Re: [Declude.JunkMail] Banks (and Ebay) Phising Filters
Could you post your config since the Declude page uses clamscan. What is the difference. Jeff TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 643-2023 - [EMAIL PROTECTED] Nick Hayer wrote: Hi Gary, Gary Steiner wrote: I've never run ClamAV before. Looking at www.clamav.net, I see there are several Windows ports for it. Is anyone using one of the various Windows ports for ClamAV under W2K3? If so, which one is best? no idea! But the one I use is http://www.sosdg.org/clamav-win32/ and it seems to be fine; I also use clamd instead of clamscan. [which is included] -Nick Thanks, Gary Steiner Original Message From: Bill Landry [EMAIL PROTECTED] Sent: Wednesday, February 22, 2006 12:46 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Banks (and Ebay) Phising Filters BTW, if you are running ClamAV, and want to take full advantage of it's phish catching capabilities, you might was to take a look at adding the phish signature file that Steve Basford put together (see the attached e-mail for details). I have been running them for a few weeks, and they are quite awesome. Steve periodically updates the phish signatures, as well, so check regularly for an updated file. Bill - Original Message - From: Scott Fisher [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, February 21, 2006 10:14 AM Subject: Re: [Declude.JunkMail] Banks (and Ebay) Phising Filters Aaarrgg. Good catch Bill. - Original Message - From: Bill Landry [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, February 21, 2006 12:03 PM Subject: Re: [Declude.JunkMail] Banks (and Ebay) Phising Filters - Original Message - From: Scott Fisher [EMAIL PROTECTED] You do need the Pro version to run more than one scanner. It's the best thing about Virus Pro... Also nice if you get a set of bad definitions or a scanner stops working, the other scanners will cover. With PRESCAN ON, Mcafee Virusscan catches some phish. Clamav catches most phish. Actually, you would need to have PRESCAN OFF in order to catch most phish e-mails with Declude. Otherwise, Declude Virus PRESCANs all messages and finds that most phish messages contain nothing worth scanning and thus bypasses the virus scanners. Bill --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Spam leak?
Yes I recived it also. Jeff Kratka On 1/13/2006, Dave Doherty [EMAIL PROTECTED] wrote: Ummm... Did anybody else get a piece of spam this morning with subject SPAMSPCE: that seems to have been relayed through Declude.com? -Dave Doherty Skywaves, Inc. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Alive?
Hi, Was just wondering if the list is up. I had a power outage last night and everything seems to me working. Just checking Jeff Kratka -- TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 643-2023 - [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: IMail vs. Merak
Not to get anyone bent at all but I have a second mail server running that is hMailServer www.hmailserver.com. It is open source for Windows and has been very stable. Very good support from it's forums. I am working to a few things to get my Declude system to work with it properly. Presently have ASSP (it's like Spam Assassin but easier to setup) but would really like to get my Declude set-up working with it. Just a suggestion. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 643-2023 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dan Geiser Sent: Wednesday, December 28, 2005 7:35 AM To: DECLUDE.JUNKMAIL@DECLUDE.COM Subject: [Declude.JunkMail] OT: IMail vs. Merak Hello, All, We are re-architecting our e-mail hosting and are going to be upgrading from IMail 6.06 to a new e-mail platform. We are familiar with IMail can do so we are currently evaluating Merak e-mail server to see what else is out there. Has anyone on this list done a similiar evaluation between IMail and Merak? If so, did you find any clear benefits that IMail had over Merak or vice versa? We already know that Merak is going to be a more expensive upgrade then IMail. And obviously the current version of Declude doesn't support Merak. Anything else that made the decision to stay with IMail easier for you? Thanks In Advance, Dan Geiser [EMAIL PROTECTED] --- E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: IMail vs. Merak
I'm not sure. The easiest thing to do would be to go to the site and ask in the forum. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 643-2023 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Don Brown Sent: Wednesday, December 28, 2005 3:04 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] OT: IMail vs. Merak Does it support port 587 for authentication? Wednesday, December 28, 2005, 1:44:10 PM, Jeff Kratka [EMAIL PROTECTED] wrote: JK Not to get anyone bent at all but I have a second mail server running that JK is hMailServer www.hmailserver.com. It is open source for Windows and has JK been very stable. Very good support from it's forums. I am working to a few JK things to get my Declude system to work with it properly. Presently have JK ASSP (it's like Spam Assassin but easier to setup) but would really like to JK get my Declude set-up working with it. JK Just a suggestion. JK Jeff Kratka JK JK TymeWyse Internet JK P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 JK tel: (541) 643-2023 - [EMAIL PROTECTED] JK JK -Original Message- JK From: [EMAIL PROTECTED] JK [mailto:[EMAIL PROTECTED] Behalf Of Dan Geiser JK Sent: Wednesday, December 28, 2005 7:35 AM JK To: DECLUDE.JUNKMAIL@DECLUDE.COM JK Subject: [Declude.JunkMail] OT: IMail vs. Merak JK Hello, All, JK We are re-architecting our e-mail hosting and are going to be upgrading from JK IMail 6.06 to a new e-mail platform. We are familiar with IMail can do so JK we are currently evaluating Merak e-mail server to see what else is out JK there. Has anyone on this list done a similiar evaluation between IMail and JK Merak? If so, did you find any clear benefits that IMail had over Merak or JK vice versa? JK We already know that Merak is going to be a more expensive upgrade then JK IMail. And obviously the current version of Declude doesn't support Merak. JK Anything else that made the decision to stay with IMail easier for you? JK Thanks In Advance, JK Dan Geiser JK [EMAIL PROTECTED] JK --- JK E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) JK --- JK [This E-mail was scanned for viruses by Declude EVA www.declude.com] JK --- JK This E-mail came from the Declude.JunkMail mailing list. To JK unsubscribe, just send an E-mail to [EMAIL PROTECTED], and JK type unsubscribe Declude.JunkMail. The archives can be found JK at http://www.mail-archive.com. JK --- JK [This E-mail was scanned for viruses by Declude EVA www.declude.com] JK --- JK This E-mail came from the Declude.JunkMail mailing list. To JK unsubscribe, just send an E-mail to [EMAIL PROTECTED], and JK type unsubscribe Declude.JunkMail. The archives can be found JK at http://www.mail-archive.com. Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Diag issue
I have been attempting to run the diag for declude but every time I do I received the following message C:\IMaildecludeproc -diag Invalid command line parameter: -install Install Declude -diagPrint diagnostics What am I doing wrong. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 643-2023 - [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] update to Declude 3.0.5.5
I just updated to Declude 3.0.5.5 and was wondering about a something's. Decon will not work anymore. Is there a new version for the updated version of Declude. I do have Hijack, AV and Junkmail and the consol is very useful. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 643-2023 - [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] update to Declude 3.0.5.5
Thanks all. I must have missed that post. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 643-2023 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John T (Lists) Sent: Wednesday, October 19, 2005 5:03 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] update to Declude 3.0.5.5 Hijack is working fine, what is not in use is the Declude Console, which as Randy posted is going to be reworked into a new version soon. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Wednesday, October 19, 2005 1:31 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] update to Declude 3.0.5.5 Barry has reported that Deccon is being re-done and will be released later. Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net Richmond's Internet Source since 1996! WEB HOSTING including EMAIL beginning at $29/month! DSL Starting at $39.95/month! Non-Profits - receive a 25% discount on most services! Global Web Solutions is a registered trademark of Global Web Solutions, Inc., Glen Allen, VA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Kratka Sent: Wednesday, October 19, 2005 4:06 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] update to Declude 3.0.5.5 I just updated to Declude 3.0.5.5 and was wondering about a something's. Decon will not work anymore. Is there a new version for the updated version of Declude. I do have Hijack, AV and Junkmail and the consol is very useful. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 643-2023 - [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] How they deal w/ Spammers in Russia
