL PROTECTED],$(WinSysPath),$(DLLSelfRegister),$(Shared),1/6/99 1:18:14 AM,1057552,6.1.83.41 [EMAIL PROTECTED],$(AppPath),,,5/18/02 7:39:11 AM,380928,1.0.0.39 _ John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Wednesday, August 18, 2004 9:07 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] spam review That would be great John. Thanks, Dean -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Wednesday, August 18, 2004 12:00 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] spam review Some what known issue. What you have to do is delete a number of lines in the install ini file, those related to vb and such. I do not remember exactly, but I can find out. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Wednesday, August 18, 2004 6:50 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] spam review Did anyone have any problem installing Spam Review? I'm trying to install it on a Windows 2000 Server and it tells me that it needs to update files first and the system needs to reboot before setup can run. I let it update the files, manually restart the system and try to run setup again. Setup then tells me the exact same thing, that it needs to update files first. Am I missing something? Is the fact that I did not let the program restart the system have an affect? Thanks, __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Pereira Sent: Wednesday, August 18, 2004 9:33 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] spam review What would be the best way to do the below : I've solved this be marking the subject line of all hold messages with [spam %weight%] Now you can sort in spamreview by sibject line and it will show all hold messages in weighted order. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail
