[Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and other free account blacklisted servers
We have been seeing a dramatic increase of free webmail server IP's being blacklisted and causing false positives from the usual Hotmail, msn, yahoo, aol, gmail, and other free email servers listed on RBL', spamcop, spamhaus, etc. This has caused a tendency to for customers to want to whitelist these domains which we do have on per domain/per user settings however still must be explained and applied. I can provide hundreds of these blacklisted IP's in the logs however I was hoping a number of you have developed a list of reverse DNS IP or hostname entry files to subtract from sniffer and/or UR-IBL scoring that will allow the good emails through from blacklisted IPs or some ruleset that has the same effect. This has become a very annoying issue for us, any help/ideas would be appreciated. Chris Patterson, CCNA Special Projects and Advanced Engineering Manager Rapid Systems http://www.rapidsys.com KB: http://support.rapidsys.com --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] AllLists.DAT in RAR Format?
In fairness I never download any sort of update directly to a production system. I would download it to my workstation and run checks and then transfer it to the system.But then again I am paranoid :D On 2/19/2010 11:16 AM, Andy Schmidt wrote: Thanks Dave, I appreciate that. I’ve zipped hundreds of megabytes – so I don’t think this is going to be an issue. Generally, live is hard enough – it’s nice if I don’t have to worry about monitoring even more vendors/authors about vulnerabilities, security fixes, version updates etc to a various freeware products. *From:* supp...@declude.com [mailto:supp...@declude.com] *On Behalf Of *David Barker *Sent:* Friday, February 19, 2010 12:04 PM *To:* declude.junkmail@declude.com *Subject:* RE: [Declude.JunkMail] AllLists.DAT in RAR Format? No justification other than I was working with RAR because it does not have the size limitations of ZIP. Anyways it is now a .zip David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax dbar...@declude.com mailto:dbar...@declude.com *From:* supp...@declude.com [mailto:supp...@declude.com] *On Behalf Of *Andy Schmidt *Sent:* Friday, February 19, 2010 11:22 AM *To:* declude.junkmail@declude.com *Subject:* [Declude.JunkMail] AllLists.DAT in RAR Format? *Importance:* High Hi, Obviously, I know that I can download third party tools to “unrar” the file – but I REALLY hate nothing more, but than cluttering up production systems with unnecessary shareware/freeware. Windows has built-in ZIP support (“compressed folders”). Is there any justification to pick a NON compatible format for compression the all-lists.dat file? If it was compressed using the native Windows format (considering that Declude is a Windows application), the file could be used instantly! Best Regards, Andy --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] No Reverse DNS pointer?
1. Dunno cause I have never operated a mail server without proper reverse DNS (nor any server for that matter). 2. Yes I do. Proper standard should include proper reverse. As a general rule mail servers without reverse I have encountered are sending spam OR improperly configured and candidates for open relay. Even most dynamic allocated ISPS provide reverse of some sort. Dave Beckstrom wrote: Hi Everyone, I have two questions: 1) If a mail server is configured without a reverse DNS pointer, is that enough to prevent email from reaching AOL, Yahoo, Hotmail, etc? 2) Do you block email coming from mail servers with no reverse DNS? Thanks, Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- Chris Fitch Phone: 205-823-7330 eMail: [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Possible Declude Memory Leak???
Hi All,We are getting the follow error in our system event log and have noticed some things relating to declude:"An I/O operation initiated by the Registry failed unrecoverably. The Registry could not read in, or write out, or flush, one of the files that contain the system's image of the Registry."We are running 4.3.46 and are seeing decludeproc.exe reaching # of handles as high as 50,000. A reboot fixes all, but loses any registry changes since the error started. We are open to any suggestions. Thanks for any help you have!Best Regards, Chris AntonWeb Solutions, Inc.Tel: 203-235- x25[EMAIL PROTECTED]www.websolutions.net ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] Declude/Sniffer Issues
I am running 2 versions of Smartermail Declude both running Sniffer and InvURIBL. One is Smartermail4/Declude4.3.3 Other is Smartermail2/Declude3. These servers can run perfectly for weeks but for the past few weeks we have been sporadically seeing Declude back up files in the Proc directory. At this time all Declude threads are being used with no processing power being used. It appears Sniffer is not finishing and hogging up all the threads after reviewing the logs. Anyone else experiencing this? Thanks, Chris Patterson, CCNA Network Engineer/Support Manager Rapid Systems --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude/Sniffer Issues
I get this in logs: 02/19/2007 05:16:12.213 23859386 ERROR: External program SNIFFER didn't finish quick enough; terminating. 02/19/2007 05:16:12.213 23859386 Couldn't get external program exit code At this point I see thousands of .xxx and .fin files built up in the sniffer directory. Usually forcing a sniffer update (normally done every hour automatically). From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 9:32 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues What are you seeing the logs that indicates this? Declude will terminate long running external processes and log that it terminated it. Are you seeing those entries? Also, during these times when you look at task manager do you see a bunch of idle sniffer processes? Typically from my experience when you see all the threads being used with very little to no CPU usage it tends to be a DNS issue (i.e slow or not responding DNS server). Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, February 19, 2007 8:47 AM Subject: [Declude.JunkMail] Declude/Sniffer Issues I am running 2 versions of Smartermail Declude both running Sniffer and InvURIBL. One is Smartermail4/Declude4.3.3 Other is Smartermail2/Declude3. These servers can run perfectly for weeks but for the past few weeks we have been sporadically seeing Declude back up files in the Proc directory. At this time all Declude threads are being used with no processing power being used. It appears Sniffer is not finishing and hogging up all the threads after reviewing the logs. Anyone else experiencing this? Thanks, Chris Patterson, CCNA Network Engineer/Support Manager Rapid Systems --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude/Sniffer Issues
When this issue happens which seems more frequent, I do clear out the thousands of left behind files. I am more trying to find a way to prevent it or reason that is happening. And yes, Sniffer does have a hard time operating when it hoses up that bad. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 1:40 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues Chris, I am gathering that you are running Sniffer in persistant mode? I would stop your declude and Sniffer services. Than go into the sniffer directory and remove all of the *.fin, *.svr files. I am not sure what the .xxx files are. I have yet to see those. Than I would check your Sniffer log for any errors. After making sure there are no errors I would restart the Sniffer persistant service and Declude and see if the issue is resolved. It's possible Sniffer could be stepping on itself trying to weed through all those files. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, February 19, 2007 1:03 PM Subject: RE: [Declude.JunkMail] Declude/Sniffer Issues I get this in logs: 02/19/2007 05:16:12.213 23859386 ERROR: External program SNIFFER didn't finish quick enough; terminating. 02/19/2007 05:16:12.213 23859386 Couldn't get external program exit code At this point I see thousands of .xxx and .fin files built up in the sniffer directory. Usually forcing a sniffer update (normally done every hour automatically). From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 9:32 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues What are you seeing the logs that indicates this? Declude will terminate long running external processes and log that it terminated it. Are you seeing those entries? Also, during these times when you look at task manager do you see a bunch of idle sniffer processes? Typically from my experience when you see all the threads being used with very little to no CPU usage it tends to be a DNS issue (i.e slow or not responding DNS server). Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, February 19, 2007 8:47 AM Subject: [Declude.JunkMail] Declude/Sniffer Issues I am running 2 versions of Smartermail Declude both running Sniffer and InvURIBL. One is Smartermail4/Declude4.3.3 Other is Smartermail2/Declude3. These servers can run perfectly for weeks but for the past few weeks we have been sporadically seeing Declude back up files in the Proc directory. At this time all Declude threads are being used with no processing power being used. It appears Sniffer is not finishing and hogging up all the threads after reviewing the logs. Anyone else experiencing this? Thanks, Chris Patterson, CCNA Network Engineer/Support Manager Rapid Systems --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail
RE: [Declude.JunkMail] Declude/Sniffer Issues
Threads = 500 3 days (approx): 1420731 [Spam: 1392289Virus: 114] Relay High: 0 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 2:53 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues What is your mail volume and how many threads do you have declude configured for? Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, February 19, 2007 2:20 PM Subject: RE: [Declude.JunkMail] Declude/Sniffer Issues When this issue happens which seems more frequent, I do clear out the thousands of left behind files. I am more trying to find a way to prevent it or reason that is happening. And yes, Sniffer does have a hard time operating when it hoses up that bad. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 1:40 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues Chris, I am gathering that you are running Sniffer in persistant mode? I would stop your declude and Sniffer services. Than go into the sniffer directory and remove all of the *.fin, *.svr files. I am not sure what the .xxx files are. I have yet to see those. Than I would check your Sniffer log for any errors. After making sure there are no errors I would restart the Sniffer persistant service and Declude and see if the issue is resolved. It's possible Sniffer could be stepping on itself trying to weed through all those files. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, February 19, 2007 1:03 PM Subject: RE: [Declude.JunkMail] Declude/Sniffer Issues I get this in logs: 02/19/2007 05:16:12.213 23859386 ERROR: External program SNIFFER didn't finish quick enough; terminating. 02/19/2007 05:16:12.213 23859386 Couldn't get external program exit code At this point I see thousands of .xxx and .fin files built up in the sniffer directory. Usually forcing a sniffer update (normally done every hour automatically). From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 9:32 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues What are you seeing the logs that indicates this? Declude will terminate long running external processes and log that it terminated it. Are you seeing those entries? Also, during these times when you look at task manager do you see a bunch of idle sniffer processes? Typically from my experience when you see all the threads being used with very little to no CPU usage it tends to be a DNS issue (i.e slow or not responding DNS server). Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, February 19, 2007 8:47 AM Subject: [Declude.JunkMail] Declude/Sniffer Issues I am running 2 versions of Smartermail Declude both running Sniffer and InvURIBL. One is Smartermail4/Declude4.3.3 Other is Smartermail2/Declude3
RE: [Declude.JunkMail] Declude/Sniffer Issues
This really is a front end gateway to a front end also running declude. Even thought the thread count sounds high even at 500 threads being used in Task Manager, we never hit 100% CPU. 2 - dual-core opterons. 3 - 15K SCSI's in Raid 5, 3 gigs Ram on a DL385. When this happens all 500 threads are being used and the CPU is doing nothing, like 2%. Get a new sniffer update, clean up the directory and it will not give a problem for days and days. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Monday, February 19, 2007 4:08 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues Chris, Reduce your threads setting to a more reasonable number and you should be fine. A number around 50 should suffice, but you can set it, restart Declude and then see if you are redlining. Once you get to redlining when there is a backup, that is pretty much where threads should be set. By going to 500 you are definitely overdoing it and causing other issues. Matt Chris Patterson wrote: Threads = 500 3 days (approx): 1420731 [Spam: 1392289Virus: 114] Relay High: 0 From: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 2:53 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues What is your mail volume and how many threads do you have declude configured for? Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, February 19, 2007 2:20 PM Subject: RE: [Declude.JunkMail] Declude/Sniffer Issues When this issue happens which seems more frequent, I do clear out the thousands of left behind files. I am more trying to find a way to prevent it or reason that is happening. And yes, Sniffer does have a hard time operating when it hoses up that bad. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 1:40 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues Chris, I am gathering that you are running Sniffer in persistant mode? I would stop your declude and Sniffer services. Than go into the sniffer directory and remove all of the *.fin, *.svr files. I am not sure what the .xxx files are. I have yet to see those. Than I would check your Sniffer log for any errors. After making sure there are no errors I would restart the Sniffer persistant service and Declude and see if the issue is resolved. It's possible Sniffer could be stepping on itself trying to weed through all those files. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, February 19, 2007 1:03 PM Subject: RE: [Declude.JunkMail] Declude/Sniffer Issues I get this in logs: 02/19/2007 05:16:12.213 23859386 ERROR: External program SNIFFER didn't finish quick enough; terminating. 02/19/2007 05:16:12.213 23859386 Couldn't get external program exit code At this point I see thousands of .xxx and .fin files built up in the sniffer directory. Usually forcing a sniffer update (normally done every hour automatically). From: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 19, 2007 9:32 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude/Sniffer Issues What are you seeing the logs that indicates this? Declude will terminate long running external processes and log that it terminated it. Are you seeing those entries? Also, during these times when you look at task
RE: [Declude.JunkMail] Manuals
Dean, give me a couple of minutes I will get that squared away Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Friday, February 09, 2007 9:25 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Manuals Does anyone know where the manuals went? If you click on the manuals link on the Declude support page, you download a PDF for Interceptor administration, but not Junkmail, Virus, or Hijack. -- __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Manuals
Sorry about that guys, links are back Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Friday, February 09, 2007 10:02 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Manuals I had these that may suffice for now - -Nick Darin Cox wrote: Ugh. David B., can we get manuals back ASAP? PDFs that we can download and save would be great so we can keep a reference in case something like this happens again, our internet connection is down, etc. Darin. - Original Message - From: Dean Lawrence [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Friday, February 09, 2007 9:25 AM Subject: [Declude.JunkMail] Manuals Does anyone know where the manuals went? If you click on the manuals link on the Declude support page, you download a PDF for Interceptor administration, but not Junkmail, Virus, or Hijack. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SmarterMail Admins - Relay Hole
Are you using the Declude Hijack functionality? That would have quarantined any unauthorized bulk mail from leaving the system. Chris _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists) Sent: Wednesday, February 07, 2007 11:41 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] SmarterMail Admins - Relay Hole Well, might be news to you but Imail has the same problem. There was discussion about this on the Imail list awhile back and IIRC Kevin said it is now on the list of features to be added. John T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Jaworski Sent: Wednesday, February 07, 2007 6:30 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] SmarterMail Admins - Relay Hole We have been using Declude, Sniffer and invURIBL for years now with great success. But yesterday we got bit by a phish attack through SmarterMail. They used SMPT authentication to bypass all the time and money we spent on defenses against the bad guys. The root of the problem: SmarterMail is lacking simple password rules. For more of the story see: http://forums.smartertools.com/forums/27627/ShowThread.aspx#27627 Michael --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Slipping through Declude
This has been addressed in 4.3.23, later today we will be releasing 4.3.30 Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Monday, February 05, 2007 9:14 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Slipping through Declude John, In text is below: What version of Declude? 4.3.16 Is that the entire message? Yes, I attached 3 message headers Have you reviewed the IMail SMTP log for the message, and check of a queue run just happened to fire at that time? No smtp or Decludeproc restarts in log. What is unique is that all 4 messages contained the same body although from different sources. Still awaiting Linda's response at Declude. Thanks, Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Saturday, February 03, 2007 1:09 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Slipping through Declude It has been rare, although not uncommon, that from time to time I will see emails slip through and not scanned by Declude, however, today I have gotten 5 in a row carrying the same, or similar, body information and no insertion of X-tags. I have attached a header that illustrates this. Is anyone else seeing this same type of email come through your system unscanned? I have sent this off to Declude Support for further looks. -Keith --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] all_list.dat ?