Oops,. bummer. Sucks to be him Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kim Premuda Sent: Monday, July 25, 2005 5:36 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] How they deal w/ Spammers in Russia http://www.mosnews.com/news/2005/07/25/spammerdead.shtml -- Kim W. Premuda FastWave Internet Services San Diego, CA -- --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Admin Web for Declude
Hello, Quite some time ago, there was mention about an Admin Web for Declude, is this available or does anyone have something to share? Thank You. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Admin Web for Declude
Mostly what I remember from some time ago was something to let the end user modify their settings. Sorry Admin Web was the incorrect wording. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Markus Gufler Sent: Friday, June 03, 2005 2:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Admin Web for Declude Quite some time ago, there was mention about an Admin Web for Declude, is this available or does anyone have something to share? Declude is so flexible and can do so much different things that it would be nearly impossible to write a clickplay-frontend. There was already a discussion. The question is: Do you want as much a possible functions to manage your email traffic with the drawback that you must know exactly what you need and what you're doing or do you want some less functions but this as easy as installing windows? Also what do you mean by admin web? Something that will write your configuration file and prevent wrong settings from your side (what's wrong?) or do you need something to let end-users choose different settings for their own mailbox? Markus --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Admin Web for Declude
That's what I thought. Sandy, are you still here? Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Friday, June 03, 2005 2:58 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Admin Web for Declude AH, User configurable actions is different. I know at one time at least Sandy had either a Demo or production running for a client. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Jeff Kratka Sent: Friday, June 03, 2005 2:38 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Admin Web for Declude Mostly what I remember from some time ago was something to let the end user modify their settings. Sorry Admin Web was the incorrect wording. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Markus Gufler Sent: Friday, June 03, 2005 2:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Admin Web for Declude Quite some time ago, there was mention about an Admin Web for Declude, is this available or does anyone have something to share? Declude is so flexible and can do so much different things that it would be nearly impossible to write a clickplay-frontend. There was already a discussion. The question is: Do you want as much a possible functions to manage your email traffic with the drawback that you must know exactly what you need and what you're doing or do you want some less functions but this as easy as installing windows? Also what do you mean by admin web? Something that will write your configuration file and prevent wrong settings from your side (what's wrong?) or do you need something to let end-users choose different settings for their own mailbox? Markus --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DNSReport and DNSStuff websites
I can say for a fact that the MRE's are better than Spam John... :) Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Tuesday, February 22, 2005 10:36 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DNSReport and DNSStuff websites Not sure about that Andy, I have heard MREs are better than Spam. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Tuesday, February 22, 2005 10:23 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DNSReport and DNSStuff websites Scott: Thank you for your capable and prompt support throughout those years. You will be missed. Best of luck in your new endeavors. PS: Sounds as if you'll have to adjust your thinking: Now the delivery of Spam may actually be a good deed G. Best Regards Andy --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problem with subject line in version 2.0
I had the same problem today while installing v2.0. All Declude functions stopped. I called them and went back to the old version and everything works perfect, just like before. I'm glad to see it wasn't just me. Jeff Kratka -- Original Message -- From: John Tolmachoff \(Lists\) [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Tue, 1 Feb 2005 17:58:06 -0800 The latest version does not work at all, nothing, zilch, zippo. This is a disgrace. Downloaded and copied into the imail directory and ran declude -diag and all I got was the declude version line and then a line saying Imail configuration then several seconds and then back to a prompt. No output what so ever. Nothing in the logs at all. FIX THIS NOW! John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, February 01, 2005 10:21 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Problem with subject line in version 2.0 The fix is in the current 2.0 download from the web site. Barry Simpson www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, February 01, 2005 11:33 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Problem with subject line in version 2.0 And the fix will be when and in what form? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, February 01, 2005 4:31 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Problem with subject line in version 2.0 There appears to be a problem in version 2.0 where Declude is seeing the first character after the word subject as the start of the subject line. The first character is a colon and followed by a space and then the actual subject line. You are correct. I'm surprised this didn't get caught during the beta. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- ** TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Outgoing mail
To prevent Declude JM from scanning outbound mail I know I can whitelist IP ranges. Can they be anywhere in the global.cfg or do they need to be at the top. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Off-Topic
Now that is just plain WRONG !! Now I can't stand Mushrooms and Badgers... !!! Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Pete McNeil Sent: Wednesday, November 24, 2004 1:52 PM To: Sean Fahey Subject: Re: [Declude.JunkMail] Off-Topic On Wednesday, November 24, 2004, 3:16:42 PM, Sean wrote: SF Speaking of SpamReview... SF I was scanning spam this afternoon, when I saw a message with the subject SF Whip It! (for a porn site), then immediately after it was It's not too SF late... - a mortgage company offer from a completely different spammer. SF Now I've got that %*# Devo song in my head and it won't go away. This will take care of that: http://www.ebaumsworld.com/badgers.html _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] habeas
Has anyone had better luck with habeas lately. I turned things off since the spammers jumped on. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Copy To
I would like to monitor both incoming and outgoing mail from 1 particular e-mail address on my domain. What would be the easiest/simplest way of doing it without the persons knowledge. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities
I'm still running v6.06 (mostly due to cost). One thing I found was moving the spool directory to a completely different location and using Kiwi for my syslog it helped alot. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jose Gosende Sent: Friday, July 16, 2004 6:57 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities Does anyone know of any vulnerabilities in iMail 6.06? Within a minute after turning on iMail's SMTP service my server becomes completely unresponsive and eventually goes down. I've also installed all of the 6.06 related patches from Ipswitch's site. Jose --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.721 / Virus Database: 477 - Release Date: 7/16/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities
Here you go... http://www.kiwisyslog.com/ Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Maze Sent: Friday, July 16, 2004 11:27 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities Hmmm.. Have a link for Kiwi? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Kratka Sent: Friday, July 16, 2004 2:16 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities I'm still running v6.06 (mostly due to cost). One thing I found was moving the spool directory to a completely different location and using Kiwi for my syslog it helped alot. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jose Gosende Sent: Friday, July 16, 2004 6:57 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities Does anyone know of any vulnerabilities in iMail 6.06? Within a minute after turning on iMail's SMTP service my server becomes completely unresponsive and eventually goes down. I've also installed all of the 6.06 related patches from Ipswitch's site. Jose --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.721 / Virus Database: 477 - Release Date: 7/16/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude is now gone.
