Re: [Declude.JunkMail] Performance issues with SM 8.2 w Declude
Well I think I found the source of my problem, or I should say sources. After upgrading the RAM to 4 Gb the server would reboot after about 5 seconds of starting to load windows. It looks like I had some drive issues on the OS drive of the server. With the OS repaired and moving the swap file to a different disk the SM is working as before. Thanks everyone for there help. -- From: Scott Fosseen [Prairie Lakes AEA] sfoss...@aea8.k12.ia.us Sent: Monday, September 26, 2011 10:44 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Performance issues with SM 8.2 w Declude I am starting to have some serious performance issues since I upgraded to SM 8.2. Although I can not be for sure that is it due to the upgrade as usage has also increased with added clients and the start of school. The big issue is that the web interface becomes unresponsive for up to about 5 minutes. The machine has 2 Gig of RAM, and a swap file of 5.5 Gig. In Windows task manager I see my peak memory usage is now 10 gig. Right now I am not sure if the performance issues are being caused by RAM, too much traffic, Smartermail, or Declude. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Performance issues with SM 8.2 w Declude
I am starting to have some serious performance issues since I upgraded to SM 8.2. Although I can not be for sure that is it due to the upgrade as usage has also increased with added clients and the start of school. The big issue is that the web interface becomes unresponsive for up to about 5 minutes. The machine has 2 Gig of RAM, and a swap file of 5.5 Gig. In Windows task manager I see my peak memory usage is now 10 gig. Right now I am not sure if the performance issues are being caused by RAM, too much traffic, Smartermail, or Declude. _ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Your are asked to notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Prairie Lakes Area Education Agency. Prairie Lakes Area Education Agency accepts no liability for any damage caused by any virus transmitted by this email. - _ Scott Fosseen - Systems Engineer - Prairie Lakes AEA - http://www.aea8.k12.ia.us/tech _ In a study of 200,000 ostriches over a period of 80 years, no one reported a single case where an ostrich buried its head in the sand (or attempted to do so - apart from Bones ). _ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Performance issues with SM 8.2 w Declude
Running Win 2003 Standard on 32 bit hardware. I am going to bump the RAM up to 4 Gb tonight to see if that helps. I should say what I am seeing is that the SM Web interface becomes unresponsive at times. I have been unable to correlate the unresponsive interface with specific high CPU or Memory use though. I have been planning on installing a new Win 2K8 64 bit OS to migrate SM to. Is there any issues or suggestions on setting this up as a Virtual machine in a VMware environment? -- From: Randy A ra...@globalweb.us Sent: Monday, September 26, 2011 1:47 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Performance issues with SM 8.2 w Declude Which version of Windows server are you running? That will be important also as, for example, WIN Server 2003 Standard only allows a max of 4GB RAM, while WIN Server 2003 Enterprise has a 64GB limit -Original Message- From: Scott Fosseen [Prairie Lakes AEA] [mailto:sfoss...@aea8.k12.ia.us] Sent: Monday, September 26, 2011 11:44 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Performance issues with SM 8.2 w Declude I am starting to have some serious performance issues since I upgraded to SM 8.2. Although I can not be for sure that is it due to the upgrade as usage has also increased with added clients and the start of school. The big issue is that the web interface becomes unresponsive for up to about 5 minutes. The machine has 2 Gig of RAM, and a swap file of 5.5 Gig. In Windows task manager I see my peak memory usage is now 10 gig. Right now I am not sure if the performance issues are being caused by RAM, too much traffic, Smartermail, or Declude. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Missing Messages
I am running SmarterMail 5 with declude. My mail server has been a little odd for the last few days. I have people complaining about not getting mail, but yet some mail is getting through. One particular problem. I can send an email from outside the problem mail server. I see the message in the SMTP log file, but it never shows in the Virus or Junkmail log. I don't seem to have any folders that are growing in size, I just don't see where the message went, or why it was not processed by Declude. I am running a tail on the log files, and there are messages going through just fine as well. _ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Your are asked to notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Prairie Lakes Area Education Agency. Prairie Lakes Area Education Agency accepts no liability for any damage caused by any virus transmitted by this email. - _ Scott Fosseen - Systems Engineer - Prairie Lakes AEA - http://www.aea8.k12.ia.us/tech _ Upper Case: The luggage on the top of the pile. Caps Lock: A fastening to keep your hat on your head. Keyboard: The row of hooks where you keep your keys. Space Bar: A sleazy joint where Martians like to hang out. _ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Missing Messages