It has been requested of Engineering that a new all_list.dat be build ASAP. You should have this in your hands soon. Chris A. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, January 09, 2007 4:30 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] all_list.dat ? David (or any Declude people that may be reading), Any chance of seeing a new all_list.dat any time soon, considering the current one has a date of 6 Jul 06, and considering the additional input from this recent thread? I'm starting to see false positives caused by weights I previously gave to IANA Reserved and RIPE Unlisted. Gary Original Message From: Jay Sudowski - Handy Networks LLC [EMAIL PROTECTED] Sent: Thursday, January 04, 2007 5:57 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] [IANA Reserved] ? Indeed. When we obtained our own IP space from ARIN, it was from 72/8, which had been released only about 6 months prior to it being assigned to us. You wouldn't believe the number of networks that were running with 72/8 in their bogons list and were entirely blocking traffic from our network... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Thursday, January 04, 2007 3:47 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] [IANA Reserved] ? I would be very careful with this. IANA just released (I believe in October) 96/8, 97/8, 98/8, 99/8. With the all_list.dat not being updated frequently I would tred very lightly in this area. Part of 96/8 has been handed out. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: S.J.Stanaitis [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Thursday, January 04, 2007 3:29 PM Subject: RE: [Declude.JunkMail] [IANA Reserved] ? Nice. Thanks, Sam SJ.Stanaitis - Network Administrator Decorative Product Source E-commerce Network -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Thursday, January 04, 2007 3:16 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] [IANA Reserved] ? sending hop only: COUNTRY 0 IS *R or all hops: COUNTRIES 0 CONTAINS *R - Original Message - From: S.J.Stanaitis [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Thursday, January 04, 2007 1:55 PM Subject: RE: [Declude.JunkMail] [IANA Reserved] ? Holy [EMAIL PROTECTED], that answers one question! Any idea how to incorporate the IANA Reserved thing into Declude? Thanks, Sam SJ.Stanaitis - Network Administrator Decorative Product Source E-commerce Network -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Thursday, January 04, 2007 2:37 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] [IANA Reserved] ? Here are my december totals for the odd-balls (COUNTRY IS test) Country Name CountOfMessageID DEL SPAM HELD SPAM Poss SPAM OK APNIC Unlisted 97 97 0 0 0 ARIN Unlisted 1426 1395 12 1 18 Central/South America 89 89 0 0 0 European Union 1804 1674 8 1 121 IANA Reserved 11677 11428 91 118 39 Multi-Regional 23 19 1 1 2 RIPE Unlisted 1332 1330 1 1 0 Unknown 4018 3938 13 3 64 # # Special Codes # #*1 Multi-Regional #*2 Europe #*3 North America #*4 Central/South America #*5 Pacific Rim #*A ARIN Unlisted (North America/South Africa) #*B Public Data Network #*E RIPE Unlisted (Europe, North Africa, Middle East) #*I Private IP #*L Loopback #*M Multicast #*P APNIC Unlisted (Asia Pacific) #*R IANA Reserved #*U Unknown - Original Message - From: S.J.Stanaitis [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Thursday, January 04, 2007 1:02 PM Subject: [Declude.JunkMail] [IANA Reserved] ? I currently tag each incoming email from a country other than the US (with few exceptions) with a weight of 10. Some emails come in with [IANA Reserved] in the X-Country-Chain header and as such these emails (originating in places like Amsterdam, etc) aren't affected by the FILTER-COUNTRY filter. Any way to add a weight to those IP's too? Do American IP's show up as IANA Reserved ever? Thanks, Sam SJ.Stanaitis - Network Administrator Decorative Product Source E-commerce Network --- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
[Declude.JunkMail] MAIBOX action problem... HELP!
Greetings all. Happy New Year.We just upgraded from a "ROUTETO [EMAIL PROTECTED]" to "MAILBOX SPAM". We are having a problem with the MAILBOX action and aliases. It works great for local users, however, Remote aliases like [EMAIL PROTECTED] are getting translated into [EMAIL PROTECTED] How can I fix this??? We are eventually going to get ourselves onto a blacklist. HELP!! Thanks!-Chris Anton ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Undocumented Directive 4.x
Dave maybe we should add this to the next set of release notes!! Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Monday, December 04, 2006 12:58 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Undocumented Directive 4.x Just an FYI you may find it useful, in the global.cfg: BLKLST ON Writes a text file to the \spool\blklst.txt containing the IP and weight of emails eg. 1.1.1.1 23 2.2.2.2 7 David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] AVG Questions
Within the \Declude directory you will see a file called diags.txt, that will show you the Declude version you are running. Within that directory you will see a scanners subdirectory. There are usually 4 or 5 files that make up the AVG incremental update process. If one of those files has the days date on it, it has been currently updated. Also everytime you restart the decludeproc service AVG will look to our update server for any updates as well as authenticate your version of Declude. Keith, call any time!! Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Saturday, December 30, 2006 11:04 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] AVG Questions Support, What is the best way to tell what signature version I am running with the onboard AVG engine? Also, how do I manually pull down a signature if I need to update before the automatic download interval? Thanks for the aid. Keith --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] AVG Questions
Restarting the proc will cause your client to check for the update, if one is not available, then, ... Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Saturday, December 30, 2006 2:00 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] AVG Questions PS: restarting DecludeProc did not pull any new update. So if you're right that would imply that AVG has not produced an update in almost 25 hours. Ouch! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Asaro Sent: Saturday, December 30, 2006 11:54 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] AVG Questions Within the \Declude directory you will see a file called diags.txt, that will show you the Declude version you are running. Within that directory you will see a scanners subdirectory. There are usually 4 or 5 files that make up the AVG incremental update process. If one of those files has the days date on it, it has been currently updated. Also everytime you restart the decludeproc service AVG will look to our update server for any updates as well as authenticate your version of Declude. Keith, call any time!! Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Saturday, December 30, 2006 11:04 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] AVG Questions Support, What is the best way to tell what signature version I am running with the onboard AVG engine? Also, how do I manually pull down a signature if I need to update before the automatic download interval? Thanks for the aid. Keith --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] ICS 2006 Recommended Dictionary Attack Settings?
What are your recommended values for the dictionary attack and other new security settings in ICS? Thanks. -Chris ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] Re: [Declude.JunkMail] 2006 Upgrade Webmail Problem
Matt, You Rock... worked like a champ. Too bad Ipswitch didn't put that in the install readme. -Chris-Original Message-From: "Matt" [EMAIL PROTECTED]Sent 12/26/2006 10:30:51 AMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] 2006 Upgrade Webmail ProblemIn the IMAP service, turn off force subscribe and it should be fine.MattChris Anton wrote: Hi all. Glad that Ipswitch has the day off... too bad I don't. We upgraded to 2006.1 from 8.22 this weekend. I am now getting a problem with sub mail boxes in web mail... they don't show new messages, and I can't view the messages. Tried removing the .xml, .srt and .uid files to no avail. Checked the perms, and everything seems to be fine there... This isn't affecting main mail boxes, just subs. Found a "Object reference not set to an instance of an object." when attempting to reply to these sub mail box emails. The mail boxes don't even show the number of new messages. Any thoughts Please help Best Regards, Chris Anton Web Solutions, Inc. Tel: 203-235- x25 [EMAIL PROTECTED] www.websolutions.net --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] New Version 4.3.2.3
That seems strange Darrell, I am not seeing that behavior described with this version. I have just verified this on two servers. I would ask if you are positive that it is installed in the correct directory but you have been using Declude much longer than myself and I am sure you have checked this ;) I am noticing that when restarting the Declude Proc service it does not generate a diags.txt file anymore. Is this normal behavior to be expected with this version. Darrell Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Sunday, December 17, 2006 10:44 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] New Version 4.3.2.3 Herb, Have you actually opened the file and verified that it says the new version in the file? I have seen this same behavior on several servers. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Herb Guenther [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Sunday, December 17, 2006 9:09 AM Subject: Re: [Declude.JunkMail] New Version 4.3.2.3 If it installed correctly it will. It may be putting it in a different directory, in which case it is probably using the wrong configs as well. Herb Darrell ([EMAIL PROTECTED]) wrote: I am noticing that when restarting the Declude Proc service it does not generate a diags.txt file anymore. Is this normal behavior to be expected with this version. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- Herb Guenther Lanex, LLC www.lanex.com (262)789-0966x102 Office (262)780-0424 Direct This e-mail is confidential and is for the use of the intended recipient(s)only. If you are not an intended recipient please advise us of our error by return e-mail then delete this e-mail and any attached files. You may not copy, disclose or use the contents in any way. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] New Version 4.3.2.3
Actually Darrell I hadn't checked this on a server running Imail?? What are you using? Darrell ([EMAIL PROTECTED]) wrote: I am noticing that when restarting the Declude Proc service it does not generate a diags.txt file anymore. Is this normal behavior to be expected with this version. Darrell Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Sunday, December 17, 2006 10:44 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] New Version 4.3.2.3 Herb, Have you actually opened the file and verified that it says the new version in the file? I have seen this same behavior on several servers. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Herb Guenther [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Sunday, December 17, 2006 9:09 AM Subject: Re: [Declude.JunkMail] New Version 4.3.2.3 If it installed correctly it will. It may be putting it in a different directory, in which case it is probably using the wrong configs as well. Herb Darrell ([EMAIL PROTECTED]) wrote: I am noticing that when restarting the Declude Proc service it does not generate a diags.txt file anymore. Is this normal behavior to be expected with this version. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- Herb Guenther Lanex, LLC www.lanex.com (262)789-0966x102 Office (262)780-0424 Direct This e-mail is confidential and is for the use of the intended recipient(s)only. If you are not an intended recipient please advise us of our error by return e-mail then delete this e-mail and any attached files. You may not copy, disclose or use the contents in any way. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] What is the deal with security suite?
