[Declude.JunkMail] Issue with Bounce EML File

2004-04-30 Thread Robert Forsyth
I asked this yesterday right before the Hotmail issue came to light...so
I'll ask again to see if there are any thoughts:


Setting up a 'bad users/stalker' filter (BOUNCEONLYIFYOUMUST) in Declude
in which I have my Yahoo address in the external file as a test address.
The bounced email (VIEWERABUSE.EML) looks like an 'unknown user' bounce
with a copy to me, so the sender thinks the person is no longer here.

In my bounce email I have:

snip
To: [EMAIL PROTECTED],%MAILFROM%
From: [EMAIL PROTECTED]
Subject: Undeliverable message returned to sender
/snip


I get the '[EMAIL PROTECTED]' bounce/copied email, but the one back
to my yahoo account never shows up.  
Here is the snippet from the SYS log:

snip
04:29 14:42 SMTP-(0254) Trying yahoo.com (0)
04:29 14:42 SMTP-(0254) Connect yahoo.com [64.157.4.79:25] (1) 04:29
14:42 SMTP-(0254) 220 YSmtp mta157.mail.sc5.yahoo.com ESMTP service
ready 04:29 14:42 SMTP-(0254) EHLO wjla.com 04:29 14:42
SMTP-(0254) 250-mta157.mail.sc5.yahoo.com 04:29 14:42
SMTP-(0254) 250-8BITMIME 04:29 14:42 SMTP-(0254) 250-SIZE
10485760 04:29 14:42 SMTP-(0254) 250 PIPELINING 04:29 14:42
SMTP-(0254) MAIL FROM:[EMAIL PROTECTED] 04:29 14:42
SMTP-(0254) 501 Syntax error in parameters or arguments 04:29 14:42
SMTP-(0254) ERR undeliverable 501 Syntax error in parameters or
arguments 04:29 14:42 SMTP-(0254) SMTP_DELIV_FAILED 04:29 14:42
SMTP-(0254) QUIT /snip


I think it's the 
04:29 14:42 SMTP-(0254) MAIL FROM:[EMAIL PROTECTED]
Line but can't figure out why the format is being sent that way.

BTW, I am using the latest release from Declude.


Thanks
Robert

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Issue with Bounce EML File

2004-04-30 Thread Robert Forsyth


SMTP-(0254) MAIL FROM:[EMAIL PROTECTED] 04:29 14:42

s missing the preceeding to wrap the address



That's the issue...the fact/problem is Declude or Imail is the one who
wrote that command to Yahoo's server that way.  According to specs, we
do not put  around emails in bounce messages.

Any other thoughts?

Robert

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Issue with Bounce EML File

2004-04-29 Thread Robert Forsyth
Setting up a 'bad users/stalker' filter (BOUNCEONLYIFYOUMUST) in Declude
in which I have my Yahoo address in the external file as a test address.
The bounced email (VIEWERABUSE.EML) looks like an 'unknown user' bounce
with a copy to me, so the sender thinks the person is no longer here.

In my bounce email I have:

snip
To: [EMAIL PROTECTED],%MAILFROM%
From: [EMAIL PROTECTED]
Subject: Undeliverable message returned to sender
/snip


I get the '[EMAIL PROTECTED]' bounce/copied email, but the one back
to my yahoo account never shows up.  
Here is the snippet from the SYS log:

snip
04:29 14:42 SMTP-(0254) Trying yahoo.com (0)
04:29 14:42 SMTP-(0254) Connect yahoo.com [64.157.4.79:25] (1)
04:29 14:42 SMTP-(0254) 220 YSmtp mta157.mail.sc5.yahoo.com ESMTP
service ready
04:29 14:42 SMTP-(0254) EHLO wjla.com
04:29 14:42 SMTP-(0254) 250-mta157.mail.sc5.yahoo.com
04:29 14:42 SMTP-(0254) 250-8BITMIME
04:29 14:42 SMTP-(0254) 250-SIZE 10485760
04:29 14:42 SMTP-(0254) 250 PIPELINING
04:29 14:42 SMTP-(0254) MAIL FROM:[EMAIL PROTECTED]
04:29 14:42 SMTP-(0254) 501 Syntax error in parameters or arguments
04:29 14:42 SMTP-(0254) ERR undeliverable 501 Syntax error in
parameters or arguments
04:29 14:42 SMTP-(0254) SMTP_DELIV_FAILED
04:29 14:42 SMTP-(0254) QUIT
/snip


I think it's the 
04:29 14:42 SMTP-(0254) MAIL FROM:[EMAIL PROTECTED]
Line but can't figure out why the format is being sent that way.

BTW, I am using the latest release from Declude.


Thanks
Robert

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Whitelist File Help

2003-11-13 Thread Robert Forsyth
I have this in my $default$.junkmail file:

WHITELISTFILE c:\IMail\Declude\whitelistfile.txt



The whitelistfile.txt has a format of:

FROM [EMAIL PROTECTED]
FROM @katz-media.com
FROM @NielsenMedia.com
FROM @sellstufflocal.com
FROM @evertz.com
FROM @continentaltvsales.com
FROM @continentaltvsales.com
FROM @mail.disney.com
FROM @magid.com


Is this correct???

Thanks
Robert

P.s. I using latest Pro version

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Whitelist File Help

2003-11-13 Thread Robert Forsyth
The whitelistfile.txt has a format of:

FROM [EMAIL PROTECTED]

So, whitelists for IP's and REVDNS should remain in the GLOBAL.CFG?


Does a single address get handled as both TO and FROM?  I used both in
the global.

Robert


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Whitelist File Help

2003-11-13 Thread Robert Forsyth
So, whitelists for IP's and REVDNS should remain in the GLOBAL.CFG?

Correct.

Does a single address get handled as both TO and FROM?  I used both in 
the global.

The WHITELISTFILE option only works on the sender's address.

-Scott



Thanks Scott!

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] OT: Do you use ColdFusion?

2003-11-06 Thread Robert Forsyth
I have about 15...why?

Robert

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jason (by way
of R. Scott Perry [EMAIL PROTECTED])
Sent: Thursday, November 06, 2003 4:43 PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] OT: Do you use ColdFusion?


I was just wondering how many people here have a ColdFusion server at
their 
disposal.

Jason Wolfe
Lead Developer
Netcomm, Inc.
http://www.netcomm.com
(859) 224-4124

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Why did this get bounced?

2003-10-28 Thread Robert Forsyth


---begin snip

  Mail Server:   218.253.238.146 for wjla.com [wjla.com] 
  DNS Pointer:   cm218-253-238-146.hkcable.com.hk 
  Host Name: wjla.com 

  Triggers:  SPAMCHK, MYHELOTEST, SPAMCOP, IPNOTINMX, WEIGHT10,
WEIGHT20, WEIGHT70, WEIGHT130, FIVETEN-SPAM (Blocked - see
http://www.spamcop.net/bl.shtml?218.253.238.146) 


---end snip

I'm testing a new HELOTEST which checks to see if the mail is pretending
to come from my domain (HELO 5 CONTAINS wjla.com).  I have it set to
HOLD and SPAMCOP is set to BOUNCE.  The bounce message, because of the
SPAMCOP bounce, did get through to me when I thought the it would have
been held due to MYHELO test.  FYI, 'some' of the HELOTEST emails are
getting held.

Am I missing something in the processing order, which I thought was
HOLD, BOUNCE, and DELETE, ROUTETO?

Thanks
Robert

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Process Tree

2003-08-14 Thread Robert Forsyth
Can someone give me the order(IMAIL/DECLUDE JM/DECLUDE VIRUS) in which an
email is processed?

I have Imail rules which 'I think' are setup properly:

B~(name=.*\.pif\s|name=.*\.exe\s|name=.*\.lnk\s):NUL
B~(begin 6.*\.pif\s|begin 6.*\.exe\s|begin 6.*\.lnk\s):NUL


but I still see these emails in the Virus directory.  Should'nt an email
that get routed to NUL never get to declude?

TIA

Robert

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Interesting Log Entries

2003-07-23 Thread Robert Forsyth
So, your internal users are sending out spam with a score of over
150?

I use Imail to store and forward email for another domain we use to
provide email for some of our clients.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Help with Bounce emails

2003-07-22 Thread Robert Forsyth
I'm getting complaints about bounce messages from spammers that are using
internal emails as the FROM person.  The bounce messages go back to the
original recipient who never sent the email in the first place.

Is this a valid command at the top of the bounce message that declude would
send out if an email fails a test:

SKIPIFSENDER @wjla.com

will this prevent any bounce messages to anyone at wjla.com?

Also, does declude send the bounce mail directly to IMAIL so it is not
scanned or processed by Declude?

Thanks

Robert

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Interesting Log Entries

2003-07-22 Thread Robert Forsyth
07/22/2003 15:01:57 Q8a220d1a00b4cc34 Msg failed WEIGHT150 (Weight of 169
reaches or exceeds the limit of 150.). Action=IGNORE.

WEIGHT 150 ACTION SHOULD BOUNCE...WHY DID IT IGNORE?

TWO SECONDS LATER:

07/22/2003 15:01:59 Q8a2314af00a2d099 Msg failed WEIGHT150 (Weight of 193
reaches or exceeds the limit of 150.). Action=BOUNCE.

SAME WEIGHT 150 TEST...ACTION DOES BOUNCE LIKE IT SHOULD


Why two different action results?

