RE: [Declude.JunkMail] Check for valid email recipients

2009-03-23 Thread Kevin Bilbee
We use ASSP for recipient checking at our gateways. We do not use any other
feature. ASSP is quick to install and configure. Set it up to use a text
file for the recipients, then upload the recipients text file.

 

 

Kevin Bilbee

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Craig
Edmonds
Sent: Sunday, March 22, 2009 11:27 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Check for valid email recipients

 

I used to get loads of backscatter attacks and then i found Alligate and I
never experienced backscatter again!

 

Kindest Regards
Craig Edmonds
123 Marbella Internet Services
W:  http://www.123marbella.net/ www.123marbella.com
E :  mailto:cr...@123marbella.com cr...@123marbella.com





 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of
redbara...@qwest.net
Sent: 22 March 2009 16:09
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Check for valid email recipients

 

Yes, that is the we are currently listed on.

 

  _  

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Craig
Edmonds
Sent: Sunday, March 22, 2009 3:24 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Check for valid email recipients

 

Are you talking about backscatter?

 

Kindest Regards
Craig Edmonds
123 Marbella Internet Services
W:  http://www.123marbella.net/ www.123marbella.com
E :  mailto:cr...@123marbella.com cr...@123marbella.com

Craig Edmonds - PGP Public Key
To obtain a copy of my PGP Public Key, please go to the following URL:
 http://www.123marbella.com/pgp/ http://www.123marbella.com/pgp/

Craig Edmonds - LinkedIN Information
To view my LinkedIn Profile, please go to the following URL
 http://www.linkedin.com/in/craigedmonds
http://www.linkedin.com/in/craigedmonds

Craig Edmonds - BLOG
To view my personal blog go to the url below 
http://www.craig-edmonds.com http://www.craig-edmonds.com/ 

LEGAL DISCLAIMER - This message may contain confidential, proprietary or
legally privileged information and is intended only for the use of the
addressee named above. If you are not the intended recipient of this message
you are hereby informed that you must not use, disseminate, copy it in any
form or take any action in reliance on it. If you have received this message
in error please delete it and any copies of it and notify it to the sender. 

 

AVISO LEGAL - Este mensaje puede contener informacion confidencial, en
propiedad o legalmente protegida y esta dirigida unicamente para el uso de
la persona destinataria. Si usted no es la persona destinataria de este
mensaje, por la presente se le comunica que no debe usar, difundir, copiar
de ninguna forma, ni emprender ninguna accion en relacion con ella.

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of
redbara...@qwest.net
Sent: 22 March 2009 03:02
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Check for valid email recipients

 

I am using Declude 4.3.7 with Smarter Mail 4.3 with a couple of domain
forwarding setup for basic spam virus filtering. I am running into the
problem that one of the domains that are forwarded is getting slammed with
invalid email address on the domain. Since SM doesn't check for a valid user
on the end server I am getting a huge amount of failure noticed trying to go
back to invalid senders. This is causing a very large spool and we are
getting black listed. Does anyone have a script or a config that would
address this? I am ok with deleting the email if it is not a valid recipient
if that is my only chose. 

 

Thanks

 

Rick

 

 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.attachment: winmail.dat

RE: Re[8]: [Declude.JunkMail] DNS Changes

2008-10-09 Thread Kevin Bilbee
I will admit, Bind is not the easiest thing to setup if you are a new admin.
The first time I tried to setup bind it took me about 3 hours, but to me the
benefits outweigh commercial packages. Including reading on-line
documentation and eliminating one error at a time, making sure it was
secure. But now that I have the minimal settings it is a 5 minute setup.

I have passed these instructions on to many other not so experienced admins.
These instructions work on any platform bind will run on. Just change the
paths to suit the OS.


Kevin Bilbee


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford
Whiteman
Sent: Thursday, October 09, 2008 11:48 AM
To: Kevin Bilbee
Subject: Re[8]: [Declude.JunkMail] DNS Changes

 I have a suggestion since DNS is so critical to Declude. A secure
recursive
 bind implementation can be setup in less than 5 minutes. 

Kevin, thank you very much for proving the absurd ease with which this
one  (of  many)  DNS  servers  can  be set up for this purpose, and to
everybody  else who voiced their agreement. I expect the voices of the
qualified sysadmins here are unified.

--Sandy



Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
 
http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release
/

Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail
Aliases!
 
http://www.imprimia.com/products/software/freeutils/exchange2aliases/downloa
d/release/
 
http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/re
lease/



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: Re[8]: [Declude.JunkMail] DNS Changes

2008-10-09 Thread Kevin Bilbee
Not to be picky but run this query instead

nslookup -q=mx gmail.com. 1.2.3.4

If you do not include the dot it may append the default domain for the
windows box to the query. If there is no default domain specified then all
is good. But the extra do will always work.



Kevin Bilbee

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford
Whiteman
Sent: Thursday, October 09, 2008 1:35 PM
To: Linda Pagillo
Subject: Re[8]: [Declude.JunkMail] DNS Changes

 Yeah, that would surprise me utterly, since they wouldn't be able to
 do _anything else_ with said servers that would lead them to believe
 they were suitable for Declude's use.

 I  worked  for  an  ISP  for a long time before joining Declude. DNS
 servers  are NOT useless without the recursive DNS option turned on.
 I  don't  know  where  you're  getting  your  information, but it is
 incorrect.

What  I  said  was  (it's  right  there above, please reread) there is
nothing  else they could do with said servers _that would lead them to
believe  they were suitable for Declude's use_. That is obvious. There
is  no  reason anyone should think that authoritative-only nameservers
are  their  DNS  servers. Such servers could not be the servers they
use  to  surf  the  web, for example. The only reason they would enter
such  a  server  into the Declude config is because they have not been
sufficiently  briefed  on  the  characteristics  of the server that is
suitable  for  Declude vs. one that may not be used. The test can you
run  'nslookup  -q=mx gmail.com 1.2.3.4' is enough to tell people that
the 1.2.3.4 is or isn't valid.

--Sandy




Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
 
http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release
/

Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail
Aliases!
 
http://www.imprimia.com/products/software/freeutils/exchange2aliases/downloa
d/release/
 
http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/re
lease/



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: Re[2]: [Declude.JunkMail] DNS Changes

2008-10-08 Thread Kevin Bilbee
I would have to agree with sandy. I use Open DNS at home as an extra step to
keep my kids off of unwanted web site, I also use other measures. Two week
ago we had no DNS services for an hour from OpenDNS. This would definitely
cause issues with a mail server. I would place a CACHIND DNS software on the
local machine. We use BIND and do not have a single problem with it. It runs
solid. We are on W2k SmarterMail.

 

 

 

Kevin Bilbee

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Linda
Pagillo
Sent: Wednesday, October 08, 2008 2:30 PM
To: declude.junkmail@declude.com
Subject: re: Re[2]: [Declude.JunkMail] DNS Changes

 

Sandy, we suggest that you use the one that we recommend because 95% of
issues with declude are related to in-house DNS servers not working to do
recursive lookups correctly causing problems for our customers. I'm sure
Todd has the skills to support his own DNS server as well, but that has
nothing to do with why we suggest to use ours. We have seen the problem with
in-house DNS servers so many times that we thought it would be a good idea
to provide a suggestion to our customers.

  _  

From: Sanford Whiteman [EMAIL PROTECTED]
Sent: Wednesday, October 08, 2008 5:06 PM
To: Linda Pagillo declude.junkmail@declude.com
Subject: Re[2]: [Declude.JunkMail] DNS Changes

 Also, we suggest that you use the following DNS server with Declude
 208.67.220.220. This is an OpenDNS server and it is extremely reliable.

Sorry to be meddlesome, but recommending that a single, remote,
uncontrolled DNS server always be used for Declude's RBL lookups
kinda flies in the face of best practices. The very reason people run
their own recursive DNS servers is to increase performance, and in
2008, if you can't install and support one of the several
high-performance DNS servers out there (Simple DNS, PowerDNS, BIND, MS
DNS) for recursive use only, chances are you should be outsourcing
your anti-spam measures as well. From experience, I'm sure Todd has
the skills to support his own DNS, so it seems defeatist to suggest he
do otherwise after this migration period.

--Sandy



Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release
/

Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail
Aliases!
http://www.imprimia.com/products/software/freeutils/exchange2aliases/downloa
d/release/
http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/re
lease/



---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] version 4.4.20

2008-09-29 Thread Kevin Bilbee
Just under that should b a link with a username and password to download the
interim. I downloaded the new version today.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 David Dodell
 Sent: Monday, September 29, 2008 6:50 PM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] version 4.4.20
 
 On Sep 29, 2008, at 8:48 AM, David Barker wrote:
 
  The readme.txt which is available at the interim site provides the
  updates
  (release notes). As we have just put out the 4.4.20 I have not as of
  yet
  updated the .txt file, which I will do later today.
 
 When I login into my account, it still says version 4.4.00 as the
 latest release.
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] Reasons to renew

2008-04-02 Thread Kevin Bilbee
After seeing Matt’s post here about not renewing his JunkMail subscription. I’m 
asking Declude to respond to the group as to why any of us with perpetual 
licensing. Our SA expires soon and I would like to know the value of renewing.

 

The updates to Declude have been extremely slow and in some cases painful since 
Scott sold out.

 

 

Any idea when ZEROHOUR will be available for use in %TESTSFAILED%

 

 

 

 

 

 

Kevin Bilbee
Network Administrator
Standard Abrasives

3M Simi Valley
[EMAIL PROTECTED]



 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Header Munged in Body

2008-02-15 Thread Kevin Bilbee
Easiest thing to do is turn off the declude service. Run the script. Then get 
the source from the declude folder. This file will be exactly what is received 
from smarter mail.

Then turn declude back on to process the mail waiting.

You can then post the source here. I would zip the source and attach it so we 
can look at the source without having to worry about the email munging it.


I have done this process a few times and it has worked wonderfully in tracking 
down bad header issues with scripts and web site forms.




And yes it seems the hay day of the declude mail list is over.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael
 Jaworski
 Sent: Friday, February 15, 2008 3:20 PM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Header Munged in Body
 
 Boy this list is so quiet compared to the old days.
 
 I have not seen this lately but we have a new customer who uses a script to
 send a status message to our SmarterMail/Declude setup which is forwarded to
 a Postfix server mailbox for final delivery. Only when it is forwarded do
 they see the XIN Added headers at the top of the body. As usual the case we
 need to prove we(Declude/SM) are not the source of the problem by finding
 the real source. Our past experience moves us to point the source of the
 problem is the script e-mail structure itself. Does anyone know of a test
 site to point their script e-mail to validate the structure of that e-mail?
 
 Thanks,
 
 Mike J
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Indicate msg size in header on an authenticated whitelisted

2008-01-24 Thread Kevin Bilbee
This list is as quiet as declude’s new releases of the software. Development 
seems to have iced over for bug fixes and new features.

 

 

 

Kevin Bilbee

 

 

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists)
Sent: Thursday, January 24, 2008 8:35 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Indicate msg size in header on an authenticated 
whitelisted

 

2 years ago, I would have had a dozen replies by now and even possible a nice 
discussion going on.

 

Where is everybody?

 

John T

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists)
Sent: Monday, January 21, 2008 1:05 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Indicate msg size in header on an authenticated 
whitelisted

 

I am trying to figure out how to add a line in the header of a message to 
indicate it is over xKB in size with that incoming message being whitelisted 
via authenticated sender. 

 

Example, user1 on the local Imail server sends a message to user2 on the local 
Imail server, hence the email is whitelisted since user1 authenticated. But the 
message is over 2 MB and user2 is currently traveling and using a slow 
broadband card. The desired action is to have a test that “fails” on the over 1 
MB size and an inbound rule on user2 that will then move that message to a 
submail box called LargeFiles. This way, user2 when he connects via his Outlook 
does not try to download that email, instead he will be responsible for 
checking that folder via webmail and then if he needs it right away he can 
either download the attachment via webmail or move it to his normal inbox.

 

Thoughts, Ideas, cookies?

 

John T

 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Declude ??? Long Delay Processing?

2008-01-05 Thread Kevin Bilbee
We have had this in the past. Look at your DNS server being used by declude.
It can take a long time to process the DSN based tests if your DNS server is
timing out. Debug mode should tell you if this is what is happening.



Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 David Dodell
 Sent: Saturday, January 05, 2008 10:08 AM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] Declude ??? Long Delay Processing?
 
 
 On Jan 5, 2008, at 10:49 AM, Richard Lyon wrote:
 
  If you run sniffer, then try updating its rule file. I saw this
  problem with a corrupted sniffer rule file.
 
 I do automatically as soon as they come in  which seems to be
 several times a day
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] DNS Root IP change

2007-11-06 Thread Kevin Bilbee
Read here to see if this affects your servers

 

http://www.theregister.co.uk/2007/11/06/icann_rolls_out_new_root_name_server_address/

 

Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 



 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Hosting

2007-10-31 Thread Kevin Bilbee
Due to a buyout I need to move five domains two with email to another host. 
About 20 mail accounts.

 

I need ASP for one of the sites.

 

 

Any recommendations on hosting?

 

 

 

Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 



 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Test types order

2007-10-26 Thread Kevin Bilbee
What order do the different test types trigger?

 

What I am trying to do is find emails that Fail both INV-URIBL and ZEROHOUR but 
it seems that the ZEROHOUR is ran after the filters? Which makes the TESTFAILED 
variable in this case useless. Is there a way to run zero hour before the 
filters run? Or to test for the failure of both tests?

 

MINWEIGHTTOFAIL 28

 

TESTSFAILED 14 CONTAINS ZEROHOUR

TESTSFAILED 14 CONTAINS INV-URIBL

 

 

I have yet to see a legitimate email fail both of these tests!

 

Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 



 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] How to whitelist this

2007-07-27 Thread Kevin Bilbee
How does the whitelist features work?

 

We receive various emails from fedex with different domain portions of the 
email.

 

I have 

 

@fedex.com

fedex.com

 

In our domain level whitelist? But they emails do not seem to be getting white 
listed.

 

It seems that the whitelist works on the following

 

[EMAIL PROTECTED] – the entire email address

@fn3nds2.prod.fedex.com – the entire domain including the @

fn3nds2.prod.fedex.com – Just the domain portion

 

 

How do I whitelist just on the first subdomain like fedex.com?

 

Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 



 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] How to whitelist this

2007-07-27 Thread Kevin Bilbee
Frankly, I did not think of it, in general I do not like negative weighting. 
But it may apply in this situation. We use negative weighting in rare occasions.

I realize the RDNS is more secure and will not be prone to spammers faking the 
address. BUT, Also, our users use the trusted senders in SmarterMail with 
Declude and I would like to put out a FAQ to them on this issue to better 
clarify to them the functionality of whitelisting.


Kevin Bilbee



 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
 ([EMAIL PROTECTED])
 Sent: Friday, July 27, 2007 1:31 PM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] How to whitelist this
 
 Why not just base it on a REVDNS test for .fedex.com and assign a large
 negative weight?
 
 --
 Check out http://www.invariantsystems.com for utilities for Declude,
 Imail, mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring,
 SURBL/URI integration, MRTG Integration, and Log Parsers.
 
 
 
 
 Kevin Bilbee wrote:
  How does the whitelist features work?
 
 
 
  We receive various emails from fedex with different domain portions of
  the email.
 
 
 
  I have
 
 
 
  @fedex.com
 
  fedex.com
 
 
 
  In our domain level whitelist? But they emails do not seem to be getting
  white listed.
 
 
 
  It seems that the whitelist works on the following
 
 
 
  [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
  – the entire email address
 
  @fn3nds2.prod.fedex.com – the entire domain including the @
 
  fn3nds2.prod.fedex.com – Just the domain portion
 
 
 
 
 
  How do I whitelist just on the first subdomain like fedex.com?
 
 
 
  Kevin Bilbee
  Network Administrator
  Standard Abrasives, Inc.
  [EMAIL PROTECTED]
  
  Changing the way industry works.
 
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list. To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail. The archives can be found
  at http://www.mail-archive.com.
 
 --
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] frustration

2007-07-19 Thread Kevin Bilbee
We are on SmarterMail 3.x and run invURIBL and Commtouch ZEROHOUR. We do not
run sniffer. We get very few smaps to the user boxes. Most users get none
and the heavier email user get 1-3 a day.

We delete about 85% of incoming spam the other 14% get held for review and
less than one half of one percent gets through to mailboxes.

Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Uwe
 Degenhardt
 Sent: Wednesday, July 18, 2007 10:46 PM
 To: Craig Edmonds (123marbella.com)
 Subject: Re: [Declude.JunkMail] frustration
 
 Hi Craig and everybody who answered my contribution.
 It was more a sign of my deep desperation I sometimes
 feel.
 But I get new hope now. Obviously with Declude alone
 (We run Smartermail 3.x) we can't catch them all.
 I will try Sniffer, invURIBL and Commtouch.
 I hope they all run with SM.
 Thanks everybody.
 Uwe
 
 
  Same Here.
 
  Subscribe to the following plugins in addition to
 Declude...(unfortunately
  on its own its not enough unless you sit tweaking it all day
 everyday)
 
  Sniffer from Armresearch
  invURIBL from invariant systems
  ZEROHOUR from Commtouch
 
  With that combo you cant go wrong.
 
  Kindest Regards
  Craig Edmonds
  123 Marbella Internet
  W: www.123marbella.net
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Darin
  Cox
  Sent: 18 July 2007 23:57
  To: declude.junkmail@declude.com
  Subject: Re: [Declude.JunkMail] frustration
 
  We're running pretty well... catching somewhere between 99.7% and
 99.9% of
  incoming spam.   Declude 2.0.6 (waiting on Imail 2006 to stabilize
 before
  upgrading to the latest version) on IMail 8.22, along with Sniffer
 and
  invURIBL.
 
  Darin.
 
 
  - Original Message -
  From: Uwe Degenhardt [EMAIL PROTECTED]
  To: declude.junkmail@declude.com
  Sent: Wednesday, July 18, 2007 5:33 PM
  Subject: [Declude.JunkMail] frustration
 
 
  Hi everybody on the list, please excuse me, but I would
  like to share my frustration with
  you. I am poured with SPAM the last
  two-to-three weeks. It gets worse
  every day. Am I the only one who
  is seeing this ?
  I am in a good contact with David
  of Declude. He is doing a fantastic
  job, but sometimes I loose my faith
  and my trust, that we can win the SPAM-fight.
  It appeals to me, as it is like the old
  principle: If you put water on the fire
  at one place, you have to run to the next
  place to delete it there too. And the SPAMMERs
  will get cleverer everyday.
  What do you guys think ?
  Are you frustrated as well ?
 
  Uwe
 
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
 
 
 --
 Mit freundlichen Grüßen
 Uwe Degenhardt
 mailto:[EMAIL PROTECTED]
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] OT - Outlook Junk Mail Folder

2007-06-20 Thread Kevin Bilbee
We have our users turn off the outlook junkmail filtering. It is more of a 
headache than it is worth.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Dean Lawrence
 Sent: Tuesday, June 19, 2007 6:11 AM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] OT - Outlook Junk Mail Folder
 
 Hi All,
 
 I have a client that we generate mailings for and one of their
 messages is for some reason being placed in the Outlook Junkmail
 Folder. There is very little to the email and there aren't any Buy
 nows or anything like that in the message. Declude and Sniffer have
 no problem with it either. However, Outlook keeps flagging it as junk
 mail.
 
 Does anyone have any ideas as to finding out why Outlook is doing this
 or how to get around it?
 
 Thanks,
 
 Dean
 
 --
 __
 Dean Lawrence, CIO/Partner
 Internet Data Technology
 888.GET.IDT1 ext. 701 * fax: 888.438.4381
 http://www.idatatech.com/
 Corporate Internet Development and Marketing Specialists
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] OT - Outlook Junk Mail Folder

2007-06-20 Thread Kevin Bilbee
Then best wishes to you; With the outlook junkmail filter turned on you will 
continually run into this issue.

I would suggest writing a faq on how to turn it off and sent it to every user. 
Telling the benefits of turning it off and the consequences of leaving it on! 
This may not be possible but it is worth a try!


Kevin Bilbee


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Dean Lawrence
 Sent: Wednesday, June 20, 2007 5:16 PM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] OT - Outlook Junk Mail Folder
 
 Thank Kevin. If only I could do that. They are a very large
 corporation with over 1,000 users. 8-p
 
 On 6/20/07, Kevin Bilbee [EMAIL PROTECTED] wrote:
  We have our users turn off the outlook junkmail filtering. It is more
 of a headache than it is worth.
 
 
  Kevin Bilbee
 
   -Original Message-
   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
   Dean Lawrence
   Sent: Tuesday, June 19, 2007 6:11 AM
   To: declude.junkmail@declude.com
   Subject: [Declude.JunkMail] OT - Outlook Junk Mail Folder
  
   Hi All,
  
   I have a client that we generate mailings for and one of their
   messages is for some reason being placed in the Outlook Junkmail
   Folder. There is very little to the email and there aren't any Buy
   nows or anything like that in the message. Declude and Sniffer
 have
   no problem with it either. However, Outlook keeps flagging it as
 junk
   mail.
  
   Does anyone have any ideas as to finding out why Outlook is doing
 this
   or how to get around it?
  
   Thanks,
  
   Dean
  
   --
   __
   Dean Lawrence, CIO/Partner
   Internet Data Technology
   888.GET.IDT1 ext. 701 * fax: 888.438.4381
   http://www.idatatech.com/
   Corporate Internet Development and Marketing Specialists
  
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.JunkMail.  The archives can be found
   at http://www.mail-archive.com.
 
 
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
 
 
 
 --
 __
 Dean Lawrence, CIO/Partner
 Internet Data Technology
 888.GET.IDT1 ext. 701 * fax: 888.438.4381
 http://www.idatatech.com/
 Corporate Internet Development and Marketing Specialists
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] APEWS

2007-06-13 Thread Kevin Bilbee
Be careful there level 2 list blocks /9 ranges. Like 12.0.0.0/9 this is ATT

 

 

 

Kevin

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher
Sent: Wednesday, June 13, 2007 8:00 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] APEWS

 

They seem to have pretty good hit rates at 
http://www.sdsc.edu/~jeff/spam/cbc.html especially the rhsbl

Looks like I need to look at the pbl.spamhaus.org again. Those numbers are up 
pretty good too.