Declude support was able to sort out the issue fairly quickly. THANKS, When I installed this mail server two years ago it was a fresh install of SmarterMail, and Declude. Then I migrated all my old iMail domains to the SmarterMail server. The default for Declude is to use up to 15 threads to process email messages. The setting has been working fine for me (in retrospect I did have some people complaining about slow delivery, but I blamed that on my Alligate Box and grey listing) Some events happened that caused a backlog up to 25k messages. My thread count is now set to match my hardware (Dual Quad Core with 2 Gig ram - 250 Declude Threads) plus removal of dead rbl in global.cfg seemed to do the trick. -- From: Scott Fosseen [Prairie Lakes AEA] sfoss...@aea8.k12.ia.us Sent: Wednesday, August 26, 2009 1:39 PM To: decludejunkmail declude.junkmail@declude.com Subject: [Declude.JunkMail] Missing Messages I am running SmarterMail 5 with declude. My mail server has been a little odd for the last few days. I have people complaining about not getting mail, but yet some mail is getting through. One particular problem. I can send an email from outside the problem mail server. I see the message in the SMTP log file, but it never shows in the Virus or Junkmail log. I don't seem to have any folders that are growing in size, I just don't see where the message went, or why it was not processed by Declude. I am running a tail on the log files, and there are messages going through just fine as well. _ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Your are asked to notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Prairie Lakes Area Education Agency. Prairie Lakes Area Education Agency accepts no liability for any damage caused by any virus transmitted by this email. - _ Scott Fosseen - Systems Engineer - Prairie Lakes AEA - http://www.aea8.k12.ia.us/tech _ Upper Case: The luggage on the top of the pile. Caps Lock: A fastening to keep your hat on your head. Keyboard: The row of hooks where you keep your keys. Space Bar: A sleazy joint where Martians like to hang out. _ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Alligate Problems
Thanks everyone for your input. It looks like my install is now working as it should be. The slow delivery times was caused by performance problems on a remote mail server and a MX record that should have been reconfigured. The simple story was that 5+ years ago I was running backup smtp servers for some of my clients. The problem was that I still had one of these clients setup with me running a backup to their mailserver. What looks to have happened is that the recent increase in mail caused their mail server beyond capacity which caused an assortment of problems from not responding, to starting to accept mail and then stall. So when their mail server was choking mail started to come into my Alligate server. When my Alligate tried to verify users it would contact the sick mail server which for all practical purposes tar-pitted the requests. Eventually Alligate was using all it's resources to establish connections to a mail server that could not complete requests, and email simply backed up. Once AGSupport reconfigured my AG box to not accept mail for the problem domain the problem went away (after is cleared it's backlog). The 2nd issue was a new domain I added I misspelled the domain name. Even after I had checked the spelling on not less than 5 occasions I missed the typo each time. Once that was corrected AG worked as expected. -- From: Scott Fosseen [EMAIL PROTECTED] Sent: Monday, August 25, 2008 5:19 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: Alligate Problems | From the recommendations from this list I am currently evaling alligate. I | have to say my installation has been plagued with problems. I installed on | a fresh HP DL360 G3 with dual 2.8 Ghz Xeon processors, 4 gig of ram, and | mirrored Ultra320 SCSI 72 Gig drives. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT: Alligate Problems
From the recommendations from this list I am currently evaling alligate. I have to say my installation has been plagued with problems. I installed on a fresh HP DL360 G3 with dual 2.8 Ghz Xeon processors, 4 gig of ram, and mirrored Ultra320 SCSI 72 Gig drives. I have settings that revert back to previous settings after I save, and I have not been able to tell how many messages are waiting to be delivered to my Smarter mail server running declude. I know I am only running an eval, but my first support request took a while. I am currently have 1 Smarter mail district complaining about long delivery times. The one email I looked up my Alligate server said it received the mail at 2pm, but my Smarter mail server shows delivery at 4pm. I was not able to find anywhere in the alligate logs where it tried to send the message to my Smarter mail server. My Smarter mail server is running on a Dual Quad core system and is hardly tasked. I guess I am looking for a word of encouragement from the alligate supporters out there that I should stay diligent or if there are any tips you can share. _ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Your are asked to notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Prairie Lakes Area Education Agency. Prairie Lakes Area Education Agency accepts no liability for any damage caused by any virus transmitted by this email. - _ Scott Fosseen - Systems Engineer - Prairie Lakes AEA - http://www.aea8.k12.ia.us/tech _ You can go and find a mailbox right now, open the door to a tin box - tin door, no lock - with unencrypted information in English, sealed in a paper-thin envelope with spit, yet people are worried about online privacy. - Scott McNeely, CEO, Sun Microsystems _ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Firewall rule question
This is not directly a Declude questions, but yet still does apply. I am getting a Top Rate Controlled by IP report from my Barracuda box that is acting as a pre-filter to my Declude server. What I am noticing in the reports is that the top 20 IP addresses are in 8-10 /24 ip blocks. I have started a firewall rule in my upstream firewall and have started adding IP address ranges to drop packets. Each IP address so far typically tries to send between 5k-15k messages a day. Each IP block make up about 30k-80k message. My though is by blocking the worst offenders at the firewall I should be able to reduce the load on my SPAM equipment. My question is... Is/Has anyone else tried this approach If so is there an impact on the amount of mail your server had to process? The second part of the question would have to deal with the overhead to process a message via RBL. Would the firewall approach to blocking IP addresses of known bulk spammers, or is Declude going to be just as efficient with testing via RBL. Thanks _ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Your are asked to notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Prairie Lakes Area Education Agency. Prairie Lakes Area Education Agency accepts no liability for any damage caused by any virus transmitted by this email. - _ Scott Fosseen - Systems Engineer - Prairie Lakes AEA - http://www.aea8.k12.ia.us/tech _ Tech support: Type A: at the prompt. Customer: How do you spell that? - actual call to computer tech support _ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Mail Pre-Processor recommendations