I just moved my Imail spool directory to a different drive (which did help with performance) and now everything in my Declude directory is gone. I did not remove anything from there. What did I do wrong. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude is now gone.
Yep, all of the files in the Declude directory were gone. I was able to restore them from a back-up so it seems to work now. Sorry that I jumped the gun, but that was just to weird. It's been mostly that type of day. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Thursday, June 10, 2004 12:49 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude is now gone. I just moved my Imail spool directory to a different drive (which did help with performance) and now everything in my Declude directory is gone. I did not remove anything from there. What did I do wrong. That is odd. Are you saying that the \IMail\Declude\ directory no longer has any files in it? Declude certainly will not delete them (nor should anything else, unless of course you instruct it to). Does the \IMail\Declude\ directory still exist? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DNSstuff Website
Vacation? What's that Same here Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Matt Robertson Sent: Thursday, May 20, 2004 1:29 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] DNSstuff Website My plan B in those situations is another tech who's still on site :) want a new job? (just kidding :) I'm a 1-man shop. Works great so long as you never take a vacation or get hit by a bus. -- --- Matt Robertson, [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT - decon
Scott, I terminal serve into my Imail box often and was wondering if it is possible to run the Declude Consol from Term Serve. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Test
Yep same here. It's a never ending battle. Jeff Kratka -- Original Message -- From: Jeff Maze - Hostmaster [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Sun, 11 Apr 2004 10:39:20 -0400 Ok.. Got it back.. I guess just not a lot going on.. But have noticed an INFLUX of spam messages lately.. A lot not being caught by the filters but also a lot being caught.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Maze - Hostmaster Sent: Sunday, April 11, 2004 10:32 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Test Haven't received messages from here nor Declude.Virus since Friday.. Just doing a test.. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Habeas Porn
That's why I stopped using it. To much junk coming in with the Habeas headers that were spam. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dan Geiser Sent: Friday, February 27, 2004 12:46 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Habeas Porn Has anybody seen the crazy amount of porn spam being sent with the Habeas headers? --- Sign up for virus-free and spam-free e-mail with Nexus Technology Group http://www.nexustechgroup.com/mailscan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Spammer on board
Hello all, I have an issue I have been dealing with and was wondering how others would approach it. I have a spammer on my system and am 99% sure who it is. Thanks to Scott and the wonderful tools he has supplied us with (Junkmail, Virus and Hijack) I have been able to trap the spam and log everything. I have only had to do this once before about 3 years ago which I just removed the person from the system. Now with the amount of spam that has been attempted to be sent out and trapped the person is being removed but should the authorities be contacted as well. Will anything actually be done to the spammer? Just wondering. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] TCP/UDP ports
I know I have missed something here but I'll ask, I'm still new at this one. I have been shutting down ports on my mail server leaving open only the ones needed. I leave 53 open for DNS but when I do Declude does not do any of the DNS based tests. I turn off the port filtering and it works. Any suggestions? Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Help with a Spammer
Sorry for my ignorance on this but it's driving me nuts. It appears I have a spammer on my system. It is coming from one of my dialup customers. I have started to look into IP addresses for the mail and radius but would like to be alittle more sure. Does anyone have any good ideas to track someone down? Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Help with a Spammer
No I have Imail 6.06 (Yeah I know..) Declude Junk Mail and Virus. I have been thinking about Hijack but right now funds are thin. I'm mostly trying to track them down. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Wednesday, February 18, 2004 9:46 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Help with a Spammer Are you using Declude Hijack? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Jeff Kratka Sent: Wednesday, February 18, 2004 9:38 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Help with a Spammer Sorry for my ignorance on this but it's driving me nuts. It appears I have a spammer on my system. It is coming from one of my dialup customers. I have started to look into IP addresses for the mail and radius but would like to be alittle more sure. Does anyone have any good ideas to track someone down? Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Help with a Spammer
I have a question about Declude Hijack. I was wondering if Hijack will help me track this person down with IP addresses and logs. It looks like they are either spoofing an address since I can't see the IP addresses in the radius or I'm completely brain dead. This is the first spammer I have had to track down on my system so I am very new at it. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Kratka Sent: Wednesday, February 18, 2004 10:00 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Help with a Spammer No I have Imail 6.06 (Yeah I know..) Declude Junk Mail and Virus. I have been thinking about Hijack but right now funds are thin. I'm mostly trying to track them down. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Wednesday, February 18, 2004 9:46 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Help with a Spammer Are you using Declude Hijack? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Jeff Kratka Sent: Wednesday, February 18, 2004 9:38 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Help with a Spammer Sorry for my ignorance on this but it's driving me nuts. It appears I have a spammer on my system. It is coming from one of my dialup customers. I have started to look into IP addresses for the mail and radius but would like to be alittle more sure. Does anyone have any good ideas to track someone down? Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Help with a Spammer
Thank you, I just installed Declude Hijack and it is helping already. Being that it is showing the IP address of the outgoing mail and the amount I can check into this more. I think it will help me with this issue. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Matt Sent: Wednesday, February 18, 2004 11:36 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Help with a Spammer Jeff, If you ran a log analyzer on your IMail logs and checked for high utilization senders, that might to it, or maybe grep if you have a knack for that. I would think that chances are that this person merely has a virus infected computer that is being hijacked, though you need to provide more detail about the situation probably in order to get a better response. FYI, here's what SenderBase is showing for your class C: http://www.senderbase.org/search?searchString=205.243.160.7whichOthers=%2F2 4 Matt Jeff Kratka wrote: I have a question about Declude Hijack. I was wondering if Hijack will help me track this person down with IP addresses and logs. It looks like they are either spoofing an address since I can't see the IP addresses in the radius or I'm completely brain dead. This is the first spammer I have had to track down on my system so I am very new at it. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Kratka Sent: Wednesday, February 18, 2004 10:00 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Help with a Spammer No I have Imail 6.06 (Yeah I know..) Declude Junk Mail and Virus. I have been thinking about Hijack but right now funds are thin. I'm mostly trying to track them down. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Wednesday, February 18, 2004 9:46 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Help with a Spammer Are you using Declude Hijack? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Jeff Kratka Sent: Wednesday, February 18, 2004 9:38 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Help with a Spammer Sorry for my ignorance on this but it's driving me nuts. It appears I have a spammer on my system. It is coming from one of my dialup customers. I have started to look into IP addresses for the mail and radius but would like to be alittle more sure. Does anyone have any good ideas to track someone down? Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus
RE: [Declude.JunkMail] How do they do it?
For a firewall, would the regular version of Blackice work ok or is the Server version needed. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * One product that people have talked highly of has been Blackice for blocking dictionary attacks. Regards, Kami --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] How do they do it?
