RE: [Declude.JunkMail] No one at Declude?
Thanks. Mine too. From: John Doyle [mailto:jdo...@spicehunter.com] Sent: Wednesday, April 10, 2013 4:18 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] No one at Declude? Robert look in the declude log file, for CT-BULK or CT-SPAM (depending on how you set it up in your global.cfg file AT 2:18 Pacific time today mine was still working Use the links below and download the data. John _ From: Robert Grosshandler [mailto:r...@igive.com] Sent: Wednesday, April 10, 2013 2:00 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] No one at Declude? How are you determining that commtouch isn’t working? From: Rick [mailto:redbara...@qwest.net] Sent: Wednesday, April 10, 2013 3:53 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] No one at Declude? Well their site has been down for at least 8hr so far and from what I can tell our Commtouch subscription has stopped working since then. SPAM increased 4x since this morning starting around 3AM. Thought it was a config issue after I got a email from Declude that I needed to upgrade to avoid issues after 3/30/2013. This is not looking good. From: ra...@globalweb.us [mailto:ra...@globalweb.us] Sent: Wednesday, April 10, 2013 1:34 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] No one at Declude? I would like to get an official notice from Declude on what is going on and how it will affect us, like your example of the license server. Sincerely, Randy A. John Dobbin wrote:So it would seem. With all the discussion recently about Declude going down, my concern is more with what happens if/when the licensing server goes away? What are people looking at to migrate to? Has there been any actual confirmation aside from postings from former employees and people's perceptions? (no offence David) -Original Message- From: Herb Guenther [mailto:h...@lanex.com] Sent: Wednesday, April 10, 2013 3:18 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] No one at Declude? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] No one at Declude?
You can probably contact the message sniffer folks directly. There's not much about Declude itself that requires updates, so long as it is working. http://armresearch.com/ Good luck, Rob -Original Message- From: declude [mailto:decl...@mail.net1media.com] Sent: Wednesday, April 03, 2013 12:22 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] No one at Declude? Last Wednesday (3/27/2013), I renewed my Declude and Messaage Sniffer service agreements. A full week later, they both still come up as expired. All phone calls and emails have gone unanswered. I left voice mails for Tech support, Sales and the phone number previously listed on this list for John. I emailed both support at declude and jprovost at declude.com. I don't know where to go from here. A very sad time for Declude. Don Sent via the WebMail system at net1media.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Idea for new Declude add-on
That actually was a feature already built by someone many moons ago. He was / is a Declude user. It used to be listed on the declude site. http://www.eservicesforyou.com/products/autowhite.html -Original Message- From: David Barker [mailto:dbar...@declude.com] Sent: Thursday, February 17, 2011 7:49 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Idea for new Declude add-on Great idea Dave thanks. Question. If a user emails a recipient in what scenario would we not want to whitelist the recipients address ? -Original Message- From: Dave Beckstrom [mailto:db...@atving.com] Sent: Thursday, February 17, 2011 8:45 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Idea for new Declude add-on I have an idea for something I think would be a useful add-on for declude. Every time someone sends an outbound SMTP email to someone, the add-on would add an entry to a filter giving the recipient's to address a weight of minus one. Therefore, giving the recipient a credit. Any time the recipient sends an email to my server, minus one gets subtracted from the total score of their email. If a user on my server sends a second email to the same recipient, another minus one credit is added to the filter. Now that recipient has a credit of minus two. The add-on would be configurable to limit the maximum credit a single address could reach. It would also have an exclusion ability where you could enter a list of email addresses that would never receive any credit. The idea being that the more frequently you email someone, the less likely that email from them would be spam. I know some will argue that from addresses can be forged and that perhaps its not a good idea to give credit based on a from address. But its not very often at all I ever receive a spam that came from a friend's forged from address. I think something along the lines of this type of system could be useful. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Imail vs. Smartermail
Thanks. It would have 1,000,000 aliases in it, I can't imagine that would be easy to process. From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Robert Shubert Sent: Monday, September 13, 2010 9:55 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Imail vs. Smartermail When I made the switch over to SM I had several accounts with abc-xyz@ that didn't work. We solved the problem by creating a aliases named abc-xyz@ that mapped to abc+...@. I understand that you have many of these type accounts to handle, but it could be done with a large alias file (that you should be able to create automatically with a script). Robert From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Robert Grosshandler Sent: Friday, August 27, 2010 3:17 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Imail vs. Smartermail Hi All - We're currently using Imail v2006. We had no need to upgrade and the iMail versions until this year didn't support some features we needed (primariy DomainKey / DKIM signing of outbound mail. ) We'd considered moving to Smartermail, but it didn't (and doesn't) support a feature we needed (blah-x...@igive.com) formatting of incoming mail. Smartermail does (blah+x...@igive.com) and we'd have to get 250,000 folks to change the e-mail address we assigned them. Pricing between the two for our needs is almost the same (Smartermail would be slightly cheaper in the long run). I know that people left iMail in droves over the past several years. Any current info on Ipswitch that should make me go through the pain of a switch to Smartermail? Thanks ahead of time. Rob --- [This E-mail was checked by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Imail vs. Smartermail
We actually are doing that for outbound mail from our servers (not for our employees), but the catch is, it can't be just a gateway, I don't believe. I think it actually has to process the content of the email in order to be able to sign it correctly, not just the header information. We could keep Imail for incoming mail, and use Smartermail for outgoing mail and employees, but why have two things to manage when you can have one. Thanks. From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Eddie Sent: Saturday, August 28, 2010 6:01 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Imail vs. Smartermail I am not sure about this. So I am opening this up for discussion.. What would happen if you just ran Smartermail as an Outbound email gateway. Wouldn't Domainkeys/Dkim still work without needing to change everyone's email address? Cheers, Eddie From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Robert Grosshandler Sent: Friday, August 27, 2010 9:17 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Imail vs. Smartermail Hi All - We're currently using Imail v2006. We had no need to upgrade and the iMail versions until this year didn't support some features we needed (primariy DomainKey / DKIM signing of outbound mail. ) We'd considered moving to Smartermail, but it didn't (and doesn't) support a feature we needed (blah-x...@igive.com) formatting of incoming mail. Smartermail does (blah+x...@igive.com) and we'd have to get 250,000 folks to change the e-mail address we assigned them. Pricing between the two for our needs is almost the same (Smartermail would be slightly cheaper in the long run). I know that people left iMail in droves over the past several years. Any current info on Ipswitch that should make me go through the pain of a switch to Smartermail? Thanks ahead of time. Rob --- [This E-mail was checked by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was checked by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Imail vs. Smartermail
Yup, sub folders, but not really. We accept mail to blah-xxx...@member.igive.com as valid, and then process it, without actually putting it into sub-folders (basically, it's bounces from our newsletters to our members). Smartermail would reject that address. We ended up going the iMail route, as it was by far the easiest solution in the short run. Plus, it looks like Smartertools is having their own bad experience with version 7 of Smartermail right now. We do run Smartertrack and we're quite happy with it, so I'm sure Smartertools come through the issues just fine. We're looking forward to rejecting at the connection level, that would be so efficient. Thanks again, Rob From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy Schmidt Sent: Saturday, August 28, 2010 8:48 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Imail vs. Smartermail What is blah- vs. blah+ for incoming mails? Are you referring to subfolders/submailboxes that Imail automatically generates? If Imail does DomainKeys and has the mailbox handling you need, why drop it? The next update to Imail will allow dropping connections for certain spam checks (we'll see which ones they are starting with.) I've been asking for that for 10 years - so hopefully I'll be able to reject (some) spam outright during the SMTP conversation. Best Regards Andy Schmidt Tel. +1 201-934-9411, x20 Fax +1 201-934-9206 From: Eddie mailto:epa...@chaminade.edu Sent: Saturday, August 28, 2010 7:00 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Imail vs. Smartermail I am not sure about this. So I am opening this up for discussion.. What would happen if you just ran Smartermail as an Outbound email gateway. Wouldn't Domainkeys/Dkim still work without needing to change everyone's email address? Cheers, Eddie From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Robert Grosshandler Sent: Friday, August 27, 2010 9:17 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Imail vs. Smartermail Hi All - We're currently using Imail v2006. We had no need to upgrade and the iMail versions until this year didn't support some features we needed (primariy DomainKey / DKIM signing of outbound mail. ) We'd considered moving to Smartermail, but it didn't (and doesn't) support a feature we needed (blah-x...@igive.com) formatting of incoming mail. Smartermail does (blah+x...@igive.com) and we'd have to get 250,000 folks to change the e-mail address we assigned them. Pricing between the two for our needs is almost the same (Smartermail would be slightly cheaper in the long run). I know that people left iMail in droves over the past several years. Any current info on Ipswitch that should make me go through the pain of a switch to Smartermail? Thanks ahead of time. Rob --- [This E-mail was checked by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was checked by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was checked by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Imail vs. Smartermail
I'm not sure. I was perusing their support forum and saw one, maybe two posts suggesting this version had lots of problems. I didn't dig hard into it. Rob From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Michael Cummins Sent: Saturday, August 28, 2010 2:01 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Imail vs. Smartermail I was about to upgrade my SmarterMail server this evening. What kind of issues are they having with 7? - MEC From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Robert Grosshandler Sent: Saturday, August 28, 2010 1:39 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Imail vs. Smartermail Yup, sub folders, but not really. We accept mail to blah-xxx...@member.igive.com as valid, and then process it, without actually putting it into sub-folders (basically, it's bounces from our newsletters to our members). Smartermail would reject that address. We ended up going the iMail route, as it was by far the easiest solution in the short run. Plus, it looks like Smartertools is having their own bad experience with version 7 of Smartermail right now. We do run Smartertrack and we're quite happy with it, so I'm sure Smartertools come through the issues just fine. We're looking forward to rejecting at the connection level, that would be so efficient. Thanks again, Rob From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy Schmidt Sent: Saturday, August 28, 2010 8:48 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Imail vs. Smartermail What is blah- vs. blah+ for incoming mails? Are you referring to subfolders/submailboxes that Imail automatically generates? If Imail does DomainKeys and has the mailbox handling you need, why drop it? The next update to Imail will allow dropping connections for certain spam checks (we'll see which ones they are starting with.) I've been asking for that for 10 years - so hopefully I'll be able to reject (some) spam outright during the SMTP conversation. Best Regards Andy Schmidt Tel. +1 201-934-9411, x20 Fax +1 201-934-9206 From: Eddie mailto:epa...@chaminade.edu Sent: Saturday, August 28, 2010 7:00 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Imail vs. Smartermail I am not sure about this. So I am opening this up for discussion.. What would happen if you just ran Smartermail as an Outbound email gateway. Wouldn't Domainkeys/Dkim still work without needing to change everyone's email address? Cheers, Eddie From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Robert Grosshandler Sent: Friday, August 27, 2010 9:17 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Imail vs. Smartermail Hi All - We're currently using Imail v2006. We had no need to upgrade and the iMail versions until this year didn't support some features we needed (primariy DomainKey / DKIM signing of outbound mail. ) We'd considered moving to Smartermail, but it didn't (and doesn't) support a feature we needed (blah-x...@igive.com) formatting of incoming mail. Smartermail does (blah+x...@igive.com) and we'd have to get 250,000 folks to change the e-mail address we assigned them. Pricing between the two for our needs is almost the same (Smartermail would be slightly cheaper in the long run). I know that people left iMail in droves over the past several years. Any current info on Ipswitch that should make me go through the pain of a switch to Smartermail? Thanks ahead of time. Rob --- [This E-mail was checked by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was checked by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was checked by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was checked by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was checked by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from
[Declude.JunkMail] Imail vs. Smartermail
Hi All - We're currently using Imail v2006. We had no need to upgrade and the iMail versions until this year didn't support some features we needed (primariy DomainKey / DKIM signing of outbound mail. ) We'd considered moving to Smartermail, but it didn't (and doesn't) support a feature we needed (blah-x...@igive.com) formatting of incoming mail. Smartermail does (blah+x...@igive.com) and we'd have to get 250,000 folks to change the e-mail address we assigned them. Pricing between the two for our needs is almost the same (Smartermail would be slightly cheaper in the long run). I know that people left iMail in droves over the past several years. Any current info on Ipswitch that should make me go through the pain of a switch to Smartermail? Thanks ahead of time. Rob --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Configuration Suggestion Requested
Hi We get a reasonable number of spam /virus laden emails with the following characteristics. 1) Sent to multiple recipients 2) A single line in the email, consisting of a URL. The email is probably being sent by infected machines. It comes from legit email addresses. Looking for a way to reliably blow these away! Thanks, Rob --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] We have opened up truncate.gbudb.net
Hi If we're running Sniffer, and we set this up as a Declude test (we're not able to reject connections based on the info), isn't it being double counted (once from SNF, once on its own?) Thanks, Rob From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Michael Cummins Sent: Friday, April 30, 2010 10:14 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] We have opened up truncate.gbudb.net That's odd. This is what I already configured it for on my first guess: TRUNCATE-GBUDB IP4Rtruncate.gbudb.net 127.0.0.120 But I haven't gotten any hits yet. Is there any way to test this from a command prompt, like you can with the invaluement RBLs and nslookup? - Michael Cummins From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Nick Hayer Sent: Friday, April 30, 2010 11:00 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] We have opened up truncate.gbudb.net here ya go IP4R.GBUBD ip4r truncate.gbudb.net 127.0.0.1 9 0 Above scores a 9 on a hit.. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support ticket: https://www.skywaves.com/content/secure/support_ticket.htm _ From: Michael Cummins mich...@i-magery.com Sent: Friday, April 30, 2010 9:36 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] We have opened up truncate.gbudb.net I don't think I set it up properly as an ip4r test in Declude. What would the line look like, if written properly? Thanks for your time and effort. -- Michael Cummins -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Pete McNeil Sent: Thursday, April 29, 2010 5:06 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] We have opened up truncate.gbudb.net Hi Declude folks, We have been testing a blacklist based on real-time GBUdb data (generated from Message Sniffer). We have decided to experiment with opening up the blacklist for a wider audience and so as of now you can use truncate.gbudb.net as an ip4r test. You should get a result of 127.0.0.1 if the IP is well into the truncate range -- That is: truncate.gbudb.net is designed to be ultra-conservative so that it should be safe to reject connections based on the test in most cases. This also means that it won't block everything -- only the worst of the worst. That said, the folks who have been testing it have reported that it did drop a significant amount of traffic from their systems on average. Please keep us all posted about how it's working for you. Thanks, _M --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Outlook
Hi Occassionally, we're getting false positives on the email to us containing: [Outlook 'MIME segment in MIME Postamble' Vulnerability] I'm sure they do contain that problem, but false in that they're not malicious (I don't think.) People still blocking on this? Thanks, Rob --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] BackScatter
From what I read, Interceptor (which we tried in its earlier incarnation, eons ago) doesn't include the Hijack functionality (the design wouldn't support it.) Rob From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Dan Shadix Sent: Monday, May 18, 2009 3:15 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] BackScatter We've been running Declude Interceptor for a few months now and I agree completely with David's comments. It has been great and the transition was very easy. Dan From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David Barker Sent: Monday, May 18, 2009 1:04 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] BackScatter Hi Todd, Alligate has way better greylisting capabilities than SmarterMail. SmarterMails implementation is somewhat dangerous. You need to be able to accurately qualify which messages should be greylisted. Alligate is the only greylisting implementation that does this. I don't believe you would have this problem if you were running Interceptor or the Alligate/Declude combination, and I am sure other Alligate/Declude users would agree with me. If you are interested, I can work with you to give you an upgrade path to Declude Interceptor from your current license. David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax mailto:dbar...@declude.com dbar...@declude.com _ The information contained in this communication is privileged and confidential. If you have received this communication in error, please forward back to the sender and delete your copy immediately. You are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Help Me Add Weight
Sounds like a spam headline, doesnt it? Anyway, were getting obvious spam, but were not able to weight it enough to block it. Any tests you might suggest. The following came to us BCCd, I believe. Nothing about it was appropriate for us. Here are the headers: Received: from etkinandassoc.com [173.15.150.165] by smtp.igive.com with ESMTP (SMTPD-9.23) id ACEF0330; Thu, 05 Feb 2009 23:38:55 -0600 Received: from 72.86.160.192 ([192.168.0.1]) by etkinandassoc.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 15 Dec 2008 10:45:55 -0500 Received: from 203.207.12.96 by (HELLO 82.87.36.88 ) (82.87.36.88) by ms4.hinet.net with KSHPQU login by AOL 2.0 for Windows US sub 584 SMTP ; Sat, 20 Dec 2008 09:44:18 -0600 Message-ID: sluuhfuxcnvdafioryuvuvbby.vdrbxefscp...@yahoo.com.ar From: É¿ú ݾ ³Ð·~ ªººÞ¹D,¿Ô¸ß¹q¸Ü;0910926146--¢ï¢ï¢ï scp...@yahoo.com.ar To: i...@ig.com.br Subject: [PS - 11]-** SPAM ** É ¿ú Ý Â¾ . ³Ð ·~ ªººÞ¹D Date: Sat, 20 Dec 2008 12:43:18 -0300 X-Mailer: Microsoft Outlook Express 5.00.2919.6700561 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=--1467603521071365853 X-Priority: 1 X-MSMail-Priority: High X-SpamInfo: helo-dns, Return-Path: scp...@yahoo.com.ar X-OriginalArrivalTime: 15 Dec 2008 15:46:18.0848 (UTC) FILETIME=[45762600:01C95ECC] X-RBL-Warning: UCEPROTECT-1: IP 173.15.150.165 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=173.15.150.165; X-RBL-Warning: SNIFFER: Message failed SNIFFER: 60. X-Declude-Sender: scp...@yahoo.com.ar [173.15.150.165] X-Declude-Spoolname: Dccef01a2279a.smd X-Declude-RefID: str=0001.0A010203.498BCCF8.0197,ss=1,fgs=0 X-Declude-Scan: Incoming Score [11] at 23:39:07 on 05 Feb 2009 X-Declude-Fail: UCEPROTECT-1 [4], SNIFFER [12], WEIGHT9 [9], WEIGHTMID [10], ZEROHOUR [0] X-Country-Chain: SPAIN-UNITED STATES-destination X-RCPT-TO: i...@igive.com Status: X-UIDL: 467500241 X-IMail-ThreadID: ccef01a2279a 1467603521071365853 Content-Type: text/plain; Content-Transfer-Encoding: quoted-printable =B7Q=ADn=A4=EB=A4J=A6=CA=B8U=B6=DC,=BF=D4=B8=DF=B9q=B8=DC;0910926146--=A2=EA = =A2=EA=A2=EA =A7A =ADn =B0=D1 =A5[ =B6=C7 =BEP =B6=DC =A7=DA =C0=B0 =A7A =A7=E4 =A4U =BDu =BF=EC =AAk =B0=DD =A7=DA =A5=FE =AC=D9 =B6=C7 =BEP =B0=AA =A4=E2 =C1` =BBE =A6X =A8C =ACP =B4=C1 5 =A4U =A4=C8 =A4T =C2I =A8=A3 =AD=B1 =B1=D2 =B0=CA =B1M =BDu =A2=AF=A2=B8=A2=B0=A2=AF=A2=B8=A2=B1= =A2=B5=A2=B0=A2=B3=A2=B5 =BCx=A5x=C6W=A5=FE=AC=D9=A6b=A6a=A4H=AD=FB =A5u=ADn=C1=C8=BF=FA=A7=E4=A7=DA= 1467603521071365853-- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Need Filter
Hi All - Rather than learn something new (my brain is overfull, and still feels empty), I'm hoping somebody has a filter or guidance for the following need. I don't want to move to per-user configurations if I can help it. I'd like to have a filter that adds weight when an email fails a particular test AND is addressed to a specific account. Ie. Fails spamcannibal AND is TO [EMAIL PROTECTED]. ALSO FAILS FROM xyx.com AND is TO [EMAIL PROTECTED]. Thanks in advance. Rob --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Need strategy to up score.
The PCRE for yahoo.co.uk might just be the ticket. Thanks! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, April 09, 2008 8:58 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Need strategy to up score. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Need strategy to up score.
Hi We're getting spam that comes via Yahoo, looks good (but it isn't). We'd like to up the score it receives, so it won't get passed through. We use Sniffer/Declude/Inviurbl. We're almost always Bcc'd. Sometimes fails Sniffer, sometimes not (we've got a query into them, too.) Doesn't always fail zerohour. Always seems to be complete gobbledygook, plus a URL that looks like it is well formed (and doesn't fail inviurbl test.) Always seem to come via mud.yahoo.com (but so does legit email.) Headers follow, thanks for any advice. Received: from n26.bullet.mail.mud.yahoo.com [68.142.206.221] by smtp.igive.com (SMTPD-9.23) id AD5302B4; Mon, 07 Apr 2008 19:33:23 -0500 Received: from [68.142.200.227] by n26.bullet.mail.mud.yahoo.com with NNFMP; 08 Apr 2008 00:33:22 - Received: from [68.142.201.245] by t8.bullet.mud.yahoo.com with NNFMP; 08 Apr 2008 00:33:23 - Received: from [127.0.0.1] by omp406.mail.mud.yahoo.com with NNFMP; 08 Apr 2008 00:33:23 - X-Yahoo-Newman-Id: [EMAIL PROTECTED] Message-ID: [EMAIL PROTECTED] Received: (qmail 56970 invoked from network); 8 Apr 2008 00:33:22 - DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=Received:X-YMail-OSG:X-Yahoo-Newman-Property:From:To:Reply-To:Subject:Date :MIME-Version:Content-type:Content-transfer-encoding; b=56tfwh/ZgrQDDqdn753U/L6m1fWJcABbNVM/kWWVUnmtRb34zE7SUdPbuBl5pBR+vKu5gWQj0Y 4ZtqBDqA8eMMjB4wpIbGBcQLmMo2hvNECaSWG09steODkIiCbItU7nHLtbutkTV2FATYUQ/g6lib rf/QtD3tsRFNT+zLMDRKw= ; Received: from unknown (HELO www.microsoft.com) ([EMAIL PROTECTED] with login) by smtp123.plus.mail.sp1.yahoo.com with SMTP; 8 Apr 2008 00:33:21 - X-YMail-OSG: UiyvW00VM1mV4yv6F.yyGe9FOC19nRnWakaxr0hVWy6Fq3yeWcq0ZG5OVF1d_dJSaphQ.y8ESkN5 jdHbfvx7.sxsAQ-- X-Yahoo-Newman-Property: ymail-3 From: RileyJones10 [EMAIL PROTECTED] To: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Subject: [PS - 14]-hot r zy Woman food quality can. Date: Tue, 08 Apr 2008 02:50:28 +0200 MIME-Version: 1.0 Content-type: text/plain; charset=windows-1251 Content-transfer-encoding: 8bit X-RBL-Warning: SPAMCANNIBAL: blocked, See: http://www.spamcannibal.org/cannibal.cgi?page=lookuplookup=68.142.206.221; X-RBL-Warning: MXRATE-ALLOW: GOOD SENDER X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED] X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] X-Declude-Sender: [EMAIL PROTECTED] [68.142.206.221] X-Declude-Spoolname: Dbd5200e15530.smd X-Declude-RefID: str=0001.0A010205.47FABD5C.000E,ss=1,pt=47146,fgs=0 X-Declude-Scan: Incoming Score [14] at 19:33:38 on 07 Apr 2008 X-Declude-Fail: SPAMCANNIBAL [2], MXRATE-ALLOW [-5], NOABUSE [2], NOPOSTMASTER [1], WEIGHT9 [9], WEIGHTMID [10], ZEROHOUR [14] X-Country-Chain: UNITED STATES-destination X-RCPT-TO: [EMAIL PROTECTED] Status: ` X-UIDL: 462333283 X-IMail-ThreadID: bd5200e15530 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Need strategy to up score.