I believe I have seen some replies to this already, but I though I would put this out again. I am hosting about 30 domains worth of email and filtering for an additional 10 domains. My current configuration is all mail is pre-filtered through a Barracuda 400 box, then forwarded to a Smartermail 4.x server running Declude with Sniffer, Zero Hour, invURIBL. The Smartermail/Declude box is a Dual Quad Core HP server with 2 Gig of RAM. I am currently receiving about 600k email messages a day on the Barracuda box, and it is seeing performance issues. Before I purchase a 2nd Barracuda box I though I would check to see if anyone has a better solution. Declude still catches 40-60% SPAM after the Barracuda box. Thanks _ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Your are asked to notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Prairie Lakes Area Education Agency. Prairie Lakes Area Education Agency accepts no liability for any damage caused by any virus transmitted by this email. - _ Scott Fosseen - Systems Engineer - Prairie Lakes AEA - http://www.aea8.k12.ia.us/tech _ We live in a world today where lemonade is made from artificial flavors and furniture polish is made from real lemons. - Alfred E.Neumann MAD magazine _ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Barracuda Quarantine bypass
Due to the number of messages going through my system I pre-filter E-Mail with a Barracuda box. I have about 10 schools I filter for then pass to their local email servers, and 35 districts who I host email for. On initial setup I have 2 districts I am filtering for that have Per User Quarantine setup. Those districts do not want to loose the Per User Quarantine option but yet are complaining that they are getting too much spam. Has anyone setup a filter in Declude that would whitelist an email message if a user allows a quarantined email message from the Barracuda box. What I don't want to happen is have a user release a quarantined message from the barracuda and have it deleted by the Declude system upstream. Thanks in advance _ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Your are asked to notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Prairie Lakes Area Education Agency. Prairie Lakes Area Education Agency accepts no liability for any damage caused by any virus transmitted by this email. - _ Scott Fosseen - Systems Engineer - Prairie Lakes AEA - http://www.aea8.k12.ia.us/tech _ This is to inform you that a memo will be issued today regarding the subject mentioned above. - memo sent by Microsoft Legal Affairs Division _ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Barracuda Quarantine bypass
I don't know. I was hoping someone has ran into it before. I do have a personal account that goes through the Barracuda box. Let me set it up for per-user quarantine and I will check it out. -- From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] Sent: Monday, February 18, 2008 4:00 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Barracuda Quarantine bypass | Scott, | | Does the Barracuda system add any headers that we could trigger a filter | to hit will reduce the weight so we can prevent it from being captured? | | Darrell | -- | Check out http://www.invariantsystems.com for utilities for Declude, | Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, | SURBL/URI integration, MRTG Integration, and Log Parsers. | | | Scott Fosseen wrote: | Due to the number of messages going through my system I pre-filter E-Mail | with a Barracuda box. I have about 10 schools I filter for then pass to | their local email servers, and 35 districts who I host email for. On | initial setup I have 2 districts I am filtering for that have Per User | Quarantine setup. Those districts do not want to loose the Per User | Quarantine option but yet are complaining that they are getting too much | spam. | | Has anyone setup a filter in Declude that would whitelist an email message | if a user allows a quarantined email message from the Barracuda box. What I | don't want to happen is have a user release a quarantined message from the | barracuda and have it deleted by the Declude system upstream. | | Thanks in advance | _ | This email and any files transmitted with it are confidential and intended | solely for the use of the individual or entity to whom they are addressed. | If you are not the named addressee you should not disseminate, distribute or | copy this e-mail. Your are asked to notify the sender immediately by e-mail | if you have received this e-mail by mistake and delete this e-mail from your | system. Please note that any views or opinions presented in this email are | solely those of the author and do not necessarily represent those of Prairie | Lakes Area Education Agency. Prairie Lakes Area Education Agency accepts no | liability for any damage caused by any virus transmitted by this email. - | _ | Scott Fosseen - Systems Engineer - Prairie Lakes AEA - | http://www.aea8.k12.ia.us/tech | _ | This is to inform you that a memo will be issued today regarding the | subject mentioned above. - memo sent by Microsoft Legal Affairs | Division | _ | | | | | --- | This E-mail came from the Declude.JunkMail mailing list. To | unsubscribe, just send an E-mail to [EMAIL PROTECTED], and | type unsubscribe Declude.JunkMail. The archives can be found | at http://www.mail-archive.com. | | | -- | | | | --- | This E-mail came from the Declude.JunkMail mailing list. To | unsubscribe, just send an E-mail to [EMAIL PROTECTED], and | type unsubscribe Declude.JunkMail. The archives can be found | at http://www.mail-archive.com. | | --- | [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] | | --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Ever legit?