 

That’s the beauty of Declude in my opinion, I can add these lists at a low 
weight and see how they perform.

 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
Sent: Tuesday, June 12, 2007 6:51 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] APEWS

 

What do you all think of APEWS? After reading their website they seem to be a 
little heavy handed?

 

 

 

Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 

 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] APEWS

2007-06-12 Thread Kevin Bilbee
What do you all think of APEWS? After reading their website they seem to be a 
little heavy handed?

 

 

 

Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 



 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Winsock Cleanup

2007-05-30 Thread Kevin Bilbee
What version of Imail. A few years back I reported a problem to IPSwitch that 
the monitor application, part of IMail, would suck up all the available TCP 
ports on the server. I narrowed it down to the web monitor. Try turning off the 
web monitor or better yet IMail monitor altogether and see if your problem goes 
away. As far as I know they never fixed the issue, or at least I never saw the 
fix in any of the release notes.

 

We are now on SmarterMail and do not miss all the denials when reporting bugs 
that IPSwitch would throw out.

 

 

Kevin Bilbee

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt
Sent: Wednesday, May 30, 2007 6:34 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Winsock Cleanup
Sensitivity: Personal

 

Hi,

 

Does anyone have any comment on the attached email (possibly even Declude 
personnel)?  I checked the mailing list archive – and it seems to imply as if 
the WinsockCleanup is specific to DNS problems and results in queues filling 
up. In my example, Imail and Declude didn’t seem to be filling up queues. The 
couldn’t because TCP/IP would not let any inbound connections go through…

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt
Sent: Friday, May 25, 2007 4:03 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Winsock Cleanup
Sensitivity: Personal

 

Hi,

 

What are the symptoms related to Winsock Cleanup?

 

After running fine for 2 months or so (except for occasional reboots for 
Hotfixes), the mail server stopped working on the TCP/IP level. It didn’t 
respond to Ping from the outside. You could log into the console and Ping to 
itself.

 

There was also some notice about a Browser Election during the outage – so it 
seems as if there was still communication on the Ethernet layer (such as LAN 
segment broadcasts). A reboot resolved the issue.

 

Does this sound like the situation that this option is intended to fix:

 

#WINSOCKCLEANUP some customers had issues related to their network stack 
causing loss of functionality for basic 

#network operations.The default for this directive is OFF

 

#WINSOCKCLEANUP  OFF

 

Is it consistent with this problem, that the server might have worked fine for 
a few months and had been rebooted just a few days prior – and to suddenly 
display this behavior?

 

What’s the impact if that is set to “ON” unnecessarily?

 

Best Regards,

Andy


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] HELP with tqmcube.com

2007-05-24 Thread Kevin Bilbee
Our primary mail server is listed by these guys and I have issued a removal 
request on their web site over 13 days ago. There web site states they normally 
have a removal request in 4 hours.

 

I have tried to contact them with the email address on their domain 
registration and also no reply, the phone number on their domain registration 
has is disconnected. I have also sent an email using their contact page and 
also no reply. Does anyone know how to contact them.

 

I see the name David Cary Hart on the site and other places on the net. Does 
anyone have any idea on how to get him to reply?

 

 

I would really like to know why we are listed and to see a sample message they 
received that listed us. It is difficult to correct a problem when the 
organization that states there is a problem will not reply and within their own 
stated guidelines.

 

 

Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 



 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] HELP with tqmcube.com

2007-05-24 Thread Kevin Bilbee
Thank you for the suggestion. I did that. But ahh still no answer.

 

After reading their site I was actually thinking of using them with Declude. 
But is this is how they respond to removal requests then I cannot see using 
them. There would be too much collateral damage.

 

I am guessing that we were listed due to bounce messages. Our gateways did not 
previously validate the recipients. It now does do that validation thanks to 
ASSP.

 

 

Kevin Bilbee

 

 

 

 

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew
Sent: Thursday, May 24, 2007 10:24 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] HELP with tqmcube.com

 

I suggest that you always use a different source IP and sender domain name when 
contacting the admin for a blacklist, because they often filter their own mail 
with their blacklist, so they won't see your plea.  Stupid, but true.

 

Andrew.

 

 

 


  _  


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
Sent: Thursday, May 24, 2007 10:18 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] HELP with tqmcube.com

Our primary mail server is listed by these guys and I have issued a removal 
request on their web site over 13 days ago. There web site states they normally 
have a removal request in 4 hours.

 

I have tried to contact them with the email address on their domain 
registration and also no reply, the phone number on their domain registration 
has is disconnected. I have also sent an email using their contact page and 
also no reply. Does anyone know how to contact them.

 

I see the name David Cary Hart on the site and other places on the net. Does 
anyone have any idea on how to get him to reply?

 

 

I would really like to know why we are listed and to see a sample message they 
received that listed us. It is difficult to correct a problem when the 
organization that states there is a problem will not reply and within their own 
stated guidelines.

 

 

Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 

 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] OT: server monitoring

2007-05-21 Thread Kevin Bilbee
I am doing research on purchasing/open source server monitoring and would like 
to know what Declude administrators recommend.

 

Survey sais?

 

Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 



 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] OT: server monitoring

2007-05-21 Thread Kevin Bilbee
I guess I should have given more information. Things I want to do. Monitor our 
web and SMTP applications and send text message notifications to a cell phone 
and email address concurrently.

 

Thanks for the responses so far anyone else have any experiences.

 

 

 

Kevin Bilbee

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
Sent: Monday, May 21, 2007 3:06 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] OT: server monitoring

 

I am doing research on purchasing/open source server monitoring and would like 
to know what Declude administrators recommend.

 

Survey sais?

 

Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 

 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] OT: server monitoring

2007-05-21 Thread Kevin Bilbee
Like everything else at ipswitch it has gone up in price. $1995 for the lowest 
price point.

 

 

Kevin

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty
Sent: Monday, May 21, 2007 6:50 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] OT: server monitoring

 

Hi Kevin-

 

I monitor everything in my shop for a pulse, and check web, pop, smtp, and/or 
imap as appropriate using Ipswitch's What's Up, 1995 version (3.5, maybe?). I 
get emails to my cellphone when anything goes awry.  I have no idea what it 
costs now, but it has served my needs well, even if the setup of this old 
version is a bit quirky.


-Dave Doherty
 Skywaves, Inc.
 97 Webster Street
 Worcester, MA 01603
 508-425-7176

- Original Message - 

From: Kevin Bilbee mailto:[EMAIL PROTECTED]  

To: declude.junkmail@declude.com 

Sent: Monday, May 21, 2007 8:30 PM

Subject: RE: [Declude.JunkMail] OT: server monitoring

 

I guess I should have given more information. Things I want to do. Monitor our 
web and SMTP applications and send text message notifications to a cell phone 
and email address concurrently.

 

Thanks for the responses so far anyone else have any experiences.

 

 

 

Kevin Bilbee

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
Sent: Monday, May 21, 2007 3:06 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] OT: server monitoring

 

I am doing research on purchasing/open source server monitoring and would like 
to know what Declude administrators recommend.

 

Survey sais?

 

Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 

 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: Re[2]: [Declude.JunkMail] OT: server monitoring

2007-05-21 Thread Kevin Bilbee
I just found this open source alternative. It comes prebuilt as a VMware
virtual Appliance.

http://www.groundworkopensource.com/

It also seems to have an active community.


Kevin

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Sanford Whiteman
 Sent: Monday, May 21, 2007 7:59 PM
 To: Kevin Bilbee
 Subject: Re[2]: [Declude.JunkMail] OT: server monitoring
 
  I  guess  I should have given more information. Things I want to do.
  Monitor  our  web  and  SMTP  applications  and  send  text  message
  notifications to a cell phone and email address concurrently.
 
 I  don't  how many devices or monitored apps you're talking about, but
 if  both are  10 or so, you should be able to use the no-cost version
 of a nice commercial app. Many of the vendors offer such teasers.
 
 So, how many monitors, and how many hosts?
 
 --Sandy
 
 
 
 Sanford Whiteman, Chief Technologist
 Broadleaf Systems, a division of
 Cypress Integrated Systems, Inc.
 e-mail: [EMAIL PROTECTED]
 
 SpamAssassin plugs into Declude!
 
 http://www.imprimia.com/products/software/freeutils/SPAMC32/download/re
 lease/
 
 Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail
 Aliases!
 
 http://www.imprimia.com/products/software/freeutils/exchange2aliases/do
 wnload/release/
 
 http://www.imprimia.com/products/software/freeutils/ldap2aliases/downlo
 ad/release/
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Spammer authenticating

2007-05-17 Thread Kevin Bilbee
Make sure you are on the latest version of your mail server, if  it is Imail
then you should make sure it is not a vulnerable version. Also check your OS
to see if it has been compromised.

 

Do all the normal stuff to check for a compromised box.

 

Kevin Bilbee

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge
Sent: Thursday, May 17, 2007 8:16 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Spammer authenticating

 

Dear all

 

Last week, i caught a spammer authenticating to my sever (using admin and
test account)

I deleted these accounts (how does he found the passwords ?)

 

Today, i found same, using info account

But i have no info account, only alias

Looking at logs, found that he autanticated using
[EMAIL PROTECTED]

Any idea what is he doing ? why is the qfile showing [EMAIL PROTECTED]
?

 

 

QF:\Imail\spool\D07420039c9ac.SMD
Hmail.mydomain.com
I07420039c9ac
T3
E0,
S[EMAIL PROTECTED]
Y1
V0
[EMAIL PROTECTED]
NRCPT To:[EMAIL PROTECTED]
R[EMAIL PROTECTED]


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] tqmcube.com

2007-05-14 Thread Kevin Bilbee
Anyone have any comments about these guys?

Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Spam reduction ?

2007-05-04 Thread Kevin Bilbee
I have see about a 12% reduction in the past week.

 

 

Kevin Bilbee

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems 
Eng. (Karl Drugge)
Sent: Friday, May 04, 2007 8:55 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Spam reduction ?

 

Anyone else seeing a major reduction is spam the past week ?

 

I usually see about 14-15k messages daily, but since Monday have dropped off to 
about 8k… Did the recent arrests and law suits have a result this early ?

 

Karl Drugge 
B.S.I.T., A.S., M.C.S.E. ( NT 4.0, 2000, 2003 ), M.C.S.A. ( 2000 + 2003 ), 
C.C.N.A., Network+, A+ 
I dream of the day when I will learn to stop asking questions to which I will 
regret learning the answers ( Roy Greenhilt, Order of the Stick  ) 

 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Ever legit?

2007-04-26 Thread Kevin Bilbee
Do not accept mail with your own helo setup a helo filter

HELO 15 IS igive.com


Set it at your hold weight. Your actual server(s) IP addresses should already 
be whitelisted so it will not affect your internal mail routing.



Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Robert Grosshandler
 Sent: Thursday, April 26, 2007 1:45 PM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Ever legit?
 
 Hi
 
 
 We get e-mails that contain the following header (or something
 similar):
 
 Received: from igive.com [71.250.241.101] by smtp.igive.com with ESMTP
 (SMTPD-9.20)
 
 The 71.xxx.xxx.xxx isn't ours.  That IP can vary, but it is never ours.
 
 Are there any legit mailers that would send something in this form?
 
 If not, what's the best way to score this over my delete weight?
 
 Thanks,
 
 Rob
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] cteng_index.dat

2007-03-23 Thread Kevin Bilbee
Does anyone know what this file and related files are for. I have found them in 
my c:\winnt\temp folder. The dates of the files correspond to the installation 
of CommTouch  can anyone confirm the existence of these files on their system 
and if they are from the comtouch part of declude.

 

Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 



 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Migrating from Imail to SmarterMail

2007-03-10 Thread Kevin Bilbee
Your declude license should work with SmarterMail. Before you make the move
coordinate with Declude. You will need a new version of Declude.

 

The only issue I had with SmarterMail is their LDAP is crappy. We ended up
using OpenLDAP and writing a script to move all of our users to into the
LDAP nightly.

 

 

Kevin Bilbee

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Wolf
Tombe
Sent: Saturday, March 10, 2007 1:23 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Migrating from Imail to SmarterMail

 

I'm making the jump from Imail to SmarterMail and I'm wondering if anyone
has any cautions, potential pitfalls or tips before I do so.  I'm also
curious if my existing Declude Imail Perpetual License (that is currently
running with Imail) will work with SmarterMail? 

 

Thanks!

 

Wolf


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Image spam

2007-03-08 Thread Kevin Bilbee
 

The way it was explained to me is as follows.

If you have customers you charge for email hosting you are hosting company.

If you are a company with multiple domains you are not. We have multiple 
domains and use CommTouch. We have domains for multiple divisions.

 

 

 

Kevin Bilbee

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom
Sent: Thursday, March 08, 2007 8:06 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Image spam

 

I'm confused.  I understood that if you host multiple email domains on a mail 
server that you're considered a hosting company and can't purchase commtouch?  
At least I vaguely recall something to that affect.  I checked Declude's site 
and I don't see commtouch listed on there anywhere (it used to be) other than 
under technology partners.

 

Obviously, I'm missing something.  So what is the scoop?  

 

I need an image spam solution.  I followed this discussion, but I didn’t see 
much talk about what people are actually using that currently works well for 
them.  

 

I would most appreciate it if you would share your method for dealing with 
image spam.

 

We have on particular spam that comes through multiple times every day.  Its 
getting tiring.  There isn’t enough other things wrong with the message to 
block it.

 

 

  _  

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kelly Scotto
Sent: Wednesday, February 21, 2007 1:04 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Image spam

 

Thank you I will check these out.

 

Kelly

 

  _  

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Wednesday, February 21, 2007 12:08 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Image spam

Declude and Image based spam - 4 methods

1. COMMTOUCH

Commtouch Recurrent Pattern Detection contains an intrinsic mechanism to 
exact-match recurrent patterns across similar but not-identical messages. 
However in the case of images, the minute the spammer makes even the smallest 
changes to an image, the image-encoded data appears completely different. 
Commtouch identified this trend in the earliest days of image-based spam, and 
made the necessary enhancements to its detection engine in order to defend 
against this new threat with a sophisticated protection shield. Commtouch 
invested significant resources into developing a method for decoding the images 
and then sampling them using the proven RPD approach. The result is a 
significantly improved spam detection rate, while maintaining the same low 
false-positive rate.

2. CLAMWIN

Using ClamAV as a virus scanner with Declude you can download the 
MSRBL-Images.hdb file which has additional signatures (MD5 sigs) which contains 
signatures created from images contained within spam emails. 
http://www.msrbl.com/site/msrblimagesdownload

3. FILTER-CID

Identifies emails which contains images increasing the weight suffeciently on 
spam messages to reach the spam threshold.

#EXCEPTIONS
BODYENDNOTCONTAINScid:
BODYENDNOTCONTAINSContent-Type: image/

#IMAGES
BODY3CONTAINSsrc=3Dcid:
BODY3CONTAINSsrc=cid:
BODY3CONTAINSsrc='cid:

BODY3CONTAINSimg src=cid:
BODY3CONTAINSimg src=3Dcid:

BODY3CONTAINS/cid:

#IMAGE TYPES
BODY2CONTAINSContent-Type: image/gif;
BODY2CONTAINSContent-Type: image/jpeg;

4. VAMSOFT IMAGE SPAM AGENT

This tool is an External Agent for ORF 2.1 and newer versions that improves ORF 
by image spam detection capabilities, but can be used by Declude. 
http://www.vamsoft.com/vsimagespam/vsimagespam.zip

VSIMAGE   externalnonzero[path]\Declude\VSIMAGE\imgspamagent.exe 
-check 40

 

David Barker
Director of Product Management
Your Email security is our business
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]

 

  _  

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kelly Scotto
Sent: Wednesday, February 21, 2007 11:47 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Image spam

Has there been a declude filter created for blocking or identifying image spam? 
If so can somebody post it for me to try.

 

Thank You,

Kelly

 

 

 

 

 

 

 

 

 

 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com

RE: [Declude.JunkMail] SmarterMail Admins - Relay Hole

2007-02-07 Thread Kevin Bilbee
In the meantime a javascript could be added to the form to validate the 
password supports your requirements. I have done this with other parts of the 
interface. Like only allowing forwarding email to the same domain and Removing 
unwanted report as spam button.

 

Kevin Bilbee

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists)
Sent: Wednesday, February 07, 2007 8:41 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] SmarterMail Admins - Relay Hole

 

Well, might be news to you but Imail has the same problem. There was discussion 
about this on the Imail list awhile back and IIRC Kevin said it is now on the 
list of features to be added.

 

John T

 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Jaworski
Sent: Wednesday, February 07, 2007 6:30 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] SmarterMail Admins - Relay Hole

 

We have been using Declude, Sniffer and invURIBL for years now with great 
success. But yesterday we got bit by a phish attack through SmarterMail. They 
used SMPT authentication to bypass all the time and money we spent on defenses 
against the bad guys. The root of the problem:  SmarterMail is lacking simple 
password rules.  For more of the story see: 

 

http://forums.smartertools.com/forums/27627/ShowThread.aspx#27627

 

Michael


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] SmarterMail Experiences

2007-01-29 Thread Kevin Bilbee
We switched and going from 8.22 to SmarterMail was painless for our users. We 
actually got positive feedback from all except a few that would complain about 
paying taxes on winning the lottery.

SmarterMail also does not have program aliases.


Kevin Bilbee


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Bill Green dfn Systems
 Sent: Monday, January 29, 2007 10:50 AM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] SmarterMail Experiences
 
 Well now that we have moved from IMail 8.15 to 8.22, we are now
 experiencing
 the problem where Declude needs to be restarted regularly to correct an
 apparent memory leak. I remember following threads about this problem
 and
 how the upgrade to IMail 2006.1 generally solved the problem.
 
 Since we are going to have to change to the new IMail platform anyway
 and
 our support agreement is up for renewal, I have been reviewing
 SmarterMail.
 The apparent benefits I've seen so far are lower cost, lower resource
 utilization (especially WebMail), and support beyond IMail's 8X5 hours.
 
 The only downsides I see so far are user re-education, and that it
 seems to
 lack SMTP Relay for specified IPs.
 
 So, Would any SmarterMail Admins like to share from actual experience
 to
 date?
 
 Bill Green
 dfn Systems
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] SmarterMail Experiences

2007-01-29 Thread Kevin Bilbee
Not true you can allow IP addresses to send unauthenticated. We do it.

Security - SMPT Authentication Bypass

Place your IP addressed in there and no auth needed.

We are running 3.3.2439



Kevin Bilbee



 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Bill Green dfn Systems
 Sent: Monday, January 29, 2007 5:14 PM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] SmarterMail Experiences
 
  Can you elaborate on lack SMTP Relay for specified IPs.?  I thought
 you
  could whitelist IP addresses in SmarterMail.  Or is this totally
  different?
 
 Mike,
 
 Let me state it another way. IMail will allow users to send without
 authentication, but only for a certain IP range. SmarterMail seems to
 only
 have 2 options. Authentication required, or totally Open Relay.
 
 Bill Green
 dfn Systems
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Weird email problem

2007-01-25 Thread Kevin Bilbee
Looks to me there was a problem with the original transmission and the message 
was resent after a timeout period. If it was the same message then the queue 
numbers would be the same.

 

 

I would not worry too much about it unless you see a pattern. These things 
happen from time to time.

 

 

 

Kevin Bilbee

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharyn Schmidt
Sent: Thursday, January 25, 2007 8:24 AM
To: Imail_Forum@list.ipswitch.com
Cc: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Weird email problem

 

I'm having a REALLY WEIRD email problem, makes me feel like I'm in the twilight 
zone… 

One of my users reported that she did not receive an email from [EMAIL 
PROTECTED] until TODAY, but the email was sent on Tuesday, 1/23, at 10:28am. 
She forwarded me a copy of the email. The following is from my Imail log from 
1/23...

 

01:23 10:31 SMTPD(2a4b22aaf903) [24.73.160.163] connect 64.168.89.133 port 
23634 

01:23 10:31 SMTPD(2a4b22aaf903) [64.168.89.133] EHLO WDL.wilsondaniels.com 

01:23 10:31 SMTPD(2a4b22aaf903) [64.168.89.133] MAIL FROM:[EMAIL 
PROTECTED] 

01:23 10:31 SMTPD(2a4b22aaf903) [64.168.89.133] RCPT TO:[EMAIL PROTECTED] 

After this line, there is NOTHING else. The whole process for this email just 
seems to stop. In the IMAIL log for that day, I did a search for the 
d2a4b22aaf903.smd and the q2a4b22aaf903.smd, but turned up absolutely 
nothing.

I did searches in both my Declude Junkmail and virus logs for the q and d files 
as well, nothing. I did searches in my logs on 1/24 and still turned up 
nothing. In the 1/23 Junkmail log, I even used the email address, [EMAIL 
PROTECTED], and came up with nothing.

Then, I looked in todays log, at the time that the user finally received the 
message. Here is the log entry from Imail: 

 

01:25 08:10 SMTPD(ac2c2766c9d4) [64.168.89.133] EHLO WDL.wilsondaniels.com 

01:25 08:10 SMTPD(ac2c2766c9d4) [64.168.89.133] MAIL FROM:[EMAIL 
PROTECTED] 

01:25 08:10 SMTPD(ac2c2766c9d4) [64.168.89.133] RCPT TO:[EMAIL PROTECTED] 

01:25 08:10 SMTPD(ac2c2766c9d4) [64.168.89.133] 
D:\IMAIL\spool\Dac2c2766c9d4.SMD 958 

01:25 08:10 SMTPD(ac2c2766c9d4) performing antispam checks 

That's it for the log entry in Imail. I checked the Declude Junkmail log, and 
found the following, below. Please note that the entire @wilsondaniels.com 
domain is whitelisted. Also, my user DID indeed receive this message, today, 2 
days later. Going by the subject line (Good morning), it looks like the message 
that was send on Tues, even though the spool file names are different. Can 
anyone clue me in on what is going on here? This isnt the only message from 
wilsondaniels that was sent on Tues and received today. I just havent gotten 
the log entries for the other ones yet.