Are there others suggestion for firewall software for the server. Does Zonealarm have a server version and if so does it work as well as Black Ice. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Mydoom.b
When I have gone and checked my F-Prot to see if the most recent version of Mydoom is covered with the most recent virus definitions it only shows Mydoom.a in the virus list. Is there another way to find out if the definitions are fully up to date? I have the DOS version and it is update every couple of hours. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Junk Mail Stats
Pardon my ignorance but what are people using to get the stats from junk mail? Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * HABEAS..50.04% HIL...1961.57% 5 messages with HABEAS headers - but 195 mails that failed HABEAS' infringer list. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Happy Holidays
I would like to wish everyone a Safe and Happy Holiday. EVERYONE that has helped over the past year (and I've needed it) a big THANK YOU. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Public DJM Config Files
I would also be interested in this. Is it possible to get these? Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Burzin Sumariwalla Sent: Thursday, December 18, 2003 10:12 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Public DJM Config Files I don't mind doing so, but I don't want to clog the list with config files. I have sent them off list upon request. Burzin At 05:44 PM 12/17/2003, you wrote: Hello, All, Is there anyone on this list besides Kami who makes their Declude JunkMail files publically viewable as he does? Just curious. I'm always looking for new ideas. Thanks, Much! Dan Geiser [EMAIL PROTECTED] --- Sign up for virus-free and spam-free e-mail with Nexus Technology Group http://www.nexustechgroup.com/mailscan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] -- Burzin Sumariwalla Phone: (314) 994-9411 x291 [EMAIL PROTECTED] Fax: (314) 997-7615 Pager: (314) 407-3345 Networking and Telecommunications Manager Information Technology Services St. Louis County Library District 1640 S. Lindbergh Blvd. St. Louis, MO 63131 --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] HELP PLEASE !
Today my mail server crashed and I have been trying to get things back up and running. I have Imail v6.06 with Declude 1.75. When I run the smtp32.exe it seems to be passing mail. When I have it call declude.exe it fails. Any ideas.. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HELP PLEASE !
Hi John, Everything started when I was receiving SMTP errors and it kepy going down. I did see ALOT of spam going thru and I was updating the RAM anyways. When the server was shut down it wouldn't come back up. I set up my backup server. No there are not any there. I have noticed on this machine (it's an older machine) that if I turn off junkmail things seem to work better. I have a DECLUDE text file but it is just showing where the virus scanner pops up a couple of errors (mostly errors creating or opening files) . Hopefully On Friday I will be able to rebuild the broken machine and see if things work better. * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Wednesday, November 26, 2003 10:24 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] HELP PLEASE ! Hello Jeff. What exactly is happening? Any C:\Declude.GPx files? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Jeff Kratka Sent: Wednesday, November 26, 2003 9:10 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] HELP PLEASE ! Today my mail server crashed and I have been trying to get things back up and running. I have Imail v6.06 with Declude 1.75. When I run the smtp32.exe it seems to be passing mail. When I have it call declude.exe it fails. Any ideas.. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Spammer wanting servers?
I received this over the weekend and thought others may be interested. This guy wants to get servers so he can spam.. Below is the headers and the message. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * Received: from blackadder.aqhostdns.com [63.247.129.138] by mail.tymewyse.com with ESMTP (SMTPD32-6.06) id AF471FB6010E; Sun, 09 Nov 2003 22:25:11 -0800 Received: from jimer013 by blackadder.aqhostdns.com with local (Exim 4.24) id 1AJ5Rb-qo-A9 for [EMAIL PROTECTED]; Mon, 10 Nov 2003 01:22:35 -0500 To: [EMAIL PROTECTED] From: [EMAIL PROTECTED] Subject: Dedicated Servers Needed Message-Id: [EMAIL PROTECTED] Date: Mon, 10 Nov 2003 01:22:35 -0500 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - blackadder.aqhostdns.com X-AntiAbuse: Original Domain - tymewyse.com X-AntiAbuse: Originator/Caller UID/GID - [32157 32157] / [47 12] X-AntiAbuse: Sender Address Domain - blackadder.aqhostdns.com X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 15. X-RBL-Warning: This E-mail failed the following tests: IPNOTINMX, NOLEGITCONTENT, SPAMCHK, WEIGHT15. X-Declude-Sender: [EMAIL PROTECTED] [63.247.129.138] X-Note: This E-mail was scanned for spam by TymeWyse Internet. X-Note: This E-mail was scanned for viruses by TymeWyse Internet. X-Note: This E-mail failed the following tests: IPNOTINMX, NOLEGITCONTENT, SPAMCHK, WEIGHT15. Hello, I need 2 dedicated windows 2000 servers with at least 2,000 ip addresses. These servers will be used to run my email campaign and send bulk email in direct mode with my own optin mailing software. If you are in a position, and have a dedicated network setup to deal with the complaints generated from my email advertising I would be willing to pay $2,000 a month for the 2 servers. I need a reliable provider to set me up immediately. If you can offer me such service please call me at: 1617-901-4129, Leave me a message and I will get back to you right away. Please dont reply back to this email, only call me. Thanks Bob --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Off topic .. maybe
I received this message from my feedback form on my web server last night which I thought was interesting. Seems that these guys will try all area to get someone to help pay for their country. *** MessageType: Suggestion Subject: Products SubjectOther: Username: Mr. Uwaifo Ogbebor UserEmail:[EMAIL PROTECTED] UserTel: 234-1-8043993 UserFAX: 17758714803 ContactRequested: ContactRequested Remote Name: 195.166.237.40 Remote User: HTTP User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Date: Thursday, October 23, 2003 Time: 04:52:39 AM Comments: Dear Sir, We are interested in entering into a long term business , relationship with your organization in terms of acting as your exclusive representative in the entire African continent. We are a Trading House with a high network of marketers within Africa. If this interests you, please reply promptly for further discussions to follow on terms and modalities. Hoping to hear from your promptly Yours faithfully, Mr. Uwaifo Ogbebor, Marketing Executive, E. O. B. Omo-Ogboi Investments International Ltd., 129, Okota Road, Block E, Suite 1, Okota-Isolo, Lagos, Nigeria. Tel: 234-1-8043993, 234-8042116061. Website: http://eoboi.itgo.com, http://owg.itgo.com E-mail: [EMAIL PROTECTED] Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] BYPASSWHITELIST
Thank you. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Friday, October 24, 2003 4:07 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] BYPASSWHITELIST To ad the BYPASSWHITELIST option, would it be added to the global config in this format: BYPASSWHITELIST bypasswhitelisting 30 0 0 0 It should actually be without the ing: BYPASSWHITELIST bypasswhitelist 30 0 0 0 That would bypass the whitelisting if the weight is 30 or higher, and there are 0 or more recipients. You could instead use something like: BYPASSWHITELIST bypasswhitelist 30 10 0 0 which would be useful if some people have whitelisting, but others are getting spam as a result. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Whitelists
I know this has been brought up before but I have been having some problems with Whitelists. I have a test white_to which has a list of the users that want to be whitelisted. When some spam comes in and it happens to be addressed to one of these people in the list the spam will go thru and pass all of the test to all of the reciepients. A while ago someone mentioned using a blank config file for each user which will do the same thing as the whitelist list I have. Which would be best way to help prevent the spam from being distributed to all of it's receipients. Jeff * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] What's wrong with SpamCop?