It looks like you have SPF setup on your DNS. I would think that enabling the SPFFail test or adjusting the action/weight would correct your problem. An email comes in, Declude looks up your SPF record from DNS and compares the IP with the list of trusted senders. It should fail the test with the email coming from addresses not in your SPF record. - Original Message - From: Robert Grosshandler [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Thursday, April 26, 2007 3:45 PM Subject: [Declude.JunkMail] Ever legit? | Hi | | | We get e-mails that contain the following header (or something similar): | | Received: from igive.com [71.250.241.101] by smtp.igive.com with ESMTP | (SMTPD-9.20) | | The 71.xxx.xxx.xxx isn't ours. That IP can vary, but it is never ours. | | Are there any legit mailers that would send something in this form? | | If not, what's the best way to score this over my delete weight? | | Thanks, | | Rob | | | | --- | This E-mail came from the Declude.JunkMail mailing list. To | unsubscribe, just send an E-mail to [EMAIL PROTECTED], and | type unsubscribe Declude.JunkMail. The archives can be found | at http://www.mail-archive.com. | | --- | [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] | | --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Is 'SpamDomains' a worthwhile test still?
I am having a few problems with SpamDomains. I have had a few instances where [EMAIL PROTECTED] or [EMAIL PROTECTED] sends a message and the SMTP log shows the email came from a SMTP server I assume is their ISP. One person I talked to said that he used the Hotmail web interface to send the message. The problem is that the message fails SpamDomains. I am not sure exactly why the message did not show up as coming from hotmail.com. _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://www.aea8.k12.ia.us/en/technology/ _ If at first you don't succeed, skydiving is not for you. _ --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Internet Usage - Monitoring and Filtering Apps
I have evaluated a Fortigate 60 unit in a few locations. I think List price is about $700, Support is $250/year and Content Filter is $250/year. The sales person told me they recommended that unit for up to 25 workstations, but the specs say up to 7 Mbps throughput and 50,000 concurrent connections. I tested it on a school network with 3Mbps Internet access and about 800 workstations and even under full utilization of the Internet connection there was no loss of performance. Support is a Required purchase, but with the support costs you get the AV updates, Intrusion Detection Updates, Firmware Updates, and I believe Hardware replacement as well as Tech Support. The only thing that costs extra is the Content Filter List. The price is based on the unit size, so the next step up Support and Content Filter price increase as well. The 60 also has dual WAN ports with Fail-over and load balancing. The one school I tested with 3Mbps throughput uses a Barracuda filter for mail. When testing the Fortinet for a week the Barracuda detected NO viruses infected messages. When I sent a test virus through Declude site through the Fortinet and the message was stopped before the mail server received the complete message! Grayware I had enabled and I can not confirm that it will catch all Spyware, it did stop a lot of stuff on my home network according to the logs. Intrusion Detection/Prevention will let you block Instant Message and p2p clients by signature so even if the apps port hop it still will block the communications. This function worked very well. As a small ISP, I have been thinking about adding one of the units to the Internet Gateway to block Viruses and Grayware for my clients. It can be setup in Transparent mode if you don't want to change any of your network settings or NAT mode with firewall functionality. _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ With over 50 cars already on sale here, the Japanese auto industry isn't likely to carve out a big slice of the U.S. market for itself. - Business Week magazine, 1968 _ - Original Message - From: Patrick Childers [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, February 15, 2005 1:00 PM Subject: [Declude.JunkMail] OT: Internet Usage - Monitoring and Filtering Apps Sorry for the OT but... It seems we have a lot of goofing off during the work day around here! Therefore, I am looking for recommendations for software (or hardware) based solutions for internet monitoring/filtering in a corporate setting of less than 150 users. Any suggestions? Thanks, ~Patrick --- [This E-mail scanned for viruses by Declude/McAfee] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Switch to control bandwidth