 

Rec'd the message on 1/25, log entry in Declude Junkmail log: 
01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist 
(63.246.13.90).  nm= 
01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist 
(192.168.100.0/24).  nm=ff00 
01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist 
(192.168.110.0/24).  nm=ff00 
01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist 
(192.168.120.0/24).  nm=ff00 
01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist 
(192.168.130.0/24).  nm=ff00 
01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist 
(192.168.140.0/24).  nm=ff00 
01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist 
(192.168.150.0/24).  nm=ff00 
01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist 
(10.10.100.0/24).  nm=ff00 
01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist 
(24.73.160.164).  nm= 
01/25/2007 08:10:18.125 qac2c2766c9d4.smd Filter URLfilter: Not skipping 
E-mail due to current weight  of 20. 
01/25/2007 08:10:18.156 qac2c2766c9d4.smd Filter InBodyFilter: Not skipping 
E-mail due to current  weight of 20. 
01/25/2007 08:10:18.171 qac2c2766c9d4.smd Filter InHeadersFilter: Not 
skipping E-mail due to current  weight of 20. 
01/25/2007 08:10:18.187 qac2c2766c9d4.smd Filter FILTER-ADULT: Not skipping 
E-mail due to current  weight of 20. 
01/25/2007 08:10:18.203 qac2c2766c9d4.smd Filter FILTER-MEDICAL: Not 
skipping E-mail due to current  weight of 20. 
01/25/2007 08:10:18.218 qac2c2766c9d4.smd FROMNOMATCH:3 HELOBOGUS:5 
MAILFROM:12 .  Total weight = 20. 
01/25/2007 08:10:18.218 qac2c2766c9d4.smd Tests failed [weight=20]: 
CATCHALLMAILS=IGNORE[0]  NOLEGITCONTENT=IGNORE[0] IPNOTINMX=IGNORE[0] 
FROMNOMATCH=IGNORE[3] HELOBOGUS=IGNORE[5]  MAILFROM=IGNORE[12] 
WEIGHT10=IGNORE[10] WEIGHT12=IGNORE[12] 

01/25/2007 08:10:18.218 qac2c2766c9d4.smd Msg failed FROMNOMATCH (Env 
sender  ([EMAIL PROTECTED

RE: [Declude.JunkMail] Solution for tooo much junkmail?

2006-12-22 Thread Kevin Bilbee
Setup a blacklist and start blocking the IP ranges of the Home-Based
systems. Take the offending IP addresses and use ARIN to look up the ip
range of the offending ISP. You may even be able to call the ISP to get
their non-business ip ranges.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of J
 Porter
 Sent: Friday, December 22, 2006 2:38 AM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Solution for tooo much junkmail?
 
 We're all seeing it... My log files have increased over 30% in recent
 times
 as I'm sure yours have too. Through due diligence we stop an awful lot,
 but
 much still gets by.
 
 But we're being active after the fact. Is there anyone who has
 knowledge of
 what virus and/or trojan is causing all of this great increase in
 activity??
 The biggest thing we do know is that the majority of it is coming from
 our
 neighbors: the home-based systems on dial-up, DSL and cable.
 
 I'd like to be more proactive and go on an education crusade to
 provide
 folks with the knowledge of how to detect if their systems are infected
 and
 what to do about it, but I have no idea of what to look for or what
 software
 to use to fix it.
 
 Anyone with some leads on finding the ultimate sources that's creating
 all
 these zombies??
 
 ~Joe
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] Avast antivirus

2006-12-15 Thread Kevin Bilbee
Does anyone have experience with Avast as an Antivirus solution for the 
desktop. It also comes with a command line scanner. They have a server edition 
also.

 

 

 

Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 



 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] AVG

2006-12-15 Thread Kevin Bilbee
We have abandonded F-Prot due to the excessive pricing modle. We have
Symantec gateways that deliver to SmarterMail with declude/AVG.
 
 
 
Kevin Bilbee

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge
Sent: Friday, December 15, 2006 5:33 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] AVG


 
 
For those on 4.2.X, are you still using Fprot and/or McAfee ..., or are
sticking with buit in AVG alone ?

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] OT: Interesting Discussions

2006-12-14 Thread Kevin Bilbee
Hear,Hear. That was great entertainment.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
 Behalf Of John T (Lists)
 Sent: Thursday, December 14, 2006 5:03 PM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] OT: Interesting Discussions
 
 
 Please, no one take this the wrong way, it is only meant in fun:
 
 I actually miss the twice annual entertaining discussions on 
 the Imail forum between Scott and Len with Sandy added for spice.
 
 Popcorn anyone?
 
 ;-)
 
 John T
 eServices For You
 
 Life is a succession of lessons which must be lived to be 
 understood. Ralph Waldo Emerson (1802-1882)
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
 type unsubscribe Declude.JunkMail.  The archives can be 
 found at http://www.mail-archive.com.
 




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Suggestion for Junkmail....

2006-12-06 Thread Kevin Bilbee
I agree. But rarely see an issue.


Kevin

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS
 - Systems Eng. (Karl Drugge)
 Sent: Wednesday, December 06, 2006 8:00 AM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Suggestion for Junkmail
 
 Just a quick suggestion, may even save programming time...
 
 
 Please leave the log file formats and entries alone.. It REALLY plays
 hell with my automated scripts and programs when keywords, field
 lengths, and schema are altered ( seemingly at random ) from version to
 version.
 
 I know I can't be alone on this..
 
 
 Karl Drugge
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Declude and Bayesian Filtering

2006-11-17 Thread Kevin Bilbee
Have you looked at the Commtouch ZEROHOUR add in. It has done wonders for us.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Michael Cummins
 Sent: Friday, November 17, 2006 8:22 AM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Declude and Bayesian Filtering
 
 I'd really like to get into Bayesian filtering.  Declude / Message
 Sniffer /
 invURIBL just aren't catching enough for me.
 
 ...are there any plans to include it in the Declude product?
 
 ...any third-party products available?
 
 I suppose I could do it with a gateway concept like PirateFish or
 IMGate,
 and I know that SmarterMail and iMail both offer options (I have a mix
 of
 both kinds in my network) but I'd really like to see something offered
 at
 the Declude level so I can have more uniform / better control over the
 whole
 process.
 
 Any ideas?  Feel free to hit me with a clue bat.  :)
 
 -- Michael Cummins
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Declude and Bayesian Filtering

2006-11-17 Thread Kevin Bilbee
Well that sucks, I wonder when they are going to get that issue ironed out.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Michael Cummins
 Sent: Friday, November 17, 2006 9:30 AM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] Declude and Bayesian Filtering
 
 Sadly, no.  I think that I would be considered an ISP, I manage about
 250
 domains or so.  I saw a warning on the DECLUDE site about that, so I
 never
 really looked any further.
 
 -- Michael Cummins
 
 
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Kevin
 Bilbee
 Sent: Friday, November 17, 2006 12:09 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] Declude and Bayesian Filtering
 
 Have you looked at the Commtouch ZEROHOUR add in. It has done wonders
 for
 us.
 
 
 Kevin Bilbee
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] email from Lotus Notes - MEssage LAbs - body is blank

2006-11-14 Thread Kevin Bilbee









Is Declude set to add a footer? If so remove the footer option.
Declude will corrupt a base 64 email, resulting in a blank email.







Kevin Bilbee







From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Tuesday, November 14, 2006 6:12 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] email from Lotus Notes - MEssage LAbs - body
is blank







Has
anybody seen emails that come from a Lotus Notes system using Message Labs –
the body is blank. A client is getting these from a known user. Declude 4.2
with Smartermail 3.x and Message Sniffer



Here
is the header:



Return-Path: [EMAIL PROTECTED] Thu Nov 09 16:50:27 2006

Received: from mail99.messagelabs.com (216.x.x.x] by
smmail.305spin.com with SMTP;

 Thu, 9 Nov 2006 16:50:27 -0600

Received: (qmail 7871 invoked from network); 9 Nov 2006 22:54:15
-

Received: from mail.reallybigco.com (HELO mail.reallybigco.com)
(65.x.x.x)

 by server-9.tower-99. messagelabs.com with SMTP; 9 Nov 2006
22:54:15 -

X-VirusChecked: Checked

X-Env-Sender: [EMAIL PROTECTED]

X-Msg-Ref: server-9.tower-99. messagelabs.com!1163112855!16659785!1

X-StarScan-Version: 5.5.10.7; banners=-,-,-

X-Originating-IP: [65.x.x.x]

Subject: SPAM-LOW: Fw: REG Strategic Advisory Board

To: [EMAIL PROTECTED]

X-Mailer: Lotus Notes Release 6.5 September 26, 2003

Message-ID:
[EMAIL PROTECTED]

From: [EMAIL PROTECTED]

Date: Thu, 9 Nov 2006 16:54:14 -0600

X-MIMETrack: Serialize by Router on Notes01/reallybigco(Release
6.5.4|March 27, 2005) at

11/09/2006 04:54:15 PM

MIME-Version: 1.0

Content-type: text/plain; charset=UTF-8

Content-transfer-encoding: base64

X-Declude-Sender: [EMAIL PROTECTED] [216.x.x.x]

X-Declude-Spoolname: -1082417288811.eml

X-Declude-Note: Scanned by Declude 4.2.12 for spam.
http://www.declude.com/x-note.htm

X-Declude-Scan: Incoming Score [7] at 16:50:49 on 09 Nov 2006

X-Declude-Fail: BASE64 [4], FROMNOMATCH [3]

X-Country-Chain: UNITED STATES-destination





John
Moore

305
Spin, Inc.

511
S Ohio Avenue

Sedalia,
MO 65301

660.827.3056
office

660.829.3056
fax

660.221.1301
cell

www.305spin.com

Technology
Solutions for Growing Brands Since 1993




---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 







---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] delete mails before processing / 100% CPU / per domain config

2006-11-14 Thread Kevin Bilbee
Yes, Declude can look at all the IPs in the connecting path. Or it can just 
skip you IPs and look at the connecting IP so many hops away.


Kevin

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Doug Traylor
 Sent: Tuesday, November 14, 2006 2:08 PM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] delete mails before processing / 100%
 CPU / per domain config
 
 On 11/14/06, netsolution webmaster [EMAIL PROTECTED] wrote:
  Sounds good - do you have more details (short instructions) on how to
  set that up combined with declude/imail?
 
 Hah!  Me?  Short instructions?
 I can't give short instructions on how to tie a shoe! :o)
 
 Setting up ASSP/hMailserver/ClamAV/Imail/Declude will be a fairly long
 process with the good news that not much has to change for your
 Imail/Declude setup except the listen port and the SMTP delivery
 gateway:port.  If you add hMailserver as a gateway and use Declude
 Junkmail to do connection based analysis (spf, rbl, helo, etc.) using
 the sending IP, you will be disappointed to find the the sending IP
 will now be your own server and unless you have the premium version of
 Declude Junkmail it will no longer be useful to compare the sending
 IP.  I believe the premium version of Declude will look at all the
 IP's in the path and potentially exclude your servers.  Not sure about
 that one.  The good news is that with ASSP in front, you may not miss
 it.  Using ASSP alone in front of Imail/Declude should allow Declude
 connection tests to continue to work.
 
 Since this is a Declude list I will spare the other members the horror
 of reading about another product's installation steps and send you a
 synopsis directly to your list address if that is OK.
 
 For those interested, I say check out the links in my earlier post for
 ASSP, www.hmailserver.com for that and
 http://www.sosdg.org/clamav-win32/ for ClamAV on Windows.
 and once installed, to integrate clamav with hmailserver;
 http://www.hmailserver.com/forum/viewtopic.php?t=2139
 
 Doug Traylor
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] IPBYPASS with multiple domains

2006-11-14 Thread Kevin Bilbee
Yes use IP bypass. Hop High will work for all emails. IPBYPASS will only work 
against known IP addresses.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Bill Green dfn Systems
 Sent: Tuesday, November 14, 2006 4:11 PM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] IPBYPASS with multiple domains
 
 I have a customer whose email domain we are hosting who recently began
 using
 Postini. This is the first time I've had to deal with a gateway. The
 documentation is pretty clear, but I do have one question. Since the
 gateway
 is only for one domain, will IPBYPASS work without interfering with the
 other domains? Or will I have to use HOPHIGH to catch them all?
 
 Bill Green
 dfn Systems
 [EMAIL PROTECTED]
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] 2001 Virus got past declude

2006-11-09 Thread Kevin Bilbee








I know why the virus got past Declude but I would like to
know how to stop it in the future.



We have the AFTERJUNKMAIL directive on. So the message was
trapped as spam and then when the user re-queued the message it was delivered
to the users mailbox. Is there a way to get Declude to virus scan messages that
have been re-queued and not do the spam checks?



What I am unclear on is how Declude interacts with
SmarterMail



This is what I think happens.

1.
SmarterMail 3.x receives a message and places it into
the proc folder for Declude to process it

2.
On HOLD action Declude moves the message to the hold
folder

3.
A message is re-queued into the SmarterMail spool folder
with an “X” pre-prepended to the file name.

4.
SmarterMail then delivers the message to the mailbox



Does Declude ever see a message that has been placed back
into the SmarterMail spool?

Should I be placing these messages back into the proc folder
for Declude to move them to the spool folder





I would like to see Declude virus scan all message that are
not deleted by JunkMail even if they are held.







Kevin Bilbee







---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] End of headers {was - declude not modifying subject line}

2006-11-09 Thread Kevin Bilbee
OK sounds reasonable. Since you are the expert and I am trying to understand. 
Have you ever seen a legitimate message with a no real end of headers, where 
the two line terminators designating the end of headers are separated by more 
than white space, tab or space characters?



Kevin

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 David Franco-Rocha [ Declude ]
 Sent: Thursday, November 09, 2006 5:32 AM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] declude not modifying subject line
 
 Kevin,
 
 I am very well aware of what byte sequences constitute the end of a
 line.
 However, if the problem were this simple it would have been fixed long
 ago.
 Contrary to what some have said here, we have seen many instances where
 IMail likewise appends its headers to the end of the message.
 
 The broken line terminators are not necessarily of the same type in a
 given
 message. In addition, they are not necessarily adjacent to each other
 (with
 leading whitespace or unprintable characters on a line). What may
 appear
 obvious to the eye is often not at all what exists behind the scene.
 You may
 look at a message and be certain where the headers end and the body
 begins
 (the separating blank line). However, that message may not necessarily
 contain two consecutive EOL sequences of any type anywhere.
 
 David Franco-Rocha
 
 - Original Message -
 From: Kevin Bilbee [EMAIL PROTECTED]
 To: declude.junkmail@declude.com
 Sent: Wednesday, November 08, 2006 5:45 PM
 Subject: RE: [Declude.JunkMail] declude not modifying subject line
 
 
 I do not understand why you need to rewrite the message beyond what you
 already do? Just determine the end of headers properly then rewrite the
 message with your headers in the proper location. You already rewrite
 the
 message when adding headers so why would it take any longer to properly
 detect the end of headers.
 
 If you have two LF sequences next to each other ignoring the CR then
 you
 have the end of headers.
 
 For example if you have
 
 CRLFCRLF
 
 OR
 
 LFCRLFCR
 
 OR
 
 LFLF
 
 I have never seen a message use CR alone for an end of line.
 
 There are two LF bytes in each sequence ignore the CR bytes. Then when
 writing out the message with the Declude headers include the original
 byte
 sequences for each line. And the Declude lines should have the proper
 CRLF
 sequences.
 
 
 My two cents!
 
 
 Kevin Bilbee
 
 
 
 
 
  1. I don't like to keep going in circles on this. If it was as easy
 as
  just
  fix it there would be no issue. Please understand that this is a lot
  more
  complex than you may realize, we are considering making the fixing of
  line
  terminators as an optional feature to be turned on/off because of a
  potential performance degradation of rewriting the messages.
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] 2001 Virus got past declude

2006-11-09 Thread Kevin Bilbee








I was afraid of that. It would
be great to be able to re-queue and only virus scan or better yet virus can all
message that do not get deleted by junkmail including held messages. Then if
HELD and VIRUS the hold as virus not as spam.





Kevin Bilbee







From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED])
Sent: Thursday, November 09, 2006 12:57 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] 2001 Virus got past declude









Kevin,











It's
my understanding that newer versions of Smartermail do not require the file to
have the X prepended. When the user requeues the message do
you drop it into the smartermail spool or the declude proc directory? In
order for it to be rescanned by Declude you need to drop it into the proc
folder. Also, there is no way to the best of my knowledge to say just
virus process this requeued message.











Maybe
you can (on the requeue process) append somethign to the message that Declude
Junkmail will force it to be whitelisted. THis way it wont be held again
but will get processed by declude virus.











Darrell












Check out http://www.invariantsystems.com
for utilities for Declude And Imail. IMail/Declude Overflow Queue
Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers.







-
Original Message - 





From: Kevin Bilbee 





To: JunkMail
Declude 





Sent: Thursday, November
09, 2006 2:42 PM





Subject: [Declude.JunkMail]
2001 Virus got past declude









I know why the virus got past Declude but I would like to
know how to stop it in the future.



We have the AFTERJUNKMAIL directive on. So the message was
trapped as spam and then when the user re-queued the message it was delivered
to the users mailbox. Is there a way to get Declude to virus scan messages that
have been re-queued and not do the spam checks?



What I am unclear on is how Declude interacts with
SmarterMail



This is what I think happens.

1.
SmarterMail 3.x receives a message and places it into the proc folder
for Declude to process it

2.
On HOLD action Declude moves the message to the hold folder

3.
A message is re-queued into the SmarterMail spool folder with an “X”
pre-prepended to the file name.

4.
SmarterMail then delivers the message to the mailbox



Does Declude ever see a message that has been placed back
into the SmarterMail spool?

Should I be placing these messages back into the proc folder
for Declude to move them to the spool folder





I would like to see Declude virus scan all message that are
not deleted by JunkMail even if they are held.







Kevin Bilbee


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 




---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 







---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] declude not modifying subject line

2006-11-08 Thread Kevin Bilbee
I do not understand why you need to rewrite the message beyond what you already 
do? Just determine the end of headers properly then rewrite the message with 
your headers in the proper location. You already rewrite the message when 
adding headers so why would it take any longer to properly detect the end of 
headers.

If you have two LF sequences next to each other ignoring the CR then you have 
the end of headers. 

For example if you have

CRLFCRLF

OR

LFCRLFCR

OR 

LFLF

I have never seen a message use CR alone for an end of line.

There are two LF bytes in each sequence ignore the CR bytes. Then when writing 
out the message with the Declude headers include the original byte sequences 
for each line. And the Declude lines should have the proper CRLF sequences.


My two cents!


Kevin Bilbee




 
 1. I don't like to keep going in circles on this. If it was as easy as
 just
 fix it there would be no issue. Please understand that this is a lot
 more
 complex than you may realize, we are considering making the fixing of
 line
 terminators as an optional feature to be turned on/off because of a
 potential performance degradation of rewriting the messages.
 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Help with Configuration

2006-11-07 Thread Kevin Bilbee
Look at using weightrange instead of weight to define your weighted tests. It 
simplifies the weighting and makes it clear on what will happen to the message.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Todd Richards
 Sent: Tuesday, November 07, 2006 11:19 AM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Help with Configuration
 
 Hey Everyone -
 
 We are just getting things tuned to the point where we are truly happy
 with
 the results we are seeing.  What I am trying to do now is help myself
 monitor the close calls.  I was sending everything between caught
 and
 delete to a spam mailbox so that I could check for any false
 positives.
 However, with my new success, that is getting out of hand.  So what I
 would
 like to do is set up a new account to help with the overflow and allow
 me to
 really monitor the close ones.
 
 Here is my weights in my global.cfg file:
 
 WEIGHT10  WARN
 WEIGHT15  WARN
 WEIGHT19  HOLD
 WEIGHT32  HOLD
 WEIGHT60  DELETE
 
 Here is the corresponding actions that I have in my $default$.junkmail
 file:
 
 WEIGHT10  WARN
 WEIGHT15  SUBJECT **SPAM**
 WEIGHT19  ROUTETO [EMAIL PROTECTED]
 WEIGHT19a  SUBJECT [%WEIGHT%]
 WEIGHT32  ROUTETO [EMAIL PROTECTED]
 WEIGHT32a  SUBJECT [%WEIGHT%]
 WEIGHT60  DELETE
 
 My plan with the above is to send everything with a weight of 19-31 to
 [EMAIL PROTECTED], and everything from 32-59 to [EMAIL PROTECTED]  What
 I am
 hoping to accomplish by this is to keep a closer eye on those email
 that
 might accidentally be caught.  Right now, 95% of the messages are
 ending up
 in the [EMAIL PROTECTED] mailbox even if they are above the WEIGHT32
 (which
 should then go to spam2).  However, it does appear that everything
 over 60
 is being deleted.  I've checked all of the config files to make sure I
 have
 things set up right, and it does appear that way.  Am I missing
 something,
 or is there something diferent that I should be doing?
 
 Thanks!
 
 Todd
 
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Help with Configuration

2006-11-07 Thread Kevin Bilbee
This is how we have our server setup

SPAM-LOWweightrange x   x   8   13
SPAM-MEDweightrange x   x   14  24
SPAM-HIGH   weight  x   x   25  0

SPAM-LOWSUBJECT [ SPAM %WEIGHT% ]
SPAM-MEDHOLD
SPAM-HIGH   DELETE


So this way we know exactly what will happen for each weight without question? 
So for your configuration change the weights for your config and change HOLD to 
ROUTETO...

Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Todd Richards
 Sent: Tuesday, November 07, 2006 2:50 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] Help with Configuration
 
 Thanks Kevin.  This is what I was wondering about, so I will look into
 how
 to implement.
 
 Todd
 
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Kevin
 Bilbee
 Sent: Tuesday, November 07, 2006 2:58 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] Help with Configuration
 
 Look at using weightrange instead of weight to define your weighted
 tests.
 It simplifies the weighting and makes it clear on what will happen to
 the
 message.
 