Over the last couple of weeks I have gotten a couple of messages from Spamcop about problems. Looking at logs and some other things nothing went out from my IP range. I will probably drop the weight on Spamcop for a while until things settle down. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Matthew Bramble Sent: Wednesday, September 24, 2003 8:12 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] What's wrong with SpamCop? Is it me, or did SpamCop suddenly become awful when it comes to false positives with almost anything that is sent in bulk? I've recently seen them tag PayPal, ActivePDF newsletters, Match.com and even the local chamber of commerce (which only sends to members w/opt-out). If they ever start crossing FP's with MailPolice, two very important RBL's will suddenly become greatly diminished in value on my server. So the question is, does SpamCop care about this problem? Are they going to make fundamental changes in how they determine what to block based on their clearly impure input? Anyone have a scoop? Matt --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] www.declude.com down????
No problems here.. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kevin Bilbee Sent: Friday, September 19, 2003 2:34 PM To: JunkMail Declude Subject: [Declude.JunkMail] www.declude.com down I am trying to get to the manual. Is the declude website down? Kevin Bilbee Network Administrator Standard Abrasives, Inc. [EMAIL PROTECTED] (805) 520-5800 x7332 Changing the way industry works. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Whitelisting
Scott, It was also mentioned to a blank user file with the per user config which would allow all tests to pass. Would this work also? I just wanted more options. The negative weight works. Jeff Kratka -- ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] tailing a log file
www.wintail.com Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Darryl Koster Sent: Saturday, September 13, 2003 8:38 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] tailing a log file Does anyone on this know of or have a tool that will allow me to tail my system files or my declude log files while they are building? Something like the tail command on a linux machine? I just loaded (this has nothing to do with above) 1.75 with the comments filter, most of the mail that I was having to sort through before is no-longer. Love this. Darryl Koster ~~ Status Technologies Inc. President/Owner Let Us Help You Get The Status You Deserve! http://www.statustechnologies.com P: (905) 435-0145 TF (NA) 888-909-9004 F: (905) 435-0873 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Whitelisting
I have a couple of customers that want to be whitelisted completely so I added WHITELIST TO [EMAIL PROTECTED] to the global config. The only thing is that I have found out that if spam is sent to multiple recipients and this person is listed it is allowed to come to everyone on the list since the one person is whitelisted. Am I doing something wrong or is there a way to prevent this. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Whitelisting
Thanks I'll try this out. Jeff Kratka -- Original Message -- From: DLAnalyzer Support [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Sat, 13 Sep 2003 22:41:45 -0400 Jeff, This is similar to the issue of whitelisting the postmaster account. Spammer's got hip to the fact that most people whitelist the postmaster account and would include as a recipient for the spam the postmaster. We were getting burned by this due to the high amount of porn spam that was dwindling in using this techinique. What we did to prevent this and the solution would be valid in your case is to do the following (1) Setup the following test POSTMASTER filter x:\IMail\Declude\postmaster.txt x -100 0 **Make sure to give it a high enough reverse weight so that no matter how many tests it failed the reverse weight will counter that and ensure delivery. (2) In the filter test file use the ALLRECIPS filter ALLRECIPS 0 CONTAINS [EMAIL PROTECTED] What this will do is the following. (1) The email will still be delivered to the user, due to the high amount of reverse weight (2) The message will be blocked to the other recipients, because it will still be weighted like any other message. Darrell Invariant Systems http://www.dlanalyzer.com Rich writes: At 04:10 PM 9/13/2003, Jeff Kratka wrote: I have a couple of customers that want to be whitelisted completely so I added WHITELIST TO [EMAIL PROTECTED] to the global config. The only thing is that I have found out that if spam is sent to multiple recipients and this person is listed it is allowed to come to everyone on the list since the one person is whitelisted. We've been just giving them a blank .junkmail file, it seems to let everything through, and not whitelist mail sent to multiple recipients. Am I doing something wrong or is there a way to prevent this. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- Rich Griebel [EMAIL PROTECTED] http://www.kendra.com Scanned for Viruses using Declude and F-Prot --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. DLAnalyzer a comprehensive reporting tool for Declude Junkmail Logs - http://www.dlanalyzer.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] User Interface
There was talk awhile ago about some people creating a web user interface for Declude. Did anyone come up with one? Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] New variation of PayPal Account retrieval
May be a dumb question but how are you setting up JM to block these. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kami Razvan Sent: Saturday, August 16, 2003 10:35 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] New variation of PayPal Account retrieval Hi; A new variation of the PayPal fraud is going on.. I just got this email in our spam filter... it is asking for Citibank checking account... I just thought it would be good for all to see this... in case you don't catch it.. Regards, Kami Here is the header: = Received: from cgocable.net [24.150.152.123] by foroosh.com (SMTPD32-8.02) id AC6E4C0136; Sat, 16 Aug 2003 12:31:42 -0400 Received: from d150-152-123.home.cgocable.net (d150-152-123.home.cgocable.net [24.150.152.123]) by cgocable.net (8.12.8p1/8.12.8) with ESMTP id aoelr258507 for deleted; Sun, 17 Aug 2003 01:34:12 -0400 (EST) Date: Sun, 17 Aug 2003 01:34:10 -0400 (EST) From: Citibank [EMAIL PROTECTED] X-Mailer: The Bat! (v1.61) Personal Reply-To: [EMAIL PROTECTED] X-Priority: 3 (Normal) Message-ID: [EMAIL PROTECTED] To: deleted Subject: [58~]Your Checking Account at Citibank. MIME-Version: 1.0 Content-Type: multipart/mixed; boundary=--3309750874624 X-IMAIL-SPAM-VALFROM: (4981046) X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED] X-RBL-Warning: IPNOTINMX: X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected. X-RBL-Warning: BASE64: A binary encoded text or HTML section was found in this E-mail. X-RBL-Warning: FILTER-HEADER-XMAIL: Message failed FILTER-HEADER-XMAIL test (59) X-RBL-Warning: SPAMDOMAINS: Spamdomain 'juno.com' found: Address of [EMAIL PROTECTED] sent from invalid d150-152-123.home.cgocable.net. X-RBL-Warning: COUNTRY: Message failed COUNTRY test (36) X-RBL-Warning: FREEEMAILS: X-Declude-Sender: [EMAIL PROTECTED] [24.150.152.123] X-Declude-Spoolname: D5c6e004c01364150.SMD X-Note: This E-mail was scanned filtered by Declude [1.75i2] for SPAM virus. X-Spam-Tests-Failed: NOABUSE, IPNOTINMX, NOLEGITCONTENT, BASE64, FILTER-HEADER-XMAIL, SPAMDOMAINS, COUNTRY, WEIGHT20s, WEIGHT20r, FREEEMAILS X-Weight: 58 X-Mailfrom: Fwpreg_Warden.juno.com X-Note: Sent from: [EMAIL PROTECTED] X-Note: Sent from Reverse DNS: d150-152-123.home.cgocable.net ([24.150.152.123]). X-Hello: cgocable.net X-Note: Recipient(s): deleted X-Country-Chain: CANADA-destination X-RCPT-TO: deleted Status: U X-UIDL: 331466365 Dear Citibank customer, We are letting you know, that you, as a Citibank checking account holder, must become acquainted with our new Terms Conditions and agree to it. Please, carefully read all the parts of our new Terms Conditions and post your consent. Otherwise, we will have to suspend your Citibank checking account. This measure is to prevent misunderstanding between us and our valued customers. We are sorry for any inconvinience it may cause. Click here to access our Terms Conditions page and not allow your Citibank checking account suspension. 2003 Citibank. Citibank (West), FSB. Member FDIC. Citibank with Arc Design is a registered service mark of Citicorp. Citi.com Citigroup Privacy Promise Terms Conditions Copyright 2003 Citicorp ECRM_CBNA_NEW_ACTIVE --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SUBJECTSPACES test
Scott, This has probably been mentioned but I just heard about it. The SUBJECTSPACES test, is it an undocumented test? Will it check spaced all in a row, ie: This MessageHere and the spaces between or does it also count the space between words. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Report System