Sam, Documentation is on the top of the list to fix for the new year. I would be more than happy to get your new version installed with you. Contact me directly and let me know what time Monday morning works for you, I will call you then. Running Imail 8.22, was running the last of the 3.x series of Declude. Took the promotional offer to the latest version of the Security Suite for $199 as my old contract expired. Attempted upgrade - no luck. Attempted fresh installation - no luck. Reverted to prior version. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of S.J.Stanaitis Sent: Sunday, December 17, 2006 11:06 AM To: declude.junkmail@declude.com; declude.virus@declude.com Cc: [EMAIL PROTECTED] Subject: [Declude.JunkMail] What is the deal with security suite? Running Imail 8.22, was running the last of the 3.x series of Declude. Took the promotional offer to the latest version of the Security Suite for $199 as my old contract expired. Attempted upgrade - no luck. Attempted fresh installation - no luck. Reverted to prior version. It's noteworthy that prior to installing I did make an attempt to locate documentation for the installation of this software including the upgrade from an old version of Declude. Where is the documentation for this software? The Manuals section on the website is next to useless. I'd like to get this software up and running, but the apparent complete lack of documentation has made it impossible. Sam --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Why are these being whitelisted?
Question Authority.. Chris _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharyn Schmidt Sent: Thursday, December 14, 2006 1:44 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Why are these being whitelisted? shrug IF it is a mistake, then my boss is the one that is making it I just do what I'm told! :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, December 14, 2006 1:31 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Why are these being whitelisted? That has to be a mistake. For example, if a company were to use an external filtering service, they would have no means of archiving spam that had been filtered out. Also, with spam currently at 90% of all incoming email, it's ludicrous to have to archive 10x the actual legitimate email volume in order to be compliant. Darin. - Original Message - From: Sharyn mailto:[EMAIL PROTECTED] Schmidt To: declude.junkmail@declude.com Sent: Thursday, December 14, 2006 12:47 PM Subject: RE: [Declude.JunkMail] Why are these being whitelisted? We are required to archive ALL incoming mail. The Sarbanes-Oxley Act does not differentiate between legitimate mail and spam :) I did remove the whitelist to. I went back to using the masterbkup.junkmail file and just setting all actions to ignore. I just wanted to know what had caused this, so in the future it doesn't happen again. Thanks! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, December 14, 2006 12:20 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Why are these being whitelisted? You're required to archive spam? I can't imagine that. I would remove the WHITELIST TO. Note that if any of the recipients are whitelisted, then all will effectively be whitelisted for that message. Darin. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] 8.22 to 2006 Upgrade
Hi... Checked the archives, but didn't find anything definitive. What version should / need we be running to upgrade to 2006. Any special considerations? We are running Declude 2.0.6 Junkmail Pro (with sniffer), Virus Standard. Thanks -Chris --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude 4.3.24 AVG Interim
Serge, If you are running 4.3.23 then AVG built in is working. You won't see it referenced in the virus.cfg. You'll see it as scanner zero(0) in a virus debug log. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge Sent: Tuesday, December 12, 2006 3:16 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude 4.3.24 AVG Interim David, I am on 4.3.23, but have always used the upgrade version so my built in anti virus is not installed I need help installing it whithout changing my other configs is there a link or should i open a support ticket ? TIA - Original Message - From: David Barker [EMAIL PROTECTED] To: declude.junkmail@declude.com; declude.virus@declude.com Sent: Tuesday, December 12, 2006 5:21 PM Subject: [Declude.JunkMail] Declude 4.3.24 AVG Interim This version is available as an interim release, for those of you who have the login to interim, it is the same, be sure to download your appropriate decludeproc and the avgsdk.dll. If want to try the interim release email me directly. David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] blklst ON statistics...
Place it in the Declude.cfg, restart the proc service What was the trick to getting the blacklist text file working? I haven't been able to get it to output anything. Running Declude 4.3.23 for Smartermail. I put the BLKLST ON in the global.cfg, right place? Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ken Weise Sent: Tuesday, December 12, 2006 3:08 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] blklst ON statistics... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems Eng. (Karl Drugge) Sent: Tuesday, December 12, 2006 9:14 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] blklst ON statistics... Interesting.. I ran some scripts against the blklst.txt file, and it shows I am already blocking the most active connections. About the only thing I can really see, is that the SPAM is coming from hundreds of IP's, with only a few from each one. I was kind of shocked by the extent of it, figuring that I'd see numerous IP's over 100 in a 12 hour period. But 8300+ IP's, and only 10 or so above 10 connections. Wow. Talk about distributed ! Script attached, PERL again, edit the top to fit your environment, as usual. Output below.. Total IP's : 8381 HitsIP Address HostName 54 61.50.229.194 61.50.229.194 --- 25 70.108.157.156 pool-70-108-157-156.washdc.east.verizon.net --- 23 82.173.173.230 ip230-173-173-82.adsl2.versatel.nl --- 22 151.49.24.185 adsl-ull-185-24.49-151.net24.it --- 22 88.154.136.186 bzq-88-154-136-186.red.bezeqint.net --- 14 202.175.165.198n17z165l198.broadband.ctm.net --- 12 66.151.234.151 ccm14.constantcontact.com --- 11 59.115.100.197 59-115-100-197.dynamic.hinet.net --- 11 66.151.234.153 ccm16.constantcontact.com --- 8 201.9.194.141 201009194141.user.veloxzone.com.br --- 8 213.207.242.147 213.207.242.147 --- 8 220.133.25.238 220-133-25-238.hinet-ip.hinet.net --- 8 66.91.4.132 cpe-66-91-4-132.hawaii.res.rr.com --- 7 169.139.180.120 mail.scps.k12.fl.us --- 7 202.175.95.171 z95l171.static.ctm.net --- 7 219.155.156.139 hn.kd.pix --- 7 66.104.31.195 ip66-104-31-195.z31-104-66.customer.algx.net --- 6 125.33.74.167 125.33.74.167 --- 6 208.254.21.131 crozier.missingkids.com --- 6 222.217.118.250 222.217.118.250 --- 6 59.45.98.25559.45.98.255 --- Karl Drugge B.S.I.T., A.S., M.C.S.E. (NT 4, 2k, 2k3), M.C.S.A. (2k + 2k3), C.C.N.A., Network+, A+ I dream of the day when I will learn to stop asking questions to which I will regret learning the answers ( Roy Greenhilt, Order of the Stick ) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: SmarterMail's website
I cannot navigate to that address either.. Chris _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Graveen Sent: Monday, December 04, 2006 12:40 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: SmarterMail's website Is anyone else having trouble getting to SmarterMail's web site (www.smartertools.com http://www.smartertools.com/ )? I have been unable to access it since Sunday morning. Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Way to delete spam over a certain weight?
I am running Smartermail2.6 with Declude 3.11. We are slaying some serious spam, (Total: 4129440 [Spam: 4029758 Virus: 626]), so much we can no longer complete searches for customers who want their spam zipped and sent to them each evening in less than 4 hours. I don't want to delete for individual tests but would rather delete spam with an absurd weight on it. Any ideas for this? Thanks, Chris Patterson, CCNA Network Engineer/Support Manager Rapid Systems --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Way to delete spam over a certain weight?
Seems to be working like a charm, thanks for the advice. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Green dfn Systems Sent: Friday, December 01, 2006 12:56 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Way to delete spam over a certain weight? Chris, I have found that anything more than double my hold / spam mailbox weight is safe to delete. Your results may vary, so you might start at 3 or 4 times hold weight at first, then over a period of days or weeks, use weightrange to move the top few points before delete to a review acct for a while. If it seems all spam, then lower your Delete score, and review the next few points. When you start seeing legit mail in your review range, double check the next one up. Bill Green dfn Systems - Original Message - From: Chris Patterson mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Friday, December 01, 2006 10:03 AM Subject: [Declude.JunkMail] Way to delete spam over a certain weight? I am running Smartermail2.6 with Declude 3.11. We are slaying some serious spam, (Total: 4129440 [Spam: 4029758 Virus: 626]), so much we can no longer complete searches for customers who want their spam zipped and sent to them each evening in less than 4 hours. I don't want to delete for individual tests but would rather delete spam with an absurd weight on it. Any ideas for this? Thanks, Chris Patterson, CCNA Network Engineer/Support Manager Rapid Systems --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude and Bayesian Filtering
Kevin The next release expected to come out for Declude Security Suite includes an improved CommTouch Engine, you are going to like it.. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Friday, November 17, 2006 12:09 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Declude and Bayesian Filtering Have you looked at the Commtouch ZEROHOUR add in. It has done wonders for us. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Cummins Sent: Friday, November 17, 2006 8:22 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Declude and Bayesian Filtering I'd really like to get into Bayesian filtering. Declude / Message Sniffer / invURIBL just aren't catching enough for me. ...are there any plans to include it in the Declude product? ...any third-party products available? I suppose I could do it with a gateway concept like PirateFish or IMGate, and I know that SmarterMail and iMail both offer options (I have a mix of both kinds in my network) but I'd really like to see something offered at the Declude level so I can have more uniform / better control over the whole process. Any ideas? Feel free to hit me with a clue bat. :) -- Michael Cummins --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Paid Subscription Black Lists
Hi. Any one have any good luck with any paid subscriptions? We have been hit hard lately, and are willing to dish out some dough to get our stats back up. Please advise. Thanks! -Chris --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] How long is each test taking?
Thanks for the feedback! I will definatly make some updates to our config and also run on debug level. I probably should update to the new Sniffer and run both declude and message sniffer in persistent mode. -Chris --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] How long is each test taking?
Hello... We are using declude 2.somethign... we are pegged at 100% processor usage and are wondering what is the best way to determine how long each test takes. I am nervous to change the log level because we handle 100k per day. Please advise. Thanks! -Chris --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] What Blacklists are you using?
I am getting timeouts on all the blacklists below... what are people currently using for their blacklists??? I haven't updated my blacklists in almost a year. Please adivse. Thanks! -Chris dnsbl.ahbl.org list.dsbl.org sbl.spamhaus.org blackholes.intersil.net sbl.csma.biz blacklist.spambag.org blackholes.five-ten-sg.com dnsbl.jammconsulting.com dsn.rfc-ignorant.org abuse.rfc-ignorant.org postmaster.rfc-ignorant.org bulk.rhs.mailpolice.com porn.rhs.mailpolice.com fraud.rhs.mailpolice.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] What Blacklists are you using?
Yeah, the NETSOL thing screwed us earlier... turned off all our blacklists for now. Just wondering what the recommended blacklists were. Thought I would update our blacklists while I was in there. -Chris -- Original Message -- From: David Barker [EMAIL PROTECTED] Reply-To: declude.junkmail@declude.com Date: Tue, 17 Oct 2006 17:05:28 -0400 Could you be having a DNS issue ?? Also There is a widespread DNS outage at Network Solutions just FYI David Barker Director of Product Development Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Anton Sent: Tuesday, October 17, 2006 4:55 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] What Blacklists are you using? I am getting timeouts on all the blacklists below... what are people currently using for their blacklists??? I haven't updated my blacklists in almost a year. Please adivse. Thanks! -Chris dnsbl.ahbl.org list.dsbl.org sbl.spamhaus.org blackholes.intersil.net sbl.csma.biz blacklist.spambag.org blackholes.five-ten-sg.com dnsbl.jammconsulting.com dsn.rfc-ignorant.org abuse.rfc-ignorant.org postmaster.rfc-ignorant.org bulk.rhs.mailpolice.com porn.rhs.mailpolice.com fraud.rhs.mailpolice.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] ZEROHOUR - stopped working
Title: Message Kevin, it has to do with how it was integrated, I can forward the request to the appropriate parties.. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Sunday, October 15, 2006 12:50 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] ZEROHOUR - stopped working I did all that except the debug part. I will do that later today and report back. Are you saying that if ZEROHOUR is triggered on a message it will not show in Log HIGH? If this is the case then please tweak the logging level HIGH to show ZEROHOUR hits. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Sunday, October 15, 2006 7:50 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] ZEROHOUR - stopped working Kevin, Make sure the ZEROHOUR directive is in your global, on a 10 14 16 weight scale we use this test with a default weight 14. Restart the proc and you should be ok. You can verify its operation by setting the global to debug and double checking your logs. I double checked your Host record the test is enabled on our end.. ZEROHOUR 14 Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Sunday, October 15, 2006 2:32 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] ZEROHOUR - stopped working We supposedly had it activated today and I have not seen it hi on one email all day. I was wondering if there was a problem. I thought I would call Declude on Monday. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Saturday, October 14, 2006 8:50 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] ZEROHOUR - stopped working Hi - It looks like my ZEROHOUR test just stopped working late yeaterday afternoon. I did not make any configuration changes. Is anyone else experiencing the same thing ?? Jeff --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] change to the Authentication system.