 
 Kevin Bilbee
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
  Todd Richards
  Sent: Tuesday, November 07, 2006 11:19 AM
  To: declude.junkmail@declude.com
  Subject: [Declude.JunkMail] Help with Configuration
 
  Hey Everyone -
 
  We are just getting things tuned to the point where we are truly
 happy
  with the results we are seeing.  What I am trying to do now is help
  myself monitor the close calls.  I was sending everything between
  caught
  and
  delete to a spam mailbox so that I could check for any false
  positives.
  However, with my new success, that is getting out of hand.  So what I
  would like to do is set up a new account to help with the overflow
 and
  allow me to really monitor the close ones.
 
  Here is my weights in my global.cfg file:
 
  WEIGHT10  WARN
  WEIGHT15  WARN
  WEIGHT19  HOLD
  WEIGHT32  HOLD
  WEIGHT60  DELETE
 
  Here is the corresponding actions that I have in my
 $default$.junkmail
  file:
 
  WEIGHT10  WARN
  WEIGHT15  SUBJECT **SPAM**
  WEIGHT19  ROUTETO [EMAIL PROTECTED]
  WEIGHT19a  SUBJECT [%WEIGHT%]
  WEIGHT32  ROUTETO [EMAIL PROTECTED]
  WEIGHT32a  SUBJECT [%WEIGHT%]
  WEIGHT60  DELETE
 
  My plan with the above is to send everything with a weight of 19-31
 to
  [EMAIL PROTECTED], and everything from 32-59 to [EMAIL PROTECTED]
  What I am hoping to accomplish by this is to keep a closer eye on
  those email that might accidentally be caught.  Right now, 95% of the
  messages are ending up in the [EMAIL PROTECTED] mailbox even if they
  are above the WEIGHT32 (which should then go to spam2).  However,
 it
  does appear that everything over 60 is being deleted.  I've checked
  all of the config files to make sure I have things set up right, and
  it does appear that way.  Am I missing something, or is there
  something diferent that I should be doing?
 
  Thanks!
 
  Todd
 
 
 
 
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
  unsubscribe Declude.JunkMail.  The archives can be found at
  http://www.mail-archive.com.
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe,
 just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
 Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Help with Configuration

2006-11-07 Thread Kevin Bilbee








Yea, but the last line should only be weight



WEIGH.SPAM.XHIGH  weigh
x x 270



With this as your last weight all messages with a weight of
27 or higher will trigger this test.





Kevin Bilbee









From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer
Sent: Tuesday, November 07, 2006 3:13 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Help with Configuration








Todd Richards wrote: 

Thanks Kevin.  This is what I was wondering about, so I will look into howto implement.  

something like this:
WEIGHTRANGE.SPAM.LOW 
weightrange x x
10 12triggered on a weight of
10 to 12 inclusive
WEIGHTRANGE.SPAM.MID 
weightrange x x
13 15
WEIGHTRANGE.SPAM.HIGH 
weightrange x x
16 18
WEIGHTRANGE.SPAM.VHIGH 
weightrange x x
19 26
etc

and then subject tag on the hits
WEIGHTRANGE.SPAM.LOW SUBJECT [Possible Spam(low)]- 
WEIGHTRANGE.SPAM.MID SUBJECT [Possible Spam(mid)]- 
WEIGHTRANGE.SPAM.HIGH SUBJECT [Possible Spam(high)]- 
WEIGHTRANGE.SPAM.VHIGH SUBJECT [Possible Spam(vhigh)]- 
WEIGHTRANGE.SPAM.XVHIGH SUBJECT [Possible Spam(Xvhigh)]- 
etc

-Nick




Todd -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of KevinBilbeeSent: Tuesday, November 07, 2006 2:58 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Help with ConfigurationLook at using weightrange instead of weight to define your weighted tests.It simplifies the weighting and makes it clear on what will happen to themessage.Kevin Bilbee  

-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Todd RichardsSent: Tuesday, November 07, 2006 11:19 AMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] Help with ConfigurationHey Everyone -We are just getting things tuned to the point where we are truly happy with the results we are seeing.  What I am trying to do now is help myself monitor the close calls.  I was sending everything between caughtanddelete to a spam mailbox so that I could check for any false positives.However, with my new success, that is getting out of hand.  So what I would like to do is set up a new account to help with the overflow and allow me to really monitor the close ones.Here is my weights in my global.cfg file:WEIGHT10  WARNWEIGHT15  WARNWEIGHT19  HOLDWEIGHT32  HOLDWEIGHT60  DELETEHere is the corresponding actions that I have in my $default$.junkmailfile:WEIGHT10  WARNWEIGHT15  SUBJECT **SPAM**WEIGHT19  ROUTETO [EMAIL PROTECTED]WEIGHT19a  SUBJECT [%WEIGHT%]WEIGHT32  ROUTETO [EMAIL PROTECTED]WEIGHT32a  SUBJECT [%WEIGHT%]WEIGHT60  DELETEMy plan with the above is to send everything with a weight of 19-31 to [EMAIL PROTECTED], and everything from 32-59 to [EMAIL PROTECTED].  What I am hoping to accomplish by this is to keep a closer eye on those email that might accidentally be caught.  Right now, 95% of the messages are ending up in the [EMAIL PROTECTED] mailbox even if they are above the WEIGHT32 (which should then go to spam2).  However, it does appear that everything over 60 is being deleted.  I've checked all of the config files to make sure I have things set up right, and it does appear that way.  Am I missing something, or is there something diferent that I should be doing?Thanks!Todd---This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.  The archives can be found at http://www.mail-archive.com.    

---This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,just send an E-mail to [EMAIL PROTECTED], and type unsubscribeDeclude.JunkMail.  The archives can be found athttp://www.mail-archive.com.---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail.  The archives can be foundat http://www.mail-archive.com.  


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.







---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] blocking GIF attachments again ...

2006-11-07 Thread Kevin Bilbee
If you are not an ISP get the commtouch ZEROHOUR addin. It will block most
of the GIF attachments. The only downside I have noticed is it will also
trap the chain emails that users love to send to each other.

We added it and I removed some of my less productive tests from declude.

Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
 Behalf Of David Dodell
 Sent: Tuesday, November 07, 2006 9:06 PM
 To: Declude.JunkMail@declude.com
 Subject: [Declude.JunkMail] blocking GIF attachments again ...
 
 
 A few days ago I posted an inquiry asking if there was a way 
 to block  
 GIF attachments ... and several readers discouraged this since GIF  
 could be part of HTML email.
 
 However, today noticed at least 10 to 15 spam messages that got  
 through all the tests, that basically were GIF attachments.
 
 IF I block GIF attachments in Declude Virus, will this still allow  
 HTML included GIF's to pass through?
 
 Or is there a better way to test for attachments that are GIF to  
 solve this problem?
 
 David
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
 type unsubscribe Declude.JunkMail.  The archives can be 
 found at http://www.mail-archive.com.
 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] One step forward, ten back

2006-11-02 Thread Kevin Bilbee
Yes the can coexist but be sure to use weightrange to instead of weight.

SPAM-LOWweightrange x   x   8   13
SPAM-MEDweightrange x   x   14  24
SPAM-HIGH   weight  x   x   25  0

SPAM-LOWSUBJECT [%WEIGHT%]
SPAM-MEDHOLD
SPAM-HIGH   DELETE

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
 Behalf Of Dave Doherty
 Sent: Thursday, November 02, 2006 9:20 PM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] One step forward, ten back
 
 
  I wondered if it's
  possible to set another one higher to do the deleting, as 
 I'm seeing a 
  lot of stuff at 40 or more.
 
 Absolutely. Several action directives can coexist peacefully in your 
 $default$.junkmail file, like this:
 
 WEIGHT10 SUBJECT [%WEIGHT%]
 WEIGHT20 MAILBOX SPAM
 WEIGHT30 DELETE
 
 Any message scoring at least 10 will have the weight added at 
 the head of 
 the subject in brackets, like:
 
 [12] Buy My Stuff!
 
 Any message with 20-29 points will be diverted to the spam 
 folder, and 
 anything scoring 30+ will be deleted.
 
 
 
 
 - Original Message - 
 From: Todd Richards [EMAIL PROTECTED]
 To: declude.junkmail@declude.com
 Sent: Thursday, November 02, 2006 11:55 PM
 Subject: RE: [Declude.JunkMail] One step forward, ten back
 
 
 
  Thanks Dave.  Actually, I do, but with settings of weight20 
 send to 
  spam
  mailbox.  I was worried about too many false positives.  I 
 wondered 
  mailboxif
  it's
  possible to set another one higher to do the deleting, as 
 I'm seeing a 
  lot of stuff at 40 or more.
 
  As an update, I found that I had a discrepancy in my weights.  I 
  corrected that, and my filtering is doing great now.  I 
 logged into my 
  spam mailbox a little bit ago and the few hundred messages 
 that are in 
  there are definitely
  spam.  So it's catching things now and keeping them from my 
 mailbox - 
  which
  was my main goal.  However, now I'd like to clean things up 
 just a little
  more...
 
  Todd
 
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
  Dave Doherty
  Sent: Thursday, November 02, 2006 9:34 PM
  To: declude.junkmail@declude.com
  Subject: Re: [Declude.JunkMail] One step forward, ten back
 
  It seems like you're detecting things OK, but not taking 
 action on the 
  results.
 
  Make sure you have directives like
 
  WEIGHT14MAILBOX SPAM
  WEIGHT20DELETE
 
  in your default.junkmail file
 
 
 
 
  - Original Message -
  From: Todd Richards [EMAIL PROTECTED]
  To: declude.junkmail@declude.com
  Sent: Thursday, November 02, 2006 7:38 PM
  Subject: [Declude.JunkMail] One step forward, ten back
 
 
 
  Hi Everyone -
 
  We are getting completely hammered by spam and I'm about 
 at my wits 
  end. A few weeks ago I added a 30-day trial of Message 
 Sniffer and it 
  doesn't seem
  to be doing any good.  Today, I upgraded to the newest version of 
  Declude.
  I think everything went ok.  After reading through the 
 documentation
  (again) I went through my global.cfg file and cleaned up 
 some things that
  were questionable.  For instance, we had several domains 
 in the WHITELIST
  TO
  and WHITELIST FROM.  From what I've read and heard through 
 the lists, 
  it's
  not a good idea to whitelist anything.In fact, earlier 
 today I had
  some
  spam come through that was from a whitelisted domain so 
 it just let it
  through.  So I commented them out and planned to watch my 
 spam account
  (instead of deleting I have caught messages sent to 
 another account for
  review) to see the results.
 
  So...  This happened about 5pm tonight.  I went through a 
 short spurt 
  but in the last 90 minutes since then I alone have 
 received over 150 
  spam messages.
  Before I made my changes tonight, that is about the number I would 
  receive
  in one day (which is still too many).  In one message, 
 this was in the
  header.  To me, it should have failed and been stopped.
 
  X-Declude-Scan: Incoming Score [39] at 17:59:29 on 02 Nov 2006
  X-Declude-Fail: CBL [6], FIVETEN-SRC [4], SPAMCOP [7], REVDNS [8],
  ROUTING
  [2], SNIFFER [12], WEIGHT10 [10], WEIGHT14 [14], WEIGHT20 
 [20], WEIGHT20a
  [20]
 
  Does anyone have any suggestions to what I might be doing 
 wrong, or 
  what
  I
  should look at next?  Would anyone (off-list) be willing 
 to look at my
  config files and see if something is apparently wrong?  
 Are there any
  sample
  files where a newbie might be able to see how others have 
 theirs set up?
  I
  have been running Declude for over a year, and with the 
 exception of some
  minor tweaks, it's pretty much running out-of-the-box.  
 For those who
  are
  interested, I'm running Imail 8.22 (with latest hotfix) on 
 Windows 2000
  server, as well as the Declude Suite, Message Sniffer, and 
 inv-URBL 2.7.
 
  Thanks for any input or direction you can offer.
 
  Todd
 
 
 
 
 

RE: [Declude.JunkMail] FP reporting for ZEROHOUR

2006-11-01 Thread Kevin Bilbee
Declude has indicated to me that the line will be removable for users not 
running ZEROHOUR in a future version of Declude. It is currently hard coded to 
be displayed in all email headers Declude processes SAME for ZEROHOUR[0] in 
tests failed.



Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Gary Steiner
 Sent: Wednesday, November 01, 2006 11:54 AM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] FP reporting for ZEROHOUR
 
 So you are implying that those of us who are not running Commtouch, if
 we remove the ZEROHOUR statement from the global.cfg the X-Declude-
 RefID line in the headers will go away?
 
 (How to get rid of that line is a question that has been asked here
 before.)
 
 
 
  Original Message 
  From: David Barker [EMAIL PROTECTED]
  Sent: Wednesday, November 01, 2006 1:52 PM
  To: declude.junkmail@declude.com
  Subject: RE: [Declude.JunkMail] FP reporting for ZEROHOUR
 
  Ensure you running the latest version of Declude 4.x and that you
 have
  ZEROHOUR   14 in the global.cfg
 
  David B
 
_
 
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Jeff
  Sent: Wednesday, November 01, 2006 12:47 PM
  To: declude.junkmail@declude.com
  Subject: Re: [Declude.JunkMail] FP reporting for ZEROHOUR
 
 
  Thanks Kevin...
 
  Next question --  How can I have Declude add the X-Declude-RefID: to
 the
  header ??
 
  - Original Message -
  From: Kevin Bilbee mailto:[EMAIL PROTECTED]
  To: declude.junkmail@declude.com
  Sent: Wednesday, November 01, 2006 12:16 PM
  Subject: RE: [Declude.JunkMail] FP reporting for ZEROHOUR
 
 
  Here is the document Declude sent to me for reporting false positives
 and
  false negatives.
 
 
 
 
 
  Kevin Bilbee
 
 
 
 
 
 
 
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Ken
  Weise
  Sent: Wednesday, November 01, 2006 5:46 AM
  To: declude.junkmail@declude.com
  Subject: RE: [Declude.JunkMail] FP reporting for ZEROHOUR
 
 
 
  I was about to ask that myself. Also, the procedure for reporting
 spam that
  is not caught...
 
 
 
_
 
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Jeff
  Pereira
  Sent: Wednesday, November 01, 2006 8:25 AM
  To: declude.junkmail@declude.com
  Subject: [Declude.JunkMail] FP reporting for ZEROHOUR
 
  Hi -
 
  Does anyone know of the procedure for reporting FP results that are
 failing
  the ZEROHOUR test ?
 
  jeff
 
  ---
  This E-mail came from the Declude.JunkMail mailing list. To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail. The archives can be found
  at http://www.mail-archive.com.
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list. To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail. The archives can be found
  at http://www.mail-archive.com.
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list. To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail. The archives can be found
  at http://www.mail-archive.com.
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list. To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail. The archives can be found
  at http://www.mail-archive.com.
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] SmarterMail Domain Aliases

2006-10-26 Thread Kevin Bilbee
Title: Message




If you are 
converting to SmarterMail using the Imail to SmarterMail conversion utility. 
Youmay have an issue with domain aliases incoming email being treated as 
outgoing. Declude has acknowledged the issue and is installing a fix in the next 
release of Declude.

There is also a fix 
after the conversion edit the DomainList.xml file and move the DomainAlias nodes 
within the DomainList node to the top of the node above the Domain nodes. After 
doing this SmarterMail will still function properly and will not change this 
format.

The issue seems to 
have been caused by the Conversion Utility reversing the order of the 
nodes.


This has been a 
public service announcement.

Kevin 
Bilbee
[EMAIL PROTECTED]
___


---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] Whitelisting flaw in Declude?

2006-10-18 Thread Kevin Bilbee
Other mail gateways do it. Why would it be so difficult to duplicate the 
message and the header changing the recipients in the individual header files?



Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 David Barker
 Sent: Wednesday, October 18, 2006 6:30 AM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] Whitelisting flaw in Declude?
 
 To create a duplicate message for each recipient is not a trivial
 issue.
 This is a function of the mail server not Declude.
 
 David Barker
 Director of Product Development
 Your Email security is our business
 978.499.2933 office
 978.988.1311 fax
 [EMAIL PROTECTED]
 
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Kevin
 Bilbee
 Sent: Tuesday, October 17, 2006 5:08 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] Whitelisting flaw in Declude?
 
 Delcude has always functioned like this.
 
 What declude could do in this case is to duplicate the message for each
 recipient and write a new header file to each recipient. Not a big
 issue.
 Deliver to the one that whitelists and run the spam checks for the
 others.
 
 
 
 Kevin Bilbee
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
  Darin Cox
  Sent: Tuesday, October 17, 2006 12:37 PM
  To: declude.junkmail@declude.com
  Subject: Re: [Declude.JunkMail] Whitelisting flaw in Declude?
 
  It's actually more of an issue of how the mail server handles the
  message.
  In the case of multiple recipients, since there is only one message
  file addressed to multiple recipients in the headers, it's either
  deliver or not deliver unless you rewrite the headers to modify the
  recipient list.  I think I'd rather not have the spam filtering
 system
  alter that.  Add to the header, yes.  Alter the recipients, no.
 
  Also, I have not come across a situation where I wanted to let a
  message go through to one recipient and not to others, except in the
  situation of lists which is a whole other topic.
 
  Darin.
 
 
  - Original Message -
  From: Dave Beckstrom [EMAIL PROTECTED]
  To: declude.junkmail@declude.com
  Sent: Tuesday, October 17, 2006 3:11 PM
  Subject: RE: [Declude.JunkMail] Whitelisting flaw in Declude?
 
 
  I would call that a flaw, then, in how Declude processes the
 whitelist.
 
  I have a listserver email address for which I do not want email spam
  checked.  This is because I don't want messages going out to the list
  that say SPAM in the subject line.  Because nobody who is not a
 member
  on the list can post to the list, there is no problem whitelisting
 the
  TO
  address
  for mail sent to the list server email address.
 
  However, spammers will send an email to a dozen of our mail addresses
  (12
  recipients) one of which is the whitelised TO address for the
  listserver.
  Because of the way Declude processes the whitelist, that means that
  the other 11 recipient receive the spam even though mail to them is
  not whitelisted.
 
  That is a bad design on Declude's part, wouldn't you agree?  Anyone
  else feel that this needs to be rectified?
 
 
 
   -Original Message-
   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
  Darrell
   ([EMAIL PROTECTED])
   Sent: Tuesday, October 17, 2006 11:25 AM
   To: declude.junkmail@declude.com
   Subject: Re: [Declude.JunkMail] Whitelisting flaw in Declude?
  
   If one user is whitelisted they all will be whitelisted for that
  email.
   There are some things you can do to prevent this like
   BYPASSWHITELIST
  test.
  
   Darre;;
  
   ---
 -
   -
  ---
   Check out http://www.invariantsystems.com for utilities for Declude
  And
   Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI
  integration,
  MRTG
   Integration, and Log Parsers.
  
   - Original Message -
   From: Dave Beckstrom [EMAIL PROTECTED]
   To: declude.junkmail@declude.com
   Sent: Tuesday, October 17, 2006 11:18 AM
   Subject: [Declude.JunkMail] Whitelisting flaw in Declude?
  
  
   If an email is received that is addressed to multiple recipients,
   one
  of
   whom is whitelisted, does Declude treat the email as whitelisted
 for
  all
   recipients?
  
  
  
  
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
   unsubscribe Declude.JunkMail.  The archives can be found at
   http://www.mail-archive.com.
  
  
  
  
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
   unsubscribe Declude.JunkMail.  The archives can be found at
   http://www.mail-archive.com.
 
 
 
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
  unsubscribe

RE: [Declude.JunkMail] Whitelisting flaw in Declude?

2006-10-18 Thread Kevin Bilbee
Anti-spam\virus mail gateways.

I know barracuda, (now Symantec), does the splitting for whitelisting.



Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Darrell ([EMAIL PROTECTED])
 Sent: Wednesday, October 18, 2006 10:48 AM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] Whitelisting flaw in Declude?
 
 Mail gateways or anti-spam products for mail gateways?
 
 Darrell
 ---
 -
 Check out http://www.invariantsystems.com for utilities for Declude And
 Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration,
 MRTG
 Integration, and Log Parsers.
 
 - Original Message -
 From: Kevin Bilbee [EMAIL PROTECTED]
 To: declude.junkmail@declude.com
 Sent: Wednesday, October 18, 2006 1:16 PM
 Subject: RE: [Declude.JunkMail] Whitelisting flaw in Declude?
 
 
 Other mail gateways do it. Why would it be so difficult to duplicate
 the
 message and the header changing the recipients in the individual header
 files?
 
 
 
 Kevin Bilbee
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
  David Barker
  Sent: Wednesday, October 18, 2006 6:30 AM
  To: declude.junkmail@declude.com
  Subject: RE: [Declude.JunkMail] Whitelisting flaw in Declude?
 
  To create a duplicate message for each recipient is not a trivial
  issue.
  This is a function of the mail server not Declude.
 
  David Barker
  Director of Product Development
  Your Email security is our business
  978.499.2933 office
  978.988.1311 fax
  [EMAIL PROTECTED]
 
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
  Kevin
  Bilbee
  Sent: Tuesday, October 17, 2006 5:08 PM
  To: declude.junkmail@declude.com
  Subject: RE: [Declude.JunkMail] Whitelisting flaw in Declude?
 
  Delcude has always functioned like this.
 
  What declude could do in this case is to duplicate the message for
 each
  recipient and write a new header file to each recipient. Not a big
  issue.
  Deliver to the one that whitelists and run the spam checks for the
  others.
 
 
 
  Kevin Bilbee
 
   -Original Message-
   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
   Darin Cox
   Sent: Tuesday, October 17, 2006 12:37 PM
   To: declude.junkmail@declude.com
   Subject: Re: [Declude.JunkMail] Whitelisting flaw in Declude?
  
   It's actually more of an issue of how the mail server handles the
   message.
   In the case of multiple recipients, since there is only one message
   file addressed to multiple recipients in the headers, it's either
   deliver or not deliver unless you rewrite the headers to modify the
   recipient list.  I think I'd rather not have the spam filtering
  system
   alter that.  Add to the header, yes.  Alter the recipients, no.
  