I don't know if this will work the way you want it to, but I saw this company at Networld + Interop last year. It does have manual rate shaping available but it's biggest benefit is that it will automatically rate control connections to ensure no service can run away with too much bandwidth. http://www.netequalizer.com/ _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ This 'telephone' has too many shortcomings to be seriously considered as a means of communication. The device is inherently of no value to us. - Western Union internal memo, 1876. _ - Original Message - From: Matt [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, February 10, 2005 12:30 PM Subject: [Declude.JunkMail] OT: Switch to control bandwidth Ok, I'll break the ice :) I was wondering what people would recommend as far as a managed switch goes that I can use to either limit bandwidth or at least guarantee bandwidth going out to the router. It might even be nice to do this on a per-IP basis instead of a per-port basis, though that's not absolutely necessary. Since this is a Web hosting segment and our bandwidth is naturally limited going out, and very little intra-DMZ traffic exists, something that is 10/100 is all that is necessary. Thanks, Matt -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] [OT] Exchange2Alias Question
You need to run the script with username/password of a user on the LDAP server. If you uses the Windows Scheduler it will ask for a username/password to run the program. Just create a local user on the box that runs the script with the same username/password as an account on the LDAP Server. To test the script from a command prompt you will need to run this command runas /netonly /user:domain/username cmd The runas program will ask for your password then open up a command window allowing you to run the script as if you are logged in as that user. _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ There are 10 types of people in this world, those that understand binary, and those that don't. _ - Original Message - From: Keith Johnson [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, January 26, 2005 5:32 PM Subject: RE: [Declude.JunkMail] [OT] Exchange2Alias Question Sandy, Thanks for your reply. I did use the LDAP Browser from Softerra (great tool by the way), it reports the RootDSE correctly during setup. What does an error of 0x80005000 indicate? Is this a permission error? When I use the Softerra utility, if I specify anonymous, then I do not see the Users container, however, if I specify the domain\user and a password, then I can get the full Users container. Is this by design? Thanks again for the aid. Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Wednesday, January 26, 2005 12:25 PM To: Keith Johnson Subject: Re: [Declude.JunkMail] [OT] Exchange2Alias Question I opened port 389 through a client firewall from our Imail Server (just in testing) and attempted to query their server using the exchange2alias script, however, it is returning the following error: ---Export Started--- C:\Documents and Settings\Administrator\Desktop\exchange2aliases.vbs(41, 1) (nul l): A referral was returned from the server. This indicates a mismatch between your search base and the domain hosted by that AD server. If you use LDAP Browser (www.softerra.com), is that search base shown up when you query the LDAP server's RootDSE while setting up the new profile? --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/rel ease/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/dow nload/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/downloa d/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Not scanning mail passing between domains on the same server
I am running IMail v 8.12 and the message was sent via WebMail. _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ I may not have gone where I intended to go, but I think I have ended up where I intended to be. - Douglas Adams _ - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, January 18, 2005 5:24 PM Subject: Re: [Declude.JunkMail] Not scanning mail passing between domains on the same server I have noticed that when a user send a mail message to an address on another domain, but located on that server Declude does not scan the messages for viruses or spam. Is this via web messaging? If so, older versions of IMail may not call Declude. In this case, though, it is extremely unlikely that the E-mail would be spam (since it is from a user that is authorized to send mail) or a virus (since the user would have to intentionally attach a file that happens to contain a virus). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Not scanning mail passing between domains on the same server
I have noticed that when a user send a mail message to an address on another domain, but located on that server Declude does not scan the messages for viruses or spam. The specific instance I saw was that [EMAIL PROTECTED] sent a email to [EMAIL PROTECTED] Only the sys.txt log shows any entries. dec and vir log files do not list the message ID. [EMAIL PROTECTED] has a mailbox on the server. Company.net does not have a mailbox or domain on the server. The server is configured as a mail gateway for company.net with a host file entry pointing to the company.net mailbox server. The server is running Junkmail and Virus Pro, and is configured to scan outbound mail as well. Is there a way to configure the system to scan these messages? _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ I hope you believe you understand what you think I said, but I'm not sure you realize that what you've heard is not what I meant. - President Richard Nixon _ --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] BlackList Tool now available.