Hi To be clear, local means my domain(s), not folks in some other domain, correct? Thanks ahead of time. Rob -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, April 08, 2008 12:34 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Need strategy to up score. We're almost always Bcc'd Consider using BCC This test will catch E-mail that has a lot of local recipients that are not listed in the E-mail headers. This test is normally only used in advanced setups, as most mailing list E-mail has many recipients not listed in the headers. BCC BCC 3 x 6 0 Where 3 is the number of BCC recipients and 6 is the weight given. David B -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Grosshandler Sent: Tuesday, April 08, 2008 12:27 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Need strategy to up score. Hi We're getting spam that comes via Yahoo, looks good (but it isn't). We'd like to up the score it receives, so it won't get passed through. We use Sniffer/Declude/Inviurbl. We're almost always Bcc'd. Sometimes fails Sniffer, sometimes not (we've got a query into them, too.) Doesn't always fail zerohour. Always seems to be complete gobbledygook, plus a URL that looks like it is well formed (and doesn't fail inviurbl test.) Always seem to come via mud.yahoo.com (but so does legit email.) Headers follow, thanks for any advice. Received: from n26.bullet.mail.mud.yahoo.com [68.142.206.221] by smtp.igive.com (SMTPD-9.23) id AD5302B4; Mon, 07 Apr 2008 19:33:23 -0500 Received: from [68.142.200.227] by n26.bullet.mail.mud.yahoo.com with NNFMP; 08 Apr 2008 00:33:22 - Received: from [68.142.201.245] by t8.bullet.mud.yahoo.com with NNFMP; 08 Apr 2008 00:33:23 - Received: from [127.0.0.1] by omp406.mail.mud.yahoo.com with NNFMP; 08 Apr 2008 00:33:23 - X-Yahoo-Newman-Id: [EMAIL PROTECTED] Message-ID: [EMAIL PROTECTED] Received: (qmail 56970 invoked from network); 8 Apr 2008 00:33:22 - DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=Received:X-YMail-OSG:X-Yahoo-Newman-Property:From:To:Reply-To:Subject:Date :MIME-Version:Content-type:Content-transfer-encoding; b=56tfwh/ZgrQDDqdn753U/L6m1fWJcABbNVM/kWWVUnmtRb34zE7SUdPbuBl5pBR+vKu5gWQj0Y 4ZtqBDqA8eMMjB4wpIbGBcQLmMo2hvNECaSWG09steODkIiCbItU7nHLtbutkTV2FATYUQ/g6lib rf/QtD3tsRFNT+zLMDRKw= ; Received: from unknown (HELO www.microsoft.com) ([EMAIL PROTECTED] with login) by smtp123.plus.mail.sp1.yahoo.com with SMTP; 8 Apr 2008 00:33:21 - X-YMail-OSG: UiyvW00VM1mV4yv6F.yyGe9FOC19nRnWakaxr0hVWy6Fq3yeWcq0ZG5OVF1d_dJSaphQ.y8ESkN5 jdHbfvx7.sxsAQ-- X-Yahoo-Newman-Property: ymail-3 From: RileyJones10 [EMAIL PROTECTED] To: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Subject: [PS - 14]-hot r zy Woman food quality can. Date: Tue, 08 Apr 2008 02:50:28 +0200 MIME-Version: 1.0 Content-type: text/plain; charset=windows-1251 Content-transfer-encoding: 8bit X-RBL-Warning: SPAMCANNIBAL: blocked, See: http://www.spamcannibal.org/cannibal.cgi?page=lookuplookup=68.142.206.221; X-RBL-Warning: MXRATE-ALLOW: GOOD SENDER X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED] X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] X-Declude-Sender: [EMAIL PROTECTED] [68.142.206.221] X-Declude-Spoolname: Dbd5200e15530.smd X-Declude-RefID: str=0001.0A010205.47FABD5C.000E,ss=1,pt=47146,fgs=0 X-Declude-Scan: Incoming Score [14] at 19:33:38 on 07 Apr 2008 X-Declude-Fail: SPAMCANNIBAL [2], MXRATE-ALLOW [-5], NOABUSE [2], NOPOSTMASTER [1], WEIGHT9 [9], WEIGHTMID [10], ZEROHOUR [14] X-Country-Chain: UNITED STATES-destination X-RCPT-TO: [EMAIL PROTECTED] Status: ` X-UIDL: 462333283 X-IMail-ThreadID: bd5200e15530 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Yahoo Blocking Email
http://help.yahoo.com/l/us/yahoo/mail/postmaster/ Third bullet down. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Thursday, February 21, 2008 12:59 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: Yahoo Blocking Email Rob, We are using domain keys and reverse DNS as well as SPF records. Do you have a link to where I would request the whitelisting? Dave -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Grosshandler Sent: Thursday, February 21, 2008 12:21 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: Yahoo Blocking Email More. Yahoo has whitelisting, and really cares about reverse DNS pointers and Domain Keys. You might want to resubmit, they were fast for us way back when. Rob -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Thursday, February 21, 2008 12:01 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: Yahoo Blocking Email And as a further best practice to what Matt is advising, I'll mention that ideally you want to send all outbound mail from an IP that is different from your inbound gateways. And that your outbound bulk mail would be separate from both. Andrew. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Thursday, February 21, 2008 9:41 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] OT: Yahoo Blocking Email I did this once about a year and a half ago for a client and they responded fairly quickly, but the full process took about a month before they whitelisted it. If you are bulk mailing from your hosted mail server, you need to stop. Never send bulk E-mail from a hosted mail server, and it is also good to use a different domain for bulk mailing. I'm not saying that is the case here, but bulk mailing can trip Yahoo. In the mean time, you might want to see if you can just switch your IP address to see if that will work. Matt Dave Beckstrom wrote: Hi All, Has anyone figured out how to stop Yahoo from blocking email? They've blocked all email from our servers for about 3 weeks. I've submitted their forms but it hasn't done any good. Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Yahoo Blocking Email
More. Yahoo has whitelisting, and really cares about reverse DNS pointers and Domain Keys. You might want to resubmit, they were fast for us way back when. Rob -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Thursday, February 21, 2008 12:01 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: Yahoo Blocking Email And as a further best practice to what Matt is advising, I'll mention that ideally you want to send all outbound mail from an IP that is different from your inbound gateways. And that your outbound bulk mail would be separate from both. Andrew. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Thursday, February 21, 2008 9:41 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] OT: Yahoo Blocking Email I did this once about a year and a half ago for a client and they responded fairly quickly, but the full process took about a month before they whitelisted it. If you are bulk mailing from your hosted mail server, you need to stop. Never send bulk E-mail from a hosted mail server, and it is also good to use a different domain for bulk mailing. I'm not saying that is the case here, but bulk mailing can trip Yahoo. In the mean time, you might want to see if you can just switch your IP address to see if that will work. Matt Dave Beckstrom wrote: Hi All, Has anyone figured out how to stop Yahoo from blocking email? They've blocked all email from our servers for about 3 weeks. I've submitted their forms but it hasn't done any good. Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT: DNS Failover advice
Gents and the occasional lady: You all are the smartest network folks I interact with. If you'd be so kind as to give me your opinion / suggestions on the following, I'd be forever grateful. We're trying to increase the level of uptime and redundancy for our service. To that end, we're looking to establish a hot failover site in a location remote from our current colocation facility. We're in Chicago, we're thinking a driveable city on a completely different grid (Milwaukee, probably.) If the entire Midwest gets nuked, nobody is going to be buying much online. We're looking at approaches to achieve that failover automatically. Our budget and technical expertise aren't large (we now can handle BGP internally if we have to, but we don't have any of the necessary infrastructure to do that, and would very much prefer not to invest in that infrastructure.) We rely on our colo facility to provide bandwidth, routing, internal DNS, etc. (they have great bandwidth, routing, seven providers, etc.) but since there are humans involved, they could screw up, too. We rely on Ultradns for external DNS. Once our users actually reach our firewall, we have great redundancy inside our rack. The most promising approach at this time seems to be to use somebody like ultradns or dnsmadeeasy to provide dns failover. That is, they're watching our site, and if we go down, they switch out A records and point traffic to the backup site. If it matters, we run ms sql, mirroring and log shipping. We'd have the mirror db and the witness in the remote location. Thanks for whatever thoughts you can add to this challenge. DNS failover a workable solution? We'll be looking for a colo facility in Milwaukee or Indianapolis with 4U available if somebody wants to point us there. Yours, Rob = www.iGive.com [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Bulk Outbound Mailer
We're really happy with gammadyne mailer. www.gammadyne.com We send about 200K pieces a week, the db is sql server. Rob -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Monday, July 02, 2007 4:29 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Bulk Outbound Mailer We have a customer who needs to do legitimate :) bulk outbound emailing. He had asked if I knew of any software that can be used to do this. The issue is he uses Imail but the amount of outbound email puts to much strain on server. I said that I would post and ask our loyal Declude customer base. Any ideas ? David Barker VP Operations | Declude Your Email Security is our business O: 978.499.2933 x7007 F: 978.988.1311 E: [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT: Barracuda False Positive Reporting
Hi All - Our opt-in newsletter is being rejected by users with Barracuda firewalls as spam. I'm looking for a single place to report this / request to be whitelisted at Barracuda, and I'm having no luck. Any pointers appreciated. Thanks in advance. Rob Robert N. Grosshandler www.iGive.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Ever legit?
Hi We get e-mails that contain the following header (or something similar): Received: from igive.com [71.250.241.101] by smtp.igive.com with ESMTP (SMTPD-9.20) The 71.xxx.xxx.xxx isn't ours. That IP can vary, but it is never ours. Are there any legit mailers that would send something in this form? If not, what's the best way to score this over my delete weight? Thanks, Rob --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Ever legit?