   Also, I have not come across a situation where I wanted to let a
   message go through to one recipient and not to others, except in
 the
   situation of lists which is a whole other topic.
  
   Darin.
  
  
   - Original Message -
   From: Dave Beckstrom [EMAIL PROTECTED]
   To: declude.junkmail@declude.com
   Sent: Tuesday, October 17, 2006 3:11 PM
   Subject: RE: [Declude.JunkMail] Whitelisting flaw in Declude?
  
  
   I would call that a flaw, then, in how Declude processes the
  whitelist.
  
   I have a listserver email address for which I do not want email
 spam
   checked.  This is because I don't want messages going out to the
 list
   that say SPAM in the subject line.  Because nobody who is not a
  member
   on the list can post to the list, there is no problem whitelisting
  the
   TO
   address
   for mail sent to the list server email address.
  
   However, spammers will send an email to a dozen of our mail
 addresses
   (12
   recipients) one of which is the whitelised TO address for the
   listserver.
   Because of the way Declude processes the whitelist, that means that
   the other 11 recipient receive the spam even though mail to them is
   not whitelisted.
  
   That is a bad design on Declude's part, wouldn't you agree?  Anyone
   else feel that this needs to be rectified?
  
  
  
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
 Of
   Darrell
([EMAIL PROTECTED])
Sent: Tuesday, October 17, 2006 11:25 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Whitelisting flaw in Declude?
   
If one user is whitelisted they all will be whitelisted for that
   email.
There are some things you can do to prevent this like
BYPASSWHITELIST
   test.
   
Darre;;
   
-
 --
  -
-
   ---
Check out http://www.invariantsystems.com for utilities for
 Declude
   And
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI
   integration,
   MRTG
Integration, and Log Parsers

RE: [Declude.JunkMail] SmarterMail and Subspools

2006-10-18 Thread Kevin Bilbee
The domain aliases issue has reappeared. I have confirmed it with Declude.

We are running Declude Version 4.3.7 for SmarterMail


Kevin Bilbee


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jay
 Sudowski - Handy Networks LLC
 Sent: Wednesday, October 18, 2006 11:56 AM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] SmarterMail and Subspools
 
 The domain aliases being treated as outgoing domain has been long since
 resolved.  When SmarterMail 3.x came out, it was a problem because of
 the new file format they used to store configuration data, but the
 issue
 was fixed quickly.
 
 As for the sub-spool question, I'm not sure ... I've honestly never
 found a need to use the sub-spools.  What is your definition of high
 volume?  We have SmarterMail servers processing 250K inbound messages
 per day running a single spool.
 
 -Jay
 
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Kevin Bilbee
 Sent: Tuesday, October 17, 2006 11:18 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] SmarterMail and Subspools
 
 I do not know if it does but. I can tell you that you need to be
 careful
 with domain aliases on SmarterMail. They are treated as outgoing for
 junkmail processing.
 
 
 Kevin Bilbee
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
  Behalf Of Mark Strother
  Sent: Tuesday, October 17, 2006 6:33 PM
  To: declude.junkmail@declude.com
  Subject: [Declude.JunkMail] SmarterMail and Subspools
 
 
  Does Declude work correctly with the subspool feature of
  SmarterMail? I believe I read somewhere that it doesn't. This
  is a requirement of a high volume SmarterMail server and
  seems like it would relatively easy to implement.
 
  Can anyone comment?
 
   Mark Strother
   Pacific Online
   Phone: 604-638-6010 ext. 222
   Fax: 604-638-6020
   Toll Free: 1-877-503-9870
   http://www.pacificonline.com
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
  Behalf Of Robert Grosshandler
  Sent: Tuesday, October 17, 2006 3:46 PM
  To: declude.junkmail@declude.com
  Subject: [Declude.JunkMail] Test - ignore
 
  Test, please ignore.
 
 
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be
  found at http://www.mail-archive.com.
 
 
 
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be
  found at http://www.mail-archive.com.
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] SmarterMail and domain aliases - moved from SmarterMail and Subspools

2006-10-18 Thread Kevin Bilbee








Are you using a gateway or is mail delivered directly to
your server? We use gateways with IPBYPASS for both of our gateways.



This is a migrated configuration from Imail. Do I still
need the WHITELIST 127.0.0.1 that was put in because of Imail’s web interface? I
am going to take that out to see what happens.



Kevin Bilbee





 -Original Message-

 From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jay

 Sudowski - Handy Networks LLC

 Sent: Wednesday, October 18, 2006 1:34 PM

 To: declude.junkmail@declude.com

 Subject: RE: [Declude.JunkMail] SmarterMail and
Subspools

 

 Hmmm.  I'm running 4.3.7 and not seeing that:

 

 10/18/2006 13:27:55.114 694158291036 SNIFFER:30 . 
Total weight = 30.

 10/18/2006 13:27:59.379 694158291036 Using
[incoming] CFG file

 C:\SMARTERMAIL\Declude\$default$.junkmail.

 10/18/2006 13:27:59.379 694158291036 Tests failed
[weight=30]:

 SNIFFER=WARN[30] WEIGHT17=IGNORE[17]
WEIGHT20=WARN[20]

 WEIGHT30=WARN[30]

 

 10/18/2006 13:27:59.379 694158291036 Msg failed
SNIFFER (Message failed

 SNIFFER: 53.). Action="">

 10/18/2006 13:27:59.379 694158291036 Msg failed WEIGHT17
(Weight of 30

 reaches or exceeds the limit of 17.). Action="">

 10/18/2006 13:27:59.379 694158291036 Msg failed
WEIGHT20 (Weight of 30

 reaches or exceeds the limit of 20.). Action="">

 10/18/2006 13:27:59.379 694158291036 Msg failed
WEIGHT30 (Weight of 30

 reaches or exceeds the limit of 30.). Action="">

 10/18/2006 13:27:59.379 694158291036 L1 Message OK

 10/18/2006 13:27:59.379 694158291036 Subject: Start
a career that

 provides a lifetime residual income

 10/18/2006 13:27:59.379 694158291036 From:
[EMAIL PROTECTED]

 To: [EMAIL PROTECTED] IP: 216.150.31.98 ID:
nw67avwquycqo1x

 10/18/2006 13:27:59.379 694158291036 Action(s) taken
for

 [EMAIL PROTECTED] = IGNORE WARN  [LAST
ACTION="">

 10/18/2006 13:27:59.379 694158291036 Cumulative
action(s) taken on this

 email = IGNORE WARN  [LAST ACTION="">

 

 

 -Original Message-

 From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of

 Kevin Bilbee

 Sent: Wednesday, October 18, 2006 3:28 PM

 To: declude.junkmail@declude.com

 Subject: RE: [Declude.JunkMail] SmarterMail and
Subspools

 

 The domain aliases issue has reappeared. I have
confirmed it with

 Declude.

 

 We are running Declude Version 4.3.7 for
SmarterMail

 

 

 Kevin Bilbee

 

 





Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 











---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] SmarterMail and domain aliases - moved from SmarterMail and Subspools

2006-10-18 Thread Kevin Bilbee








I just tested removing the 



WHITELIST 127.0.0.1 and it did
not have an affect I could see. We also use Junkmail REDIRECTin the
default.junkmail file for finding of the appropriate junkmail so we do not have
to have a separate junkmail file for aliased domains they user the same
junkmail file as the domain they are aliased to.



There may be a difference in the
way Declude handles domain aliases when using IPBYPASS. I will forward this Declude.
I really hope the fix this soon.





Kevin Bilbee









From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jay Sudowski - Handy Networks
LLC
Sent: Wednesday, October 18, 2006 2:35 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] SmarterMail and domain aliases - moved
from SmarterMail and Subspools









No gateway and email is delivered directly to our servers. I
still have whitelist 127.0.0.1 with on ill effects I’m aware of.









From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
Sent: Wednesday, October 18, 2006 5:18 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] SmarterMail and domain aliases - moved from
SmarterMail and Subspools





Are you using a gateway or is mail delivered directly to
your server? We use gateways with IPBYPASS for both of our gateways.



This is a migrated configuration from Imail. Do I still
need the WHITELIST 127.0.0.1 that was put in because of Imail’s web interface?
I am going to take that out to see what happens.



Kevin Bilbee





 -Original Message-

 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Jay

 Sudowski - Handy Networks LLC

 Sent: Wednesday, October 18, 2006 1:34 PM

 To: declude.junkmail@declude.com

 Subject: RE: [Declude.JunkMail] SmarterMail and
Subspools

 

 Hmmm. I'm running 4.3.7 and not seeing that:

 

 10/18/2006 13:27:55.114 694158291036 SNIFFER:30
. Total weight = 30.

 10/18/2006 13:27:59.379 694158291036 Using
[incoming] CFG file

 C:\SMARTERMAIL\Declude\$default$.junkmail.

 10/18/2006 13:27:59.379 694158291036 Tests failed
[weight=30]:

 SNIFFER=WARN[30] WEIGHT17=IGNORE[17]
WEIGHT20=WARN[20]

 WEIGHT30=WARN[30]

 

 10/18/2006 13:27:59.379 694158291036 Msg failed
SNIFFER (Message failed

 SNIFFER: 53.). Action="">

 10/18/2006 13:27:59.379 694158291036 Msg failed
WEIGHT17 (Weight of 30

 reaches or exceeds the limit of 17.). Action="">

 10/18/2006 13:27:59.379 694158291036 Msg failed
WEIGHT20 (Weight of 30

 reaches or exceeds the limit of 20.). Action="">

 10/18/2006 13:27:59.379 694158291036 Msg failed
WEIGHT30 (Weight of 30

 reaches or exceeds the limit of 30.). Action="">

 10/18/2006 13:27:59.379 694158291036 L1 Message OK

 10/18/2006 13:27:59.379 694158291036 Subject: Start
a career that

 provides a lifetime residual income

 10/18/2006 13:27:59.379 694158291036 From: [EMAIL PROTECTED]

 To: [EMAIL PROTECTED] IP: 216.150.31.98
ID: nw67avwquycqo1x

 10/18/2006 13:27:59.379 694158291036 Action(s) taken
for

 [EMAIL PROTECTED] = IGNORE WARN [LAST
ACTION="">

 10/18/2006 13:27:59.379 694158291036 Cumulative
action(s) taken on this

 email = IGNORE WARN [LAST ACTION="">

 

 

 -Original Message-

 From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of

 Kevin Bilbee

 Sent: Wednesday, October 18, 2006 3:28 PM

 To: declude.junkmail@declude.com

 Subject: RE: [Declude.JunkMail] SmarterMail and
Subspools

 

 The domain aliases issue has reappeared. I have
confirmed it with

 Declude.

 

 We are running Declude Version 4.3.7 for
SmarterMail

 

 

 Kevin Bilbee

 

 





Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 




---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 







---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] Whitelisting flaw in Declude?

2006-10-17 Thread Kevin Bilbee
Delcude has always functioned like this.

What declude could do in this case is to duplicate the message for each 
recipient and write a new header file to each recipient. Not a big issue. 
Deliver to the one that whitelists and run the spam checks for the others.



Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Darin Cox
 Sent: Tuesday, October 17, 2006 12:37 PM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] Whitelisting flaw in Declude?
 
 It's actually more of an issue of how the mail server handles the
 message.
 In the case of multiple recipients, since there is only one message
 file
 addressed to multiple recipients in the headers, it's either deliver or
 not
 deliver unless you rewrite the headers to modify the recipient list.  I
 think I'd rather not have the spam filtering system alter that.  Add to
 the
 header, yes.  Alter the recipients, no.
 
 Also, I have not come across a situation where I wanted to let a
 message go
 through to one recipient and not to others, except in the situation of
 lists
 which is a whole other topic.
 
 Darin.
 
 
 - Original Message -
 From: Dave Beckstrom [EMAIL PROTECTED]
 To: declude.junkmail@declude.com
 Sent: Tuesday, October 17, 2006 3:11 PM
 Subject: RE: [Declude.JunkMail] Whitelisting flaw in Declude?
 
 
 I would call that a flaw, then, in how Declude processes the whitelist.
 
 I have a listserver email address for which I do not want email spam
 checked.  This is because I don't want messages going out to the list
 that
 say SPAM in the subject line.  Because nobody who is not a member on
 the
 list can post to the list, there is no problem whitelisting the TO
 address
 for mail sent to the list server email address.
 
 However, spammers will send an email to a dozen of our mail addresses
 (12
 recipients) one of which is the whitelised TO address for the
 listserver.
 Because of the way Declude processes the whitelist, that means that the
 other 11 recipient receive the spam even though mail to them is not
 whitelisted.
 
 That is a bad design on Declude's part, wouldn't you agree?  Anyone
 else
 feel that this needs to be rectified?
 
 
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Darrell
  ([EMAIL PROTECTED])
  Sent: Tuesday, October 17, 2006 11:25 AM
  To: declude.junkmail@declude.com
  Subject: Re: [Declude.JunkMail] Whitelisting flaw in Declude?
 
  If one user is whitelisted they all will be whitelisted for that
 email.
  There are some things you can do to prevent this like BYPASSWHITELIST
 test.
 
  Darre;;
 
  -
 ---
  Check out http://www.invariantsystems.com for utilities for Declude
 And
  Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI
 integration,
 MRTG
  Integration, and Log Parsers.
 
  - Original Message -
  From: Dave Beckstrom [EMAIL PROTECTED]
  To: declude.junkmail@declude.com
  Sent: Tuesday, October 17, 2006 11:18 AM
  Subject: [Declude.JunkMail] Whitelisting flaw in Declude?
 
 
  If an email is received that is addressed to multiple recipients, one
 of
  whom is whitelisted, does Declude treat the email as whitelisted for
 all
  recipients?
 
 
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
 
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] SmarterMail and Subspools

2006-10-17 Thread Kevin Bilbee
I do not know if it does but. I can tell you that you need to be careful
with domain aliases on SmarterMail. They are treated as outgoing for
junkmail processing.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
 Behalf Of Mark Strother
 Sent: Tuesday, October 17, 2006 6:33 PM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] SmarterMail and Subspools
 
 
 Does Declude work correctly with the subspool feature of 
 SmarterMail? I believe I read somewhere that it doesn't. This 
 is a requirement of a high volume SmarterMail server and 
 seems like it would relatively easy to implement.
 
 Can anyone comment?
 
  Mark Strother
  Pacific Online
  Phone: 604-638-6010 ext. 222
  Fax: 604-638-6020
  Toll Free: 1-877-503-9870
  http://www.pacificonline.com
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
 Behalf Of Robert Grosshandler
 Sent: Tuesday, October 17, 2006 3:46 PM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Test - ignore
 
 Test, please ignore.
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
 type unsubscribe Declude.JunkMail.  The archives can be 
 found at http://www.mail-archive.com.
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
 type unsubscribe Declude.JunkMail.  The archives can be 
 found at http://www.mail-archive.com.
 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Support Request - Host Name Transition (Temporary Parallel Use)

2006-10-16 Thread Kevin Bilbee
Title: Message



Agreed.

I 
personally think Decludes personnel is spread a little thin at the 
moment.


Kevin 
Bilbee


  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy 
  SchmidtSent: Monday, October 16, 2006 6:04 PMTo: 
  declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Support 
  Request - Host Name Transition (Temporary Parallel 
  Use)
  Hm - 
  so may be they should tell their own WEBMASTER!?
  
  I 
  recall having read about this months ago - andtheirsite has not 
  been fixed?
  
  Best 
  RegardsAndy SchmidtPhone: +1 201 934-3414 x20 
  (Business)Fax: +1 201 934-9206 
  

-Original Message-From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin 
BilbeeSent: Monday, October 16, 2006 07:03 PMTo: 
declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] 
Support Request - Host Name Transition (Temporary Parallel 
Use)

Send 
an email to [EMAIL PROTECTED] it 
is still functional.


Kevin 
Bilbee



From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy 
SchmidtSent: Monday, October 16, 2006 3:28 PMTo: 
declude.junkmail@declude.comSubject: [Declude.JunkMail] Support 
Request - Host Name Transition (Temporary Parallel 
Use)


Hi,



I went 
to:

http://www.declude.com/site/support.htm

andit 
instructs me to: "Log into your Declude 
account and submit a case."



Fine, so I log 
into my Declude account, which gets me to http://shopping.declude.com/myaccount.aspand 
shows me my two Declude licenses for MAYWOOD-IS-0002.WEBHOST.HM-SOFTWARE.COM and 
MAIL.VERTICALWARFARE.COM, and download links etc. - but I just don't see the 
"Submit a Case" button?



So - I'll paste 
my inquiry here.



I am 
transitioning the Imail installation from MAYWOOD-IS-0002 (Declude Product 
key ending in "-043D0AB43901") to a new server 
at MAYWOOD-IS-0012.WEBHOST.HM-SOFTWARE.COM. In other words, I need a license 
key to be able to install end test Declude on the NEW server for a day or 
two, but you can NOT YET DISABLE the old product key until I'm actually 
cutting over the production load.



How can this be 
accomplished?



PS: Also consider 
this a report to your web master that I was unable to follow the problem 
reporting instructions onyour web site. Clearly, this must be my own 
fault - but if I can't "see" it, may be you should make it more obvious to 
less intellectual customers like myself.
Best 
RegardsAndy 
SchmidtPhone: +1 201 
934-3414 x20 (Business)Fax: +1 201 934-9206 



---This E-mail came from the Declude.JunkMail 
mailing list. Tounsubscribe, just send an E-mail to 
[EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The 
archives can be foundat http://www.mail-archive.com. 
---This E-mail came from the Declude.JunkMail 
mailing list. Tounsubscribe, just send an E-mail to 
[EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The 
archives can be foundat http://www.mail-archive.com. 
  ---This E-mail came from the Declude.JunkMail mailing 
  list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], 
  andtype "unsubscribe Declude.JunkMail". The archives can be foundat 
  http://www.mail-archive.com. 

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] ZEROHOUR - stopped working

2006-10-15 Thread Kevin Bilbee
Title: Message



We 
supposedly had it activated today and I have not seen it hi on one email all 
day. I was wondering if there was a problem. I thought I would call Declude on 
Monday.


Kevin 
Bilbee

  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
  [EMAIL PROTECTED]Sent: Saturday, October 14, 2006 8:50 
  PMTo: declude.junkmail@declude.comSubject: 
  [Declude.JunkMail] ZEROHOUR - stopped workingHi 
  -It looks like my ZEROHOUR test just stopped working late yeaterday 
  afternoon.I did not make any configuration changes.Is anyone 
  else experiencing the same thing ??Jeff---This 
  E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just 
  send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe 
  Declude.JunkMail". The archives can be foundat 
  http://www.mail-archive.com. 

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] ZEROHOUR - stopped working

2006-10-15 Thread Kevin Bilbee
Title: Message



I did 
all that except the debug part. I will do that later today and report 
back.

Are 
you saying that if ZEROHOUR is triggered on a message it will not show in Log 
HIGH? If this is the case then please tweak the logging level HIGH to show 
ZEROHOUR hits.


Kevin 
Bilbee

  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
  chrisSent: Sunday, October 15, 2006 7:50 AMTo: 
  declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] 
  ZEROHOUR - stopped working
  
  Kevin,
  Make sure the 
  ZEROHOUR directive is in your global, on a 10 14 16 weight scale we use this 
  test with a default weight 14. Restart the proc and you should be 
  ok. You can verify its operation by setting the global to debug and 
  double checking your logs. I double checked your Host record the test is 
  enabled on our end..
  
  ZEROHOUR 
  14
  
  
  
  Chris 
  Asaro
  Technical Support 
  Engineer
  Declude
  Your Email 
  security is our 
  business
  866.332.5833toll 
  free978.499.2933office978.477.8930 e-fax[EMAIL PROTECTED]www.declude.com
  
  
  
  
  
  
  
  
  
  From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin BilbeeSent: Sunday, October 15, 2006 2:32 
  AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] ZEROHOUR 
  - stopped working
  
  
  We supposedly had it 
  activated today and I have not seen it hi on one email all day. I was 
  wondering if there was a problem. I thought I would call Declude on 
  Monday.
  
  
  
  
  
  Kevin 
  Bilbee
  
-Original 
Message-From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
[EMAIL PROTECTED]Sent: Saturday, October 14, 2006 8:50 
PMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] ZEROHOUR - 
stopped working
Hi -It looks like my ZEROHOUR test just 
stopped working late yeaterday afternoon.I did not make any 
configuration changes.Is anyone else experiencing the same thing 
??Jeff---This E-mail came from the 
Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to 
[EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The 
archives can be foundat http://www.mail-archive.com. 
---This E-mail came 
  from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail 
  to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The 
  archives can be foundat http://www.mail-archive.com. ---This 
  E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just 
  send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe 
  Declude.JunkMail". The archives can be foundat 
  http://www.mail-archive.com. 

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] INV-URIBL Scoring?

2006-10-10 Thread Kevin Bilbee
INV-URIBL looks at links in all mail that it processes. Not just mail 
identified as spam. Analyzing links is how it determines the probability of the 
message being spam.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Dave Beckstrom
 Sent: Tuesday, October 10, 2006 8:39 AM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] INV-URIBL Scoring?
 
 Hi Guys,
 
 
 Considering that INV-URIBL looks at just the links contained in known
 spam,
 is it safe to set the weight on this test so high that this single test
 would trigger a hold or delete weight?
 
 Right now I have it set to score fairly low, and it adds to the total
 score,
 but would not cause a hold without other tests adding to the weight.
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] California Regional Intranet

2006-09-18 Thread Kevin Bilbee








This IPS seems to be very friendly with the Spammers. 





What are your thoughts about blocking their entire assigned
IP range??



Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 











---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module

2006-09-08 Thread Kevin Bilbee
Give them a break they, are switching systems and you have found a
glitch/bug/annoyance. Pick up the phone and call them. They are good people
and will honor your support contract.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
 Behalf Of Gary Steiner
 Sent: Thursday, September 07, 2006 10:46 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus 
 new case management module
 
 
 I saw the phone number in the original message, but that 
 doesn't change the rest of the message.  The point is how can 
 a company whose business is email and the internet exclude 
 all forms of communication except for the telephone?  And 
 even an automated message from their [former] support 
 communication method did not come out and say that.  What it 
 says is if you haven't heard from them in 24 hours after you 
 have tried to contact them via the web or email, then call 
 them.  It doesn't say anything about flipping switches.
 
 If they wish to limit all customer communication to the 
 telephone, then why don't they just come out and say we 
 refuse to talk to any of our customers unless they call us ? 
  It is Declude's fault for encouraging us to use email as the 
 primary form of communication all this time, and now 
 arbitrarily cutting it off.
 
 The real question is when we pay for an annual service 
 contract, exactly what are we getting?  Apparently a lot less 
 than we were receiving before August 28th.
 
 
  Original Message 
  From: Jay Sudowski - Handy Networks LLC [EMAIL PROTECTED]
  Sent: Friday, September 08, 2006 12:57 AM
  To: declude.junkmail@declude.com
  Subject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case 
  management module
  
  I think it means you have to pick up the phone and call them.
  
  
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
  Gary Steiner
  Sent: Friday, September 08, 2006 12:12 AM
  To: declude.junkmail@declude.com
  Subject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case 
  management module
  
  It's a catch-22.  You send a message to [EMAIL PROTECTED] 
 and get a 
  reply back saying that they will no longer pay attention to 
 messages 
  sent to [EMAIL PROTECTED]
  
  What does it mean when customers have to try to get in touch with 
  Declude so that they flip the switch so that the customer 
 can get in 
  touch with Declude?
  
  
   Original Message 
   From: Kevin Bilbee [EMAIL PROTECTED]
   Sent: Thursday, September 07, 2006 9:32 PM
   To: declude.junkmail@declude.com
   Subject: RE: [Declude.JunkMail] [EMAIL PROTECTED] 
 versus new case
  management module
   
   Then I would contact customer service to have them flip 
 the switch 
   so
  you
   can place support tickets.
   
   
   Kevin
   
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Gary Steiner
Sent: Thursday, September 07, 2006 5:17 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] [EMAIL PROTECTED] versus new 
case management module


Interesting.  If I log in to my account on the Declude web
site, there is no option listed for the new CRM module.  It 
is not that it is grayed out as described below.  It just 
isn't there.  And I do have a current service agreement.

So, since according to this message we can no longer use
[EMAIL PROTECTED], and the supposed new CRM module doesn't 
seem to be available, how do we contact Declude support?

By the way, the reason I was trying to contact Declude
support is that I was investigating the latest all_list.dat 
file, and found that the download link on the Declude web 
site is now no longer valid.  (The download link for the 
Declude GUI didn't work either, as well as the link for the 
demo copy of Sniffer.)  Seems that when Declude updated their 
web site they forgot to check the one thing on the web site 
that an existing customer is most likely to use, such as all 
their download links.

And they wonder why we get upset.


 Original Message 
 From: [EMAIL PROTECTED]
 Sent: Thursday, September 07, 2006 7:44 PM
 To: [EMAIL PROTECTED]
 Subject: re: [17D-0C9324FF-DB7C] Latest all_list.dat
 
 Thank you for submitting a ticket to support. Your 
 ticket number
  is
 [17D-0C9324FF-DB7C].
 
 Please keep this ticket number for your records and include
it in the
 subject (including brackets) of all future emails 
 regarding this
 issue.
 
 The response time during business hours is usually within
24 hours, if
 you have had no response in this time please do not
hesitate to call
 our support number 1-866-332-5833
 
 IMPORTANT NOTICE
 
 Declude is migrating to a new CRM business solution which

RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module

2006-09-07 Thread Kevin Bilbee
Then I would contact customer service to have them flip the switch so you
can place support tickets.


Kevin

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
 Behalf Of Gary Steiner
 Sent: Thursday, September 07, 2006 5:17 PM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] [EMAIL PROTECTED] versus new 
 case management module
 
 
 Interesting.  If I log in to my account on the Declude web 
 site, there is no option listed for the new CRM module.  It 
 is not that it is grayed out as described below.  It just 
 isn't there.  And I do have a current service agreement.
 
 So, since according to this message we can no longer use 
 [EMAIL PROTECTED], and the supposed new CRM module doesn't 
 seem to be available, how do we contact Declude support?
 
 By the way, the reason I was trying to contact Declude 
 support is that I was investigating the latest all_list.dat 
 file, and found that the download link on the Declude web 
 site is now no longer valid.  (The download link for the 
 Declude GUI didn't work either, as well as the link for the 
 demo copy of Sniffer.)  Seems that when Declude updated their 
 web site they forgot to check the one thing on the web site 
 that an existing customer is most likely to use, such as all 
 their download links.
 
 And they wonder why we get upset.
 
 
  Original Message 
  From: [EMAIL PROTECTED]
  Sent: Thursday, September 07, 2006 7:44 PM
  To: [EMAIL PROTECTED]
  Subject: re: [17D-0C9324FF-DB7C] Latest all_list.dat
  
  Thank you for submitting a ticket to support. Your ticket number is 
  [17D-0C9324FF-DB7C].
  
  Please keep this ticket number for your records and include 
 it in the 
  subject (including brackets) of all future emails regarding this 
  issue.
  
  The response time during business hours is usually within 
 24 hours, if 
  you have had no response in this time please do not 
 hesitate to call 
  our support number 1-866-332-5833
  
  IMPORTANT NOTICE
  
  Declude is migrating to a new CRM business solution which 
 includes a 
  new case management module.  We will begin using this feature 
  beginning the week of 28 August, the result of this action 
 means that 
  Declude will no longer accept and create support cases 
 using the email 
  address [EMAIL PROTECTED]
  
  You will need to login into your Declude account to submit 
 a case.  If 
  you can not submit a case due to the option being grayed out this 
  means that you do not have an active service agreement.  
 Call customer 
  care 866-332-5822 #3 to purchase or renew a service agreement.
  
  
  We understand that this will be awkward and/or unwanted, 
 however our 
  goal is to continue servicing our paying customers.
   
  Thank You.
  Declude Technical Support
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 
 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Re: Why is Declude Not Scanning This?

2006-09-04 Thread Kevin Bilbee
I have been seeing about 2-3 emails per month with out declude headers
anywhere in the emil message. They have all been spam. No delcude headers in
the header or body.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
 Behalf Of David Dodell
 Sent: Monday, September 04, 2006 7:33 PM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Re: Why is Declude Not Scanning This?
 
 
 On Sep 4, 2006, at 4:58 PM, John T ((Lists)) wrote:
 
  But you need to check the message body. There has been discussion
  about a
  string of spam that has bad headers where the Declude Headers end  
  up at the
  bottom of the body
 
 
 John, I have done so ... the only other part of the message is a JPG  
 attachment which has the actual viewable spam advertisement 
 ... did  
 not note any more header lines enclosed in the body of the message.
 
 David
 
 
 
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
  Of David
  Dodell
  Sent: Monday, September 04, 2006 3:16 PM
  To: declude.junkmail@declude.com
  Subject: [Declude.JunkMail] Re: Why is Declude Not Scanning This?
 
  By anychance are the Declude headers all the way at the bottom of
  the
  message.  Also, in 8.x trains of Imail there were situations  
  where the
  QueueManager could steal the message from Declude 2.x and 
 below and
  deliver
  it before Declude processed it.
 
  Darrell
 
  (1) No more headers were visible any place in either the message 
  header or header text
 
  (2) I'm running Imail 9.0 and Declude 4.All the latest releases
 
  Still perplexed ... only happens once in a while, otherwise all 
  working ok
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To 
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
  unsubscribe Declude.JunkMail.  The archives can be found at 
  http://www.mail-archive.com.
 
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To 
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
  unsubscribe Declude.JunkMail.  The archives can be found at 
  http://www.mail-archive.com.
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
 type unsubscribe Declude.JunkMail.  The archives can be 
 found at http://www.mail-archive.com.
 
 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] OT: Smartermail Spam Filtering

2006-08-02 Thread Kevin Bilbee
It is pretty easy to hide the settings. I have placed DIV tags around the items 
I do not want our users to see/use place a style=visibility: hidden on the 
div tag.



Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 David Sullivan
 Sent: Wednesday, August 02, 2006 8:47 AM
 To: Declude.JunkMail@declude.com
 Subject: [Declude.JunkMail] OT: Smartermail Spam Filtering
 
 I'm looking at moving from Imail 7.13 to Smartermail but I do ALL anti-
 virus/spam in Declude and don't want my users to have any spam filter
 settings in Smartermail. Does anyone know if it's easy to disable those
 features/remove them from the web interface?
 
 
 --
 Best regards,
  David  mailto:[EMAIL PROTECTED]
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Max whitelists hit

2006-07-28 Thread Kevin Bilbee








If you are not authenticating your users then your SMTP server
is open for spammers to forge the “from” address to relay through your server!
Unless you only allow relaying from specific ip addresses. “Relay for local users
only” is a great way for spammers to hijack your server.



“Relay Mail for Addresses” and “No Mail Relay” are the only safe
relay options. Assuming the addresses trusted in relay for addresses are secure
from unauthorized relaying.







Kevin Bilbee















From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds
Sent: Friday, July 28, 2006 8:15 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Max whitelists hit
Importance: High
Sensitivity: Confidential







Thanks John, but Authentication is not an option right now and I
will suffer the few forged addresses that come through.



I did not realise that there was a limit to the amount of domains I
can put in the whitelist and its worked until now whilst testing it with
a few domains but with a long list of 500 domains it does not work
properly, when really it should.



Without posting really really confidential information here, I need
to be able whitelist, the same way that I can blacklist. 



I have one guy at domainA.com trying to send to another guy at
domainB.com and both domains are on the same server.

domainB.com is not getting the emails becasue domainA.com's ip address where
they are located is blacklisted quite badly and the email when sent through our
server is given a score of 48, which means any email that domainA.com sends to
domainB.com gets put in the spam hold queue.

Right now I need to be able to use the whitelisting functionality
of declude.

Kindest
Regards
Craig Edmonds
123 Marbella Internet
W: www.123marbella.com
E : [EMAIL PROTECTED]










From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists)
Sent: Friday, July 28, 2006 4:52 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Max whitelists hit
Sensitivity: Confidential

1. Sorry, your email was not considered confidential and has been
included in a public archive for all to see.



2. As I said before, please stop using the silly white listing of a
domain. Haven’t you heard of forged addresses?



3. Please review your configuration and correct the problem causing
your clients outbound email to be scanned. What you are doing is a workaround,
not fixing the actual problem. You will have to bite the bullet and start
forcing your users to authenticate and in doing so can easily whitelist based
upon the fact that they authenticated.





John T

eServices For You



Seek, and ye shall find!







-Original
Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig
Edmonds
Sent: Friday, July 28, 2006 5:28 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Max whitelists hit
Importance: High
Sensitivity: Confidential




Hi David,

It kind of works.

In C:\IMAIL\Declude\$default$.junkmail I have placed the following line:

WHITELISTFILEC:\IMAIL\Declude\Filters\whitelist.txt

The file at C:\IMAIL\Declude\Filters\whitelist.txt contains a list of email
addresses in the following format:

@123-reg.co.uk
@tapiz.com.ar
@redhothomes.co.uk
@cloudninemurcia.com
@cloudninemarbella.com

(there is about 500 domains I am whitelisting at the moment)

I am sitting here watching the log file (btw, I am using a programme called
BareTail which absolutely rocks when you want to look at live log
files
http://www.baremetalsoft.com) and it
seems that its whitelisting some
domains listed in the whitelist.txt file but still passes many of the
domains in the whitelist file through the declude spam filter.

This results in many of my clients emails being held in the spam folder.

Any ideas?

Kindest Regards
Craig Edmonds
123 Marbella Internet
W: www.123marbella.com
E : [EMAIL PROTECTED]


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of David
Barker
Sent: Thursday, July 27, 2006 3:40 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Max whitelists hit
Sensitivity: Confidential

Yes, in the global.cfg there is a limit. If you need to have unlimited
whitelist entries, or if you need per-user or per-domain whitelisting, you
may find the WHITELISTFILE option helpful. 

To use this option, you need to add a line in the format WHITELISTFILE
D:\{MAILSERVER}\Declude\mywhitelist.txt to the appropriate configuration
file (\{MAILSERVER}\Declude\$default$.JunkMail, or the per-user/per-domain
configuration file you wish to use the whitelists with). The
D:\{MAILSERVER}\Declude\mywhitelist.txt file would then contain either one
E-mail address ([EMAIL PROTECTED])
or domain (@example.com) or subdomain
(.example.com) per line. The whitelist files can have unlimited
entries in
them. 

Note that the file you use with the WHITELISTFILE option does NOT use the
same format as the WHITELIST entries

RE: [Declude.JunkMail] How is a message score passed to SmarterMail?

2006-07-28 Thread Kevin Bilbee









There would have to be a way to secure something like this. If
it can be added by a gateway what would stop a spammer form adding it with a -1
weight???







Kevin Bilbee







From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Friday, July 28, 2006 10:27 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] How is a message score passed to
SmarterMail?







It would be nice if SmarterTools would introduce a simple
scoreable text filter that could search at least the headers. That way a
score could be passed from any gateway to SmarterMail for actions.

Matt



Jay Sudowski - Handy Networks LLC wrote: 

I can confirm this is the only way it will work.  Declude communicatesthe score directly to SmarterMail in a way that breaks when a messagehas been relayed from a gateway server.  In such instances, it'snecessary to setup SmarterMail content filter rules based up yourDeclude inserted headers and set the appropriate actions.-Jay-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of JohnT (Lists)Sent: Friday, July 28, 2006 3:37 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] How is a message score passed toSmarterMail?I think what he means is serverA is doing the scanning and then themessageis sent to serverB and he wants serverB to know what the score was andtotake action.Why not add a custom header line with the total weight via Declude andthenset up the rules on serverB to look for that line in the header.John TeServices For YouSeek, and ye shall find!  

-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of    

Kevin  

BilbeeSent: Thursday, July 27, 2006 9:51 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] How is a message score passed to    

SmarterMail?  

It is passed int the .hdr file.Kevin Bilbee    

-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] OnBehalf Of Mark StrotherSent: Thursday, July 27, 2006 9:03 PMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] How is a message score passed toSmarterMail?Could someone explain to me how the message score is passedto SmarterMail?I would like to set up a SmarterMail server, running Declude,as a gateway for our mail. The problem with this setup is, inmy tests, SmarterMail doesn't recognize the Declude scoreswhen they are a generated on another server. This means thatusers wouldn't be able to configure their own rules such asdelete mail if the score is 20.Is there anyway I can run Declude on my gateway server andpass the score to SmarterMail on another server? I just wantto tag the messages on the gateway machine and then let usersset custom actions using the SmarterMail interface.Any thoughts would be appreciated! Mark---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail.  The archives can befound at http://www.mail-archive.com.  

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail.  The archives can be foundat http://www.mail-archive.com.    

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail.  The archives can be foundat http://www.mail-archive.com.---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail.  The archives can be foundat http://www.mail-archive.com.  


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED],
and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.







---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] How is a message score passed to SmarterMail?

2006-07-28 Thread Kevin Bilbee









Question does anyone know of how SmarterMail processes messages.
A program could be created that could process mail based on the “Command-line
file to run on new mail” if Declude runs before the command line program then this
could read the Declude gateway inserted header then add the Declude .hdr field
to email .hdr file on the local server. 



If Declude runs after the command line program then it will not
work





Kevin Bilbee 







From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark Strother
Sent: Friday, July 28, 2006 12:15 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] How is a message score passed to
SmarterMail?







The
problem is we have over 10,000 webmail users. Teaching them to setup filters is
not easy. They’re used to seeing the integrated SmarterMail SPAM filtering
options. 



I
think Matt has a good idea. A very simple lightweight filter than runs on the
SmarterMail server. It would look at the Declude score in the headers and pass
the appropriate score to SmarterMail. If something like this existed we’d have
reason to buy two more licenses for Declude. Until then I guess we’ll have to
continue running Declude on the SmarterMail server itself. Ideally I’d like to
move this load to a couple gateway servers.



Mark
Strother 
Pacific Online 
Phone: 604-638-6010 ext. 222

Fax: 604-638-6020 
Toll Free: 1-877-503-9870 
http://www.pacificonline.com 











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jay Sudowski - Handy Networks
LLC
Sent: Friday, July 28, 2006 11:35 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] How is a message score passed to
SmarterMail?





SmarterMail
content filters can easily search headers … I have been doing this for weeks
without issue.





Thanks!

-

Jay
Sudowski
// Handy Networks LLC

Director of Technical Operations
Providing Shared, Reseller, Semi Managed and Fully Managed Windows 2003 Hosting
Solutions
Tel: 877-70 HANDY x882 | Fax: 888-300-2FAX

www.handynetworks.com











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Friday, July 28, 2006 1:27 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] How is a message score passed to
SmarterMail?





It would be nice if SmarterTools would introduce a simple
scoreable text filter that could search at least the headers. That way a
score could be passed from any gateway to SmarterMail for actions.

Matt



Jay Sudowski - Handy Networks LLC wrote: 

I can confirm this is the only way it will work. Declude communicatesthe score directly to SmarterMail in a way that breaks when a messagehas been relayed from a gateway server. In such instances, it'snecessary to setup SmarterMail content filter rules based up yourDeclude inserted headers and set the appropriate actions.-Jay-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of JohnT (Lists)Sent: Friday, July 28, 2006 3:37 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] How is a message score passed toSmarterMail?I think what he means is serverA is doing the scanning and then themessageis sent to serverB and he wants serverB to know what the score was andtotake action.Why not add a custom header line with the total weight via Declude andthenset up the rules on serverB to look for that line in the header.John TeServices For YouSeek, and ye shall find! 

-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of 

Kevin 

BilbeeSent: Thursday, July 27, 2006 9:51 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] How is a message score passed to 

SmarterMail? 

It is passed int the .hdr file.Kevin Bilbee 

-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] OnBehalf Of Mark StrotherSent: Thursday, July 27, 2006 9:03 PMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] How is a message score passed toSmarterMail?Could someone explain to me how the message score is passedto SmarterMail?I would like to set up a SmarterMail server, running Declude,as a gateway for our mail. The problem with this setup is, inmy tests, SmarterMail doesn't recognize the Declude scoreswhen they are a generated on another server. This means thatusers wouldn't be able to configure their own rules such asdelete mail if the score is 20.Is there anyway I can run Declude on my gateway server andpass the score to SmarterMail on another server? I just wantto tag the messages on the gateway machine and then let usersset custom actions using the SmarterMail interface.Any thoughts would be appreciated! Mark---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can befound at http://www.mail-archive.com. 

---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED

RE: [Declude.JunkMail] OT: ACL Manipulation Tool

2006-07-27 Thread Kevin Bilbee
Looking at the code for Xcalcs it should work for you. If you are using 
inheritance and do not want it to iterate all the files then you cannot use the 
/T, /F, of /S options. If you use one of these do it will iterate all files on 
the drive.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jay
 Sudowski - Handy Networks LLC
 Sent: Thursday, July 27, 2006 9:35 AM
 To: Declude.JunkMail@declude.com
 Subject: [Declude.JunkMail] OT: ACL Manipulation Tool
 
 I am seeking out an ACL manipulation tool that will let me set the
 Read Attributes permission on the root of a drive (no inheritance),
 that does not automatically apply the permission to sub-files/folders
 and also does not 'touch' every file on the server.  I have tried the
 following tools, but ran into the issues noted:
 
 Cacls - Does not support Read Attributes permission.  Does not allow
 inheritance to be specified.  However, cacls only modifies ACLs on the
 specified root drive and nothing more, so performance is very quick.
 
 Xcacls.vbs - Supports Read Attributes permission, and allows for
 proper control over inheritance.  However, when setting the permission,
 this tool enumerates every single file on the drive, making the process
 extremely slow.
 
 Setacl.exe - Supports read attributes permission, and allows for
 proper control over inheritance.  Unfortunately, it doesn't seem to set
 permissions properly on the root of a drive.
 
 FileACL.exe - Supports read attributes permission, and allows for
 proper control over inheritance. However, when setting the permission,
 this tool enumerates every single file on the drive, making the process
 extremely slow.
 
 Xcacls.exe - Does not support read attributes permission, and seems
 to insert ACE entries in a non-supported manner on Windows 2003
 servers.
 
 Dacl.vbs - Does not support read attributes permission.
 
 Is anyone aware of any other tools available?
 
 Thanks!
 -
 Jay Sudowski // Handy Networks LLC
 Director of Technical Operations
 Providing Shared, Reseller, Semi Managed and Fully Managed Windows 2003
 Hosting Solutions
 Tel: 877-70 HANDY x882 |  Fax: 888-300-2FAX www.handynetworks.com
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
 unsubscribe Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] OT: ACL Manipulation Tool

2006-07-27 Thread Kevin Bilbee
Well that sucks.



Kevin

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jay
 Sudowski - Handy Networks LLC
 Sent: Thursday, July 27, 2006 12:39 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] OT: ACL Manipulation Tool
 
 
 Unfortunately, it seems like the WMI call they make in xcacls.vbs still
 ends up enumerating all of the files on the drive ... I'll check
 filemon and see the wmi process just hitting all of the files, even
 though it's not changing any permissions on those files.  Highly
 inefficient, but typical MS I suppose :(
 
 Thanks though.
 
 -Jay
 
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Kevin Bilbee
 Sent: Thursday, July 27, 2006 3:28 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] OT: ACL Manipulation Tool
 
 Looking at the code for Xcalcs it should work for you. If you are using
 inheritance and do not want it to iterate all the files then you cannot
 use the /T, /F, of /S options. If you use one of these do it will
 iterate all files on the drive.
 