When troubleshooting connectivity from your host to the Declude Key System, there has been a change in the return code you will see. While performing the NSLOOKUP to identify connectivity you would get a return code of 1.1.1.1 if all communication was successful. Please be advised you will now be looking for a successful return code of 0.0.0.1. Anything other than this code indicates there is not connectivity between the two systems. There is a KB located here (http://support.declude.com/Customer/KBArticle.aspx?articleid=57) that describes this test. Thanks.. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] ZEROHOUR - stopped working
Title: Message Kevin, Make sure the ZEROHOUR directive is in your global, on a 10 14 16 weight scale we use this test with a default weight 14. Restart the proc and you should be ok. You can verify its operation by setting the global to debug and double checking your logs. I double checked your Host record the test is enabled on our end.. ZEROHOUR 14 Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Sunday, October 15, 2006 2:32 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] ZEROHOUR - stopped working We supposedly had it activated today and I have not seen it hi on one email all day. I was wondering if there was a problem. I thought I would call Declude on Monday. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Saturday, October 14, 2006 8:50 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] ZEROHOUR - stopped working Hi - It looks like my ZEROHOUR test just stopped working late yeaterday afternoon. I did not make any configuration changes. Is anyone else experiencing the same thing ?? Jeff --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] ZEROHOUR - stopped working
Your host record on the Declude side shows that CommTouch is enabled. Place your loglevel to DEBUG and verify the test is being called. You can send me the logs if youd like. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Saturday, October 14, 2006 11:50 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] ZEROHOUR - stopped working Hi - It looks like my ZEROHOUR test just stopped working late yeaterday afternoon. I did not make any configuration changes. Is anyone else experiencing the same thing ?? Jeff --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] picture spam
Guys, Commtouch hasnt missed any, stop making things hard on yourselves.. Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, October 11, 2006 5:17 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam Sorbs-DUL and NJABL Dynablock look to be the best. Although they miss lots. 5-10's has been discontinued. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 3:53 PM Subject: RE: [Declude.JunkMail] picture spam Thanks all for the various suggestions. Agreed- combo is the way to use that test, for sure. A bit OT, but what is the popular and accurate DUL database these days? How accurate is fiveten at DUL lookups? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, October 11, 2006 12:49 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam I combo thegraphics hit (jpg, gif or png) with: 1. bad DNS - None or timeout 2. bad language (eastern European iso-8859-2) or Cyrillic (koi8-r or iso-8859-5), etc 3. cmdspace 4. good DUL IP lists/tests 5. having forged your local domain. I still get 5-10 a day. It is a pain. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 12:08 PM Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] picture spam
No, I am making the assumption you will not have to deal with anymore picture spam if you use CommtouchYou can fiddle with filters, weights and false positives if youd like. I have been an advocate of Commtouch since we starting using it, matter of fact I have yet to get two pieces of spam since we started using the Gateway w/Commtouch combo. In four months I have seen just one false positive. Just my observation though!! Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, October 12, 2006 9:39 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam You're making an assumption that everyone uses Commtouch. Darin. - Original Message - From: chris To: declude.junkmail@declude.com Sent: Thursday, October 12, 2006 9:15 AM Subject: RE: [Declude.JunkMail] picture spam Guys, Commtouch hasnt missed any, stop making things hard on yourselves.. Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, October 11, 2006 5:17 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam Sorbs-DUL and NJABL Dynablock look to be the best. Although they miss lots. 5-10's has been discontinued. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 3:53 PM Subject: RE: [Declude.JunkMail] picture spam Thanks all for the various suggestions. Agreed- combo is the way to use that test, for sure. A bit OT, but what is the popular and accurate DUL database these days? How accurate is fiveten at DUL lookups? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, October 11, 2006 12:49 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam I combo thegraphics hit (jpg, gif or png) with: 1. bad DNS - None or timeout 2. bad language (eastern European iso-8859-2) or Cyrillic (koi8-r or iso-8859-5), etc 3. cmdspace 4. good DUL IP lists/tests 5. having forged your local domain. I still get 5-10 a day. It is a pain. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 12:08 PM Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] picture spam
Oops, I meant implement this or not.. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Thursday, October 12, 2006 10:11 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam A one time cost of 195.00 is not a large portion of your revenue and it is your option to not implement this or not Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Thursday, October 12, 2006 9:57 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam ...and give a large part of our revenue to Commtouch? Provide a feasible way to justify the additional costs for our existing customers and service contracts! THEN we could talk about Commtouch. BTW: even if it's hard work to maintain a reliable spam filter it's not an impossible thing. years of contribution from our own researches, creation of text filters, publication of new spam and filter signs, developement of - in declude long time and still missing - additional external tests allowed and still allows us to have reliable filters and no image spam in my inbox. The question is why Declude has become a competitor of our work from what it was some years ago: an excellent tool for us admins to do our own hard work. Looking at your pricing I can see anywhere limitations based on users. What if I have a single gatewayed domain? Markus From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Thursday, October 12, 2006 3:15 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam Guys, Commtouch hasnt missed any, stop making things hard on yourselves.. Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, October 11, 2006 5:17 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam Sorbs-DUL and NJABL Dynablock look to be the best. Although they miss lots. 5-10's has been discontinued. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 3:53 PM Subject: RE: [Declude.JunkMail] picture spam Thanks all for the various suggestions. Agreed- combo is the way to use that test, for sure. A bit OT, but what is the popular and accurate DUL database these days? How accurate is fiveten at DUL lookups? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, October 11, 2006 12:49 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam I combo thegraphics hit (jpg, gif or png) with: 1. bad DNS - None or timeout 2. bad language (eastern European iso-8859-2) or Cyrillic (koi8-r or iso-8859-5), etc 3. cmdspace 4. good DUL IP lists/tests 5. having forged your local domain. I still get 5-10 a day. It is a pain. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 12:08 PM Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing
RE: [Declude.JunkMail] picture spam
A one time cost of 195.00 is not a large portion of your revenue and it is your option to not implement this or not Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Thursday, October 12, 2006 9:57 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam ...and give a large part of our revenue to Commtouch? Provide a feasible way to justify the additional costs for our existing customers and service contracts! THEN we could talk about Commtouch. BTW: even if it's hard work to maintain a reliable spam filter it's not an impossible thing. years of contribution from our own researches, creation of text filters, publication of new spam and filter signs, developement of - in declude long time and still missing - additional external tests allowed and still allows us to have reliable filters and no image spam in my inbox. The question is why Declude has become a competitor of our work from what it was some years ago: an excellent tool for us admins to do our own hard work. Looking at your pricing I can see anywhere limitations based on users. What if I have a single gatewayed domain? Markus From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Thursday, October 12, 2006 3:15 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam Guys, Commtouch hasnt missed any, stop making things hard on yourselves.. Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, October 11, 2006 5:17 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam Sorbs-DUL and NJABL Dynablock look to be the best. Although they miss lots. 5-10's has been discontinued. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 3:53 PM Subject: RE: [Declude.JunkMail] picture spam Thanks all for the various suggestions. Agreed- combo is the way to use that test, for sure. A bit OT, but what is the popular and accurate DUL database these days? How accurate is fiveten at DUL lookups? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, October 11, 2006 12:49 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam I combo thegraphics hit (jpg, gif or png) with: 1. bad DNS - None or timeout 2. bad language (eastern European iso-8859-2) or Cyrillic (koi8-r or iso-8859-5), etc 3. cmdspace 4. good DUL IP lists/tests 5. having forged your local domain. I still get 5-10 a day. It is a pain. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 12:08 PM Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] picture spam
Markus I am not trying to negate anybodys hard work here developing methods to try and stop spam, I am simply saying that there is an external test that works. Period! Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Thursday, October 12, 2006 9:57 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam ...and give a large part of our revenue to Commtouch? Provide a feasible way to justify the additional costs for our existing customers and service contracts! THEN we could talk about Commtouch. BTW: even if it's hard work to maintain a reliable spam filter it's not an impossible thing. years of contribution from our own researches, creation of text filters, publication of new spam and filter signs, developement of - in declude long time and still missing - additional external tests allowed and still allows us to have reliable filters and no image spam in my inbox. The question is why Declude has become a competitor of our work from what it was some years ago: an excellent tool for us admins to do our own hard work. Looking at your pricing I can see anywhere limitations based on users. What if I have a single gatewayed domain? Markus From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Thursday, October 12, 2006 3:15 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam Guys, Commtouch hasnt missed any, stop making things hard on yourselves.. Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, October 11, 2006 5:17 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam Sorbs-DUL and NJABL Dynablock look to be the best. Although they miss lots. 5-10's has been discontinued. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 3:53 PM Subject: RE: [Declude.JunkMail] picture spam Thanks all for the various suggestions. Agreed- combo is the way to use that test, for sure. A bit OT, but what is the popular and accurate DUL database these days? How accurate is fiveten at DUL lookups? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, October 11, 2006 12:49 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam I combo thegraphics hit (jpg, gif or png) with: 1. bad DNS - None or timeout 2. bad language (eastern European iso-8859-2) or Cyrillic (koi8-r or iso-8859-5), etc 3. cmdspace 4. good DUL IP lists/tests 5. having forged your local domain. I still get 5-10 a day. It is a pain. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 12:08 PM Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] picture spam
OK! So any one who can use CommTouch, give it a try. If youre a service provider and purchase Interceptor you too can give it a whirl, really what else can I sayI am not sure of the details behind our agreement with CommTouch but obviously a lot of you here are hindered by this and cannot use the product. I should have taken that into consideration before I offered a small percentage of you the advise of use CommTouch. Sorry!! Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Thursday, October 12, 2006 11:52 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam Chris, According to Decludes web site, any business that provides email to customers cant use commtouch. That pretty well rules out most of the people on this list. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Thursday, October 12, 2006 9:11 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam A one time cost of 195.00 is not a large portion of your revenue and it is your option to not implement this or not Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Thursday, October 12, 2006 9:57 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam ...and give a large part of our revenue to Commtouch? Provide a feasible way to justify the additional costs for our existing customers and service contracts! THEN we could talk about Commtouch. BTW: even if it's hard work to maintain a reliable spam filter it's not an impossible thing. years of contribution from our own researches, creation of text filters, publication of new spam and filter signs, developement of - in declude long time and still missing - additional external tests allowed and still allows us to have reliable filters and no image spam in my inbox. The question is why Declude has become a competitor of our work from what it was some years ago: an excellent tool for us admins to do our own hard work. Looking at your pricing I can see anywhere limitations based on users. What if I have a single gatewayed domain? Markus From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Thursday, October 12, 2006 3:15 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam Guys, Commtouch hasnt missed any, stop making things hard on yourselves.. Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, October 11, 2006 5:17 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam Sorbs-DUL and NJABL Dynablock look to be the best. Although they miss lots. 5-10's has been discontinued. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 3:53 PM Subject: RE: [Declude.JunkMail] picture spam Thanks all for the various suggestions. Agreed- combo is the way to use that test, for sure. A bit OT, but what is the popular and accurate DUL database these days? How accurate is fiveten at DUL lookups? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, October 11, 2006 12:49 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam I combo thegraphics hit (jpg, gif or png) with: 1. bad DNS - None or timeout 2. bad language (eastern European iso-8859-2) or Cyrillic (koi8-r or iso-8859-5), etc 3. cmdspace 4. good DUL IP lists/tests 5. having forged your local domain. I still get 5-10 a day. It is a pain. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 12:08 PM Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail
RE: [Declude.JunkMail] picture spam
The option is there, lets not kid ourselves, for you issue is cost, I can understand that.. Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Thursday, October 12, 2006 1:16 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam Chris, you need to learn what your company is doing. As a hosting service provider, I am specifically prevented from using CommTouch unless I want to spend several thousand dollars using the Declude gateway product. $195 is quite acceptable if I was allowed to pay it. Sorry to burst your bubble but I am not being allowed the option to implement or not John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Thursday, October 12, 2006 7:11 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam A one time cost of 195.00 is not a large portion of your revenue and it is your option to not implement this or not Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Thursday, October 12, 2006 9:57 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam ...and give a large part of our revenue to Commtouch? Provide a feasible way to justify the additional costs for our existing customers and service contracts! THEN we could talk about Commtouch. BTW: even if it's hard work to maintain a reliable spam filter it's not an impossible thing. years of contribution from our own researches, creation of text filters, publication of new spam and filter signs, developement of - in declude long time and still missing - additional external tests allowed and still allows us to have reliable filters and no image spam in my inbox. The question is why Declude has become a competitor of our work from what it was some years ago: an excellent tool for us admins to do our own hard work. Looking at your pricing I can see anywhere limitations based on users. What if I have a single gatewayed domain? Markus From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Thursday, October 12, 2006 3:15 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam Guys, Commtouch hasnt missed any, stop making things hard on yourselves.. Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, October 11, 2006 5:17 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam Sorbs-DUL and NJABL Dynablock look to be the best. Although they miss lots. 5-10's has been discontinued. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 3:53 PM Subject: RE: [Declude.JunkMail] picture spam Thanks all for the various suggestions. Agreed- combo is the way to use that test, for sure. A bit OT, but what is the popular and accurate DUL database these days? How accurate is fiveten at DUL lookups? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, October 11, 2006 12:49 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam I combo thegraphics hit (jpg, gif or png) with: 1. bad DNS - None or timeout 2. bad language (eastern European iso-8859-2) or Cyrillic (koi8-r or iso-8859-5), etc 3. cmdspace 4. good DUL IP lists/tests 5. having forged your local domain. I still get 5-10 a day. It is a pain. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 12:08 PM Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can
RE: [Declude.JunkMail] picture spam
CommTouch catches them all, I have a filter that can add some weight to image based spam, it may be able to push it over the threshold and at least quarantine it for you. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette Sent: Wednesday, October 11, 2006 1:09 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] picture spam
Sure thing, by default I think you will see the weight of 3, it pretty much will give anything imaged based this score. I would keep it to under 8 to reduce false positives, but there is room to play with the weights and even edit the filter if youd like, enjoy!! Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette Sent: Wednesday, October 11, 2006 1:24 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam Thanks Chris. CommTouch definitely seems to have promise. But for now, Id like to experiment with the filter. Is this something we can have access to? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Wednesday, October 11, 2006 10:14 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam CommTouch catches them all, I have a filter that can add some weight to image based spam, it may be able to push it over the threshold and at least quarantine it for you. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette Sent: Wednesday, October 11, 2006 1:09 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. #EXCEPTIONS TESTSFAILED END CONTAINSMXRATE-ALLOW BODYEND NOTCONTAINS cid: #IMAGES BODY3 CONTAINSsrc=3Dcid: BODY3 CONTAINSsrc=cid: BODY3 CONTAINSimg src=3Dcid: BODY3 CONTAINSsrc='cid: BODY3 CONTAINS/cid: BODY3 CONTAINSContent-Type: image/gif; --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] picture spam
Use commtouch if your not hindered by the license Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Wednesday, October 11, 2006 1:39 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam You should note that this doesn't just catch image spam, but all email with images. So, the weight should be extremely low, if used at all, due to the large % of false positives seen by this filter. Darin. - Original Message - From: chris To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 1:31 PM Subject: RE: [Declude.JunkMail] picture spam Sure thing, by default I think you will see the weight of 3, it pretty much will give anything imaged based this score. I would keep it to under 8 to reduce false positives, but there is room to play with the weights and even edit the filter if youd like, enjoy!! Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette Sent: Wednesday, October 11, 2006 1:24 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam Thanks Chris. CommTouch definitely seems to have promise. But for now, Id like to experiment with the filter. Is this something we can have access to? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Wednesday, October 11, 2006 10:14 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam CommTouch catches them all, I have a filter that can add some weight to image based spam, it may be able to push it over the threshold and at least quarantine it for you. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette Sent: Wednesday, October 11, 2006 1:09 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] picture spam
Exactly !! Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Wednesday, October 11, 2006 1:39 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] picture spam You should note that this doesn't just catch image spam, but all email with images. So, the weight should be extremely low, if used at all, due to the large % of false positives seen by this filter. Darin. - Original Message - From: chris To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 1:31 PM Subject: RE: [Declude.JunkMail] picture spam Sure thing, by default I think you will see the weight of 3, it pretty much will give anything imaged based this score. I would keep it to under 8 to reduce false positives, but there is room to play with the weights and even edit the filter if youd like, enjoy!! Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette Sent: Wednesday, October 11, 2006 1:24 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam Thanks Chris. CommTouch definitely seems to have promise. But for now, Id like to experiment with the filter. Is this something we can have access to? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Wednesday, October 11, 2006 10:14 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] picture spam CommTouch catches them all, I have a filter that can add some weight to image based spam, it may be able to push it over the threshold and at least quarantine it for you. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Marchette Sent: Wednesday, October 11, 2006 1:09 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Determining Declude Processing Times
Be sure that your dns server is specified in your mail server config Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Will Sent: Monday, October 09, 2006 11:27 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Determining Declude Processing Times Sensitivity: Confidential My proc folder gets backed up a lot. Often I upgrade the declude version and it runs good for many months and then I start seeing the same problem again. What is the easiest method to determine the declude processing time takes so long? I need a method to determine which test has such a delay and disable it or remedy it. Will ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: IIS 4 Advisory
Another advisory,, http://www.ibtimes.com/articles/20061009/anti-spam-lawsuit.htm Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Tuesday, October 10, 2006 9:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: IIS 4 Advisory For those of you still running NT 4.0 SP1 with IIS 4 -Original Message- From: VeriSign Customer Support Department [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 10, 2006 07:28 AM Subject: Important Service Notice about your Secure Site Certificate Dear VeriSign SSL Customer: In keeping with industry best practices and to continue providing you world-class SSL security, VeriSign is making an important change to the certificate hierarchy of your Secure Site SSL certificate. Secure Site SSL certificates (1, 2 and 3 year), issued on or after September 7, 2006, will be signed with a new intermediate certificate authority (CA). This new intermediate CA certificate will chain up to the VeriSign Public Certificate Authority (PCA) root that is present in all major web browsers and web servers. Who is affected by this change? --- This change affects only existing and new customers who are using VeriSign Secure Site SSL certificates Customers using IIS web servers: -- If you are using Microsoft IIS 5.0 or 6.0 No action is required when you renew your Secure Site Certificate, since Microsoft IIS 5.0 and 6.0 automatically imports and installs the new intermediate CA certificate. If you are using IIS 4.0(not supported by Microsoft as of December 2004): Please note that you will need to manually install the intermediate CA certificate using a Microsoft tool. For detailed instructions, please go to http://www.verisign.com/support/ssl-certificates-support/page_dev020191.html . Customers using other Web Server (i.e. non-IIS): -- If you are using any non-IIS web server you will have to go through a simple one-time installation of the New CA when you install you renewed Secure Site Certificate. This is consistent with the way VeriSign has been issuing retail Secure Site Pro and Managed PKI for SSL Premium Certificates for the past 2 years, and you will receive the necessary instructions upon issuance of your Secure Site Certificate. For complete details and updates on the Secure Site intermediate CA certificate rollout plan, please see our CA Update: Secure Site and Managed PKI for SSL Standard Certificate advisory at www.verisign.com/support/advisories/page_029264.html Note: This notice is being sent to both the Technical Contact and Corporate Contact listed for the certificate. If you have purchased more than one SSL certificate from VeriSign, you may receive a message like this one for each of your SSL certificates. SSL CERTIFICATE SUPPORT If you have any questions, please visit our SSL Certificates Support web page at: http://www.verisign.com/support/ssl-certificates-support/index.html There you will find a range of support tools to help you including, live chat product advisories, a comprehensive knowledge base, top FAQs, installation instructions and up-to-date contact information: http://www.verisign.com/support/ssl-certificates-support/index.html Thank you, VeriSign Customer Support Department http://www.verisign.com/support/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7
Harry Contact me off the list if you can, I would like to help Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Friday, September 29, 2006 9:15 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Last night at 8:11PM I upgraded from 4.3.7 to 4.3.14 From that point on we stopped catching all spam for these clients that have their own mail server. We just filter their mail for spam and pass it on. I just reverted back to 4.3.7 and now we are catching spam again for them We catch over 4000 spam messages per dayfor one of these clients alone so you can imagine their complaint this morning. Anyone know what would have caused this? Thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7
Harry do you have a declude.cfg after the upgrade Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Friday, September 29, 2006 9:15 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Last night at 8:11PM I upgraded from 4.3.7 to 4.3.14 From that point on we stopped catching all spam for these clients that have their own mail server. We just filter their mail for spam and pass it on. I just reverted back to 4.3.7 and now we are catching spam again for them We catch over 4000 spam messages per dayfor one of these clients alone so you can imagine their complaint this morning. Anyone know what would have caused this? Thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7
Nick, I will definitely post these results, but I have yet to hear from harry, I believe the response from the first user is the solution!!! Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Friday, September 29, 2006 9:55 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Harry, Please post to the list the details - Thanks -Nick chris wrote: Harry Contact me off the list if you can, I would like to help Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Harry Vanderzand Sent: Friday, September 29, 2006 9:15 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Last night at 8:11PM I upgraded from 4.3.7 to 4.3.14 From that point on we stopped catching all spam for these clients that have their own mail server. We just filter their mail for spam and pass it on. I just reverted back to 4.3.7 and now we are catching spam again for them We catch over 4000 spam messages per dayfor one of these clients alone so you can imagine their complaint this morning. Anyone know what would have caused this? Thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7