Using Declude 1.75 release

Robert



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Interesting Log Entries

2003-07-22 Thread Robert Forsyth
That's because Declude JunkMail is very flexible, and has per-user,
per-domain, incoming, outgoing, and now even sender actions.  So a single
test may have many different actions.

In this case, you have a configuration file with WEIGHT150 BOUNCE, and
another that either has WEIGHT150 IGNORE or no line starting with
WEIGHT150 to determine the action to take (IGNORE is the default).

-Scott

I only use one config set...no per-user configurations.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Interesting Log Entries

2003-07-22 Thread Robert Forsyth
I would recommend using LOGLEVEL HIGH in the \IMail\Declude\global.cfg 
file.  When doing so, Declude JunkMail will record in the log file which 
configuration file it is using.  That will make it easier to see which 
config file has WEIGHT150 IGNORE (or no action listed for 
WEIGHT150).  My 
guess would be that this is for outgoing E-mail, in the 
\IMail\Declude\global.cfg file.



Found it...forgot to check the Outbound rules in the GLOBAL.

sorry for not checking there first.

Robert
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Issue with Whitelisting

2003-07-19 Thread Robert Forsyth
I'm having an issue with some domains that are supposed to be
whitelisted, but still failing a test:

I Hold on SPAMDOMAINS

In my Global:
WHITELIST FROM .paypal.com


Log snippet:
07/19/2003 01:26:43 Qd69101bd009c5c65 Msg failed SPAMCHK (Message failed
SPAMCHK: 60.). Action=WARN.
07/19/2003 01:26:43 Qd69101bd009c5c65 Msg failed SPAMDOMAINS (Spamdomain
'@yahoo.' found: Address of [EMAIL PROTECTED] sent from invalid
smtp1.nix.paypal.com.). Action=HOLD.
07/19/2003 01:26:43 Qd69101bd009c5c65 Msg failed NOABUSE (Not supporting
[EMAIL PROTECTED]). Action=WARN.
07/19/2003 01:26:43 Qd69101bd009c5c65 Msg failed NOPOSTMASTER (Not
supporting [EMAIL PROTECTED]). Action=WARN.
07/19/2003 01:26:43 Qd69101bd009c5c65 Msg failed WEIGHT10 (Weight of 73
reaches or exceeds the limit of 10.). Action=IGNORE.
07/19/2003 01:26:43 Qd69101bd009c5c65 Msg failed WEIGHT20 (Weight of 73
reaches or exceeds the limit of 20.). Action=WARN.
07/19/2003 01:26:43 Qd69101bd009c5c65 Msg failed WEIGHT70 (Weight of 73
reaches or exceeds the limit of 70.). Action=SUBJECT.

Should not this email NOT gotten held in the spam directory?

Robert

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Recent Message From Declude.JunkMail-owner@declude.com?

2003-06-06 Thread Robert Forsyth
I got one too...wierd.

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Dan Geiser
 Sent: Friday, June 06, 2003 2:16 PM
 To: Declude JunkMail
 Subject: [Declude.JunkMail] Recent Message From
 [EMAIL PROTECTED]


 Hello, All,
 A little less than 1/2 hour I received a message in my inbox
 which purported
 to be from Declude.com.  Here is the full message (the 's are mine)...

 

 Received: from declude.com [66.189.124.29] by NexusTechGroup.com
 with ESMTP
   (SMTPD32-6.06) id A33F67FC0114; Fri, 06 Jun 2003 13:45:35 -0400
 X-Declude-Sender: [EMAIL PROTECTED] [66.189.124.29]
 X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
 spam.
 X-Spam-Tests-Failed: BADHEADERS [5]
 
 This E-mail is scanned and free from viruses. www.nexustechgroup.com
 X-RCPT-TO: [EMAIL PROTECTED]
 Date: Fri,  6 Jun 2003 13:45:42 -0400
 X-UIDL: 354754410
 Status: U
 From: [EMAIL PROTECTED]

 

 As you can see there's not much to it.  Did anyone else receive this
 message?  Was this message actually sent from Declude?  Or was it
 a misfire
 in an impending attempt to use the good name of Declude.com to
 slip through
 people's spam filtering?

 Just curious.  It seemed like a very odd message to me.

 Thanks, Much!
 Dan Geiser [EMAIL PROTECTED]

 
 This E-mail is scanned and free from viruses. www.nexustechgroup.com

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Alert Emails

2003-05-29 Thread Robert Forsyth
To send an alert email to multiple recipients, the syntax is:

To: %MAILFROM%, [EMAIL PROTECTED]
From: [EMAIL PROTECTED]
Subject: Courtesy Email From %LOCALHOST%

If this is correct, I get the [EMAIL PROTECTED] emails for monitoring
purposes with no problem, but the %MAILFROM% never gets the alert.  I tested
this (rsp SE_T OFF REVDNS) from my Yahoo account...when its just %MAILFROM%,
the alert goes back to the Yahoo account like it should.  When its
%MAILFROM%, [EMAIL PROTECTED], only the postmaster(me) alert gets
delivered, the yahoo account never gets the alert message.