Thanks all! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Thursday, April 26, 2007 6:09 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Ever legit? Do not accept mail with your own helo setup a helo filter HELO 15 IS igive.com Set it at your hold weight. Your actual server(s) IP addresses should already be whitelisted so it will not affect your internal mail routing. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Grosshandler Sent: Thursday, April 26, 2007 1:45 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Ever legit? Hi We get e-mails that contain the following header (or something similar): Received: from igive.com [71.250.241.101] by smtp.igive.com with ESMTP (SMTPD-9.20) The 71.xxx.xxx.xxx isn't ours. That IP can vary, but it is never ours. Are there any legit mailers that would send something in this form? If not, what's the best way to score this over my delete weight? Thanks, Rob --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Warning re: DECLUDE - CRITICAL VIRUS SCANNING UPDATE
Fwiw it worked for us. .. Original Message ... On Mon, 16 Apr 2007 19:11:57 -0400 Dave Doherty [EMAIL PROTECTED] wrote: I attempted to install this update on my server. The package is apparently missing a DLL. The decludeproc service would not start, and the pop-up said to contact support. The update email was issued at 5:15 PM, and Declude was closed. I left a message. I got back up and running by reinstalling the previous update and rebooting. I strongly suggest that you DO NOT install this update until Declude can figure out what's wrong with it! -Dave Doherty Skywaves, Inc. 97 Webster Street Worcester, MA 01603 508-425-7176 ___ sent from the road --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Bounce / Spoof Analysis Help Please
Hi We're seeing bounce messages similar to the following. I don't think our server has been compromised, but I want to be sure. We legitimately send mail from 208.100.26.91, but I think (hope) its appearance in the following is spoofed. --l2GCtYMS006458.1174049734/hrcpro21.hoffman.army.mil The-original-message-was-received-at-Fri,-16-Mar-2007-08: 55:31 -0400 (EDT) - The following addresses had permanent fatal errors - [EMAIL PROTECTED] (reason: 550 5.7.1 Unable to relay for [EMAIL PROTECTED]) - Transcript of session follows - ... when talking to ahrc00bh0106287.nae.ds.army.mil. while trying to contact hrcmail.hoffman.army.mil.: DATA 550 5.7.1 Unable to relay for [EMAIL PROTECTED] 550 5.1.1 [EMAIL PROTECTED]... User unknown 554 5.5.2 No valid recipients --l2GCtYMS006458.1174049734/hrcpro21.hoffman.army.mil Content-Type: message/delivery-status Reporting-MTA: dns; hrcpro21.hoffman.army.mil Arrival-Date: Fri, 16 Mar 2007 08:55:31 -0400 (EDT) Final-Recipient: RFC822; [EMAIL PROTECTED] Action: failed Status: 5.7.1 Remote-MTA: DNS; hrcmail.hoffman.army.mil Diagnostic-Code: SMTP; 550 5.7.1 Unable to relay for [EMAIL PROTECTED] Last-Attempt-Date: Fri, 16 Mar 2007 08:55:34 -0400 (EDT) --l2GCtYMS006458.1174049734/hrcpro21.hoffman.army.mil Content-Type: message/rfc822 Return-Path: [EMAIL PROTECTED] Received: from cbs-6rhxyt1d3ub.chello.pl (chello089078068055.chello.pl [89.78.68.55]) by hrcpro21.hoffman.army.mil with ESMTP id l2GCtQV4006425; Fri, 16 Mar 2007 08:55:31 -0400 (EDT) Received: from 208.100.26.91 (HELO smtp.igive.com) by hoffman.army.mil with esmtp (9(A'R/,ZVN :36=Q+) id JLM3A5-)G'4.A-M/ for [EMAIL PROTECTED]; Fri, 16 Mar 2007 12:55:33 -0060 From: Effie Drummond To: [EMAIL PROTECTED] Subject: Choosing Online Pharmacy. Date: Fri, 16 Mar 2007 12:55:33 -0060 Message-ID: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: multipart/alternative; boundary==_NextPart_000_000E_01C767D2.C434B490 X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3155.0 Importance: Normal X-Antivirus: avast! (VPS 000724-0, 2007-03-15), Outbound message X-Antivirus-Status: Clean x-scc-prev-hop: 89.78.68.55 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Bounce / Spoof Analysis Help Please
Many thanks. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Friday, March 16, 2007 11:02 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Bounce / Spoof Analysis Help Please You're safe, Robert. I've seen this part in spam sent to my domain for about a year: Received: from 208.100.26.91 (HELO smtp.igive.com) by hoffman.army.mil with esmtp (9(A'R/,ZVN :36=Q+) id JLM3A5-)G'4.A-M/ The gibberish in the received block is a definite spam signature and is entirely fake. The army isn't going to be breaking down your door and making you eat this spam. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Grosshandler Sent: Friday, March 16, 2007 7:39 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Bounce / Spoof Analysis Help Please Hi We're seeing bounce messages similar to the following. I don't think our server has been compromised, but I want to be sure. We legitimately send mail from 208.100.26.91, but I think (hope) its appearance in the following is spoofed. --l2GCtYMS006458.1174049734/hrcpro21.hoffman.army.mil The-original-message-was-received-at-Fri,-16-Mar-2007-08: 55:31 -0400 (EDT) - The following addresses had permanent fatal errors - [EMAIL PROTECTED] (reason: 550 5.7.1 Unable to relay for [EMAIL PROTECTED]) - Transcript of session follows - ... when talking to ahrc00bh0106287.nae.ds.army.mil. while trying to contact hrcmail.hoffman.army.mil.: DATA 550 5.7.1 Unable to relay for [EMAIL PROTECTED] 550 5.1.1 [EMAIL PROTECTED]... User unknown 554 5.5.2 No valid recipients --l2GCtYMS006458.1174049734/hrcpro21.hoffman.army.mil Content-Type: message/delivery-status Reporting-MTA: dns; hrcpro21.hoffman.army.mil Arrival-Date: Fri, 16 Mar 2007 08:55:31 -0400 (EDT) Final-Recipient: RFC822; [EMAIL PROTECTED] Action: failed Status: 5.7.1 Remote-MTA: DNS; hrcmail.hoffman.army.mil Diagnostic-Code: SMTP; 550 5.7.1 Unable to relay for [EMAIL PROTECTED] Last-Attempt-Date: Fri, 16 Mar 2007 08:55:34 -0400 (EDT) --l2GCtYMS006458.1174049734/hrcpro21.hoffman.army.mil Content-Type: message/rfc822 Return-Path: [EMAIL PROTECTED] Received: from cbs-6rhxyt1d3ub.chello.pl (chello089078068055.chello.pl [89.78.68.55]) by hrcpro21.hoffman.army.mil with ESMTP id l2GCtQV4006425; Fri, 16 Mar 2007 08:55:31 -0400 (EDT) Received: from 208.100.26.91 (HELO smtp.igive.com) by hoffman.army.mil with esmtp (9(A'R/,ZVN :36=Q+) id JLM3A5-)G'4.A-M/ for [EMAIL PROTECTED]; Fri, 16 Mar 2007 12:55:33 -0060 From: Effie Drummond To: [EMAIL PROTECTED] Subject: Choosing Online Pharmacy. Date: Fri, 16 Mar 2007 12:55:33 -0060 Message-ID: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: multipart/alternative; boundary==_NextPart_000_000E_01C767D2.C434B490 X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3155.0 Importance: Normal X-Antivirus: avast! (VPS 000724-0, 2007-03-15), Outbound message X-Antivirus-Status: Clean x-scc-prev-hop: 89.78.68.55 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Whitelist weirdness
Hi We're getting certain e-mails whitelisted, and I'm not able to find where we've done that to ourselves. Here's a line from a whitelist entry I CAN find: Skipping3 E-mail from IP 208.100.26.91; whitelisted [208.100.26.91] Here's a line from the whitelist entry I CANNOT find: Skipping4 E-mail from [EMAIL PROTECTED]; whitelisted [EMAIL PROTECTED] We have the directive AUTOWHITELIST ON -- could that be it? Thanks Rob --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] [Declude.JunkMail] Imail 2006.2
We’re using it, no observed problems. Latest Declude / Sniffer / Imail 2006.2 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stephan Sent: Monday, February 12, 2007 11:03 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] [Declude.JunkMail] Imail 2006.2 Has anyone tested declude (latest version) with imail 2006.2 (it is available from the ipswitch preview forum and is scheduled for release on March 6)? Any issues? I emailed Declude support to ask if it had been tested but didn't get a response. Thanks. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] New Version - AVG?
Hi all -- Recently, there was discussion of an issue with AVG. Is that addressed in today's release? Thanks, Rob = Robert Grosshandler iGive.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] No More Broken Headers
Congrats to all. Finally. Rob --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Turning outbound scanning off
Unfortunately, that didn't do it (at least not completely). I'm not seeing any entries in the logs. Here are the headers: X-Declude-Sender: [EMAIL PROTECTED] [67.165.154.15] X-Declude-Spoolname: D2d8e01620c5d.smd X-Declude-RefID: X-Declude-Scan: Score [9] at 09:04:57 on 07 Dec 2006 X-Declude-Fail: Whitelisted _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bonno Bloksma Sent: Thursday, December 07, 2006 1:21 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Turning outbound scanning off Hi, In virus.cfg you need INCOMING ON OUTGOING OFF Met vriendelijke groet, Bonno Bloksma hoofd systeembeheer tio hogeschool hotelmanagement en toerisme begijnenhof 8-12 / 5611 el eindhoven t 040 296 28 28 / f 040 237 35 20 mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] / http://www.tio.nl/ www.tio.nl - Original Message - From: Robert Grosshandler mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Thursday, December 07, 2006 1:55 AM Subject: [Declude.JunkMail] Turning outbound scanning off Hi Declude is working wonderfully, too wonderfully. It is scanning e-mail we're sending out from our server, and we don't want it to do that, since it adds headers and stuff that have no purpose, and might actually cause filter issues on the receiving end. We don't need it to do outbound virus scanning, either. That is, when I compose and send e-mail from my client (Outlook), send it out via our Imail server, and the Imail server sends it on its merry way to, say Hotmail, it ends up at Hotmail with Declude headers. Obviously, we've missed something. We've got the following directive in our global.cfg: OUTBOUNDSCANNINGSPAM OFF INBOUNDSCANNINGSPAM ON What else do we need, and where do we need it? Thanks in advance. Rob --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Turning outbound scanning off
Understood. As I mentioned before, we already have OUTBOUNDSCANNINGSPAM OFF INBOUNDSCANNINGSPAM ON in our global.cfg. What am I missing? Thanks. _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, December 07, 2006 9:24 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Turning outbound scanning off That would turn off virus scanning, but not junkmail scanning. Darin. - Original Message - From: Robert Grosshandler mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Thursday, December 07, 2006 10:15 AM Subject: RE: [Declude.JunkMail] Turning outbound scanning off Unfortunately, that didn't do it (at least not completely). I'm not seeing any entries in the logs. Here are the headers: X-Declude-Sender: [EMAIL PROTECTED] [67.165.154.15] X-Declude-Spoolname: D2d8e01620c5d.smd X-Declude-RefID: X-Declude-Scan: Score [9] at 09:04:57 on 07 Dec 2006 X-Declude-Fail: Whitelisted _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bonno Bloksma Sent: Thursday, December 07, 2006 1:21 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Turning outbound scanning off Hi, In virus.cfg you need INCOMING ON OUTGOING OFF Met vriendelijke groet, Bonno Bloksma hoofd systeembeheer tio hogeschool hotelmanagement en toerisme begijnenhof 8-12 / 5611 el eindhoven t 040 296 28 28 / f 040 237 35 20 mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] / http://www.tio.nl/ www.tio.nl - Original Message - From: Robert Grosshandler mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Thursday, December 07, 2006 1:55 AM Subject: [Declude.JunkMail] Turning outbound scanning off Hi Declude is working wonderfully, too wonderfully. It is scanning e-mail we're sending out from our server, and we don't want it to do that, since it adds headers and stuff that have no purpose, and might actually cause filter issues on the receiving end. We don't need it to do outbound virus scanning, either. That is, when I compose and send e-mail from my client (Outlook), send it out via our Imail server, and the Imail server sends it on its merry way to, say Hotmail, it ends up at Hotmail with Declude headers. Obviously, we've missed something. We've got the following directive in our global.cfg: OUTBOUNDSCANNINGSPAM OFF INBOUNDSCANNINGSPAM ON What else do we need, and where do we need it? Thanks in advance. Rob --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Turning outbound scanning off