Anyone using declude as a gateway be aware of the following change in 4.3.14 Spam checking for inbound/outbound scanning can be turned on/ off. Located as a directive in the global.cfg file, below are the default settings. OUTBOUNDSCANNINGSPAM OFF INBOUNDSCANNINGSPAM ON Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Friday, September 29, 2006 9:55 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Harry, Please post to the list the details - Thanks -Nick chris wrote: Harry Contact me off the list if you can, I would like to help Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Harry Vanderzand Sent: Friday, September 29, 2006 9:15 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Last night at 8:11PM I upgraded from 4.3.7 to 4.3.14 From that point on we stopped catching all spam for these clients that have their own mail server. We just filter their mail for spam and pass it on. I just reverted back to 4.3.7 and now we are catching spam again for them We catch over 4000 spam messages per dayfor one of these clients alone so you can imagine their complaint this morning. Anyone know what would have caused this? Thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7
Point taken Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Shacklett Sent: Friday, September 29, 2006 10:15 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Why wouldn't the defaults in the upgrade be to mimic the current behavior? That's potentially a major change from trying to maintain backwards compatibility, isn't it? If the upgrade is adding new switches, then the default switch shouldn'tshouldn't radically alter the status quo. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan Sent: Friday, 29 September 2006 9:32 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Harry.. In the upgrade there is a new feature that you can set in the .cfg file. OUTBOUNDSCANNINGSPAMON INBOUNDSCANNINGSPAMON In declude.cfg add the following two lines and change the outbound to on. The default in the example was off and if you are forwarding messages then that can cause the problem. We ran into the same problem and discovered what was going on. Regards, Kami From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Friday, September 29, 2006 9:15 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Last night at 8:11PM I upgraded from 4.3.7 to 4.3.14 From that point on we stopped catching all spam for these clients that have their own mail server. We just filter their mail for spam and pass it on. I just reverted back to 4.3.7 and now we are catching spam again for them We catch over 4000 spam messages per dayfor one of these clients alone so you can imagine their complaint this morning. Anyone know what would have caused this? Thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7
BANCHARSET is a new directive, you add this directive to your declude.cfg like noted below. You need to know the character set in order to ban those that you determine unacceptable. A new directory will be created in your spool where these messages will be immediately quarantined. I hope this helps. #BANCHARSET iso-2022-jp #BANCHARSET koi8-r #BANCHARSET windows-874 #BANCHARSET gb2312 #BANCHARSET big5 #BANCHARSET Windows-1251 Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Friday, September 29, 2006 10:23 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 I am going to do the upgrade again this time putting the following commands in the cfg file: OUTBOUNDSCANNINGSPAMON INBOUNDSCANNINGSPAMON Obviously this should not have happened and it was unfortunate. I believe Declude is getting a message ready for everyone. I will let you know the results shortly to confirm that that was it Thanks for your responses Harry Vanderzand inTown Internet Computer Services 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Friday, September 29, 2006 10:08 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Nick, I will definitely post these results, but I have yet to hear from harry, I believe the response from the first user is the solution!!! Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Friday, September 29, 2006 9:55 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Harry, Please post to the list the details - Thanks -Nick chris wrote: Harry Contact me off the list if you can, I would like to help Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Harry Vanderzand Sent: Friday, September 29, 2006 9:15 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Last night at 8:11PM I upgraded from 4.3.7 to 4.3.14 From that point on we stopped catching all spam for these clients that have their own mail server. We just filter their mail for spam and pass it on. I just reverted back to 4.3.7 and now we are catching spam again for them We catch over 4000 spam messages per dayfor one of these clients alone so you can imagine their complaint this morning. Anyone know what would have caused this? Thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7
I am writing a kb as we speak see if this link helps you with the char-sets http://www.iana.org/assignments/character-sets Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Friday, September 29, 2006 11:09 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Does anyone have a good source for listing all the character sets? Chris does Declude have a KB for this - if not I bet his would be a good one to add. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. chris writes: BANCHARSET is a new directive, you add this directive to your declude.cfg like noted below. You need to know the character set in order to ban those that you determine unacceptable. A new directory will be created in your spool where these messages will be immediately quarantined. I hope this helps. #BANCHARSET iso-2022-jp #BANCHARSET koi8-r #BANCHARSET windows-874 #BANCHARSET gb2312 #BANCHARSET big5 #BANCHARSET Windows-1251 Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] http://www.declude.com www.declude.com _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Friday, September 29, 2006 10:23 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 I am going to do the upgrade again this time putting the following commands in the cfg file: OUTBOUNDSCANNINGSPAM ON INBOUNDSCANNINGSPAM ON Obviously this should not have happened and it was unfortunate. I believe Declude is getting a message ready for everyone. I will let you know the results shortly to confirm that that was it Thanks for your responses Harry Vanderzand inTown Internet Computer Services 519-741-1222 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chris Sent: Friday, September 29, 2006 10:08 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Nick, I will definitely post these results, but I have yet to hear from harry, I believe the response from the first user is the solution!!! Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] http://www.declude.com www.declude.com _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Friday, September 29, 2006 9:55 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Harry, Please post to the list the details - Thanks -Nick chris wrote: Harry Contact me off the list if you can, I would like to help Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 toll free 978.499.2933 office 978.477.8930 e-fax [EMAIL PROTECTED] http://www.declude.com www.declude.com _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Friday, September 29, 2006 9:15 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Last night at 8:11PM I upgraded from 4.3.7 to 4.3.14 From that point on we stopped catching all spam for these clients that have their own mail server. We just filter their mail for spam and pass it on. I just reverted back to 4.3.7 and now we are catching spam again for them We catch over 4000 spam messages per day for one of these clients alone so you can imagine their complaint this morning. Anyone know what would have caused this? Thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com
RE: [Declude.JunkMail] Blackice Server Settings
Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free 978.499.2933office 978.477.8930 e-fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Wiegers Sent: Monday, September 25, 2006 10:53 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Blackice Server Settings In the past this list would accept attachments. I havent seen any lately though. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Thursday, September 21, 2006 2:00 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Blackice Server Settings Im leaving town in a little bit and I wont be back until Sunday. If someone reminds me on Sunday or Monday Id be happy to post the settings. Are we able to post attachments to this list? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Wiegers Sent: Thursday, September 21, 2006 12:09 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Blackice Server Settings Wanted to start a new thread on this. Dave, Could you post the ini settings for BlackIce that can help with mail servers? Thanks --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. this is an attachment --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Spam Spike
These harvesting attacks need to be blocked at the smtp level, do not continue to let your server deplete it's resources on this bogus mail. If your server doesn't support SMTP blocking, a user on the list recently mentioned that he runs Black Ice Servertry that. chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Glenn \ WCNet Sent: Wednesday, September 20, 2006 3:17 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Spam Spike A large spike hit here Monday. Spool processing lagged about 1.5 hours, then got worse late in the night to over 9,000 files in spool and a 5-hr delay. Had to stop SMTP and clear the spool. I've noticed numerous D/T pairs that appear in \spool and hang there for a long time (10-15 mins), locked while SMTP is running. Right now it's 2:15 PM and there's a locked 1K T/D pair time-stamped 1:57 PM. Toggling SMTP leaves them as orphans. A typical D is 1 KB in size and contains something like this Received: from acce.org [82.250.149.205] by wcnet.net (SMTPD32-7.15) id A7977430256; Wed, 20 Sep 2006 12:17:11 -0500 The T is QD:\IMAIL\spool\D7797074302566850.SMD Hwcnet.net WD:\IMAIL E0, S[EMAIL PROTECTED] NRCPT TO:[EMAIL PROTECTED] The NRCPT TO is a valid hosted mail domain but not a valid user. A few may be to one or more valid users, and a few may have message content in the D whether the user is valid or not. Is this a dictionary probe? What can be done to defend against it? G.Z. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Spam Spike
Hi All, We have recently gone from processing 30,000 emails daily to 85,000 daily. 75,000 are getting caught by Declude Message Sniffer (I love this combo). There are a total of 300,000 attempted RCPT TOs daily. 1) Has anyone experienced recent spikes like this? How can I reasonably handle this? I have run several analytics and found that these emails are not targeting a specific user or specific domain. Additionally, there are no blocks of IPs that are responsible. 2) What are the realistic limits of Imail / Declude / Message Sniffer (I KNOW this is platform specific, just looking for ballpark). 3) What can I do to squeze out more juice from this server? Software: IMail 8.22 (because we are still scared of 2006), Declude Virus and Junkmail 2.0.6, and Sniffer most recent version Hardware: Windows Server 2003 box with a 3 ghz XEON, and 1 Gig ram. Thanks for the help! -Chris -- Best Regards, Chris Anton Web Solutions, Inc. Tel: 203-235- x25 [EMAIL PROTECTED] www.websolutions.net -- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Spam Spike
Darrell, We are averaging 40 to 50% on the processor. I was just surprised because in 3 years we haven't seen a spike this large. Most of them are dictionary style. But since they aren't from the same IP, I don't think the imail 2006 dictionary feature would help us. Thoughts? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Spam Spike
Hi Darrell, 80% of our users are local, 10% are Gatewayed, 10% are remote. The 85,000 daily are inbound. -Chris --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Flooded with spam
Louis enable the abuse detection settings in SM. That should allow you to cut off the connection and not have to process that extra mail. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Panda Consulting S.A. Luis Alberto Arango Sent: Wednesday, August 30, 2006 6:52 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Flooded with spam Just checking with the list if they have seen an increase in the amount of spam messages caught. Last monday and tuesday my mail servers are flooded with spam. My smartermail server that usually process 30 to 40 K per day, processed on monday 120K and 94K of them where caught as spam. On tuesday processed aprox 110K, and 85K where spam. My spool and forward server processed over 140K yesterday. Reviewing the spool I would say that almost all spam, a lot of them trying to relayon my backup server Do you guys saw this spam increase?. btw. message sniffer, INVURIBL and declude worked fine.. I am happy I have them. regards Luis Arango ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] IPBYPASS Broke?
Nick, Please contact me at the mail address below. Please run a quick debug and send me that log. I believe I understand whats happening here but I would like to verify this before I put my foot in my mouth...Thanks Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 office 978.499.2933 Alt office 978.477.8930 fax [EMAIL PROTECTED] www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, August 30, 2006 10:23 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] IPBYPASS Broke? Nick, Do you buy any chance have have this IP also covered by a whitelist entry of any type in your Global.cfg? Matt Nick Hayer wrote: To David at Declude - or anyone else... I have these lines in my global config Declude 4.3.7: IPBYPASS12.152.254.14 XINHEADERX-Note: Sent from: [Revdns: %REVDNS%] [RemoteHostDomain: %REMOTEHOST%] [RemoteIP: %REMOTEIP%] [SenderHost: %SENDERHOST%] I received this email below where it appears that the IPBYPASS directive was ignored: Received: from mx2.madriveraccess.com [12.152.254.14] by mx1.vtbass.com with ESMTP (SMTPD32-8.15) id AE68A3F30188; Tue, 29 Aug 2006 19:31:52 -0400 Received: from 211.35.128.115 [211.35.128.115] by mx2.madriveraccess.com (Alligate(TM) SMTP Gateway v2.6.6.15) with ESMPT id [EMAIL PROTECTED] for [EMAIL PROTECTED]; Tue, 29 Aug 2006 19:31:49 -0500 Received: from mailcluster.globat.com (port=3118 helo=s5ppf56pw4rf) by 211.35.128.115 with smtp id piM4-83K1bgYkp-6P for [EMAIL PROTECTED]; Wed, 30 Aug 2006 08:31:55 +0900 snip X-Note: Sent from: [Revdns: ] [RemoteHostDomain: madriveraccess.com] [RemoteIP: 12.152.254.14] [SenderHost: madriveraccess.com] Why does the RemoteIP point to 12.152.254.14 and SenderHost point madriveraccess.com? Thanks -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] IPBYPASS Broke?