I would be interested. Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Darrell LaRock Sent: Thursday, July 31, 2003 2:06 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Report System Terry, I used delog for awhile, but I needed several other features that did not come with delog. So I developed an application that had all of the features that I needed. Below is a sample report that I generated(tab format). The reports can be in tab, csv, or html format and you have the ability to email them as well. There are many other things that dlanalyzer can report on. You can get reports on domains, users, tests, and different reporting periods. The combinations are endless. Right now I am finishing up database support and a few other miscellaneous features I wanted to add in.. If you would like to try it out let me know and I will make it available.. Darrell Start Time: 6/1/2003 12:00:00 AM End Time: 6/2/2003 12:00:00 AM Total Messages: 25935 Messages That Failed: 18252 Spam Percentage: 70.38% TEST# FAILEDPercentage BADHEADERS 373514.40% BASE64 12034.64% BLACKLIST 13255.11% COMMENTS668 2.58% DECREASEIPWGHT 40 0.15% DECREASEWEIGHT 557 2.15% DECREASEWEIGHTLOW 313 1.21% DSBL380714.68% DSN 12154.68% EASYNET-DNSBL 741828.60% FXBLACKLIST 25749.92% HELOBOGUS 477618.42% HEUR10 289911.18% IPBLACKLIST 5 0.02% MAILFROM385 1.48% NJABL 408 1.57% NOABUSE 334112.88% NONENGLISH 214 0.83% NOPOSTMASTER402015.50% OLDEMPLOYEE 29 0.11% ORDB261 1.01% OSDUL 113 0.44% OSLIST 2 0.01% OSRELAY 343 1.32% OSSOFT 326512.59% OSSRC 330812.75% POSTMASTER 12 0.05% REVDNS 423116.31% ROUTING 14875.73% SNIFFER 328512.67% SNIFFERAV 12 0.05% SNIFFERCASINO 159 0.61% SNIFFERDEBT 815 3.14% SNIFFEREXP 269 1.04% SNIFFERGETRICH 630 2.43% SNIFFERGREY 421 1.62% SNIFFERINK 196 0.76% SNIFFERINSURAN 58 0.22% SNIFFEROBFUS350 1.35% SNIFFERPHARM17276.66% SNIFFERPORN 16306.28% SNIFFERSCAM 1 0.00% SNIFFERSPAMWAR 127 0.49% SNIFFERTHEFT138 0.53% SNIFFERTRAVEL 438 1.69% SPAMCOP 417216.09% SPAMHEADERS 416016.04% WEIGHT1010482 40.42% WEIGHT5 769 2.97% WORDFILTER 782630.18% -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Terry Parks Sent: Thursday, July 31, 2003 2:26 PM To: Declude. JunkMail Subject: [Declude.JunkMail] Report System While it's quiet I'd like to know which system is best at reporting status of the email system in terms of most messages sent from/delivered to address, etc. I need a good summary reporting system that will email me these results. I've tried delog but the email feature doesn't work. Terry --- [This E-mail scanned for viruses by Surfside Internet] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Spam Attack
Just to let everyone know so others don't get hit with it, I just had a Spam attack/Bomb from one particular location. As soon as I found out I blocked everything possible and things are working. It was so bad that it killed the server. It came from: [217.16.118.12] MAIL From:[EMAIL PROTECTED] Every single e-mail was to the same address and from the same address and IP, there were a couple of thousand that attempted this. Just thought some others would like to know. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Spam Attack
I first thought that but there are different messages, just bad jokes each message. There were also some viruses atteched which were caught. Jeff -- Original Message -- From: Kevin Bilbee [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Wed, 9 Jul 2003 17:39:39 -0700 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Kratka Sent: Wednesday, July 09, 2003 5:29 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Spam Attack Just to let everyone know so others don't get hit with it, I just had a Spam attack/Bomb from one particular location. As soon as I found out I blocked everything possible and things are working. It was so bad that it killed the server. It came from: [217.16.118.12] MAIL From:[EMAIL PROTECTED] Every single e-mail was to the same address and from the same address and IP, there were a couple of thousand that attempted this. My guess is there spam software is stuck in a loop and sending the the same address over and over? Just thought some others would like to know. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Log Analyzer - Comments Needed
Same here, I would be interested. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Darrell L. Sent: Friday, February 28, 2003 6:15 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Log Analyzer - Comments Needed Keith, I have a beta available and I am looking for individuals to test it out. If you are interested the beta will be made available as early as Monday. Please let me know if you are interested. Darrell LaRock -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Thursday, February 06, 2003 4:35 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Log Analyzer - Comments Needed Darrell, That is awesome. I get those same requests from our clients weekly. I appreciate your time in writing it. Keith -Original Message- From: Darrell L. [mailto:[EMAIL PROTECTED] Sent: Thursday, February 06, 2003 11:35 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Log Analyzer - Comments Needed *Sorry if this is outside the realm in which the forum should be used. Several of my customers have started asking me for reports on what Declude is blocking for their domain or a certain user. Obtaining this information was challenging manually sifting through the logs - to say the least. I then decided to write an analyzer that could accomplish what I needed. It's a good portion of the way wrote, and I am thinking about making it public at some point when it is completely finished. However, I was looking for features that people would like that I may not have thought of at this point. Currently right now it can do the following 1.) Report on Number of messages that fails each test. 2.) Comprehensive reporting on each individual tests. Reports can be generated based on (to, from, domain, subjects, date, time). 3.) Report on individual domains and which messages failed which tests 4.) Report on individual users and which messages failed which tests. 5.) It is a console application written in C# (.net). It is self contained and does not need any external databases like SQL Server or MSDE. Things Still to be added 1.) Ability to email the reports Thanks Darrell --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] PostFixGate
Somehow I got listed on PostFixGate and have sent several e-mails and several of their unblock me notices and have never received any type of info. I am still listed, does anyone know how to get in touch with these guys so I can get removed. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Whitelist per user
Is it possible to set-up a whitelist per user. I have it running per user but there are a couple of people that haven't received mail from friends so I have whitelisted in the global.cfg. I would rather whitelist for the particular user. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist per user
John, Is it possible to try this out? Jeff Kratka * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of John Tolmachoff Sent: Thursday, December 19, 2002 4:13 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Whitelist per user Is it possible to set-up a whitelist per user. I have it running per user but there are a couple of people that haven't received mail from friends so I have whitelisted in the Global.cfg. I would rather whitelist for the particular user. We have a program that we created that is in the final beta test stage that will help in this kind of situation. It checks the from address and to address and if it finds both matches in the from.txt and to.txt files, it fails which you could then add a negative fail weight to white list the message. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: MS update
Yes. I had the same problem here. Being that I really don't plan on updating to 7.x (for a couple of reasons) you can either install the patch (and live with everything off) or upgrade to the newest version. Reading a message from last week, someone said this also effected the WS_FTP Server. So is (was) this something that has been there for some time with Ipswitch, just like the hello message not being RFC compliant. (Sorry, venting) Jeff Kratka ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Michael Lauritzen Sent: Tuesday, December 17, 2002 1:35 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] OT: MS update Has anyone else seen this? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Scott MacLean Sent: Tuesday, December 17, 2002 11:26 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OT: MS update Slightly off this topic, but I just learned the hard way that if you have intentions of continuing to use the server-based IMail 6 administration program, do NOT install Microsoft update Q328310. You'll get something like this as a result: http://www.nerosoft.com/Test/IMail.gif --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: MS update
I apologize for my mis-readings Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Smart Business Lists Sent: Tuesday, December 17, 2002 2:06 PM To: Jeff Kratka Subject: Re: [Declude.JunkMail] OT: MS update Tuesday, December 17, 2002 you wrote: JK Reading a message from last week, someone said this also effected the JK WS_FTP Server. No. I said the patch DID NOT change WS_FTP_SERVER's gui. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Habeas Test
Just as a curiosity, is anyone using the Habeas test and if so does it help? Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Listed in Spam databases
Hi Scott,
Yes I did send to [EMAIL PROTECTED] 2 different times. it just
becomes annoying that you can be listed without being notified.