Hi Declude is working wonderfully, too wonderfully. It is scanning e-mail we're sending out from our server, and we don't want it to do that, since it adds headers and stuff that have no purpose, and might actually cause filter issues on the receiving end. We don't need it to do outbound virus scanning, either. That is, when I compose and send e-mail from my client (Outlook), send it out via our Imail server, and the Imail server sends it on its merry way to, say Hotmail, it ends up at Hotmail with Declude headers. Obviously, we've missed something. We've got the following directive in our global.cfg: OUTBOUNDSCANNINGSPAM OFF INBOUNDSCANNINGSPAM ON What else do we need, and where do we need it? Thanks in advance. Rob --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[4]: [Declude.JunkMail] OT: Clustering solution
SQL Database Mirroring is available in their Standard Edition, and I believe that in a Active / Passive architecture, only one license is required. We use it, but our needs are slight. I have a friend who uses it, and they've a very complex telephony app, and they've been happy. They migrated from whatever the CA db mirroring application is. Hope that helps. Rob Robert Grosshandler --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] declude not modifying subject line
David -- The problem exists in Interceptor, as well, so a fix from Ipswitch or Smartermail isn't going to solve all of the problems, unfortunately. If it helps at all, every message that is malformed this way is bad, spam scores off the charts. Rob -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Wednesday, November 08, 2006 3:37 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] declude not modifying subject line 1. I don't like to keep going in circles on this. If it was as easy as just fix it there would be no issue. Please understand that this is a lot more complex than you may realize, we are considering making the fixing of line terminators as an optional feature to be turned on/off because of a potential performance degradation of rewriting the messages. 2. Just so that you know we are a privately funded company and do not have any VC funding. 3. As per previous posts I agree that Declude needs to deal with this issue, as neither SmarterMail or Imail have addressed this, just out of curiosity has anyone contacted SmarterMail or Imail and asked them to address this issue, and if so what was their response ? David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Wednesday, November 08, 2006 2:03 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] declude not modifying subject line Me three! Is it done yet? No? Darn. Frankly, David, if the Declude app is going to have to rewrite the whole message anyway to insert headers, make it an optional *feature* to fix up the line terminators. Then market it as a unique feature; I understand that Venture Capitalists love their startups to have innovative features that differentiate their product in the marketplace. Meanwhile, just fix the Declude app so that inserts the header correctly as befits our reasonable expectations as set by all the other products in the marketplace. Andrew. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Wednesday, November 08, 2006 10:41 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] declude not modifying subject line Agreed. Put the headers where they need to be. Don't worry about fixing the message. Having this additional test could be worthwhile as well, to identify and report on mailers that are broken in this fashion. Darin. - Original Message - From: Andy Schmidt [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Wednesday, November 08, 2006 12:03 PM Subject: RE: [Declude.JunkMail] declude not modifying subject line Hi Dave: 1. This is currently being worked on, there are several other things that need to be taken into account when doing this, for example if Declude has to rewrite all me messages in order to correct this problem there will be a hit on performance. We are also looking at some other alternatives. Any suggestions are welcome. Although I know this had been suggested - I personally don't feel that Declude needs (or even SHOULD) rewrite the message. If the message is readable by Imail, Outlook, etc. - then the sender is in luck. If not, then the fact that other software can't read the message will motivate the sender to use RFC compliant formatting. I feel all that's necessary is that Declude's end-of-line parsing should be made intelligent enough so that it DOES detect various CR CR/LF LF LF/CR combinations and treat them as end-of-line, so that it can properly detect the intended last header. This way, Declude can: A) append it's own header at the proper location (not append it below the message body.) B) determining where the message content starts (so that the content can be properly scanned for Viruses) I get the feeling this issue of end-of-line detection is being made overly complicated. Declude is not a message-fixer-upper. I have enough problems with people using CISCO SMTP FIXUP that breaks everything. Declude's job is to correctly determine the header vs. content and then subject the header and content to appropriate analysis. If a message is found to be malformed, then Declude can make it fail a Test so that the mail admin can decide to accept or reject those messages - but it's not Declude's job to artificially make an incompatible message compatible with email clients. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Wednesday, November 08, 2006 11:38 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] declude not modifying subject line Herb, 1. This is currently being worked on, there are several other things that need to
[Declude.JunkMail] Backup MX
Hi all -- What is the current best practice for handling backup MXs? It appears to have gotten harder since the bots seem to target the lower priority MXs. It seems that the lower priority MX accepts the mail, and then passes it along to us, but since there isn't the same filtering going on on the backup, a bunch of bad stuff is more likely to get through. Advice, pointers welcomed. Thanks in advance Rob Robert N. Grosshandler --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Test - ignore
Test, please ignore. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Test - ignore
Sorry for the multiple tests, please ignore. Rob --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] test - ignore
test - ignore ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] Test - ignore
Test --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Sniffer vs. Commtouch
Hi All - We've been very happy users of Sniffer for several years, but now that Declude is including the Commtouch solution, we need to consider it. Any thoughts, comparisons, suggestions? We're a very small shop, if that matters. We're not an ISP, so the licensing weirdness doesn't apply to us. Thanks ahead of time. Rob ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude 4.3
Hi We're not a service provider (but I love and value the fact that all of you are!) Rob What I find particularly amusing is the line Restrictions apply to service providers. If there is anyone subscribed to this mailing list who is not a service provider, please raise your hand. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] I Must Be Blind
1) Commtouch offering - I got to My Account, and I don't see anything to give me a hint on pricing. Pointer requested! 2) Is this service competitive or complementary to Message Sniffer? Thanks, Rob --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] I Must Be Blind
See, definitely blind. Thanks for the replies, all. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, July 17, 2006 11:03 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] I Must Be Blind The bullentin said the pricing won't be there until tomorrow (July 18th). Darrell --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Robert Grosshandler writes: 1) Commtouch offering - I got to My Account, and I don't see anything to give me a hint on pricing. Pointer requested! 2) Is this service competitive or complementary to Message Sniffer? Thanks, Rob --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Blackberry Issues - blank bodies
Folks - Once in awhile, we (really,me) get e-mails from folks using Blackberrys. The body is blank. I'm trying to track down the cause. We're using Imail 8.22 all patches applied. Latest version of Declude. The same e-mail, going through a different e-mail server (not Imail / Declude) goes through just fine. Any thoughts? Thanks in advance, Rob --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[2]: [Declude.JunkMail] OT: Poor man's high reliability?
Another option to consider ... www.ultradns.com has a service that does this. I've never priced it, so it may be pricey. Rob --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Emails not be scanned by Declude
This has been a problem with Declude for a while now, and so far, their attempts to fix have not borne any fruit. They are painfully aware. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Olden Sent: Tuesday, April 25, 2006 8:54 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Emails not be scanned by Declude These types have become an increasing menace to our system also. It does fail some of our Declude tests but it does not get scanned by Spamchk which would have put them over the hold limit. Has anyone come up with an alternative test for this? We've just recently switched over to the Pro version of Declude so I'm not familiar with filters yet. --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] 3.06
I haven't received notification of 3.06. Did others receive a notice that it was available? Rob --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Combo Filter
Title: Message Would you be so kind as to post this filter? Thanks ahead of time Rob From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran JovanovicSent: Saturday, January 14, 2006 8:33 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] Combo Filter FYI All, I did my CMDSPACE and SNIFFER (all categories have not broken it up yet) combo filter an let it run all day yesterday. That filter triggered on 37.6% of my mail. I ran it yesterday with weight 0 and monitored, there were no false positives at all. Turning it on for real today. Looks like another good test that I am finally adding to my mix. Goran Jovanovic Omega Network Solutions
RE: [Declude.JunkMail] Combo Filter
Title: Message You the Man! From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran JovanovicSent: Friday, February 10, 2006 11:39 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] Combo Filter Here you go TESTSFAILED END CONTAINS BYPASS # Did it Fail CMDSPACE TESTSFAILED END NOTCONTAINS CMDSPACE # It failed CMDSPACE now check Sniffer TESTSFAILED 10 CONTAINS SNIFFER Goran Jovanovic Omega Network Solutions
RE: [Declude.JunkMail] Logged spam getting to mailbox
Title: Logged spam getting to mailbox Current version does not fix this "folding" problem. Declude is testing a newer version that may fix the problem, but no joy yet. Mattwrote: From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Tuesday, January 24, 2006 4:34 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Logged spam getting to mailbox Andrew probably nailed this. In at least some versions of Declude, the headers that it inserts could land in the body of the message due to bad folding techniques that the spammer uses (sometimes also legitimate mailers will produce this flaw). Your client rule is probably searching for headers and doesn't recognize the header that was inserted into what became the body due to bad folding. An upgrade may or may not fix the issue, though there was talk about this issue several months ago in relation to 3.x and I believe some work was done to take care of some of it.Matt
RE: [Declude.JunkMail] Domain Keys?