Hey nick can you sent your declude directory as well, the logs show no ipbypass specified Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833 office 978.499.2933Alt office 978.477.8930 fax [EMAIL PROTECTED] www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Wednesday, August 30, 2006 11:01 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] IPBYPASS Broke? Done! Thanks -Nick chris asaro wrote: Nick,Please contact me at the mail address below. Please run a quick debug andsend me that log. I believe I understand whats happening here but I wouldlike to verify this before I put my foot in my mouth...ThanksChris AsaroTechnical Support EngineerDecludeYour Email security is our business866.332.5833 office978.499.2933 Alt office978.477.8930 fax[EMAIL PROTECTED]www.declude.com-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of MattSent: Wednesday, August 30, 2006 10:23 AMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] IPBYPASS Broke?Nick,Do you buy any chance have have this IP also covered by a whitelist entry of any type in your Global.cfg?MattNick Hayer wrote: To David at Declude - or anyone else...I have these lines in my global config Declude 4.3.7:IPBYPASS 12.152.254.14XINHEADER X-Note: Sent from: [Revdns: %REVDNS%] [RemoteHostDomain: %REMOTEHOST%] [RemoteIP: %REMOTEIP%] [SenderHost: %SENDERHOST%]I received this email below where it appears that the IPBYPASS directive was ignored:Received: from mx2.madriveraccess.com [12.152.254.14] by mx1.vtbass.com with ESMTP (SMTPD32-8.15) id AE68A3F30188; Tue, 29 Aug 2006 19:31:52 -0400Received: from 211.35.128.115 [211.35.128.115] by mx2.madriveraccess.com (Alligate(TM) SMTP Gateway v2.6.6.15) with ESMPT id [EMAIL PROTECTED] for [EMAIL PROTECTED]; Tue, 29 Aug 2006 19:31:49 -0500Received: from mailcluster.globat.com (port=3118 helo=s5ppf56pw4rf) by 211.35.128.115 with smtp id piM4-83K1bgYkp-6P for [EMAIL PROTECTED]; Wed, 30 Aug 2006 08:31:55 +0900snipX-Note: Sent from: [Revdns: ] [RemoteHostDomain: madriveraccess.com] [RemoteIP: 12.152.254.14] [SenderHost: madriveraccess.com]Why does the RemoteIP point to 12.152.254.14 and SenderHost point madriveraccess.com?Thanks-Nick---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be foundat http://www.mail-archive.com.---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Ping
Reply from [EMAIL PROTECTED]: bytes=32 time=8ms TTL=127 Reply from [EMAIL PROTECTED]: bytes=32 time=9ms TTL=127 Reply from [EMAIL PROTECTED]: bytes=32 time=9ms TTL=127 Reply from [EMAIL PROTECTED]: bytes=32 time=14ms TTL=127 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Friday, August 11, 2006 12:56 PM To: David Barker Subject: Re: [Declude.JunkMail] Ping Polo On Friday, August 11, 2006, 11:30:36 AM, David wrote: DB Ping DB --- DB This E-mail came from the Declude.JunkMail mailing list. To DB unsubscribe, just send an E-mail to [EMAIL PROTECTED], and DB type unsubscribe Declude.JunkMail. The archives can be found DB at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Speaking of Decludes AVG scanner
John Try opening the diags.txt file in your \mailserver\declude directory. Check to see if you are receiving an invalid key code error. If not try this: http://support.declude.com/Customer/KBArticle.aspx?articleid=57 Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Monday, July 17, 2006 5:38 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Speaking of Decludes AVG scanner None of the db files have ever updated. Does anyone know what ports, protocols, whatever is used to do the update. Either Declude is not requesting the db update, or our firewall is blocking either the request or the subsequent update file. So far I haven't been able to find anything in the firewall logs. thanks for any help John --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.10.1/390 - Release Date: 7/17/2006 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.10.1/390 - Release Date: 7/17/2006 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Speaking of Decludes AVG scanner
Restart the proc Chris Asaro Technical Support Engineer Declude Your Email Security is our Business 978.499.2933 x 7009 office 978.764.7960 mobile 978.988.1311 efax -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Tuesday, July 18, 2006 11:12 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Speaking of Decludes AVG scanner Nick Good catch, at the bottom of my diags.txt file I see 2 INVALID KEY entries. My firewall does not allow domain names to be entered as source or destination addresses, only IP addresses. I had an old entry for 63.246.13.84 entered on march 06, doing an nslookup for keys.declude.com I now get 63.246.31.246. I've added the new address and allow incoming and outgoing traffic, but am not sure what to do next. Not sure if I should restart the decludeproc or what. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Nick Hayer Sent: Tuesday, July 18, 2006 5:59 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Speaking of Decludes AVG scanner Chris Asaro wrote: Try opening the diags.txt file in your \mailserver\declude directory. Check to see if you are receiving an invalid key code error. When I went to 4.20 I had no such error code however the evidently there was a one hence Declude ceased to function without warning. -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.10.1/390 - Release Date: 7/17/2006 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.10.1/390 - Release Date: 7/17/2006 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] F-Prot Licensing
Your purchase of the security suite includes AVG and all definitions, making it the best bang for the buck out there. Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of AlamoHost Admin Sent: Monday, July 17, 2006 4:37 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] F-Prot Licensing Is the subscription to AVG part of Declude now or does the user need to purchase a subscription from AVG in order to get definition updates? The prices for the AVG mail server version isn't much better than F-Prot. They only list prices up to 100 mailboxes - $1,030 for 2 years. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.10.1/389 - Release Date: 7/14/2006 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.10.1/389 - Release Date: 7/14/2006 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
To uninstall you can do this from the add/remove programs function inside of your control panel. If you find this hasn't removed all of your components, browse to your root:\imail directory from a command prompt and type decludeproc -u Good luck with build .20 I hope this proves to be the fix for your issue. Thanks for your patients Chris Asaro Technical Support Engineer Declude Your Email Security is our Business 978.499.2933 x 7009 office 978.764.7960 mobile 978.988.1311 efax -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Monday, July 10, 2006 5:00 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 We are running Imail 8.22. I did the upgrade on Saturday, so far no problems. I backed down from 4.2 b12 to 4.09 as I was getting email without declude adding header information, and I was not able to find any record in any declude log of the message being processed. So far I have not seen a similar situation with build 20. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of David Barker Sent: Friday, July 07, 2006 7:42 AM To: Declude.Virus@declude.com; Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 EVA ADD New NONSTANDARDHDR vulnerability test. Messages found to have broken headers are moved to the \virus folder EVA FIX ALLOWVULNERABILITIESFROM (for user) EVA FIX BANEXT buffer overflow SM ADD When an error is found in the envelope (.hdr) file the message is moved to the \error folder SM ADD Decludeproc will not start without a valid domainlist.xml SM FIX QUEUEFILE_SAVEFILE the log is showing the correct directory path SM FIX Allows admin to set VIRDIR to any directory path in the virus.cfg David Barker Product Manager Your Email security is our businessT 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Latest All_LIst.dat file
Darrell, The latest version of that file is available on Declude's site. Once you log into your account, you will see it on the right hand side of the page, about half way down. Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, July 11, 2006 9:13 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Latest All_LIst.dat file What is the latest all_list.dat file. Mine is dated 9/28/2005. I am seeing an issue with 67.111.134.133 which is in Reston, VA. Howeverm Declude thinks its in Korea. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Country tests
See if this helps: http://support.declude.com/Customer/KBArticle.aspx?articleid=6 and this may be of some use: http://support.declude.com/Customer/KBArticle.aspx?articleid=42 -chris - Original Message - From: Mike N [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, July 11, 2006 3:57 PM Subject: [Declude.JunkMail] Country tests I looked in the 4.x Junkmail manual, and couldn't find an authoritative definition of the Country tests. I have found a number of archived messages, but it is tricky to know if the reason that things are documented is that they are being deprecated or whatever. Is there a Kbase article or Manual page on COUNTR*.* tests, variables, and filter options? Thanks, --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 8001 error
I saw that one before, try creating a declude folder within c:/Imail and run the install again. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jonas Fornander Sent: Monday, July 10, 2006 1:50 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] 8001 error I re-installed Imail 8.22 but when I tried to reinstall Declude 3.0.25 it failed with an 8001 (Cant write to the target). Imail was intalled to C:\Imail as usual but users mail is stored on a different drive. Havent had this problem before. The new server is an AMD 64. Could that be the problem? Jonas Fornander System Administrator Netwood Communications,LLC Tel: 310-442-1530 Fax: 310-820-3125 Find Out Why We're Better * Now offering Fiber Optic Internet service throughout the continental USA. Speeds start at 5Mbps/2Mbps. Go to www.netwood.net and fill in a prequal request. * Home is where my computer is ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Verify code needed
Oops, I was a little late, thanks Linda Christopher Asaro Technical Support Engineer Declude is Cybercom Security- Email. Voice. Messaging 978.499.2933 978.477.8930 efax www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Linda Pagillo Sent: Monday, June 26, 2006 7:49 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Verify code needed This is correct, John. If you have any further questions, please do not hesitate to contact me either by email or call Toll free 1-866-332-5833 Linda Pagillo Technical Support Declude is Cybercom Security - Email. Voice. Messaging. 978.499.2933 office 978.477.8930 efax [EMAIL PROTECTED] www.declude.com - Original Message - From: John T (Lists) [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, June 26, 2006 5:53 PM Subject: [Declude.JunkMail] Verify code needed Just to verify, when using Declude 4.x with the appropriate code, you do not need a separate code for the Global.CFG or Virus.cfg or Hijack.cfg files, the code is only in the declude.cfg file, correct? John T eServices For You Seek, and ye shall find! --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Verify code needed
In Imail systems only is this code required to be in your Declude.cfg. Yes John you are correct. Christopher Asaro www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Monday, June 26, 2006 6:53 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Verify code needed Just to verify, when using Declude 4.x with the appropriate code, you do not need a separate code for the Global.CFG or Virus.cfg or Hijack.cfg files, the code is only in the declude.cfg file, correct? John T eServices For You Seek, and ye shall find! --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Verify code needed
Late, and posting a reply to Johns question with someone elses question...wake up chris Christopher Asaro www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Asaro Sent: Tuesday, June 27, 2006 8:30 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Verify code needed Oops, I was a little late, thanks Linda Christopher Asaro Technical Support Engineer Declude is Cybercom Security- Email. Voice. Messaging 978.499.2933 978.477.8930 efax www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Linda Pagillo Sent: Monday, June 26, 2006 7:49 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Verify code needed This is correct, John. If you have any further questions, please do not hesitate to contact me either by email or call Toll free 1-866-332-5833 Linda Pagillo Technical Support Declude is Cybercom Security - Email. Voice. Messaging. 978.499.2933 office 978.477.8930 efax [EMAIL PROTECTED] www.declude.com - Original Message - From: John T (Lists) [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, June 26, 2006 5:53 PM Subject: [Declude.JunkMail] Verify code needed Just to verify, when using Declude 4.x with the appropriate code, you do not need a separate code for the Global.CFG or Virus.cfg or Hijack.cfg files, the code is only in the declude.cfg file, correct? John T eServices For You Seek, and ye shall find! --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Restrict all email except internal
Title: Restrict all email except internal You could also restrict outbound to internal but shutting down relaying for the individual. With no relay the server would only deliver mail for the local domains. I use this sometimes because I do SMTP authentication. Set up the user so they do not do authentication and it will not relay for them (i.e. not send mail outside of the server). Sharyn Schmidt wrote: Hi, I am trying to figure out whether I can get Declude to catch all emails and put them in the spam folder that come from any source that isn't coming from my own network. I have a temporary employee that needs internal email, however, they are not to receive email from outside of our internal network. I understand that this method will not prevent them from sending email to the internet, but they will soon be discouraged if they never receive a reply. Can I do this with Declude? If not, any other suggestions? Thanks, Sharyn -- Chris Fitch Sr. Network Engineer Industrial Chemicals, Inc. 205-823-7330 [EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude 3.0 / 4.0
Now that I know more about the switch, I am more comfortable with the changes. I think that we collectively jumped to some conclusions. I am interested to see how the whole thing plays out. -Anton --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude 4 changes ... worried...
Declude can't be serious. This pricing is ridiculous. We turned to Declude because we needed an affordable anti-spam and virus solution. Declude is not IPSwitch and should not strive to be IPSwitch. IPSwitch lost many customers over its price restructuring and Declude will see the same thing if this issue is not addressed. -Chris Anton -- Original Message -- From: Darin Cox [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Fri, 10 Feb 2006 11:48:41 -0500 Yep. at that price it's time to move to something else or build our own system. Declude, come back with something reasonable or you'll lose customers like IMail did. Darin. - Original Message - From: Scott Fisher To: Declude.JunkMail@declude.com Sent: Friday, February 10, 2006 10:43 AM Subject: [Declude.JunkMail] declude 4 changes ... worried... So I thought I'd go web browsing on the Declude site and see what is up with Declude 4. I'm a Virus Pro and Junkmail Pro licensee on Imail. Going forward Declude 4 is the entire suite (Virus Pro, Junkmail Pro and Hijaak). Kevin's post mentions that Declude 3 will be supported. Although long term how long will they support two different code sets? I'd say my long-term gut feeling isn't good. Next I look through the purchase page. Declude 4 for Imail is now only available for a $1450 Annual Subscription. Ouch. The last time I paid maintenance for Declude it was $265. That's a bump. (Essentially having only one domain here), That is mighty pricey especially compared to the Declude for Smartmail 1 domain price of $199. Don't get me wrong, I really like the Declude prodcut. It's so flexible that you can do many different things... I just can't see how smaller entities like me are going to positively affected by these changes. - Scott Fisher Director of IT Farm Progress Companies 191 S Gary Ave Carol Stream, IL 60188 630-462-2323 This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. Although Farm Progress Companies has taken reasonable precautions to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Sniffer Email List
How do i get onto the sniffer email list? -Anton --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Sniffer Email List
EXCELLLENT :-) -Anton -- Original Message -- From: Heimir Eidskrem [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Wed, 01 Feb 2006 15:18:11 -0600 Chris Anton wrote: How do i get onto the sniffer email list? -Anton --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Ah, that list is like a secret society. You have to commit for live and you have to be willing to sacrifice yourself for the protection of the order. Or you could do this: *Mailing List - *If you'd like you can also subscribe to our user support list: [EMAIL PROTECTED] To subscribe to the sniffer list send an email to [EMAIL PROTECTED] *with *subscribe sniffer [your name] mailto:[EMAIL PROTECTED]* in the body. If you click on the link remember to change [your name] appropriately. To unsubscribe from the sniffer list send an email to [EMAIL PROTECTED] with *unsubscribe sniffer* mailto:[EMAIL PROTECTED] in the body of your message. List archive: *http://www.mail-archive.com/[EMAIL PROTECTED] (connection to www.mail-archive.com added 20040201). --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Message Sniffer Automation
Hey, anyone have a script to automate download installation of new .snf files? Thanks for the message sniffer weight feedback too! -Anton --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Best Sniffer Weights
Hi all. We just installed message sniffer tonight and are working on tweaking it. What are your recommendations for best weights? Also, suggestions on other settings welcomed. Thanks! -Anton --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Server Watching.