Jeff
*
TymeWyse Internet
P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417
tel/fax: (541) 839-6027 - [EMAIL PROTECTED]
*
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Wednesday, October 16, 2002 10:38 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Listed in Spam databases
I have found that I am listed on both Fiveteningnore and Postfixgate. I
have attempted to contact both locations several time and even tried to
contact Spamhaus (listed under Fiveteningnore) but have not received any
answers back. Fiveteningnore shows the listing because my backbone (Sprint)
is there but I have no idea why I am listed on the other.
Does anyone have any other suggestions on how to contact these people and
get removed.
Did you send E-mail to the special address at the FIVETEN site? There is
one E-mail address ('blacklist@', I think) that you can send to where they
will not block your mail.
As for Postfixgate, well... I think we're listed in there too. Needless to
say, I don't really care too much.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
[Declude.JunkMail] listed on Postfix Gate
I just came in this morning and was doing a check on things and noticed my mail server is now listed on PostfixGate. It wasn't that way yesterday and nothing has changed. There shows no reason for this so I went to have my mail server removed from the list. I did have one person that sent spam out on Wednesday but that account was deleted, could it be listed that quick? I went to the PostfixGate site and put in a request to be removed so we'll see. Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] five-ten
I have sent mail Five Ten to try to get my IP block removed from their list (All Sprint blocks are listed I guess) and mail keeps coming back unknown user. I have sent to info (the link off the web page) and carl(listed with Whois). Does anyone know where else I can send mail to? Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] five-ten
Sorry about being brain dead and not checking. The first two were rejected for being listed but I did send to blackhole and it showed that it went thru. The ol' brain isn't functioning to much today, my wife started going into labor and I haven't been thinking straight... Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Friday, October 04, 2002 3:54 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] five-ten I have sent mail Five Ten to try to get my IP block removed from their list (All Sprint blocks are listed I guess) and mail keeps coming back unknown user. I have sent to info (the link off the web page) and carl(listed with Whois). Does anyone know where else I can send mail to? Did you check the IMail log files to see why the E-mail was not delivered? Did you send it to the blackhole@ address? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Web Site ?
Is anyone else having difficulties with the Declude Web Site? Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] FYI
Just to let people know, I received this e-mail from a guy looking for a copy of Declude. I e-mailed him back that I was able to get the funds together and so can he. Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * Dheeraj Mewani [[EMAIL PROTECTED]] Use Declude. I have been using it with their Junk Mail Dear Sir, My self dheeraj, I am from India, I need a copy of declude antivirs.. i have no capablity to purchase it can u help me and send a copy of it I have mail u with ref. of below web page regards Dheeraj Mewani - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Word filter
Hopefully a simple question. In the word filter will it pick up every word on the line of if it is set up as a phrase will it just do that. Do quotation marks make a difference? SUBJECT 20 CONTAINS Lowest Mortgage Rates Around - every word? SUBJECT 20 CONTAINS Lowest Mortgage Rates Around - phrase? Thanks, Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude and Sniffer
Thanks for the info. Would it be possible to get your config files to compair to mine. I have gotten alot to caught but am interested in what others are using also. Thanks again for the info. Jeff -- Original Message -- From: Todd Ryan [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Sun, 28 Jul 2002 15:27:01 -0400 Jeff, I just purchased Message Sniffer this past week. Before that, I ran the trial version for 30 days and then produced some statistics to prove to myself and my boss that it was worth buying. What it boiled down to was that I was catching 12.5% more definite spam with Message Sniffer than without it. A couple things that are worth mentioning... By definite spam, I'm being very conservative. I don't consider anything that has a legitimate unsubscribe method to be spam. Many would disagree. We're a higher education institution so free speech is a very important factor. So you may find it even more effective than I do because it will also block some of the newsletters that we as mail administrators find to be at the top of the spam scale. I was using the demo for 30 days so that means no updates. Using it with frequent updates will probably produce even better results. Also, I have some very tweaked JunkMail weights and rules. I only use Message Sniffer only in the weighting system. It blocks some things that I don't consider junkmail like newsletters from emazing.com and beliefnet.com. So if a message ONLY fails sniffer, I don't bounce it. It has to fail one or two other tests. Hope this helps. For me, I expect a 12%-15% increase in accuracy and that is worth it. I now have what I think is a VERY accurate weighting system. I've only had two instances in about 6 months where a remote postmaster said their mail was bouncing. In both cases they were legitimate companies sending work-related things, but they both were listed in one of the open relay databases so the filters worked correctly. --Todd. - Original Message - From: Jeff Kratka [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, July 26, 2002 4:08 PM Subject: [Declude.JunkMail] Declude and Sniffer Just curious. How many people are using both Declude Junk Mail and the sniffer add-on and has it made a difference if yes. I have been completely pummeled with Spam and am looking for more options. Thanks. Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . -- ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Declude and Sniffer
Just curious. How many people are using both Declude Junk Mail and the sniffer add-on and has it made a difference if yes. I have been completely pummeled with Spam and am looking for more options. Thanks. Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] DORKZTL:DNS Report Down?