Ditto. We'd love to be able to do this. In the interim, we've actually had success getting on Yahoo's good side by contacting them. We used the address [EMAIL PROTECTED] to get the process started. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno Sent: Wednesday, January 18, 2006 11:07 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Domain Keys? Is there any way to implement Domain Keys with Declude (1.82)or IMAIL (8.15) Or any version? Anyway to put domain keys in any other way? Yahoo is once again delivering any e-mail from my IP to their Bulk folder, I figured if I can use their Domain Keys system I would have a better chance of getting our mail delivered. I have filled out all the Yahoo forms, but I get nothing but generic canned responses. I may change my IP over this Thanks - Marc --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] WAY OT: COVAD VOIP
Check out www.onebox.com (virtual receptionist). Combine it with vonage. Rob -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Tuesday, December 13, 2005 11:23 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] WAY OT: COVAD VOIP Hi Guys, I have a T-1 in my house and I work from a home office in Minnesota. I have a sales person in New Mexico. Ideally, I'd like a VOIP service where when someone called me they would get a message like press 1 for sales, press 2 for Dave. The idea being that it would route the call either to her or to me. We would need voicemail and caller ID too. Does Vonage provide these kinds of services and if not does anyone have another service they might recommend? I want to give callers the impression that we are a much larger company then we are. Thanks! --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] WAY OT: COVAD VOIP
Not sure, but it is cheap. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Tuesday, December 13, 2005 2:25 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] WAY OT: COVAD VOIP This sounds like just the ticket. What does it cost? -d - Original Message - From: Robert Grosshandler [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, December 13, 2005 12:36 PM Subject: RE: [Declude.JunkMail] WAY OT: COVAD VOIP Check out www.onebox.com (virtual receptionist). Combine it with vonage. Rob -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Tuesday, December 13, 2005 11:23 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] WAY OT: COVAD VOIP Hi Guys, I have a T-1 in my house and I work from a home office in Minnesota. I have a sales person in New Mexico. Ideally, I'd like a VOIP service where when someone called me they would get a message like press 1 for sales, press 2 for Dave. The idea being that it would route the call either to her or to me. We would need voicemail and caller ID too. Does Vonage provide these kinds of services and if not does anyone have another service they might recommend? I want to give callers the impression that we are a much larger company then we are. Thanks! --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Headers showing up in the body on 3.05.10
Something changed at the time the new architecture came out. Either folks started using a lot of new / broken clients, or Declude became more sensitive. I say that based upon observation. We NEVER noticed the issue prior to installing the beta of the latest version. Heck, it is possible that both are true ... More broken clients AND Declude became more sensitive. In any case, as a practical matter, Declude is still routing properly based upon the weight assigned to the offending mail. Since all of the mail has weights that are extremely high, they never make it to our users, and therefore we don't rely on altering the Subject line or headers for further processing. Rob -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, October 25, 2005 2:27 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Headers showing up in the body on 3.05.10 In every instance that we have observed so far the headers in the body are caused by broken mail clients. This is not only an issue for Declude but for mail servers as well. To illustrates the difficulty coming up with a single algorithm that will detect all instances of these broken emails to prevent headers from appearing at the end of a message or within the body of a message. RFC dictates all lines must end with a CR/LF sequence, with a double sequence CR/LF/CR/LF separating the headers from the body. Technically, that would be a 0D 0A 0D 0A sequence. In the byte sequence below, the sixth line contains: 22 0A 20 0D 0A 49 20 73-74 61 72 74 65 64 20 68 where a single 0A is followed by a space and then the required 0D 0A sequence. When this problem was first reported, changes were made in the source to detect a simple 0A as a line terminator, followed by another line terminator sequence. However, this example would not get detected because they inserted a space, which is invisible, between the two line termination sequences. They could have inserted a tab (09) also, so checking only for a space would not have caught all possibilities. In addition, checking only for spaces at the beginning of a line would not solve the problem because certain header lines can be continued on the next line, which requires spaces and then non-blank characters prior to the next line termination sequence. 30 38 3A 35 37 3A 31 33-20 2D 30 35 30 30 0D 0A 4D 49 4D 45 2D 56 65 72-73 69 6F 6E 3A 20 31 2E 30 0D 0A 43 6F 6E 74 65-6E 74 2D 54 79 70 65 3A 20 74 65 78 74 2F 70 6C-61 69 6E 3B 0D 0A 09 63 68 61 72 73 65 74 3D 22-75 73 2D 61 73 63 69 69 22 0A 20 0D 0A 49 20 73-74 61 72 74 65 64 20 68 61 76 69 6E 67 20 61 6E-20 61 66 66 61 69 72 20 77 69 74 68 20 61 20 79-6F 75 6E 67 65 72 2C 20 Often from the outset these issues look extremely simple. However, because all eventualities that have to be covered it becomes quite complex. I am providing this example because things are rarely as simple as they may at first appear. With all that said we are looking into providing a solution for this problem. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Monday, October 24, 2005 9:07 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Headers showing up in the body on 3.05.10 This looks like Declude was expecting to see an occurrence of Blank Folding, but it is making the mistake of detecting headers in the MIME segments or the body as a continuation of the real headers, either that or they changed the code that detects where to throw in the Declude generated headers in order to handle Blank Folding. IMO, Declude should just throw the headers just before the location of the first CRLFCRLF or possibly following a mistaken LFLF. I haven't seen any Declude headers in the body using 2.0.6.16 and earlier. Matt Robert Grosshandler wrote: This has been a problem for awhile (happened with the move to the new architecture, but Declude says it's not connected.) The headers are bad when they make it to Declude, and Declude doesn't handle them right. Fortunately, in our setup, they all still get treated as very heavily weighted spam, so they never make it to users. Rob -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith Sent: Monday, October 24, 2005 6:17 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Headers showing up in the body on 3.05.10 Ever since I went to 3.05.10 (now on 3.05.11) I've been receiving hundreds of complaints of spam making it to my users. After inspection, Declude is subject line marking the messages but it's moving the SMTP headers to the body of the email. This results in user's Outlook rules not firing on the subject line keywords. Here's an example of the ACTUAL MESSAGE BODY. Anyone else seeing this? -0- -Original Message- From: Jon Addison [mailto:[EMAIL PROTECTED] Sent: Monday, October 24, 2005 6:06
RE: [Declude.JunkMail] Other Problem not fixed 3.0.5.5
Yup, plus logs, etc. Putting it out here in case anybody else is seeing same thing. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Friday, September 30, 2005 7:33 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Other Problem not fixed 3.0.5.5 Hmmm... have you captured an offending message and sent to Declude support? Darin. - --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Other Problem not fixed 3.0.5.5
Hi The problem of the routeto happening before the subject line has been altered still exists in this newest version. --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Other Problem not fixed 3.0.5.5
No changes to the configs from prior versions. It only mangles one in 100, and only for e-mails that trigger lots of tests. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, September 29, 2005 6:02 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Other Problem not fixed 3.0.5.5 Is this a matter of order of test definition? Do you have your subject action after your routeto action? Darin. --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release?
I have one outstanding issue -- not stability related. We're seeing some messages that exceed our hold or delete weights get routed to our hold or delete folders without having their subjects altered (we prepend "spam" to the subject line). They route ok. It does look like maybe the headers are being munged a bit in this case. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin CoxSent: Monday, September 26, 2005 1:29 PMTo: Declude.JunkMail@declude.com; Declude.Virus@declude.comSubject: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release? I see 3.0.5 was released today. Anyone know if this fixes the reported performance and stability issues reported here with the 3.0.x betas? Darin.
RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release?
They've got logs from me, lots of logs! From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)Sent: Monday, September 26, 2005 7:26 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release? Robert, may I make a suggestion? Put all the logs into debug mode. Allow it to run until you know this issue has occurred. Put the logs back the way you had them. Extract from the JM log all the lines for a message in question. Send those along with the d and q file to Declude support. John T eServices For You -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert GrosshandlerSent: Monday, September 26, 2005 2:25 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release? I have one outstanding issue -- not stability related. We're seeing some messages that exceed our hold or delete weights get routed to our hold or delete folders without having their subjects altered (we prepend "spam" to the subject line). They route ok. It does look like maybe the headers are being munged a bit in this case. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin CoxSent: Monday, September 26, 2005 1:29 PMTo: Declude.JunkMail@declude.com; Declude.Virus@declude.comSubject: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release? I see 3.0.5 was released today. Anyone know if this fixes the reported performance and stability issues reported here with the 3.0.x betas? Darin.
RE: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted
Are these the suggested defaults? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, September 22, 2005 10:41 AM To: Declude.JunkMail@declude.com; Declude.Virus@declude.com Subject: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted 2 new Directives WAITFORTHREADS 1500 Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5 seconds this can be changed so that when the maximum threads are in use this time specifics the wait before checking to launch more threads. WAITBETWEENTHREADS 1 Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1 millisecond The time to wait between spawning one thread and starting to process another thread. David B www.declude.com --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Just upgraded to Declude 3 / Imail 8.2 - Config question
Hi Are there any spam or virus tests that belong in Imail, rather than letting Declude JM or AV handle it? I use Declude Pro / Sniffer / Inviurbl / 2 AV scanners. For instance, the tarpitting that Imail can do looks like a good thing. Thanks, Rob www.iGive.com --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] BADHEADERS and HELOBOGUS coming up a lot
Hi You are using both Sniffer and the Invariant Systems URI tests together? Maybe I was even denser than I thought, but I thought they sort of duplicated each other. Thanks, Rob snip on We have learned over the past year, that most of the built-in tests of Declude are not effective like they were in the past. Now yes, DNS lookup tests are good if you use an active source. Very good. And in our experience in just the past year, external tests called by Declude like SNIFFER and Invariant Systems ... Very, very, effective. Infact, we have removed most of our BODY, HEADERS, and SUBJECT filters; infact about 95% of them. We also do use a few of Matt's filters for scam detection; but have lowered much these weights as Invariant's URI program and SNIFFER takes the most blunt in punishing the email. Matt, on this list, is very good. :-) (in my opinion). So is Andy and Darrell. I have learned a lot about them just by being silent on the list and observing their feedbacks. snip off --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Strategy or configuration help Needed - A little OT maybe
Hi all - Turned on a backup mail server as my main server (imail 8.15 hf2) was acting flakey. Main server has a wonderful combination of declude pro jm and av + sniffer. The backup server may not matter in this problem, but it's also Imail 8.l5 HF2. No declude or anything else running on it. The backup is getting spammed with phishing attempts (from a variety of Ips, all impersonating mydomain.com). The phishing attempts are sent to [EMAIL PROTECTED], on the backup server. [EMAIL PROTECTED] doesn't exist there (or on the main server.) There are no accounts on the backup server. Backup server gives a 550 error. The reply-to / return email address is [EMAIL PROTECTED] on the phishing attempt. So, the backup server sends the bounce message to my main server, which dutifully passes it along to me. I don't want to create any kind of a loop. I want to keep the backup going until I'm sure the main server is better. Any thoughts? Thanks ahead of time. Rob --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Should have been whitelisted