 
 Kevin Bilbee
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Jay
  Sudowski - Handy Networks LLC
  Sent: Thursday, July 27, 2006 9:35 AM
  To: Declude.JunkMail@declude.com
  Subject: [Declude.JunkMail] OT: ACL Manipulation Tool
 
  I am seeking out an ACL manipulation tool that will let me set the
  Read Attributes permission on the root of a drive (no inheritance),
  that does not automatically apply the permission to sub-files/folders
  and also does not 'touch' every file on the server.  I have tried the
  following tools, but ran into the issues noted:
 
  Cacls - Does not support Read Attributes permission.  Does not
 allow
  inheritance to be specified.  However, cacls only modifies ACLs on
 the
  specified root drive and nothing more, so performance is very quick.
 
  Xcacls.vbs - Supports Read Attributes permission, and allows for
  proper control over inheritance.  However, when setting the
 permission,
  this tool enumerates every single file on the drive, making the
 process
  extremely slow.
 
  Setacl.exe - Supports read attributes permission, and allows for
  proper control over inheritance.  Unfortunately, it doesn't seem to
 set
  permissions properly on the root of a drive.
 
  FileACL.exe - Supports read attributes permission, and allows for
  proper control over inheritance. However, when setting the
 permission,
  this tool enumerates every single file on the drive, making the
 process
  extremely slow.
 
  Xcacls.exe - Does not support read attributes permission, and seems
  to insert ACE entries in a non-supported manner on Windows 2003
  servers.
 
  Dacl.vbs - Does not support read attributes permission.
 
  Is anyone aware of any other tools available?
 
  Thanks!
  -
  Jay Sudowski // Handy Networks LLC
  Director of Technical Operations
  Providing Shared, Reseller, Semi Managed and Fully Managed Windows
 2003
  Hosting Solutions
  Tel: 877-70 HANDY x882 |  Fax: 888-300-2FAX www.handynetworks.com
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
  unsubscribe Declude.JunkMail.  The archives can be found at
  http://www.mail-archive.com.
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
 unsubscribe Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
 unsubscribe Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] How is a message score passed to SmarterMail?

2006-07-27 Thread Kevin Bilbee
It is passed int the .hdr file.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
 Behalf Of Mark Strother
 Sent: Thursday, July 27, 2006 9:03 PM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] How is a message score passed to 
 SmarterMail?
 
 
 Could someone explain to me how the message score is passed 
 to SmarterMail? 
 
 I would like to set up a SmarterMail server, running Declude, 
 as a gateway for our mail. The problem with this setup is, in 
 my tests, SmarterMail doesn't recognize the Declude scores 
 when they are a generated on another server. This means that 
 users wouldn't be able to configure their own rules such as 
 delete mail if the score is 20.
 
 Is there anyway I can run Declude on my gateway server and 
 pass the score to SmarterMail on another server? I just want 
 to tag the messages on the gateway machine and then let users 
 set custom actions using the SmarterMail interface.
 
 Any thoughts would be appreciated!
 
  Mark
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
 type unsubscribe Declude.JunkMail.  The archives can be 
 found at http://www.mail-archive.com.
 
 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Declude 4.3

2006-07-20 Thread Kevin Bilbee
A book on accounting is not necessary. I am very familiar with cost centers. It 
is a fact that removing cost centers can cost a business revenue. So if a small 
ISP removes spam filtering from their offerings then their customers that want 
a one stop shop will go elsewhere.

It is a balancing act. What cost centers help you retain customers? Which ones 
will get you new business? Electricity is also a cost center but without it you 
would not have any revenue generating services to offer!



Kevin Bilbee





 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Darin Cox
 Sent: Thursday, July 20, 2006 6:37 AM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] Declude 4.3
 
 Kevin,
 
 It would probably help for you to take a course or read a book on
 business accounting.  There are cost centers, and revenue-generating
 centers.
 Sometimes it may be a judgement call as to where one item goes, as in
 spam filtering, but it is the business's call as to how they structure
 their pricing model, what is considered revenue-generating, and what is
 considered a cost.  External parties have no business deciding what
 should be considered revenue-generating for any given business.
 
 Also, I think everyone is missing the point Matt has made several times
 of how do you decide how much revenue should be attributed to
 spam/virus filtering.  How do you attach a value to it's contribution
 to keeping customers or obtaining new customers?  Or a relative value
 of the service against other services like base email hosting, web
 hosting, traffic reports, control panels, database hosting, media
 hosting, tech support, maintenance, etc.  Again, it's a judgement call.
 And since most businesses have different mixes of costs, pricing
 models, etc. it would take looking at each business individually to
 come up with some sort of revenue-sharing model.  One size would most
 definitely not fit all.
 
 In short, while this idea may be creative, it's not the least bit
 practical.  Revenue-sharing should be a misnomer, and pricing should be
 by server, domain, or account/alias.  For a pricing model to be
 successful, subjectivity needs to be removed so that the factors
 determining it can be easily quantified.
 
 Darin.
 
 
 - Original Message -
 From: Kevin Bilbee [EMAIL PROTECTED]
 To: declude.junkmail@declude.com
 Sent: Wednesday, July 19, 2006 5:54 PM
 Subject: RE: [Declude.JunkMail] Declude 4.3
 
 
 No they do not impose a revenue sharing model, but toilet paper is
 still a
 consumable that indirectly makes restaurants money by keeping its
 customers
 happy. When it is there no one notices, when it is not customers
 definitely
 know and are put off.
 
 My comments are not about the revenue sharing but that email is a lost
 leader for an ISP. Lost leaders simply make business money by keeping
 the
 customers happy purchasing other higher margin products. Otherwise
 there
 would be no reason to sell a service for less than it costs to
 maintain.
 
 
 Kevin Bilbee
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
  Glenn \ WCNet
  Sent: Wednesday, July 19, 2006 2:01 PM
  To: declude.junkmail@declude.com
  Subject: Re: [Declude.JunkMail] Declude 4.3
 
  I think one thing that happened here is that the announcement
 regarding
  ComTouch didn't make it *clear* that it is an *optional* part of
  Declude.
  MY initial impression was that *any* Service Provider who uses the
  version of Declude that incomes ComTouch would be required to
  participate in the licensing of it, by whatever scheme fit the bill.
  Now that I understand it's optional, fine, I don't have to use that
  part.
 
  The toilet paper manufacturer does not impose a per-customer usage
 fee
  or take a direct percentage of the restaurant's
  daily/weekly/monthly/quarterly/yearly sales.
 
 
  - Original Message -
  From: Kevin Bilbee [EMAIL PROTECTED]
  To: declude.junkmail@declude.com
  Sent: Wednesday, July 19, 2006 3:33 PM
  Subject: RE: [Declude.JunkMail] Declude 4.3
 
 
  Then I just do not get it. If revenue would not be lost without it
 and
  it
  costs you money to provide then what is the business case for
 providing
  the
  service?
 
  Last I checked business, are in business to make money on capital
  investments/expenditures. Not spend money for things that do not make
  money.
 
  An analogy: Does a restaurant make revenue from toilet paper?
 
 
  Kevin Bilbee
 
 
   -Original Message-
   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
   Matt Robertson
   Sent: Wednesday, July 19, 2006 12:57 PM
   To: declude.junkmail@declude.com
   Subject: Re: [Declude.JunkMail] Declude 4.3
  
   On 7/19/06, Kevin Bilbee [EMAIL PROTECTED] wrote:
So then indirectly it does generate revenue. Because without it
revenue would be lost.
  
   Hardly.  Carry that argument out to prove how wrong it is.  By
 virtue
   of the fact

RE: [Declude.JunkMail] Declude 4.3

2006-07-19 Thread Kevin Bilbee
Title: Message









So then indirectly it does generate revenue. Because without it revenue
would be lost. The ISP users need to ask is what level of these services do I
need to offer to keep current customers happy and what level of service do I
need to land new business?





Kevin Bilbee







From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Wednesday, July 19, 2006 4:35 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Declude 4.3









Kevin,











Mainly
because in order to get other types of business that may bring revenue
(hosting, etc) this type of service is expected. Look at any ISP/hosting
provider that is offering $5.00 a month hosting plans this is what everyone
competes with. 











Could
you imagine yourself (consumer or small business) signing up with a hosting
provider and them not handling your email or even better not virus scanning
it? Even with yahoo/gmail you get free spam filtering and virus scanning.











Darrell






Check out http://www.invariantsystems.com
for utilities for Declude And Imail. IMail/Declude Overflow Queue
Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers.







-
Original Message - 





From: Kevin Bilbee 





To: declude.junkmail@declude.com






Sent: Tuesday, July 18,
2006 11:22 PM





Subject: RE:
[Declude.JunkMail] Declude 4.3











Question to thoes that are saying thatspam/virus protestion
is a lost leader/not a revenue builder.











If it does not generate revenue then why don't you stop offering
spam/virus protection?























Kevin Bilbee




---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED],
and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 




---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED],
and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 







---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] Commtouch, etc

2006-07-19 Thread Kevin Bilbee
I do not think it is a problem. I like the additional option. But if I was a 
new customer the subscription model would be out of our price range. I would 
like to see a trial of the CT add-in.

We have a habit of not buying software without firsthand experience (trial 
version).

Contrary to your comments on the use of this forum, it has always been for all 
things Declude when Scott was the sole player he never complained about the 
conversation threads. Positive or negative. I think you could complain if say 
we were talking about phone systems.



Kevin Bilbee



 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 David Barker
 Sent: Wednesday, July 19, 2006 9:00 AM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] Commtouch, etc
 
 Nick,
 
 With regards to outstanding bugs I have a list which we are working on,
 and as you know I have committed to get these fixed as well as add new
 functionality to Declude. When we did our tests against Message Sniffer
 we found that CT performed at the very least comparable if not better
 than Message Sniffer.
 
 We have given customers who cannot afford the additional cost of
 Message Sniffer an alternative option at a cheaper price. I don't
 understand why this is a problem.
 
 David B
 www.declude.com
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] ] On Behalf Of
 Nick Hayer
 Sent: Wednesday, July 19, 2006 11:47 AM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Commtouch, etc
 
 David,
 
 You have asked for some constructive feedback here regarding this new
 offering - I will not ask for a show of hands here :)  but I bet a lot
 of folks are rolling their eyes simply because of the core Declude
 product and its outstanding bugs., inability to release a stable
 product, service contracts that cost $$ with no benefit, etal cloud the
 issue so much.
 
 I think once Declude gets back on track and provides what is promised
 new offerings will be generally better accepted within the community.
 Your participation within this list now is great - hopefully Declude
 JunkMail will get fixed an be improved spam tool.
 
 As for Commtouch - I am quite skeptical of it being any where near as
 good as you allude to. Competition is tough here especially from
 MessageSniffer where the product is very good and the support is even
 better...
 
 -Nick
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
 unsubscribe Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
 unsubscribe Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Commtouch, etc

2006-07-19 Thread Kevin Bilbee








I would have to agree with Matt’s last few comments



The people that can purchase CommTouch for $195 are
mostly not complaining except for two things; 1) they are worried about this
abnormal approach to the market and how it reflects on the prospects of Declude
going forward, and 2) they want bug fixes and free and obvious advancements
before they get ones that they have to pay extra for.





To me Declude should be enhancing their core product like the
AVG integration and possibly an integration of URI lists. Let others create the
add-ons.



I am worried that I pay a yearly fee and have not seen
additional benefit over the past few years. Adding add-ins is great but what am
I getting for my yearly maintenance? Bug fixes have been slow and features have
been minimal. I say minimal because the only additional feature in the product
does not help with spam. It is a virus feature, the addition of AVG. Although
great, virus scanning for us is an afterthought for us. All our mail is scanned
for viruses by our two gateway machines before making to the mailbox server.
Also I would like to see a response to my last two emails to support! At least
a hey we received your email.







Kevin Bilbee











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Wednesday, July 19, 2006 10:00 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Commtouch, etc







David,

This is in context. Really.

You mention that it is 1/2 the price of Message Sniffer...but not for service
providers. Under any revenue share that I could contemplate you using, it
would no doubt be many times more expensive, not to mention the fact (which
John pointed out), that it would be impossible to figure out what one's
revenues were for this one piece of a broader service offering, and I should
have to need an accountant to figure out what I pay for a plug-in.

The people that can purchase CommTouch for $195 are mostly not complaining
except for two things; 1) they are worried about this abnormal approach to the
market and how it reflects on the prospects of Declude going forward, and 2)
they want bug fixes and free and obvious advancements before they get ones that
they have to pay extra for.

I hope that makes sense. It's painfully obvious to me and some others
that I know.

Matt



David Barker wrote: 

Ouch' let keep it in context. We have added an option that is comparable toMessage Sniffer at 1/2 the price of Message Sniffer and I don't get it. ;)-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of MattSent: Wednesday, July 19, 2006 12:18 PMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] Commtouch, etcDavid Barker wrote:  

I don't understand why this is a problem.     

That in fact IS the problem, isn't it?:)Matt---This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,just send an E-mail to [EMAIL PROTECTED], and type unsubscribeDeclude.JunkMail.  The archives can be found athttp://www.mail-archive.com.---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail.  The archives can be foundat http://www.mail-archive.com.  


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED],
and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.







---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] Declude 4.3

2006-07-19 Thread Kevin Bilbee
Then I just do not get it. If revenue would not be lost without it and it costs 
you money to provide then what is the business case for providing the service?

Last I checked business, are in business to make money on capital 
investments/expenditures. Not spend money for things that do not make money.

An analogy: Does a restaurant make revenue from toilet paper? 


Kevin Bilbee


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Matt Robertson
 Sent: Wednesday, July 19, 2006 12:57 PM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] Declude 4.3
 
 On 7/19/06, Kevin Bilbee [EMAIL PROTECTED] wrote:
  So then indirectly it does generate revenue. Because without it
  revenue would be lost.
 
 Hardly.  Carry that argument out to prove how wrong it is.  By virtue
 of the fact that they allow me to be in business in the first place I
 can expect a knock on the door from Microsoft since they make the
 server o/s... and Dell since they make the servers.  So just being a
 part of the show lets the pig belly up to the trough.
 
 Not in this universe.
 
 --
 [EMAIL PROTECTED]
 Janitor, MSB Web Systems
 mysecretbase.com
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Declude 4.3

2006-07-19 Thread Kevin Bilbee
No they do not impose a revenue sharing model, but toilet paper is still a 
consumable that indirectly makes restaurants money by keeping its customers 
happy. When it is there no one notices, when it is not customers definitely 
know and are put off.

My comments are not about the revenue sharing but that email is a lost leader 
for an ISP. Lost leaders simply make business money by keeping the customers 
happy purchasing other higher margin products. Otherwise there would be no 
reason to sell a service for less than it costs to maintain.


Kevin Bilbee 

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Glenn \ WCNet
 Sent: Wednesday, July 19, 2006 2:01 PM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] Declude 4.3
 
 I think one thing that happened here is that the announcement regarding
 ComTouch didn't make it *clear* that it is an *optional* part of
 Declude.
 MY initial impression was that *any* Service Provider who uses the
 version of Declude that incomes ComTouch would be required to
 participate in the licensing of it, by whatever scheme fit the bill.
 Now that I understand it's optional, fine, I don't have to use that
 part.
 
 The toilet paper manufacturer does not impose a per-customer usage fee
 or take a direct percentage of the restaurant's
 daily/weekly/monthly/quarterly/yearly sales.
 
 
 - Original Message -
 From: Kevin Bilbee [EMAIL PROTECTED]
 To: declude.junkmail@declude.com
 Sent: Wednesday, July 19, 2006 3:33 PM
 Subject: RE: [Declude.JunkMail] Declude 4.3
 
 
 Then I just do not get it. If revenue would not be lost without it and
 it
 costs you money to provide then what is the business case for providing
 the
 service?
 
 Last I checked business, are in business to make money on capital
 investments/expenditures. Not spend money for things that do not make
 money.
 
 An analogy: Does a restaurant make revenue from toilet paper?
 
 
 Kevin Bilbee
 
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
  Matt Robertson
  Sent: Wednesday, July 19, 2006 12:57 PM
  To: declude.junkmail@declude.com
  Subject: Re: [Declude.JunkMail] Declude 4.3
 
  On 7/19/06, Kevin Bilbee [EMAIL PROTECTED] wrote:
   So then indirectly it does generate revenue. Because without it
   revenue would be lost.
 
  Hardly.  Carry that argument out to prove how wrong it is.  By virtue
  of the fact that they allow me to be in business in the first place I
  can expect a knock on the door from Microsoft since they make the
  server o/s... and Dell since they make the servers.  So just being a
  part of the show lets the pig belly up to the trough.
 
  Not in this universe.
 
  --
  [EMAIL PROTECTED]
  Janitor, MSB Web Systems
  mysecretbase.com
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Declude 4.3

2006-07-19 Thread Kevin Bilbee
Title: Message








Then stop offering mail if it such a burden to the business.
Explain to your customer that they can 



can go to Hotmail or Yahoo. When the addy gets horked
by spammers, simply abandon it and create another.



Let us know how many customers stay with your service. Of course
you will not be able to quantify the lost new business!





Kevin Bilbee









From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Glenn \ WCNet
Sent: Wednesday, July 19, 2006 11:55 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Declude 4.3









Hahahahaha! E-mail hardlykeeps or draws
customers. Anybody who wants e-mail can go to Hotmail or Yahoo.
When the addy gets horked by spammers, simply abandon it and create
another. Domain hosting, maybe a little. However, I have domain
customers who havenever used their included mail service.

















- Original Message - 



From: Kevin Bilbee 





To: declude.junkmail@declude.com 





Sent: Wednesday, July 19, 2006 11:12 AM





Subject: RE: [Declude.JunkMail] Declude 4.3











So then indirectly it does generate revenue. Because without it
revenue would be lost. The ISP users need to ask is what level of these
services do I need to offer to keep current customers happy and what level of
service do I need to land new business?





Kevin Bilbee







From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED])
Sent: Wednesday, July 19, 2006 4:35 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Declude 4.3









Kevin,











Mainly
because in order to get other types of business that may bring revenue
(hosting, etc) this type of service is expected. Look at any ISP/hosting
provider that is offering $5.00 a month hosting plans this is what everyone
competes with. 











Could
you imagine yourself (consumer or small business) signing up with a hosting
provider and them not handling your email or even better not virus scanning
it? Even with yahoo/gmail you get free spam filtering and virus scanning.











Darrell






Check out http://www.invariantsystems.com
for utilities for Declude And Imail. IMail/Declude Overflow Queue
Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers.







-
Original Message - 





From: Kevin Bilbee 





To: declude.junkmail@declude.com






Sent: Tuesday, July 18,
2006 11:22 PM





Subject: RE:
[Declude.JunkMail] Declude 4.3











Question to thoes that are saying thatspam/virus protestion
is a lost leader/not a revenue builder.











If it does not generate revenue then why don't you stop offering
spam/virus protection?























Kevin Bilbee




---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED],
and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 




---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED],
and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED],
and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED],
and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 







---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] Declude 4.3

2006-07-18 Thread Kevin Bilbee
My hand is raised.


Kevin Bilbee
Standard Abrasives

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Gary Steiner
 Sent: Tuesday, July 18, 2006 4:21 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] Declude 4.3
 
 Basically you are telling me to ignore the Add Commtouch part of your
 web page that shows up when I log in to my account.
 
 What I find particularly amusing is the line Restrictions apply to
 service providers.  If there is anyone subscribed to this mailing list
 who is not a service provider, please raise your hand.
 
 Isn't it generally a good idea to have your product's pricing defined
 before you introduce the product?  I'm sure that everyone here reading
 the list is extremely curious as to what the revenue share program
 really is, and when it does come out, unless you hear exclamations of
 What a Bargain coming off this list there won't be many of us joining
 that program.
 
 Other than the Commtouch add-on, are there any other features or
 reasons to upgrade to 4.3?
 
 
 
  Original Message 
  From: David Barker [EMAIL PROTECTED]
  Sent: Tuesday, July 18, 2006 5:03 PM
  To: declude.junkmail@declude.com
  Subject: RE: [Declude.JunkMail] Declude 4.3
 
  Gary,
 
  1. Server Providers who use CommTouch as an add-in to Declude will be
  in violation of CommTouch's Terms of service.
 
  2. Some of the benefits of CommTouch are Zero Hour virus protection
  and additional spam identifying technology such as Recurrent Pattern
  Detection Technology (RPD) recognized by key industry analysts as a
  leading technology in email outbreak detection.
 
  3. We are in the process of defining the revenue share program and
  will provide the details to this when it is ready.
 
  David B
  www.declude.com
 
 
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
  Gary Steiner
  Sent: Tuesday, July 18, 2006 4:09 PM
  To: declude.junkmail@declude.com
  Subject: RE: [Declude.JunkMail] Declude 4.3
 
  So, that being said, under what conditions can a legacy customer use
  Commtouch?
 
  Since it would seem that Commtouch is being offered as an add-on,
 what
  are the benefits of having Commtouch?  What does it do that Declude
  alone does not?
 
  And of course it would be nice if this revenue share program was
  spelled out somewhere.
 
 
 
   Original Message 
   From: David Barker [EMAIL PROTECTED]
   Sent: Tuesday, July 18, 2006 3:57 PM
   To: declude.junkmail@declude.com
   Subject: RE: [Declude.JunkMail] Declude 4.3
  
   There are restrictions on CommTouch being used by Service Providers
   we had to ensure that NEW customers (ie. Service Providers After 1
   June
   06) understand the licensing restrictions.
  
   Current Service Providers (ie. Before 1 June 06) are under no
   restrictions for using Declude; only the CommTouch add-in
 component.
  
   However we have managed to come to an agreement with CommTouch to
   enable our legacy customers (ie. Service Providers Before 1 June
 06)
   to take advantage of CommTouch under a revenue share program, this
   program is not being forced onto legacy customers but will be an
   opportunity for us to help you increase revenues in your business,
   by providing you with new product like the Declude Gateway which
   would be independent of Imail/SmarterMail and will include
 CommTouch.
  