I actually reached for an older linux distro called sentinix. Comes kind of out of the box with Snort/ACD and Nagios/Nagios Admin. A little dated but as it sits behind a very secure firewall it is extremely effective and fairly painless and has a cost of $0. Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jerod M. Bennett Sent: Monday, January 23, 2006 1:25 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] OT - Server Watching. Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Filter Syntax
I am setting up a filter to whitelist some domains. Currently, we have them directly in the global.cfg file but there is getting to be too many, so I am wanting to use a file to do the job and then assign a negative weight to it. I thought I had it but I can't seem to get the file to fire. We are using declude junkmail pro 3.0.5 In Declude I have: mywhitelist filter c:/location/mywhitelist.txt x -30 0 In the text file, I have: MAILFROM 0 IS [EMAIL PROTECTED] and MAILFROM 0 IS @domain.com I would also like to set up a whitelist to text file: RECIP 0 IS[EMAIL PROTECTED] Any suggestions on how to make this work would be appreciated. Chris Martin
RE: [Declude.JunkMail] SmarterMail 3.0
Maybe you could get IPSwitch to set one up. LOL! -Chris -- Original Message -- From: Dave Beckstrom [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Wed, 21 Dec 2005 11:02:14 -0600 Guys, Why don't all of us who own smartermail send an email to smartertools asking them to launch a smartertools discussion list? It will take more than one person requesting it for them to set it up. _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Graveen Sent: Wednesday, December 21, 2005 7:51 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SmarterMail 3.0 I've also posted question to their forum with little or no response (I didn't think the questions were that obscure). There definitely seems to be more experts in the IMail camp, or at least experts that are willing to share. As with new versions of IMail, I'll take the wait and see attitude with Smartermail 3.0 MIchael Graveen At 03:42 AM 12/21/2005, you wrote: The community support for SmarterMail is much smaller (or at least quieter). We are running one SM server for a client and I've posted several questions on the SM support forums and have not received any responses at all. Similar posts to Imail or Declude discussion lists have always resulted in lots of replies with useful help. Obviously the products are different and the questions are different, but so far I'm not impressed with the size/responsiveness of the community. That's an important factor we will consider seriously before migrating any other servers from Imail to SM - saving a few hundred dollars in license costs is insignificant if we can't get help one way or another as quickly. (Needless to say, the SM questions were on issues that SM tech support provided courteous but not helpful replies when first submitted privately as an email support case, so I was hoping for help from the community) _ From: [EMAIL PROTECTED] [ mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] On Behalf Of Evans Martin Sent: Tuesday, December 20, 2005 10:48 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SmarterMail 3.0 It's such a breath of fresh air having been in the IMail camp for the last several years. LOL! Evans Martin EVANS MARTIN [EMAIL PROTECTED] HOSTING: http://www.martek.net http://www.martek.net/ PROGRAMMING: http://www.martekware.com http://www.martekware.com/ iPlus Info Browser - IPB's IMail Migration Tool, password browser, reporting suite make IPlus Info Browser something no IMail administrator should be without. http://www.martek.net/Default.aspx?tabid=96 _ From: [EMAIL PROTECTED] [ mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, December 20, 2005 6:48 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] SmarterMail 3.0 The following was posted today on SmarterTools web forums: Q: When will we expect to see v. 3? A: The release date depends on the results of final QA. The product is essentially done, just making sure that all the bugs are out of it. Since mail servers are so critical to people's infrastructure, we work extremely hard to make a stable release with no issues that are going to bite you. We don't sacrifice stability for a quick release. Assuming everything is in good order (which to this point it appears to be), release will be middle of January. You can view the original post at http://forums.smartertools.com/forums/2/11125/ShowPost.aspx#11125 --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Not supporting null originator Problem
Hi all... having a problem with a user sending to albertus.edu. Getting following error from their server:Unknown user: [EMAIL PROTECTED] RCPT TO generated following response:554 Service unavailable; Sender address [EMAIL PROTECTED] blockedusing dsn.rfc-ignorant.org; Not supporting null originator (DSN) 1) Is this a result of my "0 Null sender maximum tries"? Should I set this too 1 or too much spam threat? 2) Does this make me RFC Ignorant :-) 3) Should they really be blocking this email on such a flimsy test? Thanks for your thoughts. -Chris Anton --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Not supporting null originator Problem
Good point Sandy... I guess what I am saying is that I find it strange that this email server is using a failure of ONE test to reject mail. I have since corrected the RFC problem on my end. -Chris -- Original Message -- From: Sanford Whiteman [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Mon, 19 Dec 2005 13:32:12 -0500 3) Should they really be blocking this email on such a flimsy test? Not flimsy at all, IMO. If you are unwilling to accept any non-delivery messages, I don't think you should expect anyone to take responsibility for your mail. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[2]: [Declude.JunkMail] Not supporting null originator Problem
Ok, here is the part that is driving me crazy...I have updated the "Null sender maximum tries" to 1, reset the SMTP service, and am still seeing rejections... but when I check the rfc ignorant listings, we are not listed there. Any thoughts? -Chris -Original Message-From: Declude.JunkMail@declude.comSent: 12/19/2005 3:16 PMTo: Chris AntonSubject: Re[2]: [Declude.JunkMail] Not supporting null originator Problem Good point Sandy... I guess what I am saying is that I find it strange that this email server is using a failure of ONE test to reject mail. I have since corrected the RFC problem on my end.This is one of very few tests that I have always felt wholly confidentin using for immediate rejection. I consider it a blatantmisconfiguration on the sender's end, since it's a disservice to theirown customers; I wouldn't waste more than one e-mail explaining thereasons for the rejection, if that (since the envelope 550 messageshould be sufficient), and no whitelisting is possible.--SandySanford Whiteman, Chief TechnologistBroadleaf Systems, a division ofCypress Integrated Systems, Inc.e-mail: [EMAIL PROTECTED]SpamAssassin plugs into Declude!http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases!http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/---[This E-mail was scanned for viruses by Declude EVA www.declude.com]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Erasing Cisco Pix 515 flash RAM
Not an expert on pix (been years since I worked on one) but generally there is a way on their routers to force a "barebones" boot that loads no config and then you could tftp a config onto the unit. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net WebmasterSent: Monday, November 28, 2005 11:16 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] OT: Erasing Cisco Pix 515 flash RAM you can also try replacing the NIC card first - we just had an issue with an older PIX 520 that wouldn;t take an OS upgrade due to an incompatiblilty with the installed nics. Symptoms were it would just constantly reboot. Sincerely,Support DepartmentGlobal Web Solutions, Inc.804-346-5300 x112877-800-GLOBAL (4562) x112http://globalweb.net From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin CoxSent: Thursday, November 24, 2005 10:24 PMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] OT: Erasing Cisco Pix 515 flash RAM This is way off topic, but I'm desperate so I'm appealing to the list... We just purchased a used Cisco pix 515 running 7.0(4) that won't boot due to what we believe is a corrupted startup-config. Does anyone out there know how to clear NVRAM on a pix from monitor mode? We can't get to enable mode due to the corrupted start-config, so it has to be done from monitor mode. We've tried everything we can think of, even a special flash erase image from Cisco, but it needs the Pix to be running 6.2(2) to work, and we don't have that image. Any Pix experts out there have any ideas? Thanks in advance, Darin.
RE: [Declude.JunkMail] Looking for a mxrate contact
Hi Darrell, You can email me off list to address this issue. My email is chris at solidoak.com Chris Solid Oak Software, Inc. www.alligate.com www.winlocate.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Friday, November 11, 2005 5:02 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Looking for a mxrate contact I am looking for a contact at MxRate that my hosting provider (fluidhosting.com) can work with. It appears one of their mail servers is listed in mxrate and they have been trying to reach out to mxrate with no luck. Any help would be appreciated. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail Queue Monitoring, Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Footer32 Question
Hi all, This is a great question for Sandy... We are trying to use the FOOTER32 external test to add footers to incoming and outgoing email... at this point, i can add them to incoming mail just fine... HOWEVER, we have the following settings: PREWHITELISTON WHITELIST AUTH AUTOWHITELIST ON which are preventing the test from running on outbound email... Any suggestions? -Chris Anton --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Footer32 Question
You, sir, are a god among men. It works like a charm. Thank you very much!!! -Chris -- Original Message -- From: John T \(Lists\) [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Fri, 14 Oct 2005 08:52:38 -0700 Using PREWHITELIST ON prevents all tests from running. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Chris Anton Sent: Friday, October 14, 2005 8:42 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Footer32 Question Hi all, This is a great question for Sandy... We are trying to use the FOOTER32 external test to add footers to incoming and outgoing email... at this point, i can add them to incoming mail just fine... HOWEVER, we have the following settings: PREWHITELIST ON WHITELISTAUTH AUTOWHITELISTON which are preventing the test from running on outbound email... Any suggestions? -Chris Anton --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Antispam and Antivirus solutions provided by WebSolutions, Inc. (http://www.websolutions.net) Antispam and Antivirus solutions provided by WebSolutions, Inc. (http://www.websolutions.net) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude as AntiSpam Gateway
Hi. Ok, so we have setup our Imail server as an SMTP gateway for one of our clients, but Declude does not appear to be performing its spam checks before Imail pushes the mail to the other server. Is there anyway around this? Thanks for the help! :-) -Chris --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude as AntiSpam Gateway
Thanks Darrell... I will configure and test that right away. Thanks Again! -Chris -- Original Message -- From: Darrell \([EMAIL PROTECTED]) [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Tue, 11 Oct 2005 11:56:55 -0400 Chris, For the gateway'ed domains make sure you create a folder for the domain (i.e. mydomain.com) off the Declude directory and drop a $default$.junkmail file in it. This is required for gateway'ed domains. Darrell DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus. http://www.invariantsystems.com Chris Anton writes: Hi. Ok, so we have setup our Imail server as an SMTP gateway for one of our clients, but Declude does not appear to be performing its spam checks before Imail pushes the mail to the other server. Is there anyway around this? Thanks for the help! :-) -Chris --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Blackholes.us Dead
Hi, Our public RBL doesn't provide this, but our MXRate product does allow you to get results based off the IP's country of origin. Check out http://www.mxrate.com for more information. Best Wishes, Chris Kuske Solid Oak Software www.alligate.com www.mxrate.com www.winlocate.com Don Brown wrote: Blackholes.us no longer resolves and it looks like it is dead. I picked up this msg, among others, from google. http://mail.stalker.com/Lists/CGatePro/Message/79169.html?Language= Okean.com and br.countries.nerd.dk, cn.countries.nerd.dk and kr.countries.nerd.dk have been suggested. Anyone know of any other country BL's? Thanks, Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Use different weight for aliases forwarding to AOL ?
We've run into an issue with customers who set ALIAS accounts that forward to AOL. Messages that have some weight here (ie. weight 11, not enough to be blocked or deleted) are being flagged as SPAM at AOL. AOL sees us as the originator since we are forwarding in the message. How would I configure to, for example, DELETE any messages being aliased / forwarded over to AOL that exceed WEIGHT 10 ? (and I'm not set in stone on the numbers... just need to know the right syntax). I don't know if the fact that it is forwarded via an alias into an address, as opposed to being originally TO that AOL address, makes a difference. Thanks !! Chris --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