The following e-mail got tagged as spam, even though it was from an authenticated send. First, the imail log: 20050518 115243 127.0.0.1 SMTPD (72db5d54010e1dde) [64.4.213.172] connect 184.122.4.102 port 2528 (this is a remote user)20050518 115243 127.0.0.1 SMTPD (72db5d54010e1dde) [184.122.4.102] EHLO betazoid20050518 115245 127.0.0.1 SMTPD (72db5d54010e1dde) Authenticated [EMAIL PROTECTED], session treated as local.20050518 115245 127.0.0.1 SMTPD (72db5d54010e1dde) [184.122.4.102] MAIL FROM: [EMAIL PROTECTED]20050518 115245 127.0.0.1 SMTPD (72db5d54010e1dde) [184.122.4.102] RCPT TO: [EMAIL PROTECTED]20050518 115245 127.0.0.1 SMTPD (72db5d54010e1dde) [184.122.4.102] RCPT TO: [EMAIL PROTECTED]20050518 115246 127.0.0.1 SMTPD (72db5d54010e1dde) [184.122.4.102] RCPT TO: @igive.com20050518 115246 127.0.0.1 SMTPD (72db5d54010e1dde) [184.122.4.102] RCPT TO: @iGive.com20050518 115247 127.0.0.1 SMTPD (72db5d54010e1dde) [184.122.4.102] f:\imaillogs\D72db5d54010e1dde.SMD 16506 Now, the declude log: 05/18/2005 11:52:55 Q72DB5D54010E1DDE NOT bypassing whitelisting of E-mail with weight =25 (20) and at least 4 recipients (4).05/18/2005 11:52:55 Q72DB5D54010E1DDE Bypassing whitelisting of E-mail with weight =12 (20) and at least 4 recipients (4).05/18/2005 11:52:55 Q72DB5D54010E1DDE R1 Message OK05/18/2005 11:52:55 Q72DB5D54010E1DDE Tests failed [weight=20]: CMDSPACE=IGNORE IPNOTINMX=IGNORE REVDNS=WARN SPAMHEADERS=WARN GIBBERISH=IGNORE TLD-TRUSTED-MAILFROM=IGNORE TLD-TRUSTED-REVDNS=IGNORE BYPASSMULTIRECP=IGNORE WEIGHT10=WARN WEIGHT15=IGNORE WEIGHT20=WARN SPAM-HIGH=IGNORE CATCHALLMAILS=IGNORE 05/18/2005 11:52:55 Q72DB5D54010E1DDE Action(s) taken for [EMAIL PROTECTED] = IGNORE WARN [LAST ACTION="">05/18/2005 11:52:55 Q72DB5D54010E1DDE R2 Message OK05/18/2005 11:52:55 Q72DB5D54010E1DDE Tests failed [weight=20]: CMDSPACE=IGNORE IPNOTINMX=IGNORE REVDNS=WARN SPAMHEADERS=WARN GIBBERISH=IGNORE TLD-TRUSTED-MAILFROM=IGNORE TLD-TRUSTED-REVDNS=IGNORE BYPASSMULTIRECP=IGNORE WEIGHT10=WARN WEIGHT15=IGNORE WEIGHT20=WARN SPAM-HIGH=IGNORE CATCHALLMAILS=IGNORE 05/18/2005 11:52:55 Q72DB5D54010E1DDE Action(s) taken for [EMAIL PROTECTED] = IGNORE WARN [LAST ACTION="">05/18/2005 11:52:55 Q72DB5D54010E1DDE L3 Message OK05/18/2005 11:52:55 Q72DB5D54010E1DDE Tests failed [weight=20]: CMDSPACE=WARN IPNOTINMX=WARN REVDNS=WARN SPAMHEADERS=WARN GIBBERISH=IGNORE TLD-TRUSTED-MAILFROM=IGNORE TLD-TRUSTED-REVDNS=IGNORE BYPASSMULTIRECP=IGNORE WEIGHT10=IGNORE WEIGHT15=SUBJECT WEIGHT20=IGNORE SPAM-HIGH=ROUTETO CATCHALLMAILS=IGNORE 05/18/2005 11:52:55 Q72DB5D54010E1DDE Action(s) taken for [EMAIL PROTECTED] = IGNORE WARN SUBJECT ROUTETO [LAST ACTION="">05/18/2005 11:52:55 Q72DB5D54010E1DDE L4 Message OK05/18/2005 11:52:55 Q72DB5D54010E1DDE Tests failed [weight=20]: CMDSPACE=WARN IPNOTINMX=WARN REVDNS=WARN SPAMHEADERS=WARN GIBBERISH=IGNORE TLD-TRUSTED-MAILFROM=IGNORE TLD-TRUSTED-REVDNS=IGNORE BYPASSMULTIRECP=IGNORE WEIGHT10=IGNORE WEIGHT15=SUBJECT WEIGHT20=IGNORE SPAM-HIGH=ROUTETO CATCHALLMAILS=IGNORE 05/18/2005 11:52:55 Q72DB5D54010E1DDE Action(s) taken for [EMAIL PROTECTED] = IGNORE WARN SUBJECT ROUTETO [LAST ACTION="">05/18/2005 11:52:55 Q72DB5D54010E1DDE Cumulative action(s) taken on this email = IGNORE WARN SUBJECT ROUTETO [LAST ACTION=""> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Wednesday, May 18, 2005 2:33 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Verizon Faced With Lawsuits Over Blocking eMail From Foreign IP Addresses I think this is good. Just think about the issues that you would have if Verizon indiscriminately blocked you. We have heard a bunch of stories about AOL and their spam reporting mechanism blacklisting servers that are just merely forwarding to them. If these companies blacklist providers like myself, I would probably lose business.The practice of blocking spammers or otherwise aggressive hosts from sending E-mail has never resulted in a successful lawsuit. However this is not the first time that a blacklisting entity has been sued or threatened for indiscriminate behavior. Here's a link to an archive of documents concerning Pavenet.net threatening to sue DSBL http://dsbl.org/legal/pavenet/DSBL takes pride in the fact that they have reached 5 million IP's listed, but they have done this by never expiring a listing, creating a system that is virtually impossible to delist a clean IP with a reverse DNS entry that doesn't belong to the user, and aggressive scanning techniques. In this case it appears that pavenet.net was being improperly listed, and it had been so multiple times. If you are an ISP and allow your own IP's to relay through your server without authentication, then any user can list your server on DSBL without any special knowledge.I've also sent no less than 6 requests to SBL in the last year asking them to stop indiscriminately blocking Chinese and Korean blocks of IP's, one
RE: [Declude.JunkMail] Should have been whitelisted
aha, I thought smtp auth trumped all. Makes sense. Is there a way to add negative weight to smtp auth ? Thanks!! From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy SchmidtSent: Wednesday, May 18, 2005 3:32 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] Should have been whitelisted Hi: You have WHITELIST AUTH defined - but also defined that white lists should be BYPASSED, if a mail has a weight =12 and 4 recipients. Your message has a weight of 20 and 4 recipients, thus is bypassed the white list. (Now - personally - I feel that "SMTP AUTH" should not be treated like a regular white list. Indeed, I feel that SMTP AUTH should not be overwritten.) Best RegardsAndy SchmidtPhone: +1 201 934-3414 x20 (Business)Fax: +1 201 934-9206
RE: [Declude.JunkMail] Imail 8.20
Fwiw, it's the management of WT that's buying it out/back. --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Imail 8.2 / smartermail
Ok -- time for the question again. Thumbs up or down on the declude / smartermail integration? Comments appreciated. Rob --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Imail 8.20 / Webtrends
OT -- What are you moving your webtrends install to?? Do you use multiple servers? Thanks, Rob --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Imail 8.2 / smartermail
Why didn't you point your CF server at smartermail? And, if I'm trying to reduce the new systems and learning curves, can I keep Declude Virus and Junkmail going? Thanks for the input. Rob -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Robertson Sent: Thursday, April 28, 2005 6:31 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Imail 8.2 / smartermail My Imail license is relegated to SMTP traffic generated by a ColdFusion server. SmarterMail took over the public-facing mail chores shortly after Ipswitch killed Imail in favor of ICS. --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Legit emails blocked
There was discussion of this on a non-technical list I subscribe to. It appears to be a true report. Blocking all IPs in the name of stopping spam. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Wednesday, February 02, 2005 9:13 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Legit emails blocked http://www.f-prot.com/news/gen_news/050127_isp_email_blocking.html Anyone knows more about this? Markus --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT: Earthlink spamblocker challenge / response
Can anybody point me to an Earthlink resource that is similar to AOL's Postmaster.aol.com? I'm trying to avoid the spamblocker challenge/response stuff that Earthlink uses, for our opt-in lists. AOL is doing a reasonable job at helping us get mail through, so I wonder if there is something similar at Earthlink. Thanks ahead of time. Rob www.iGive.com --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Per Domain Whitelisting of Individual E-Mail Addresses
Title: Message John is going to suggest Autowhite. He's biased, it's his product. We're a customer, we're not biased grin. It's great. Rob
RE: [Declude.JunkMail] Surbl.org - Scott?
Hi Scott - Since there does seem to be demand, and since you've indicated that you'll consider this test, perhaps you can give us an estimate of when we might see you integrate it? I'm sure you have nothing else to do: the integration of your new web site is done, you've new ownership and getting them up to speed is finished, and oh yes, you've decided on which other platforms you're going to support. But, all kidding aside, sounds like a good test, sounds like many are interested, and boy, if you're doing it soon I can find something else to spend my time on. Thanks, Rob --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Invalid Whitelist Type: Anywhere
Getting this error message in logs. Didn't see it last week. It was in the last interim I was running, and it is in 1.79 beta. Don't find a reference to it in the archives. Don't recall making any change to global.cfg recently. Here's a log snippet (logging set to debug): 04/06/2004 11:02:51.392 CFG: Set hop to 0. 04/06/2004 11:02:51.392 Console turned OFF 04/06/2004 11:02:51.392 CFG: Bypassing IP 68.76.252.59. 04/06/2004 11:02:51.392 CFG: Setting XSENDER to ON 04/06/2004 11:02:51.392 Setting AUTOWHITELIST to ON 04/06/2004 11:02:51 Invalid WHITELIST type: ANYWHWERE 04/06/2004 11:02:51.392 External test weighting set to -30 (antiweight 0) Any help appreciated. Rob --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Invalid Whitelist Type: Anywhere
Big Duh!!! Slapped my wrist, sorry for the dumb question. Rob Rob, check your spelling of ANYWHERE there is a typo in it. Andrew 8) --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT Plaxo.com
No problems here. I use it, not extensively. Rob -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Tuesday, February 24, 2004 10:41 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OT Plaxo.com Any one have any comments on them, good or bad? A client is asking about it. John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SPF - Question
From another list I get: Quote ON ...we now have seven return codes, up from the previous four, and the Received-SPF field is now more structured. The total number of domains covered by SPF is actually much, much higher than 7000. That number comes from self-reporting. The true number is higher because many domain-parking services have set up a blanket this domain sends no mail rule. Thanks to them, the total number of domains covered by SPF is in the six-digit range. QUOTE OFF Question: For those of us who set up SPF early, are there any changes we need to make, either to the information on our servers, or the information we submitted to the SPF registry (or whatever its correct name should be)? I believe we currently have a spfpass and a spffail in our global.cfg. Thanks, Rob === www.iGive.com --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] 1.78 beta possible bug
Built a filter: SUBJECT -30 CONTAINS tunafish Doesn't trigger. BODY -30 CONTAINS tunafish Triggers fine. It could very well be me, but if so, I'm stumped as to why. Rob --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 1.78 beta possible bug - NOT
Sorry for false alarm, but I couldn't recreate this myself. Working now. Rob === Built a filter: SUBJECT -30 CONTAINS tunafish Doesn't trigger. BODY -30 CONTAINS tunafish Triggers fine. It could very well be me, but if so, I'm stumped as to why. Rob --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Multiple Declude Instances - i28
Appears to be fixed. Thanks, as always. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, February 17, 2004 11:13 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Multiple Declude Instances - i28 Probably shouldn't have, but for some reason I downloaded latest and greatest interim release. Now, I'm getting 10 or so declude.exe instances, each using as much CPU time as it can grab. The number seems to grow, never shrink. There is a new 1.77i29 at http://www.declude.com/interim that should take care of this. -Scott --- --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Lates Global.cfg file
Scott, have you ever considered putting a last edited date in the stock global.cfg? Also, possibly a change notes / revision history section someplace in the top of the stock global.cfg? Rob -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, February 17, 2004 11:18 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Lates Global.cfg file How do I know if I have the current version of the Global.cfg file? There isn't an easy way. In most cases, though, the changes to the default global.cfg file are to add/remove spam tests, or add features in the latest beta/release. So the only real concern is making sure that you have the latest spam tests, and have removed spam tests that have died. Occasionally checking the latest default configuration file should be all that is needed (looking at the first set of tests defined, which you can find after the # For type ip4r, 'matchstring' is the string to look for, or * for anything line). How can I tell if I need to update/upgrade my Declude software..both JunkMail and Virus? Need is one of those funny words. To find out if you are running the latest version, you can type \IMail\Declude -diag from a command prompt to see the version you are running, and compare it to what is shown to be the latest release at http://www.declude.com/junkmail/manual.htm . To find out if you need to upgrade, you can go to http://www.declude.com/relnotes.htm to see what changes have been made. -Scott --- --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Whitelist strategy needed