I have been using the Declude fromfile URL blacklist to reduce the number of messages (by deleting them) that get caught in Spam Review. I started off using Excel to sort the list and manually deleting duplicates. Then I found a utility, but it was limited to 500 entries and I soon exceeded that capacity. I ended up writing a program that I have been using for about 1 year. I shared the program with a few friends with positive feedback. BlackList Tool as of today scans the current blacklist file, adjusts new entries down to the second-level domain name ( example.com ), date stamps the entry, sorts the list, deletes duplicates, and then removes any blacklist entry that would cause an internal whitelist entry to fail the test. I use BlackList Tool in conjunction with Spam Review. I have configured the 'Declude Kill File' option in Spam Review to point to the Declude fromfile blacklist instead of IMail's kill file. When in Spam Review I first sort by From address. I will Add host to Kill when I have several spam messages from the same domain. I have learned to reduce false positives not to Add host to kill when there is only 1 message from that domain. After I am done with Spam Review I then run BlackList Tool to clean up the new entries. The current version has an Installer and Help files and can be downloaded at: http://fosseen.us/blt I have also made available my current blacklist and also the file containing the whitelist entries I use with the program. I do not use this whitelist file with Declude. If you try the program please send me an e-mail at [EMAIL PROTECTED] and tell me what you think of it. I am also open to suggestions for bug fixes and improvements. _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ With over 50 cars already on sale here, the Japanese auto industry isn't likely to carve out a big slice of the U.S. market for itself. - Business Week magazine, 1968 _ --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: Re[2]: [Declude.JunkMail] [OT] Exchange2Aliases - Error Object not a Collection
The users causing the problem do not have an exchange tab in AD Users Computers. There is an email field that is blank though. _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ The good news: Computers allow us to work 100% faster. The bad news: They generate 300% more work. - Unknown _ - Original Message - From: Sanford Whiteman [EMAIL PROTECTED] To: Scott Fosseen Declude.JunkMail@declude.com Sent: Tuesday, January 04, 2005 6:54 PM Subject: Re[2]: [Declude.JunkMail] [OT] Exchange2Aliases - Error Object not a Collection No we did not remove any X400 addresses, but I did discover the problem. There are users in the OU that do not have email addresses. They use the OU to set policies but not all users are allowed email addresses. I have confirmed with another client that if email addresses are created then the script works fine. It's fine if they don't have addresses _and_ aren't Exchange-enabled: the script certainly accounts for generic or temporary users who are in AD but not in Exchange. The problem is if they _are_ Exchange-enabled, but have 0 or 1 addresses. While I could see why all but one SMTP address might be deleted -- though this doesn't have any beneficial effect that I can think of -- there should be no reason for somebody to be Exchange-enabled (that includes both mailbox-enabled users and mail-enabled contacts), but have zero e-mail addresses. Do you see the Exchange tabs when you open the user in AD Users Computers? --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Utility
I use BareGrep from http://www.baremetalsoft.com This is a free GUI Windows grep utility. Open the log file or files, type in the message id and the program will extract only the lines that pertain to that message. How I normally use the program is that I get a message that the mail from [EMAIL PROTECTED] is not getting through. If I know the day the message was sent I first open the sys file and search for the email address. Once I find the 'From johndoe' lines in the sys file I then have the message ID. At that point I open the dec, sys, and vir file for that day and search for the message ID. I can then see the message results from IMail SMTP, Declude Virus, then Declude Spam. It is a lot more helpful to have your logging turned up to High to see the details. I also use BareTail to watch the dec files in real time. I have setup several color highlighting rules so I can see the message boundaries, and it also highlights each test a different color based on if I Delete, Hold, Subject, or Warn. It is a slick utility to verify changes are working the way that I want. I see that the company now has a new program called BareView that is a paid utility that has the functionality of both grep and tail. I have not used the program yet but I will probably check it out. -- Original Message -- From: Richard Farris [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Tue, 4 Jan 2005 21:45:38 -0600 Is there a utility that you can type the message ID and get back the reasons a test failed tests..instead of going into the logs and pulling it out.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] [OT] Exchange2Aliases - Error Object not a Collection
Sorry to be a pain, When I run the script against the Staff ou I import 293 of the 637 users then get the following message: D:\IMail\Scripts\exchange2aliases.vbs(68, 4) Microsoft VBScript runtime error: Object not a collection I removed the user before and after the error thinking it was a corrupt entry in AD. With the user removed I got the same error message at user 292. Anything I should look at on the AD side that would cause that error? Thanks in advance --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] [OT] Exchange2Aliases - Error Object not a Collection