Bug or Feature ???  :)

Robert Forsyth

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Alert Emails

2003-05-29 Thread Robert Forsyth
 To send an alert email to multiple recipients, the syntax is:
 
 To: %MAILFROM%, [EMAIL PROTECTED]
 
 Actually, the IMail1.exe program that Declude uses to send the 
 E-mail won't 
 accept that, because of the space in there (it is very picky!).  If you 
 change it to:
 
 To: %MAILFROM%,[EMAIL PROTECTED]
 
 then it should work.
 
 -Scott

I removed the space, save the .eml file and still no luck.  

Any Ideas??

Robert
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Why Did This Get Through?

2003-03-25 Thread Robert Forsyth
I'm see an on-again off-again occurrence of emails getting through that
should of failed.

Below are the headers...can anyone shed some light?

Thanks
Robert

Received: from relay04.valueweb.net [216.219.253.238] by wjla.com with ESMTP
  (SMTPD32-7.06) id A72D1CA50104; Tue, 25 Mar 2003 12:51:41 -0500
Received: from gaia.valueweb.net ([216.219.253.52]:21995 EHLO
gaia.valueweb.net) by relay04.valueweb.net with ESMTP
id S247275AbTCYRwj; Tue, 25 Mar 2003 12:52:39 -0500
Received: from [67.104.187.162] ([67.104.187.162]:8219 HELO
smtp1.valueweb.net) by gaia.valueweb.net with SMTP
id S230122AbTCYRwX; Tue, 25 Mar 2003 12:52:23 -0500
Message-Id: [EMAIL PROTECTED]
Date:   Tue, 25 Mar 2003 12:52:21 -0500
To: [EMAIL PROTECTED]
From:   ARCO Computer Products, LLC. [EMAIL PROTECTED]
Subject: What If Your Hard Drive Crashed Right Now?
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1; format=flowed
X-RBL-Warning: WEIGHT20: Weight of 65 reaches or exceeds the limit of 20.
X-Declude-Sender: [EMAIL PROTECTED] [216.219.253.238]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
spam.
X-Spam-Tests-Failed: SPAMCHK, IPNOTINMX, WEIGHT10, WEIGHT20 [65]
X-RCPT-TO: [EMAIL PROTECTED]
Status: U
X-UIDL: 337582254


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Log Analyzer - Comments Needed

2003-02-28 Thread Robert Forsyth
I would love it too.  [EMAIL PROTECTED]

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell L.
Sent: Friday, February 28, 2003 9:15 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Log Analyzer - Comments Needed


Keith,

I have a beta available and I am looking for individuals to test it out.
If you are interested the beta will be made available as early as
Monday.

Please let me know if you are interested.

Darrell LaRock


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson
Sent: Thursday, February 06, 2003 4:35 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Log Analyzer - Comments Needed

Darrell,
That is awesome.  I get those same requests from our clients
weekly.   I appreciate your time in writing it. 

Keith

 -Original Message-
 From: Darrell L. [mailto:[EMAIL PROTECTED]
 Sent: Thursday, February 06, 2003 11:35 AM
 To: [EMAIL PROTECTED]
 Subject: [Declude.JunkMail] Log Analyzer - Comments Needed
 
 
 *Sorry if this is outside the realm in which the forum should be used.
 
 Several of my customers have started asking me for reports on
 what Declude is blocking for their domain or a certain user.  
 Obtaining this information was challenging manually sifting 
 through the logs - to say the least.  I then decided to write 
 an analyzer that could accomplish what I needed.  
 
 It's a good portion of the way wrote, and I am thinking about
 making it public at some point when it is completely finished.
 
 However, I was looking for features that people would like
 that I may not have thought of at this point.
 
 Currently right now it can do the following
 
 1.) Report on Number of messages that fails each test.
 2.) Comprehensive reporting on each individual tests.
 Reports can be generated based on (to, from, domain, 
 subjects, date, time).
 3.) Report on individual domains and which messages failed which tests
 4.) Report on individual users and which messages failed which tests.
 5.) It is a console application written in C# (.net).  It is 
 self contained and does not need any external databases like 
 SQL Server or MSDE.
 
 Things Still to be added
 1.) Ability to email the reports
   
 
 Thanks
 Darrell
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] So Far So Good!

2003-02-25 Thread Robert Forsyth
24 hours with declude and 2900 emails stopped!  Awesome product!


Robert Forsyth
Director of Internet Operations
ABC 7/Newschannel 8
703-236-9580 (direct)
703-236-9259 (fax)
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.