Hi Due to the nature of our business (online retail), we get some e-mail that triggers most content driven spam tests (alligate, nolegitmatecontent, and sniffer). But, we NEED that e-mail. We receive one frequent type of e-mail from a company that doesn't have its act together, so I need to figure out a way to whitelist them, without opening up the floodgates. While the mail is sent by one company (befree), the mail actually is being sent on behalf of others (gardenerseden in this case). The mail fails enough test to exceed my delete weight. Here is a typical header: Received: from pg1bms01.befree.com [66.207.130.10] by smtp.igive.com with ESMTP (SMTPD32-8.05) id A96510EC0030; Thu, 15 Jan 2004 02:03:49 -0600 Received: from pg1bms01.befree.com (localhost [127.0.0.1]) by pg1bms01.befree.com (8.8.8p2+Sun/8.8.8) with ESMTP id DAA20797 for [EMAIL PROTECTED]; Thu, 15 Jan 2004 03:04:19 -0500 (EST) Date: Thu, 15 Jan 2004 03:04:19 -0500 (EST) Message-ID: [EMAIL PROTECTED] From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Gardeners Eden Affiliate News Mime-Version: 1.0 Content-Type: multipart/alternative; boundary==_Part_113_4670443.1074153859335 This IP doesn't have a reverse dns. Just whitelisting 'befree.com' doesn't work well, because there is a lot of spam that contains that phrase. Thoughts welcomed. I know there is something easy to set up, but I'm blanking at the moment. Thanks ahead of time. Rob Robert Grosshandler www.iGive.com Turn your shopping into philanthropy --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist strategy needed
I can't tell if they actually control that IP. If they did, I guess I could. -- -Would adding 66.207.130.10 into your host antispam trusted ip addresses work? ~Rick Due to the nature of our business (online retail), we get some e-mail that triggers most content driven spam tests (alligate, nolegitmatecontent, and sniffer). But, we NEED that e-mail. We receive one frequent type of e-mail from a company that doesn't have its act together, so I need to figure out a way to whitelist them, without opening up the floodgates. While the mail is sent by one company (befree), the mail actually is being sent on behalf of others (gardenerseden in this case). The mail fails enough test to exceed my delete weight. Here is a typical header: Received: from pg1bms01.befree.com [66.207.130.10] by smtp.igive.com with ESMTP (SMTPD32-8.05) id A96510EC0030; Thu, 15 Jan 2004 02:03:49 -0600 Received: from pg1bms01.befree.com (localhost [127.0.0.1]) by pg1bms01.befree.com (8.8.8p2+Sun/8.8.8) with ESMTP id DAA20797 for [EMAIL PROTECTED]; Thu, 15 Jan 2004 03:04:19 -0500 (EST) Date: Thu, 15 Jan 2004 03:04:19 -0500 (EST) Message-ID: [EMAIL PROTECTED] From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Gardeners Eden Affiliate News Mime-Version: 1.0 Content-Type: multipart/alternative; boundary==_Part_113_4670443.1074153859335 This IP doesn't have a reverse dns. Just whitelisting 'befree.com' doesn't work well, because there is a lot of spam that contains that phrase. Thoughts welcomed. I know there is something easy to set up, but I'm blanking at the moment. ___ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist help
Hi We do business with BeFree. We've never actually seen any spam from them (we've seen people spamming using BeFree links, but that's an entirely different kettle of fish). Because of that, I want to get their e-mail when it is truly sent from them to us. So, if I've got this right, whitelist revdns .bfast.com does that for me. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, January 14, 2004 12:13 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Whitelist help bfast.com is only very partially legit, so I wouldn't be counterbalancing their domain. http://groups.google.com/groups?hl=enlr=ie=ISO-8859-1scoring=dq=bfast.co m+group%3A*abuse*btnG=Google+Search ValueClick owns BeFree, and recently bought the notorious Rokso listed spam house, Hi-Speed Media to add to their operations. The company generally sends spam for first rate clients from their closely associated operations, but make no bones about it, they are a very high volume host that controls over 10,000 IP's. 64.70.10.64/26ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.70.10.64 - 64.70.10.127] - 12/26/2003 64.70.17.0/24ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.70.17.0 - 64.70.17.255] - 12/26/2003 64.70.38.156/30ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.70.38.156 - 64.70.38.159] - 12/26/2003 64.70.54.0/24ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.70.54.0 - 64.70.54.255] - 12/26/2003 64.158.223.0/24ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.158.223.0 - 64.158.223.255] - 12/26/2003 65.167.38.0/25ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [65.167.38.0 - 65.167.38.127] - 12/26/2003 64.251.4.0/24ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.251.4.0 - 64.251.4.255] - 12/26/2003 64.251.16.192/27ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.251.16.192 - 64.251.16.223] - 12/26/2003 66.117.0.0/19ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [66.117.0.0 - 66.117.31.255] - 12/26/2003 66.207.130.0/23ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [66.207.130.0 - 66.207.131.255] - 12/26/2003 64.251.19.0/24ValueClick/BFAST/Hi-Speed Media/HBCLB.com (SBL10912, 8948, 11533, ROK2762, etc.)[64.251.19.0 - 64.251.19.255] - 01/04/2004 For places like this, I would recommend only negative weighting what's unique to the list owner, in some cases a header search might be required if the MAILFROM uses the bfast.com domain, i.e. HEADERS -10 CONTAINS from: [EMAIL PROTECTED] I'm not sure if you've verified this either, but I think that PrintPal may buy spamming services, in which case, they picked the right spammer to carry their messages. Matt Robert Grosshandler wrote: Hi I have Whitelist revdns .befree.com in my global.cfg. The following e-mail didn't get whitelisted. When I check out the reverse on it, I find that it is pg1bms00.bfast.com So, if I add Whitelist revdns .bfast.com I should be in better shape. Am I missing anything? Received: from PG1BMS00.BEFREE.COM [66.207.131.110] by smtp.igive.com with ESMTP (SMTPD32-8.05) id AF8C64470020; Tue, 13 Jan 2004 14:05:32 -0600 Received: from omitted by PG1BMS00.BEFREE.COM (LSMTP for Windows NT v1.1b) with SMTP id [EMAIL PROTECTED]; Tue, 13 Jan 2004 15:20:58 -0500 Date: Tue, 13 Jan 2004 13:50:00 -0500 From: [EMAIL PROTECTED] Subject: Printpal.com January Affiliate News To: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Message-Id: [EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list
RE: [Declude.JunkMail] November 2003 Spam Statistics
Brian wrote - The new test platforms will allow us to move some domains out of the normal loop and we will be able to update the Declude version again (shortly we hope). For those of us who use the Declude version of Alligate (alongside Sniffer) we hope that's soon! It is great having two full-featured engines that let us rest comfortably if we delete e-mail without inspection. If both engines agree that something is spam, it is probably spam! Rob www.iGive.com Turn your holiday shopping into cash for your cause. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] The first time BONDEDSENDER didn't work for me me
Negative weights on last hop only? How would that affect a gateway (or e-mail that goes to a backup mail server)? Rob --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] AOL Slow ?
Hiya All - We're seeing outbound e-mail to AOL.com happening very, very slowly. Our outbound server (64.4.213.165 / 64.4.213.169) appears to be configured correctly (no problems last week, and no changes since then). Anybody else seeing AOL delays today? = Rob www.iGive.com Turn your holiday shopping into cash for your favorite cause. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: FireWall VPN Opinion
We use Sonicwall, we're happy. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter multiple CCs?
Title: Message If an e-mail is sent to me, BCC'd to 5 other people in my domain, and BCC'd to 100 other people not in my domain, what number does BCC see? 5 or 100? Thanks. Rob
RE: [Declude.JunkMail] OT: google.com not returning correctly
Todd Holt wrote: I have a customer that has 2 computers behind a d-link router implementing NAT. One computer works fine and can goto www.google.com just fine. The other computer, however, cannot. This can be caused by a virus modifying the HOSTS file, and adding an entry for google, etc. Edit the hosts file to remove any reference to sites that don't seem to be working. Usually, the only entry is 'localhost', but you may have legitimate network specific changes. Also - Kazaa Lite modifies HOSTS files. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Message Sniifer
We use both. We're happy with both. If both say e-mail is spam, it's spam. Sniffer is updated many times per day, the update is triggered via an e-mail. We use Declude's weighting, so Sniffer plus lots of different test failures equals spam. Alligate plus lots of different test failures equals spam Alligate plust Sniffer failure equals spam. Rob www.iGive.com --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Obvious spam not failing my tests, suggestions?
Hi The following headers tell the story. Anything I should be adding to add weight to this? It didn't trigger Sniffer or Alligate, but that's a different issue. The mailbox it was sent to was harvested from usenet, fwiw. Thanks, Rob Received: from standby2.xtra.co.nz [210.86.15.58] by smtp.igive.com with ESMTP (SMTPD32-8.02) id A1A4AC70246; Tue, 07 Oct 2003 09:45:56 -0500 Received: from mta201-rme.xtra.co.nz ([210.86.15.143]) by standby2.xtra.co.nz with ESMTP id [EMAIL PROTECTED]; Wed, 8 Oct 2003 03:45:54 +1300 Received: from ptyzwjc ([210.55.144.85]) by web4-rme.xtra.co.nz with SMTP id [EMAIL PROTECTED]; Mon, 6 Oct 2003 08:33:18 +1300 FROM: Microsoft Network Security Section [EMAIL PROTECTED] TO: [EMAIL PROTECTED] SUBJECT: New Internet Security Pack Mime-Version: 1.0 Content-Type: multipart/mixed; boundary=gkxrxour Message-Id: [EMAIL PROTECTED] Date: Mon, 6 Oct 2003 08:33:57 +1300 X-Alligate-In: Passed - Adult: 0 (Req: 18) Spam: 13 (Req: 18) Tot: 9 (Req: 20) X-Alligate-Tracking: 9ECF7612DB13F5CF X-Alligate-Signature: -2102883752 X-Alligate-SpoolFile: Dd1a40ac70246a220.SMD X-Alligate-Sender: [EMAIL PROTECTED] [210.86.15.58] X-RBL-Warning: IPNOTINMX: X-RBL-Warning: HELOBOGUS: Domain standby2.xtra.co.nz has no MX or A records. X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected. X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: IPNOTINMX, HELOBOGUS, NOLEGITCONTENT, GIBBERISH, ANTIGIBBERISH, SPAM-NONE X-RCPT-TO: [EMAIL PROTECTED] Status: U X-UIDL: 328950976 --gkxrxour Content-Type: multipart/related; boundary=cnbqatbhjuzobno; type=multipart/alternative --cnbqatbhjuzobno Content-Type: multipart/alternative; boundary=tsuapoqqaudzkhe --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Obvious spam not failing my tests, suggestions?
Karen said: Buy a good AV scanner. And I replied: We use Frisk on the server, Norton on the desktop, neither flagged it. Rob --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Obvious spam not failing my tests, suggestions? suggestions?
John provided a great filter, since fprot and Norton didn't see the probably corrupt virus. Thanks. Rob --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Outbound test
Here's the conclusion to this, I think. Alligate puts in headers in both incoming and outgoing email. Declude runs tests, then ignores results, if whitelist is triggered. So, I added some whitelist entries to Alligate, so it no longer tests the email outgoing from my IPs. Headers still get written, but now they don't shout SPAM at any subsequent MTA / MUA. Thanks. Rob All messages are scanned. Whitelisting prevents any action. As for Alligate, the list has been taken down do to some problems. Have you checked the Alligate log? --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Backup MX / Spam
Hi Some large percentage of the spam we get comes to the backup MX and then is relayed to the primary MX. Using Declude JM Standard, is there some test I can use to add additional weight to any mail routed through my backup MX? Thanks, Rob == Robert N. Grosshandler www.iGive.com Turn shopping into Philanthropy --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Backup MX / Spam
We do that already and it works fine. However, I know that there is a much higher probability that any mail that passes through the backup MX is spam, so I want to add additional weight just because it comes through the backup MX. Rob Jeff wrote: Use the IPBYPASS %sec mx ip% feature within the GLOBAL.CFG file. It will skip the ip address of your secondary mx record and run the check on the ip address of the originating server. IPBYPASS xxx.xxx.xxx.xxx --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Backup MX / Spam
Yeah, but. Declude Standard - no filters. Otherwise, it would work. The idea is to add enough weight to bring it over the edge. A problem with the primary down test is that Declude is doing its scanning on the primary, and it would never be down when Declude was scanning! So, Declude would have to have logic for keeping track of when the primary was up and down. Becoming a non-trivial task when you add that nuance. Rob Paul wrote: You could write a filter that searches the headers for your backup server's IP address. HEADERS 3 CONTAINS x.x.x.x Matt The problem with this is if your primary does go down (rebooting for a patch for example), these points will be added to *all* email until your primary is back up. I posted just a few days ago asking if it was possible for Declude to check that primary was functional. If so, there could be a test that would add points for any mail sent to the secondary when the primary is functional. I realize that this would require a new version of Declude, but I think it could be really worthwhile. Nobody responded to my last post, so I wasn't sure if there is some reason why this wouldn't work or would be too difficult. Paul Navarre --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