Unfortunately, I don't see myself building in workarounds for this; too many options. Am I indeed correct that you've removed the X400 addresses from these users? Can you reapply a Recipient Policy to give them an X400 placeholder? No we did not remove any X400 addresses, but I did discover the problem. There are users in the OU that do not have email addresses. They use the OU to set policies but not all users are allowed email addresses. I have confirmed with another client that if email addresses are created then the script works fine. What would be the chances to have a modification to the script so that if it came across a user without an email address it would just skip the user? Thanks _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ This is to inform you that a memo will be issued today regarding the subject mentioned above. - memo sent by Microsoft Legal Affairs Division _ Unfortunately, I don't see myself building in workarounds for this; too many options. Am I indeed correct that you've removed the X400 addresses from these users? Can you reapply a Recipient Policy to give them an X400 placeholder? --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] [OT] Exchange2Aliases - Nested OU's
I am having problems exporting names from 2 OU's on an exchange server. The directory structure looks like this Admin Building Tech Department Business Department If I enter 'ou=Tech Department,...' I get the message Object not found I tried 'ou=Admin Building,ou='Tech Department' 'ou=Admin Building\Tech Department' 'ou=Admin Building/Tech Department' I am sure it is just my lack of LDAP knowledge but what would be the correct way to get the Tech Department users. Thanks. _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ Judge: You say you're innocent, yet five people swore they saw you steal a watch. Defendant: Your Honor, I can produce 500 people who didn't see me steal it. - actual courtroom testimony _ --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: Re[2]: [Declude.JunkMail] [OT] Exchange2aliases Proper switch for LDAP Query
This looks to work but I get no users. There are about 5 users with exchange accounts in users. This command line runs in about 5 seconds. cscript exchange2aliases.vbs backup.east-undershirt.k12.ia.us LDAP://199.1.1.5/cn=users,dc=east-undershirt,dc=k12,dc=ia,dc=us ---Export Started--- ---Begin Users--- ---End Users--- ---Begin Groups--- ---End Groups--- ---Begin Dynamic Groups--- ---End Dynamic Groups--- ---Begin Mail-Enabled Folders--- ---End Mail-Enabled Folders--- ---Export Finished--- -- If I change to read from the ou staff. This scripts takes about 30 seconds from the time ---Begin Users--- starts till the error. cscript exchange2aliases.vbs backup.east-undershirt.k12.ia.us LDAP://199.1.1.5/ou=Staff,dc=east-undershirt,dc=k12,dc=ia,dc=us mailbox.east-undershirt.k12.ia.us east-undershirt.k12.ia.us ---Export Started--- ---Begin Users--- D:\IMail\Scripts\exchange2aliases.vbs(68, 4) Microsoft VBScript runtime error: Object not a collection -- Original Message -- From: Sanford Whiteman [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Thu, 23 Dec 2004 00:42:16 -0500 I can get the script to work with cn=users,dc=east-undershirt. Are you sure you have the switches right? Can you post the command line you're running? --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: Re[6]: [Declude.JunkMail] [OT] Exchange2aliases Proper switch for LDAP Query
That was it. I copied the string from my ldap2aliases command lines and assumed the last switches were the same. Thanks for all your help and time for developing these scripts. _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ We haven't had any more rain since it stopped raining. - tennis commentator Harry Carpenter _ - Original Message - From: Sanford Whiteman [EMAIL PROTECTED] To: Scott Fosseen Declude.JunkMail@declude.com Sent: Thursday, December 23, 2004 12:14 PM Subject: Re[6]: [Declude.JunkMail] [OT] Exchange2aliases Proper switch for LDAP Query cscript exchange2aliases.vbsbackup.east-undershirt.k12.ia.us LDAP://199.1.1.5/cn=users,dc=east-undershirt,dc=k12,dc=ia,dc=us mailbox.east-undershirt.k12.ia.us east-undershirt.k12.ia.us Looks like the last two args are mixed up. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] [OT] Exchange2aliases Proper switch for LDAP Query
Looks like the big key was running under the remote server credentials. I can get the script to work with cn=users,dc=east-undershirt. but I do not get any users. If I switch cn=users to ou=staff I get an error message Object not a container _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ The winner of this game is going to be whoever has the most points on the scoreboard at the end of the game. - football commentator John Madden _ - Original Message - From: Sanford Whiteman [EMAIL PROTECTED] To: Scott Fosseen Declude.JunkMail@declude.com Sent: Tuesday, December 21, 2004 11:09 AM Subject: Re: [Declude.JunkMail] [OT] Exchange2aliases Proper switch for LDAP Query TheADnameis east-undershirt.k12.ia.us so I use dc=east-undershirt,dc=k12,dc=ia,dc=us I am pretty sure this part is correct. . . Yes, that looks okay. Are there any special settings on the exchange server that have to be set to allow me to query it across the Internet? You need to be running the script using credentials that are valid on the remote server. You can create a dummy local account to match the remote account name, and the passwords must match. The AD on the exchange server has users in several OU's such as Staff and Admin Building. How does that change the command line? You'd just loop through each OU and run ex2a against each: ou=ou_name, dc=east-undershirt, dc=k12. . . --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] [OT] Exchange2aliases Proper switch for LDAP Query
Now that I have a handle on ldap2aliases I am trying to setup Exchange2aliases. I am having problems getting the exchange server to give up it's users. I can get the script to the exporting users section, but it never gets any users. The AD name is east-undershirt.k12.ia.us so I use dc=east-undershirt,dc=k12,dc=ia,dc=us I am pretty sure this part is correct because if I change it in anyway the script fails before the exporting users section. Because LDAP is not my strong point here are the questions Are there any special settings on the exchange server that have to be set to allow me to query it across the Internet? I know my client has LDAP working because their Barracuda filter is also using LDAP. The Barracuda does have to have a username and password to access though. Do I need to specify a user and password on the command line of Exchange2Aliases then to query LDAP The AD on the exchange server has users in several OU's such as Staff and Admin Building. How does that change the command line? _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ If at first you don't succeed, skydiving is not for you. _ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] [OT] ldap2alias on bakup mail server questions