Everything's looking good on this end. Jeff Kratka ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: Don Schreiner [EMAIL PROTECTED] To: Declude List [EMAIL PROTECTED] Sent: Tuesday, April 02, 2002 11:59 AM Subject: [Declude.JunkMail] DORKZTL:DNS Report Down? Can anyone bring up DNSReport.com and DNSStuff.com? Are they down? Anyone experiencing regional connectivity errors? -Don S. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] ORBZ - More info
You're right... made me feel better.. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: Scott Phelps [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, March 21, 2002 12:08 PM Subject: RE: [Declude.JunkMail] ORBZ - More info Please!!! Everyone sign that (click the bottom link). I did, and I feel much better. ___ | | Scott Phelps | NT Systems Administrator | WebKorner Internet Services | [EMAIL PROTECTED] | www.webkorner.com | MCDTP (Microsoft Certified | duct tape professional) |___ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mike Nice Sent: Thursday, March 21, 2002 3:00 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] ORBZ - More info Here's some more information behind the big mystery. http://www.wired.com/news/business/0,1367,51218,00.html The small city of Battle Creek, Michigan, wants to lock up an anti-spam activist who it believes crashed its mail server. Never mind that the town government was using a buggy version of the Lotus Domino e-mail server, and that newer releases have fixed the problem. And never mind that anti-spammers may have been conducting a routine scan for possible sources of bulk e-mail. I suspect they will regret this actionTee hee!! http://216.117.150.42/battlecreekmichcom/cgi-bin/battlecreek/guestbook.cgi#s ign --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [ This E-mail scanned for viruses by www.WebKorner.com ] --- [ This E-mail scanned for viruses by www.WebKorner.com ] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] Declude console
Did the same exact thing here. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, February 19, 2002 11:22 AM Subject: Re: [Declude.JunkMail] Declude console Could it be that I was in a terminal server session? That could account for why you didn't see any information in it. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] Comparing Weight Configurations
Mike, Would it be possible for you to send me your global and your default files so I can compare them to mine. I do like that setup that you have and want to check on more. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: Mike Nice [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, February 01, 2002 7:26 AM Subject: Re: [Declude.JunkMail] Comparing Weight Configurations OSRELAY5 0 OSDUL 5 0 OSSRC 5 0 OSSMART5 0 OSSOFT 5 0 OSLIST 5 0 OSFORM 5 0 ORDB 5 0 SPAMCOP 5 0 DSN 5 0 NOPOSTMASTER5 0 NOABUSE 5 0 BADWHOIS3 0 IPWHOIS 3 0 MAILFROMenvfrom x x 2 0 BADHEADERS badheaders x x 0 0 SPAMHEADERS spamheaders x x 3 0 ROUTING spamrouting x x 9 0 REVDNS revdnsexists x x 5 0 CATCHALLMAILS catchallmails x x 0 0 WEIGHT15 weight x x 15 0 ALONG WITH WHITELIST for Microsoft (king of the RFC-Ignorant) passport and expedia mailers - WHITELIST FROM [EMAIL PROTECTED] WHITELIST FROM @msnnewsletters.customer-email.com WHITELIST FROM @expedia.com My goal is to minimize the number of false-positives to near zero. I had to back down the BADHEADERS and SPAMHEADERS because they mostly represent automated mailing programs. There are many of these in use all over for legitimate purposes - shopping carts, confirmations, signups, etc that people want to receive. I'm sure Spammers monitor this list and have already made their mailblaster headers to mimic MS Outlook and be RFC-Compliant. But admittedly, there are still a bunch of losers running the old spam blasting software though. The only remaining false positives are related to the obligitory self-run E-mail system that many small companies want to run. Of course they have no reverse DNS, they are open relay, and because of the open relay they end up in the Spamcop database. Normally, this 3-strikes would be considered spam. There have been a number of these from local companies that I had to whitelist because the E-mail customer would expect delivery or a bounce message. I could back down ORDB weighting if I add the sniffer technology to the mix. - Original Message - From: Don Schreiner [EMAIL PROTECTED] To: Declude List [EMAIL PROTECTED] Sent: Friday, February 01, 2002 8:11 AM Subject: [Declude.JunkMail] Comparing Weight Configurations Anyone want to compare/share some of their successful weighting configurations? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Declude Virus
Scott, In Declude Virus, if you add in BANEXT .xxx will Declude treat the e-mail as a virus and move the e-mail to a quarantine area just like a virus. I have noticed since I have added a couple of these lines that directory has received more files but I have not been notified. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Re:Declude Virus
Ok, I'm a dork. I just answered my own question. I read the manual on-line. yes it does. Thanks Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: Jeff Kratka [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, January 18, 2002 5:07 PM Subject: [Declude.JunkMail] Declude Virus Scott, In Declude Virus, if you add in BANEXT .xxx will Declude treat the e-mail as a virus and move the e-mail to a quarantine area just like a virus. I have noticed since I have added a couple of these lines that directory has received more files but I have not been notified. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Tests
Forgive me Scott but I forgot this. What is the command line to check to see what tests Declude is running. Amount active etc.. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] Product Info Questions
Excuse the ignorance here, but what is needed to set up this ADULT test. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 18, 2001 1:17 PM Subject: RE: [Declude.JunkMail] Product Info Questions Along the lines of undocumneted tests, is ADULT another test in beta? I saw it on your recently cught spam page. Yes, that is another undocumented test, designed to catch E-mail with adult content. -Scott --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] ByPassing IP's
Hello, This may be a stupid question but I can't figure it out. I would like Declude to bypass a certain amount of IP addresses. These are mostly feedbacks and e-mail forms coming from some web pages I host. When people receive the forms it fails the SPAMHEADERS test and gets a note. I attempted to put then in the WhiteLists but it doesn't do it. Am I just brain dead ( Lately I am ) Thanks for any help.. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: REVDNS:[Declude.JunkMail] Declude.JunkMail
Thanks Scott, that seemed to do it. I am very pleased the way Declude Junkmail works. It has filtered out so much junk since I installed it. Thanks, Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, May 24, 2001 7:38 PM Subject: Re: REVDNS:[Declude.JunkMail] Declude.JunkMail Everything looks to be running correctly, mail flowing and Declude is doing it's job, but in the declude.log file I have 05/24/2001 00:21:45 Warning, misconfiguration in IP; expecting action. Actually, that is a bit misleading. There isn't a problem with the IP address. The problem is with either the \IMail\Declude\global.cfg file or the \IMail\Declude\$default$.JunkMail file. One of them has the word IP where Declude isn't expecting it. I'm guessing that you are using the WHITELIST option (WHITELIST IP 127.0.0.1, for example). If so, you should make sure you are running Declude v1.20 or higher ( http://www.declude.com/junkmail/manual.htm ). Versions before 1.19 won't recognize the WHITELIST option, so they would think it was a test name, so it would think that IP was an action it was supposed to take. So, it just ignores that line and places the warning message in the log file. -Scott --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
REVDNS:[Declude.JunkMail] Declude.JunkMail
Hopefully a simple question. I just finished up-grading my mail server and took the old machine out of service. Imail v6.06 and Declude Junkmail. I moved all information from one machine to another and user the same IP addresses. Everything looks to be running correctly, mail flowing and Declude is doing it's job, but in the declude.log file I have 05/24/2001 00:21:45 Warning, misconfiguration in IP; expecting action. I have the same IP addresses, just changed the OS (from Windows NT4 to Windows 2000AS). I'm sure it's something simple but my brain won't catch it. Thanks, Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