   David B
   www.declude.com
  
  
  
   -Original Message-
   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
   John T
   (Lists)
   Sent: Tuesday, July 18, 2006 3:02 PM
   To: declude.junkmail@declude.com
   Subject: RE: [Declude.JunkMail] Declude 4.3
  
   I guess we all missed the following paragraph in the license
 agreement:
  
   3.2.6 sub-license, rent, sell, lease, distribute, or otherwise
   transfer the Licensed Program save as provided under this End-User
   License Agreement unless You obtain a separate License from
 Declude,
   Inc. for such purposes (for example, You may not embed the Licensed
   Program into another application and then distribute such to third
   parties unless You first acquire an OEM License from Declude,
 Inc.).
   As of June 1, 2006, ISP's and other service providers are not
   permitted to use Declude software to clean and forward mail to
   customers unless a separate revenue share agreement has been
   established
  with Declude.
  
   http://www.declude.com/Articles.asp?ID=121
  
   Is Declude trying to put us out of business? We pay for the
 software
   and now have to pay them some of your meager profits?
  
   John T
   eServices For You
  
   Seek, and ye shall find!
  
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Gary Steiner
Sent: Tuesday, July 18, 2006 11:24 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Declude 4.3
   
I guess someone is going to make an official

RE: [Declude.JunkMail] Declude 4.3

2006-07-18 Thread Kevin Bilbee
Title: Message



Question to thoes that are saying thatspam/virus protestion is a 
lost leader/not a revenue builder.

If it 
does not generate revenue then why don't you stop offering spam/virus 
protection?



Kevin 
Bilbee

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] Declude 4.3

2006-07-18 Thread Kevin Bilbee
Title: Message



What 
exactly is protestion. let me see I think it shuld be protection!! Yea that is 
it, protection.



Kevin 
Bilbee

  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin 
  BilbeeSent: Tuesday, July 18, 2006 8:22 PMTo: 
  declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Declude 
  4.3
  Question to thoes that are saying thatspam/virus protestion is a 
  lost leader/not a revenue builder.
  
  If 
  it does not generate revenue then why don't you stop offering spam/virus 
  protection?
  
  
  
  Kevin Bilbee---This E-mail came from the 
  Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to 
  [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives 
  can be foundat http://www.mail-archive.com. 

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] F-Prot Licensing

2006-07-17 Thread Kevin Bilbee
So it seems that market forces are not causing the price to drop. It is causing 
the price to increase. There are ever more players in the antivirus market but 
pricing continues to go up. The market force of absolute need for antivirus on 
the mail server is outweighing the number of companies supplying antivirus 
command line scanners. 


What is the breaking point.


Kevin Bilbee





 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 AlamoHost Admin
 Sent: Monday, July 17, 2006 1:37 PM
 To: declude.junkmail@declude.com
 Subject: Re: [Declude.JunkMail] F-Prot Licensing
 
  Is the subscription to AVG part of Declude now or does the user need
  to purchase a subscription from AVG in order to get definition
  updates?
 
 The prices for the AVG mail server version isn't much better than F-
 Prot.
 They only list prices up to 100 mailboxes - $1,030 for 2 years.
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
 unsubscribe Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Speaking of Declude's AVG scanner

2006-07-17 Thread Kevin Bilbee
I just discovered the same issue on my test server, definitions not updating. 
On my liver server they are updating.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 John Doyle
 Sent: Monday, July 17, 2006 3:19 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] Speaking of Declude's AVG scanner
 
 John T
 
 Mine are
 Avi7.avg 2/21/2006
 Miniavi.avg  5/22/2006
 Microavi.avg 5/18/2006
 Icavi.avm5/22/2006
 
 Pretty out of date!
 
 I'm running 4.2 build 20
 
 John
 
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John
 T (Lists)
 Sent: Monday, July 17, 2006 2:49 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] Speaking of Declude's AVG scanner
 
 
 The 4 files I have are as such:
 Avi7.avg  02/16/06
 Miniavi.avg   07/13/06
 Microavi.avg  07/14/06
 Incavi.avm07/17/06
 
 John T
 eServices For You
 
 Seek, and ye shall find!
 
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
  John
 Doyle
  Sent: Monday, July 17, 2006 2:38 PM
  To: declude.junkmail@declude.com
  Subject: [Declude.JunkMail] Speaking of Decludes AVG scanner
 
  None of the db files have ever updated. Does anyone know what ports,
 protocols,
  whatever is used to do the update. Either Declude is not requesting
  the db
 update, or
  our firewall is blocking either the request or the subsequent update
 file.
 So far I
  haven't been able to find anything in the firewall logs.
 
  thanks for any help
 
  John
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
  unsubscribe Declude.JunkMail.  The archives can be found at
  http://www.mail-archive.com.
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
 unsubscribe Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
 unsubscribe Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: Re[2]: [Declude.JunkMail] Which way to upgrade - SmarterMail or IMail

2006-07-17 Thread Kevin Bilbee
Yes declude is directly on the smartermail box. Our evaluation is small, a 3
user domain that gets about 500 emails a day. Imail is not in the mix for
the test. The domain is gatewayed behind a Symantec SMTP gateway.



Kevin Bilbee


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
 Behalf Of Goran Jovanovic
 Sent: Monday, July 17, 2006 6:55 PM
 To: declude.junkmail@declude.com
 Subject: RE: Re[2]: [Declude.JunkMail] Which way to upgrade - 
 SmarterMail or IMail
 
 
 Kevin,
 
 Would you be running Declude on the SM box so an all in one 
 solution? Or would you have Declude/Imail on one box and then 
 SM hosting on another box? Also how many mailboxes/domains 
 are you running?
 
 Thanks
 
 Goran Jovanovic
 Omega Network Solutions
 
  
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Kevin
  Bilbee
  Sent: Monday, July 17, 2006 8:26 PM
  To: declude.junkmail@declude.com
  Subject: RE: Re[2]: [Declude.JunkMail] Which way to upgrade -
 SmarterMail
  or IMail
  
  
  We are evaluating SM at the moment. What bugs are you 
 referring to? So
 far
  I have seen fewer bugs than with my current Imail 
 installation. We are 
  testing SmarterMail 3.3.2369 and are running Imail 8.22
  
  
  Kevin Bilbee
  
  
   -Original Message-
   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
 Behalf Of 
   Sanford Whiteman
   Sent: Sunday, July 16, 2006 6:01 PM
   To: Goran Jovanovic
   Subject: Re[2]: [Declude.JunkMail] Which way to upgrade -
 SmarterMail
   or IMail
  
Smartertools confirmed that I could use the free (1 domain/10
 users)
as an unlimited gateway. I am putting in a gateway in 
 front of my 
Declude process to handle address validation. NOTE that 
 IMail will 
also gateway an unlimited number of domains as well.
  
   Still see no reason to open the floodgates to SM bugs, when your 
   existing version of IMail can do all of this.
  
   --Sandy
  
  
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To 
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], 
 and type 
   unsubscribe Declude.JunkMail.  The archives can be found at 
   http://www.mail-archive.com.
  
  
  
  
  
  
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To 
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
  unsubscribe Declude.JunkMail.  The archives can be found at 
  http://www.mail-archive.com.
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
 type unsubscribe Declude.JunkMail.  The archives can be 
 found at http://www.mail-archive.com.
 
 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] F-Prot Licensing

2006-07-14 Thread Kevin Bilbee








When did Frisk change the licensing for F-prot! They now
have a mail server license for windows on number of users pricing?




 
  
  F-Prot Antivirus for Windows Mail Servers
  
 
 
  
  
   


Number
of Users





Annual
license fee

   
   


1-24





US$
269

   
   


25-49





US$
359

   
   


50-99





US$
449

   
   


100-199





US$
719

   
   


200-299





US$
989

   
   


300-399





US$
1259

   
   


400-499





US$
1529

   
   


500-749





US$
1799

   
   


750-999





US$
2069

   
   


1000-1999





US$
2519

   
   


2000-2999





US$
2969

   
   


3000-3999





US$
3419

   
   


4000-4999





US$
3869

   
   


5000-5999





US$
4499

   
  
  
 






Kevin Bilbee
Network Administrator
Standard Abrasives, Inc.
[EMAIL PROTECTED]

Changing the way industry works. 











---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] Which way to upgrade - SmarterMail or IMail

2006-07-13 Thread Kevin Bilbee








I am currently testing SmarterMail as a conversion. I am completely
impressed with the speed and quality of the product, Declude is functioning
perfectly also. We do not have the error folder issue due to our server being
behind a gateway, Declude has stated they will have a fix to the issue in the
next release.





Kevin Bilbee

 







From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran
Jovanovic
Sent: Thursday, July 13, 2006 1:58 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Which way to upgrade - SmarterMail or IMail







Hi All,



I am currently running IMail 8.15 HF2 and Declude 4.1.0. I got new
server hardware so it is time to do it all over again. I want to incorporate an
address validation gateway on the same box as my Declude system. I gateway
pretty much all of my traffic and host very few domains (on the same box). Since
I want all this to happen on one box I need to have two IPs both of which
listen on port 25, I do not want the Declude portion to be listening on a
different port. 



So I would either need to upgrade to IMail 8.2x since it can listen
on only one IP or move to SmarterMail 3.3 as it can do the same thing. Having
run IMail for a while I am obviously familiar with the product and have scripts
etc that have been created for it. Having said that I am not committed to
IMail.



I have seen the recent thread about the thousands of messages in
the declude error folder with SmarterMail.



What are people having luck with?



Any comments would be appreciated.



Thanks





Goran Jovanovic

Omega Network Solutions




---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED],
and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 







---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

2006-07-11 Thread Kevin Bilbee
How about if the message has failed in the .hdr file declude just ignores the 
file to let SmarterMail process it as it see fit??? 


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 David Barker
 Sent: Tuesday, July 11, 2006 12:26 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
 
 Not sure who you spoke to at SmarterTools but I do NOT believe this is
 true.
 
 
 Declude will not pick up a message until it is completed writing both
 the .hdr and .eml files, that is the reason why SmarterMail while
 writing the header will have the .eml file as .em_ (while writing) so
 that when the .hdr is complete ie. Written then and only then will
 Declude pick up the file to process it. Also you will see clearly, that
 the SM logs indicate a problem long before we receive the message.
 
 This was a new problem introduced by SmarterMail - 4.2.20 provided a
 fix for this. Again coming back to a previous post I made talking about
 the effects of the Mail server on Declude. The question always comes
 back to who should provide the fix, in this case we did as it was
 causing messages not being scanned by Declude for spam.
 
 I am trying to get a better understanding to the problem from SM and as
 soon as I have some answers from them I will post to the lists.
 
 David B
 www.declude.com
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Gary Steiner
 Sent: Tuesday, July 11, 2006 3:13 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
 
 Here is SmarterTools take on the problem:
 
  Failed is written to the .hdr if the message was not succesfully
  recieved via SMTP. For instance, if the connection is closed mid
  transmission. These(and corresponding .emls) are normally just
 deleted
  by SmarterMail. The only reason you are noticing them is because of
 Declude storing them in the error folder.
 
 The implication is that Declude is interrupting part of SmarterMail's
 normail process.  Now I know this is essentially what Declude does
 anyway, but shouldn't Declude know the difference between a message
 that has finished SMTP and SmarterMail is ready to deliver, and a
 message that is incomplete in the SMTP process and an SMTP retry is
 occurring so this failed message should be ignored?  Otherwise we are
 going to get thousands of unneccessary incomplete messages dumped into
 the error folder that is going to do nothing other than to take up disk
 space.  Not to mention that if some other type of error occurs that
 puts a message in the error folder, we'll never find it because its
 buried under all these other superfluous messages.
 Before 4.2.20, this wasn't a problem.
 
 
 
  Original Message 
  From: David Barker [EMAIL PROTECTED]
  Sent: Monday, July 10, 2006 3:24 PM
  To: declude.junkmail@declude.com
  Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
 
  Gary,
 
  This is a SmarterMail issue. When they fail to complete the .hdr file
  they write Failed in the .hdr as this was causing major spam
 leakage
  for declude we decided to move  incomplete messages to the \error
  folder. You could try changing the Failed to Written and drop the
  messages in the \spool.
 
  David B
  www.declude.com
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
  Gary Steiner
  Sent: Monday, July 10, 2006 2:52 PM
  To: declude.junkmail@declude.com
  Subject: re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
 
  Now that I've installed 4.2.20, I'm getting a lot of messages in the
  error folder (I'm running SmarterMail 3.3.2369).  Most of them seem
 to
  be spam, but there are some good messages in there.  Am I now going
 to
  have to scan this folder for false positives just like the held spam
 folder?
 
  Here is an example of the .hdr file for a message that was good:
 
  Failed
  [EMAIL PROTECTED]
  [EMAIL PROTECTED]
  cmdspc: false
  helo: ivmail1.fcc.es
 
  What does Failed mean?  Is there something I can look for in the
  headers of the message (in the .eml file) that would indicate this?
  Is there any way to requeue this message?
 
 
   Original Message 
   From: David Barker [EMAIL PROTECTED]
   Sent: Friday, July 07, 2006 11:01 AM
   To: Declude.Virus@declude.com, Declude.JunkMail@declude.com
   Subject: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
  
   EVA   ADD New NONSTANDARDHDR vulnerability test. Messages
 found to
   have broken headers are moved to the \virus folder
  
   EVA   FIX ALLOWVULNERABILITIESFROM (for user)
  
   EVA   FIX BANEXT buffer overflow
  
   SMADD When an error is found in the envelope (.hdr) file
 the
   message is moved to the \error folder
  
   SMADD Decludeproc will not start without a valid
 domainlist.xml
  
   SMFIX

RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

2006-07-11 Thread Kevin Bilbee
GotCha. I then like the move to the error folder.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 David Barker
 Sent: Tuesday, July 11, 2006 12:54 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
 
 That is exactly what was happening prior to the fix and it created a
 deluge of spam ending up in SmarterMail inboxes.
 
 David B
 www.declude.com
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Kevin Bilbee
 Sent: Tuesday, July 11, 2006 3:49 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
 
 How about if the message has failed in the .hdr file declude just
 ignores the file to let SmarterMail process it as it see fit???
 
 
 Kevin Bilbee
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
  David Barker
  Sent: Tuesday, July 11, 2006 12:26 PM
  To: declude.junkmail@declude.com
  Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
 
  Not sure who you spoke to at SmarterTools but I do NOT believe this
 is
  true.
 
 
  Declude will not pick up a message until it is completed writing both
  the .hdr and .eml files, that is the reason why SmarterMail while
  writing the header will have the .eml file as .em_ (while writing) so
  that when the .hdr is complete ie. Written then and only then will
  Declude pick up the file to process it. Also you will see clearly,
  that the SM logs indicate a problem long before we receive the
 message.
 
  This was a new problem introduced by SmarterMail - 4.2.20 provided a
  fix for this. Again coming back to a previous post I made talking
  about the effects of the Mail server on Declude. The question always
  comes back to who should provide the fix, in this case we did as it
  was causing messages not being scanned by Declude for spam.
 
  I am trying to get a better understanding to the problem from SM and
  as soon as I have some answers from them I will post to the lists.
 
  David B
  www.declude.com
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
  Gary Steiner
  Sent: Tuesday, July 11, 2006 3:13 PM
  To: declude.junkmail@declude.com
  Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
 
  Here is SmarterTools take on the problem:
 
   Failed is written to the .hdr if the message was not succesfully
   recieved via SMTP. For instance, if the connection is closed mid
   transmission. These(and corresponding .emls) are normally just
  deleted
   by SmarterMail. The only reason you are noticing them is because of
  Declude storing them in the error folder.
 
  The implication is that Declude is interrupting part of SmarterMail's
  normail process.  Now I know this is essentially what Declude does
  anyway, but shouldn't Declude know the difference between a message
  that has finished SMTP and SmarterMail is ready to deliver, and a
  message that is incomplete in the SMTP process and an SMTP retry is
  occurring so this failed message should be ignored?  Otherwise we are
  going to get thousands of unneccessary incomplete messages dumped
 into
  the error folder that is going to do nothing other than to take up
  disk space.  Not to mention that if some other type of error occurs
  that puts a message in the error folder, we'll never find it because
  its buried under all these other superfluous messages.
  Before 4.2.20, this wasn't a problem.
 
 
 
   Original Message 
   From: David Barker [EMAIL PROTECTED]
   Sent: Monday, July 10, 2006 3:24 PM
   To: declude.junkmail@declude.com
   Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
  
   Gary,
  
   This is a SmarterMail issue. When they fail to complete the .hdr
   file they write Failed in the .hdr as this was causing major spam
  leakage
   for declude we decided to move  incomplete messages to the \error
   folder. You could try changing the Failed to Written and drop the
   messages in the \spool.
  
   David B
   www.declude.com
  
   -Original Message-
   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
   Gary Steiner
   Sent: Monday, July 10, 2006 2:52 PM
   To: declude.junkmail@declude.com
   Subject: re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
  
   Now that I've installed 4.2.20, I'm getting a lot of messages in
 the
   error folder (I'm running SmarterMail 3.3.2369).  Most of them seem
  to
   be spam, but there are some good messages in there.  Am I now going
  to
   have to scan this folder for false positives just like the held
 spam
  folder?
  
   Here is an example of the .hdr file for a message that was good:
  
   Failed
   [EMAIL PROTECTED]
   [EMAIL PROTECTED]
   cmdspc: false
   helo: ivmail1.fcc.es
  
   What does Failed mean?  Is there something I can look for in the
   headers of the message

RE: [Declude.JunkMail] Blackberry Issues - blank bodies

2006-07-02 Thread Kevin Bilbee
 My guess  (I am not an expert) is that some emails sent by 
 Blackberrys are sent using transfer code Base64.
 
 That transfer code has a problem with Declude footer. I am 
 not sure if the problem is at Declude end or at the Bas64 
 encode using an invalid character.
 

The problem is with Declude adding plain text to the end of the Base64
section of the email so it decodes incorrectly.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Test

2006-06-13 Thread Kevin Bilbee
Most of the historic traffic had to do with Scott actively participating in the 
list and listing his clients. I have noticed the less Declude participates the 
quieter the list gets.

And Declude has been keeping to them selves as of late.

Kevin Bilbee


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Gary Steiner
 Sent: Tuesday, June 13, 2006 12:43 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] Test
 
 No.  Most likely it is because declude.junkmail typically experiences a
 lot of traffic, but recently it's been extremely quiet.  I guess some
 folks just got paranoid.
 
 Instead of posting test messages, it would be better if folks asked a
 question or made an appropriate comment to start a thread.
 
 
 
  Original Message 
  From: Arik Keller [EMAIL PROTECTED]
  Sent: Tuesday, June 13, 2006 2:02 PM
  To: declude.junkmail@declude.com
  Subject: RE: [Declude.JunkMail] Test
 
  Have we been having problems with this?
 
 
 
_
 
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
  Shaun Patterson
  Sent: Tuesday, June 13, 2006 1:50 PM
  To: declude.junkmail@declude.com
  Subject: [Declude.JunkMail] Test
 
 
 
  Another Test to See that the List is working properly.
 
 
 
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
 unsubscribe Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Growing Pains

2006-06-13 Thread Kevin Bilbee
What is Commtouch it is www.Commtouch.com? Or something else.


Kevin Bilbee


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 David Barker
 Sent: Tuesday, June 13, 2006 3:59 PM
 To: Declude.JunkMail@declude.com; Declude.Virus@declude.com
 Subject: [Declude.JunkMail] Growing Pains
 
 To all Declude users:
 
 I wanted to send out a message to address some of the concerns being
 raised by our user base. Before I get down to specifics, let me give
 you some information about the general direction of the company.
 
 Declude is still a small company. Like any business, we want to grow,
 create better products, keep you our customers happy and enjoy what we
 do. Growth requires a certain amount of change. In our case that means
 hiring a number of new people to expand our customer support group and
 provide better service. It means looking for new partners such as AVG
 and CommTouch to make our software work even harder as security threats
 become faster and more sophisticated. It means finding a bigger, more
 productive space to work in.
 And it means that we need to explore opportunities to make our products
 available to more people.
 
 Trying to accomplish many of those things inevitably leads to making a
 few mistakes. Frankly, we made some seriously dumb ones over the last
 few weeks and we apologize for any problems we may have caused. Despite
 some of these unintentional screw ups, we still know who we are. Scott
 Perry established Declude as small company that really listened to its
 users and created flexible, powerful solutions that allowed them to
 customize Declude for their individual needs. It was also a company
 that was responsive to its users. Despite a momentary hiatus, that is
 the Declude that you will see again, and very soon.
 
 Now, on to specifics:
 
 Q - Why have we been so slow to respond to tech requests?
 
 A:  Ironically, in an effort to expand both tech support and
 engineering to deliver faster response and better solutions we have
 expanded staffing in both areas significantly. We all know that that
 our software is powerful, but it's also complex and takes time to truly
 master its nuances.  We underestimated the time it would take and the
 resources required to get our
 people in both areas up to speed.   Our mistake.  We are now past that
 area
 of concern and ready to be responsive to your needs.
 
 Q. - Are there issues or problems with the product?
 
 A. -  No, just the opposite.  The fact of the matter is we are working
 aggressively to offer an industry leading, fully integrated solution
 that is both powerful and affordable.  The AVG announcement is one
 example as is our upcoming addition of Commtouch to that suite is
 another. Integrating those solutions, while expanding staffing, moving
 and training was a result of biting off a bit more than we could chew
 at once. Timing was hardly perfect, but we have finalized the CommTouch
 integration and learned some hard lessons in the process.
 
 Like it or not, when small companies make mistakes, they really stand
 out.
 I guess for a few weeks we forgot that we are a small company and that
 we, like many of you, have limitations. You have our word that we will
 go above and beyond to make Declude a company you can depend on. Thanks
 for your patience.
 
 Q - It seems some people have left the company that we were used to
 communicating with.  Why has Declude been silent on those departures.
 
 A - The short answer is that we are bound to respect the privacy of all
 our employees.  It is up to them to provide that information. Our job,
 like yours, is to protect and secure the privacy of individuals and the
 enterprise, we won't make an exception in this case.
 
 David Barker
 Product Manager
 Declude is Cybercom Security  - Email. Voice. Messaging.
 978.499.2933 office
 978.988.1311 fax
 [EMAIL PROTECTED]
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
 unsubscribe Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



  1   2   3   4   5   6   >