I am still having a problem on the proper configuration. I do have ldap2alias and alias2ldap scripts working. I am just not quite sure how to setup IMail on the backup servers. Currently I have 1 mailbox server with 10 domains and 3 backup servers, each on a different ISP. So if I have the following mailbox domains on one server domain1.com domain2.com domain3.com and currently backup mailservers backup1.mydomain.com backup2.mydomain.com backup3.mydomain.com How does using ldap2alias change my backup mail structure? I talked with IMail support today and they told me that Imail 8.x resolves domain names first by local domains (Including alias), then the hosts file, then DNS. In short they told me that a domain with the mailbox domain as an alias will never forward messages to the domain. I was told that the hosts file was a better option for backup mail servers. So does anyone have this working in a similar setup? and can you explain how you have both IMail and DNS setup to make it work. Also when the mailbox domain is down how do I prevent the backup mail servers from passing the message between each other. I want to make sure if the mailbox domain is down the backup mail server holds the message, not forward it to another backup mail server, to another , to another. Also if backup1.mydomain.com provides backup for a mailserver I can not get aliases for is better to use the host file to forward mail or add a virtual domain with the nobody alias? Thanks in advance. _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ It's not the amendment with which I disagree. It's the contents of the amendment. - Representative Naomi Farve (D-New Orleans) _ --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] [OT] ldap2alias on Backup mail servers
Currently I have 1 IMail 8.1x server with 12 virtual domains. Each domain has a dedicated IP address. I currently have 3 backup mail servers, one local, and 2 on other ISP links. Currently each backup mail server is running MS SMTP using 1 IP address. My MX records look like this school.k12 MX 10 mail.school.k12 school.k12 MX 50 isp1-backup.aea8.k12.ia.us (Local Backup Server) school.k12 MX 100 isp2-backup.aea8.k12.ia.us (Remote Backup Server) school.k12 MX 100 isp3-backup.aea8.k12.ia.us (Remote Backup Server) All the domains I host on the main mail server have the same last 3 MX records. I am planning on switching to IMail on the local backup server. To use ldap2alias what would be the best way to name the virtual hosts on the backup servers. isp1-backup.school.k12 school1.aea8.k12.ia.us or something else. My goal is to have all backup mail servers switched to IMail but I will start with the local one first. _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ Greetings, my friends. We are all interested in the future because that's where you and I are going to spend the rest of our lives. - opening narration delivered by well-known TV psychic Criswell in Plan 9 from Outer Space, 1958 _ --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Sender Blacklist wildcard?
Is there a wildcard character that can be used in the Sender Blacklist. Specifically I would like a character or number wildcard so that I could blacklist addresses like spam01.com spam02.com with and entry like spam##.com so that entries from spam00.com - spam99.com would be caught with one entry instead of 100 entries. _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ Everything that can be invented has been invented. - Charles H. Duell, Commissioner, U.S. Office of Patents, 1899. _ --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Sender Blacklist wildcard?
What would be the possibility of having that function added? _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ Insanity: doing the same thing over and over again and expecting different results. - Albert Einstein _ - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, September 29, 2004 2:43 PM Subject: Re: [Declude.JunkMail] Sender Blacklist wildcard? Is there a wildcard character that can be used in the Sender Blacklist. No, there is not. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SpamDomains Question
I have added a SpamDomains test to Global.cfg and junkmail.default file SpamDomains is set to warn. I am running a backup mail server that forwards mail to the system with Declude Junkmail. I do have an IPBYPASS entry for the backup mail server. My warn messages in the mail server look to always test my backup mail server name if the message was routed through that server. I am running Declude Virus Pro V 1.75 So is the header info correct and the SpamDomains logic is using my backup mail server address as who sent the message, or is the message wrong? _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ Aoccdrnig to a rscheearch at an Elingsh uinervtisy, it deosn't mttaer in waht oredr the ltteers in a wrod are, the olny iprmoatnt tihng is taht the frist and lsat ltteers are in the rghit pclae. The rset can be a toatl mses - We do not raed ervey lteter by itslef, but the wrod as a wlohe. _ --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] skipifweight usage
I missed out on the discussion of the new feature skipifweight Is that only a filter command or can it be used in the global.cfg or junkmail.default file? _ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _ Research by the U.S. Navy has determined that water freezes in cold weather. - Southfield Michigan newspaper _ --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
